{"timestamp":"2017-12-12T18:32:35.449962+0100","flow_id":135686920592810,"pcap_cnt":6,"event_type":"dns","src_ip":"192.168.1.100","src_port":53776,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2190,"rrname":"gatedyhavyd.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.565121+0100","flow_id":1752155844484993,"pcap_cnt":12,"event_type":"dns","src_ip":"192.168.1.100","src_port":53973,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34171,"rrname":"lyvejujolec.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.636706+0100","flow_id":237546364974882,"pcap_cnt":38,"event_type":"dns","src_ip":"192.168.1.100","src_port":60159,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":12653,"rrname":"rynazuqihoj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.438724+0100","flow_id":920740370297284,"pcap_cnt":4,"event_type":"dns","src_ip":"192.168.1.100","src_port":54154,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4970,"rrname":"digivehusyd.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.695125+0100","flow_id":739114793278293,"pcap_cnt":70,"event_type":"dns","src_ip":"192.168.1.100","src_port":61906,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26795,"rrname":"pumadypyruv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.704477+0100","flow_id":818382709702621,"pcap_cnt":75,"event_type":"dns","src_ip":"192.168.1.100","src_port":60012,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17277,"rrname":"foxivusozuc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.542746+0100","flow_id":2131764381435930,"pcap_cnt":10,"event_type":"dns","src_ip":"192.168.1.100","src_port":58259,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23397,"rrname":"kemocujufys.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.580273+0100","flow_id":882349805132465,"pcap_cnt":15,"event_type":"dns","src_ip":"192.168.1.100","src_port":61169,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63928,"rrname":"vojacikigep.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.642623+0100","flow_id":711992074817087,"pcap_cnt":42,"event_type":"dns","src_ip":"192.168.1.100","src_port":58222,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18164,"rrname":"puzutuqeqij.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.732349+0100","flow_id":237546364974882,"pcap_cnt":99,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60159,"proto":"UDP","dns":{"type":"answer","id":12653,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"rynazuqihoj.eu","rrtype":"A","ttl":300,"rdata":"23.253.126.58"}}
{"timestamp":"2017-12-12T18:32:35.747858+0100","flow_id":739114793278293,"pcap_cnt":111,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61906,"proto":"UDP","dns":{"type":"answer","id":26795,"rcode":"NXDOMAIN","rrname":"pumadypyruv.eu"}}
{"timestamp":"2017-12-12T18:32:35.623784+0100","flow_id":882349805132465,"pcap_cnt":30,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61169,"proto":"UDP","dns":{"type":"answer","id":63928,"rcode":"NXDOMAIN","rrname":"vojacikigep.eu"}}
{"timestamp":"2017-12-12T18:32:35.732349+0100","flow_id":237546364974882,"pcap_cnt":99,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60159,"proto":"UDP","dns":{"type":"answer","id":12653,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"rynazuqihoj.eu","rrtype":"A","ttl":300,"rdata":"104.239.157.210"}}
{"timestamp":"2017-12-12T18:32:35.707400+0100","flow_id":136569536367432,"pcap_cnt":78,"event_type":"dns","src_ip":"192.168.1.100","src_port":62586,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1990,"rrname":"galokusemus.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.538610+0100","flow_id":920740370297284,"pcap_cnt":9,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54154,"proto":"UDP","dns":{"type":"answer","id":4970,"rcode":"NXDOMAIN","rrname":"digivehusyd.eu"}}
{"timestamp":"2017-12-12T18:32:35.633113+0100","flow_id":1024251229612313,"pcap_cnt":37,"event_type":"dns","src_ip":"192.168.1.100","src_port":64682,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":57631,"rrname":"gahihezenal.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:56.883833+0100","flow_id":1874139359509625,"pcap_cnt":154,"event_type":"dns","src_ip":"192.168.1.100","src_port":51258,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19057,"rrname":"pufiluqudic.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.628044+0100","flow_id":2131764381435930,"pcap_cnt":33,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58259,"proto":"UDP","dns":{"type":"answer","id":23397,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"kemocujufys.eu","rrtype":"A","ttl":300,"rdata":"104.239.157.210"}}
{"timestamp":"2017-12-12T18:32:35.577646+0100","flow_id":2050041891246190,"pcap_cnt":14,"event_type":"dns","src_ip":"192.168.1.100","src_port":49442,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31819,"rrname":"xuxusujenes.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.417077+0100","flow_id":1745949616725301,"pcap_cnt":3,"event_type":"dns","src_ip":"192.168.1.100","src_port":61337,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":21299,"rrname":"cihunemyror.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.628044+0100","flow_id":2131764381435930,"pcap_cnt":33,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58259,"proto":"UDP","dns":{"type":"answer","id":23397,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"kemocujufys.eu","rrtype":"A","ttl":300,"rdata":"23.253.126.58"}}
{"timestamp":"2017-12-12T18:32:35.663115+0100","flow_id":838313505398347,"pcap_cnt":53,"event_type":"dns","src_ip":"192.168.1.100","src_port":49408,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":12294,"rrname":"jepororyrih.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.650566+0100","flow_id":1752155844484993,"pcap_cnt":46,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53973,"proto":"UDP","dns":{"type":"answer","id":34171,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"lyvejujolec.eu","rrtype":"A","ttl":300,"rdata":"104.239.157.210"}}
{"timestamp":"2017-12-12T18:32:35.596405+0100","flow_id":1072376338127285,"pcap_cnt":21,"event_type":"dns","src_ip":"192.168.1.100","src_port":64725,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38760,"rrname":"tunujolavez.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.594134+0100","flow_id":1635903964647638,"pcap_cnt":20,"event_type":"dns","src_ip":"192.168.1.100","src_port":57634,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1135,"rrname":"qetoqolusex.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.650566+0100","flow_id":1752155844484993,"pcap_cnt":46,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53973,"proto":"UDP","dns":{"type":"answer","id":34171,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"lyvejujolec.eu","rrtype":"A","ttl":300,"rdata":"23.253.126.58"}}
{"timestamp":"2017-12-12T18:32:35.639365+0100","flow_id":1901030148391301,"pcap_cnt":40,"event_type":"dns","src_ip":"192.168.1.100","src_port":53629,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19472,"rrname":"lyruxyxaxaw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.637147+0100","flow_id":1635903964647638,"pcap_cnt":39,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57634,"proto":"UDP","dns":{"type":"answer","id":1135,"rcode":"NXDOMAIN","rrname":"qetoqolusex.eu"}}
{"timestamp":"2017-12-12T18:32:35.965904+0100","flow_id":818382709702621,"pcap_cnt":120,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60012,"proto":"UDP","dns":{"type":"answer","id":17277,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"foxivusozuc.eu","rrtype":"A","ttl":300,"rdata":"23.253.126.58"}}
{"timestamp":"2017-12-12T18:32:35.586370+0100","flow_id":688975345087106,"pcap_cnt":18,"event_type":"dns","src_ip":"192.168.1.100","src_port":55321,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49464,"rrname":"masisokemep.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.626077+0100","flow_id":1832104513211805,"pcap_cnt":31,"event_type":"dns","src_ip":"192.168.1.100","src_port":58140,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":22733,"rrname":"jefapexytar.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.965904+0100","flow_id":818382709702621,"pcap_cnt":120,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60012,"proto":"UDP","dns":{"type":"answer","id":17277,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"foxivusozuc.eu","rrtype":"A","ttl":300,"rdata":"104.239.157.210"}}
{"timestamp":"2017-12-12T18:32:35.732349+0100","flow_id":237546364974882,"pcap_cnt":99,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60159,"proto":"UDP","dns":{"type":"answer","id":12653,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"rynazuqihoj.eu","rrtype":"NS","ttl":7384,"rdata":"ns1.asertdns.com"}}
{"timestamp":"2017-12-12T18:32:35.965904+0100","flow_id":818382709702621,"pcap_cnt":120,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60012,"proto":"UDP","dns":{"type":"answer","id":17277,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"foxivusozuc.eu","rrtype":"NS","ttl":7384,"rdata":"ns1.arbor-sinkhole.net"}}
{"timestamp":"2017-12-12T18:32:35.732349+0100","flow_id":237546364974882,"pcap_cnt":99,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60159,"proto":"UDP","dns":{"type":"answer","id":12653,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"rynazuqihoj.eu","rrtype":"NS","ttl":7384,"rdata":"ns1.arbor-sinkhole.net"}}
{"timestamp":"2017-12-12T18:32:35.175632+0100","flow_id":1305734796258832,"pcap_cnt":1,"event_type":"dns","src_ip":"192.168.1.100","src_port":63967,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":54941,"rrname":"www.bing.com","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.965904+0100","flow_id":818382709702621,"pcap_cnt":120,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60012,"proto":"UDP","dns":{"type":"answer","id":17277,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"foxivusozuc.eu","rrtype":"NS","ttl":7384,"rdata":"ns1.asertdns.com"}}
{"timestamp":"2017-12-12T18:32:56.915558+0100","flow_id":1386385693538406,"pcap_cnt":175,"event_type":"dns","src_ip":"192.168.1.100","src_port":50764,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51626,"rrname":"qebahilojam.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.747858+0100","flow_id":739114793278293,"pcap_cnt":111,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61906,"proto":"UDP","dns":{"type":"answer","id":26795,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:56.903349+0100","flow_id":1599053146671285,"pcap_cnt":168,"event_type":"dns","src_ip":"192.168.1.100","src_port":60785,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18726,"rrname":"cidohukigeq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.659908+0100","flow_id":223063735210436,"pcap_cnt":51,"event_type":"dns","src_ip":"192.168.1.100","src_port":61839,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7085,"rrname":"gadufiwabim.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:56.963637+0100","flow_id":657527595906101,"pcap_cnt":192,"event_type":"dns","src_ip":"192.168.1.100","src_port":51024,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23518,"rrname":"dikujysozyk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:56.790029+0100","flow_id":436317452766733,"pcap_cnt":133,"event_type":"dns","src_ip":"192.168.1.100","src_port":55473,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4375,"rrname":"novacofebyz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.691481+0100","flow_id":674091135896857,"pcap_cnt":67,"event_type":"dns","src_ip":"192.168.1.100","src_port":61174,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5211,"rrname":"rytuvepokuv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.505512+0100","flow_id":657527595906101,"pcap_cnt":234,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51024,"proto":"UDP","dns":{"type":"answer","id":23518,"rcode":"NXDOMAIN","rrname":"dikujysozyk.eu"}}
{"timestamp":"2017-12-12T18:32:35.574551+0100","flow_id":2021561963103319,"pcap_cnt":13,"event_type":"dns","src_ip":"192.168.1.100","src_port":49900,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":56076,"rrname":"ciliqikytec.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.455339+0100","flow_id":341186073326251,"pcap_cnt":7,"event_type":"dns","src_ip":"192.168.1.100","src_port":52498,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4451,"rrname":"jewuqyjywyv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.744738+0100","flow_id":674091135896857,"pcap_cnt":109,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61174,"proto":"UDP","dns":{"type":"answer","id":5211,"rcode":"NXDOMAIN","rrname":"rytuvepokuv.eu"}}
{"timestamp":"2017-12-12T18:32:35.688218+0100","flow_id":2168387567583322,"pcap_cnt":66,"event_type":"dns","src_ip":"192.168.1.100","src_port":56766,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29900,"rrname":"qederepuduf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.491166+0100","flow_id":1121877985164958,"pcap_cnt":230,"event_type":"dns","src_ip":"192.168.1.100","src_port":53321,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53441,"rrname":"bucksmedia.go2cloud.org","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.589698+0100","flow_id":135686920592810,"pcap_cnt":19,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53776,"proto":"UDP","dns":{"type":"answer","id":2190,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"gatedyhavyd.eu","rrtype":"A","ttl":300,"rdata":"23.253.126.58"}}
{"timestamp":"2017-12-12T18:32:35.735224+0100","flow_id":922759004895224,"pcap_cnt":102,"event_type":"dns","src_ip":"192.168.1.100","src_port":64084,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38249,"rrname":"voniqofolyt.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.713596+0100","flow_id":72237368730492,"pcap_cnt":83,"event_type":"dns","src_ip":"192.168.1.100","src_port":60469,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":16261,"rrname":"rydinivoloh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.628044+0100","flow_id":2131764381435930,"pcap_cnt":33,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58259,"proto":"UDP","dns":{"type":"answer","id":23397,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"kemocujufys.eu","rrtype":"NS","ttl":7384,"rdata":"ns1.arbor-sinkhole.net"}}
{"timestamp":"2017-12-12T18:32:35.655834+0100","flow_id":2231963820949978,"pcap_cnt":48,"event_type":"dns","src_ip":"192.168.1.100","src_port":61909,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45915,"rrname":"tucyguqaciq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.801695+0100","flow_id":922759004895224,"pcap_cnt":118,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64084,"proto":"UDP","dns":{"type":"answer","id":38249,"rcode":"NXDOMAIN","rrname":"voniqofolyt.eu"}}
{"timestamp":"2017-12-12T18:32:35.506286+0100","flow_id":469040807262638,"pcap_cnt":8,"event_type":"dns","src_ip":"192.168.1.100","src_port":60280,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29803,"rrname":"vofozymufok.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.441085+0100","flow_id":485396042726141,"pcap_cnt":5,"event_type":"dns","src_ip":"192.168.1.100","src_port":52861,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45939,"rrname":"fodakyhijyv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.700917+0100","flow_id":888541000479221,"pcap_cnt":72,"event_type":"dns","src_ip":"192.168.1.100","src_port":49409,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1667,"rrname":"divywysigud.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.678348+0100","flow_id":433390431197644,"pcap_cnt":59,"event_type":"dns","src_ip":"192.168.1.100","src_port":57134,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53401,"rrname":"xubifaremin.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.607109+0100","flow_id":1661645851149189,"pcap_cnt":26,"event_type":"dns","src_ip":"192.168.1.100","src_port":49694,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37147,"rrname":"fokyxazolar.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.650566+0100","flow_id":1752155844484993,"pcap_cnt":46,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53973,"proto":"UDP","dns":{"type":"answer","id":34171,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"lyvejujolec.eu","rrtype":"NS","ttl":7384,"rdata":"ns1.asertdns.com"}}
{"timestamp":"2017-12-12T18:32:35.596598+0100","flow_id":2049693998848630,"pcap_cnt":23,"event_type":"dns","src_ip":"192.168.1.100","src_port":53193,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28554,"rrname":"ryqecolijet.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.728716+0100","flow_id":433390431197644,"pcap_cnt":97,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57134,"proto":"UDP","dns":{"type":"answer","id":53401,"rcode":"NXDOMAIN","rrname":"xubifaremin.eu"}}
{"timestamp":"2017-12-12T18:32:35.674688+0100","flow_id":199548789279616,"pcap_cnt":57,"event_type":"dns","src_ip":"192.168.1.100","src_port":64702,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29557,"rrname":"lymylorozig.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.620926+0100","flow_id":1819874593831294,"pcap_cnt":29,"event_type":"dns","src_ip":"192.168.1.100","src_port":62268,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9578,"rrname":"marytymenok.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:40.680302+0100","flow_id":378135677264238,"pcap_cnt":131,"event_type":"dns","src_ip":"192.168.1.100","src_port":53067,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44317,"rrname":"teredo.ipv6.microsoft.com","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.726130+0100","flow_id":199548789279616,"pcap_cnt":94,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64702,"proto":"UDP","dns":{"type":"answer","id":29557,"rcode":"NXDOMAIN","rrname":"lymylorozig.eu"}}
{"timestamp":"2017-12-12T18:32:35.623784+0100","flow_id":882349805132465,"pcap_cnt":30,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61169,"proto":"UDP","dns":{"type":"answer","id":63928,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:40.680709+0100","flow_id":378135677264238,"pcap_cnt":132,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53067,"proto":"UDP","dns":{"type":"answer","id":44317,"rcode":"NXDOMAIN","rrname":"teredo.ipv6.microsoft.com"}}
{"timestamp":"2017-12-12T18:32:57.505512+0100","flow_id":657527595906101,"pcap_cnt":234,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51024,"proto":"UDP","dns":{"type":"answer","id":23518,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.719895+0100","flow_id":1954150303923223,"pcap_cnt":90,"event_type":"dns","src_ip":"192.168.1.100","src_port":57190,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48460,"rrname":"lysovidacyx.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:56.836275+0100","flow_id":436317452766733,"pcap_cnt":137,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55473,"proto":"UDP","dns":{"type":"answer","id":4375,"rcode":"NXDOMAIN","rrname":"novacofebyz.eu"}}
{"timestamp":"2017-12-12T18:32:35.582998+0100","flow_id":2030461135349078,"pcap_cnt":17,"event_type":"dns","src_ip":"192.168.1.100","src_port":58912,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41834,"rrname":"nofyjikoxex.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.426648+0100","flow_id":1874139359509625,"pcap_cnt":216,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51258,"proto":"UDP","dns":{"type":"answer","id":19057,"rcode":"NXDOMAIN","rrname":"pufiluqudic.eu"}}
{"timestamp":"2017-12-12T18:32:35.589698+0100","flow_id":135686920592810,"pcap_cnt":19,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53776,"proto":"UDP","dns":{"type":"answer","id":2190,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"gatedyhavyd.eu","rrtype":"A","ttl":300,"rdata":"104.239.157.210"}}
{"timestamp":"2017-12-12T18:32:35.716079+0100","flow_id":1574165957307695,"pcap_cnt":86,"event_type":"dns","src_ip":"192.168.1.100","src_port":50498,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38473,"rrname":"tupazivenom.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.628044+0100","flow_id":2131764381435930,"pcap_cnt":33,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58259,"proto":"UDP","dns":{"type":"answer","id":23397,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"kemocujufys.eu","rrtype":"NS","ttl":7384,"rdata":"ns1.asertdns.com"}}
{"timestamp":"2017-12-12T18:32:35.605572+0100","flow_id":469040807262638,"pcap_cnt":25,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60280,"proto":"UDP","dns":{"type":"answer","id":29803,"rcode":"NXDOMAIN","rrname":"vofozymufok.eu"}}
{"timestamp":"2017-12-12T18:32:56.879432+0100","flow_id":799925089102664,"pcap_cnt":152,"event_type":"dns","src_ip":"192.168.1.100","src_port":62884,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":22188,"rrname":"ryleryqacic.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:56.798732+0100","flow_id":2072837431504908,"pcap_cnt":134,"event_type":"dns","src_ip":"192.168.1.100","src_port":63963,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8499,"rrname":"gacezobeqon.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.753808+0100","flow_id":888541000479221,"pcap_cnt":114,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49409,"proto":"UDP","dns":{"type":"answer","id":1667,"rcode":"NXDOMAIN","rrname":"divywysigud.eu"}}
{"timestamp":"2017-12-12T18:32:35.650566+0100","flow_id":1752155844484993,"pcap_cnt":46,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53973,"proto":"UDP","dns":{"type":"answer","id":34171,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"lyvejujolec.eu","rrtype":"NS","ttl":7384,"rdata":"ns1.arbor-sinkhole.net"}}
{"timestamp":"2017-12-12T18:32:56.959308+0100","flow_id":1551458466571084,"pcap_cnt":189,"event_type":"dns","src_ip":"192.168.1.100","src_port":60451,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":57293,"rrname":"puzecypigyw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:56.844832+0100","flow_id":2072837431504908,"pcap_cnt":139,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63963,"proto":"UDP","dns":{"type":"answer","id":8499,"rcode":"NXDOMAIN","rrname":"gacezobeqon.eu"}}
{"timestamp":"2017-12-12T18:32:56.903802+0100","flow_id":952967658785402,"pcap_cnt":169,"event_type":"dns","src_ip":"192.168.1.100","src_port":49321,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59971,"rrname":"lyxuworenuz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:56.844832+0100","flow_id":2072837431504908,"pcap_cnt":139,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63963,"proto":"UDP","dns":{"type":"answer","id":8499,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.706989+0100","flow_id":711992074817087,"pcap_cnt":77,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58222,"proto":"UDP","dns":{"type":"answer","id":18164,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"puzutuqeqij.eu","rrtype":"A","ttl":300,"rdata":"95.211.174.92"}}
{"timestamp":"2017-12-12T18:32:56.836275+0100","flow_id":436317452766733,"pcap_cnt":137,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55473,"proto":"UDP","dns":{"type":"answer","id":4375,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:36.586274+0100","flow_id":1954150303923223,"pcap_cnt":127,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57190,"proto":"UDP","dns":{"type":"answer","id":48460,"rcode":"NXDOMAIN","rrname":"lysovidacyx.eu"}}
{"timestamp":"2017-12-12T18:32:35.662189+0100","flow_id":503961038822061,"pcap_cnt":52,"event_type":"dns","src_ip":"192.168.1.100","src_port":65488,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":10497,"rrname":"vocumucokaj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.589698+0100","flow_id":135686920592810,"pcap_cnt":19,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53776,"proto":"UDP","dns":{"type":"answer","id":2190,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"gatedyhavyd.eu","rrtype":"NS","ttl":7384,"rdata":"ns1.arbor-sinkhole.net"}}
{"timestamp":"2017-12-12T18:32:36.586274+0100","flow_id":1954150303923223,"pcap_cnt":127,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57190,"proto":"UDP","dns":{"type":"answer","id":48460,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:56.968414+0100","flow_id":1141840993109726,"pcap_cnt":195,"event_type":"dns","src_ip":"192.168.1.100","src_port":61154,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":56954,"rrname":"fogisysemyq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:56.978207+0100","flow_id":2225188511477023,"pcap_cnt":200,"event_type":"dns","src_ip":"192.168.1.100","src_port":52458,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":15138,"rrname":"nofotycywos.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.706989+0100","flow_id":711992074817087,"pcap_cnt":77,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58222,"proto":"UDP","dns":{"type":"answer","id":18164,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"puzutuqeqij.eu","rrtype":"NS","ttl":7384,"rdata":"ns-504.awsdns-63.com"}}
{"timestamp":"2017-12-12T18:32:56.846727+0100","flow_id":2184231703341959,"pcap_cnt":140,"event_type":"dns","src_ip":"192.168.1.100","src_port":50581,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17020,"rrname":"qekusagigyz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.706989+0100","flow_id":711992074817087,"pcap_cnt":77,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58222,"proto":"UDP","dns":{"type":"answer","id":18164,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"puzutuqeqij.eu","rrtype":"NS","ttl":7384,"rdata":"ns-2039.awsdns-62.co.uk"}}
{"timestamp":"2017-12-12T18:32:56.943807+0100","flow_id":387921761298111,"pcap_cnt":182,"event_type":"dns","src_ip":"192.168.1.100","src_port":53117,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31212,"rrname":"digegazolan.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.706989+0100","flow_id":711992074817087,"pcap_cnt":77,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58222,"proto":"UDP","dns":{"type":"answer","id":18164,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"puzutuqeqij.eu","rrtype":"NS","ttl":7384,"rdata":"ns-1206.awsdns-22.org"}}
{"timestamp":"2017-12-12T18:32:56.882072+0100","flow_id":1429520050058648,"pcap_cnt":153,"event_type":"dns","src_ip":"192.168.1.100","src_port":62973,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42903,"rrname":"pupujeguper.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.589698+0100","flow_id":135686920592810,"pcap_cnt":19,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53776,"proto":"UDP","dns":{"type":"answer","id":2190,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"gatedyhavyd.eu","rrtype":"NS","ttl":7384,"rdata":"ns1.asertdns.com"}}
{"timestamp":"2017-12-12T18:32:56.896584+0100","flow_id":1491170010639944,"pcap_cnt":162,"event_type":"dns","src_ip":"192.168.1.100","src_port":63757,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34659,"rrname":"ganycyhywek.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.484954+0100","flow_id":387921761298111,"pcap_cnt":229,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53117,"proto":"UDP","dns":{"type":"answer","id":31212,"rcode":"NXDOMAIN","rrname":"digegazolan.eu"}}
{"timestamp":"2017-12-12T18:32:56.916810+0100","flow_id":1796791293508938,"pcap_cnt":176,"event_type":"dns","src_ip":"192.168.1.100","src_port":49968,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6619,"rrname":"rycypolavag.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.612450+0100","flow_id":64648161482850,"pcap_cnt":27,"event_type":"dns","src_ip":"192.168.1.100","src_port":59338,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":52764,"rrname":"dixemazufel.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.451734+0100","flow_id":952967658785402,"pcap_cnt":223,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49321,"proto":"UDP","dns":{"type":"answer","id":59971,"rcode":"NXDOMAIN","rrname":"lyxuworenuz.eu"}}
{"timestamp":"2017-12-12T18:32:57.028238+0100","flow_id":2184231703341959,"pcap_cnt":204,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50581,"proto":"UDP","dns":{"type":"answer","id":17020,"rcode":"NXDOMAIN","rrname":"qekusagigyz.eu"}}
{"timestamp":"2017-12-12T18:32:35.722932+0100","flow_id":1934290375084020,"pcap_cnt":91,"event_type":"dns","src_ip":"192.168.1.100","src_port":59606,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":12650,"rrname":"dimutobihom.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.650051+0100","flow_id":993853598591811,"pcap_cnt":45,"event_type":"dns","src_ip":"192.168.1.100","src_port":56166,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19305,"rrname":"dikoniwudim.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.706989+0100","flow_id":711992074817087,"pcap_cnt":77,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58222,"proto":"UDP","dns":{"type":"answer","id":18164,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"puzutuqeqij.eu","rrtype":"NS","ttl":7384,"rdata":"ns-914.awsdns-50.net"}}
{"timestamp":"2017-12-12T18:32:57.484954+0100","flow_id":387921761298111,"pcap_cnt":229,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53117,"proto":"UDP","dns":{"type":"answer","id":31212,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.630538+0100","flow_id":1868414166736650,"pcap_cnt":35,"event_type":"dns","src_ip":"192.168.1.100","src_port":58338,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45879,"rrname":"kepymexihak.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.451734+0100","flow_id":952967658785402,"pcap_cnt":223,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49321,"proto":"UDP","dns":{"type":"answer","id":59971,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.702223+0100","flow_id":993853598591811,"pcap_cnt":73,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56166,"proto":"UDP","dns":{"type":"answer","id":19305,"rcode":"NXDOMAIN","rrname":"dikoniwudim.eu"}}
{"timestamp":"2017-12-12T18:32:56.888934+0100","flow_id":539282851270758,"pcap_cnt":158,"event_type":"dns","src_ip":"192.168.1.100","src_port":61648,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11449,"rrname":"jenokirifux.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.028238+0100","flow_id":2184231703341959,"pcap_cnt":204,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50581,"proto":"UDP","dns":{"type":"answer","id":17020,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.632668+0100","flow_id":1055376857605980,"pcap_cnt":36,"event_type":"dns","src_ip":"192.168.1.100","src_port":56622,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":65164,"rrname":"qeqinuqypoq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.521994+0100","flow_id":2225188511477023,"pcap_cnt":239,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52458,"proto":"UDP","dns":{"type":"answer","id":15138,"rcode":"NXDOMAIN","rrname":"nofotycywos.eu"}}
{"timestamp":"2017-12-12T18:32:35.657244+0100","flow_id":64648161482850,"pcap_cnt":49,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59338,"proto":"UDP","dns":{"type":"answer","id":52764,"rcode":"NXDOMAIN","rrname":"dixemazufel.eu"}}
{"timestamp":"2017-12-12T18:32:57.462385+0100","flow_id":1796791293508938,"pcap_cnt":226,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49968,"proto":"UDP","dns":{"type":"answer","id":6619,"rcode":"NXDOMAIN","rrname":"rycypolavag.eu"}}
{"timestamp":"2017-12-12T18:32:56.955569+0100","flow_id":42303595517105,"pcap_cnt":187,"event_type":"dns","src_ip":"192.168.1.100","src_port":61670,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":12187,"rrname":"tucoqepyryk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.657244+0100","flow_id":64648161482850,"pcap_cnt":49,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59338,"proto":"UDP","dns":{"type":"answer","id":52764,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:57.521994+0100","flow_id":2225188511477023,"pcap_cnt":239,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52458,"proto":"UDP","dns":{"type":"answer","id":15138,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:57.462385+0100","flow_id":1796791293508938,"pcap_cnt":226,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49968,"proto":"UDP","dns":{"type":"answer","id":6619,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.682783+0100","flow_id":1868414166736650,"pcap_cnt":63,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58338,"proto":"UDP","dns":{"type":"answer","id":45879,"rcode":"NXDOMAIN","rrname":"kepymexihak.eu"}}
{"timestamp":"2017-12-12T18:32:56.962324+0100","flow_id":638393516601108,"pcap_cnt":191,"event_type":"dns","src_ip":"192.168.1.100","src_port":55767,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29,"rrname":"lyvitexemod.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.682783+0100","flow_id":1868414166736650,"pcap_cnt":63,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58338,"proto":"UDP","dns":{"type":"answer","id":45879,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:57.431609+0100","flow_id":539282851270758,"pcap_cnt":218,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61648,"proto":"UDP","dns":{"type":"answer","id":11449,"rcode":"NXDOMAIN","rrname":"jenokirifux.eu"}}
{"timestamp":"2017-12-12T18:32:35.724524+0100","flow_id":1055376857605980,"pcap_cnt":93,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56622,"proto":"UDP","dns":{"type":"answer","id":65164,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"qeqinuqypoq.eu","rrtype":"A","ttl":300,"rdata":"104.239.157.210"}}
{"timestamp":"2017-12-12T18:32:57.431609+0100","flow_id":539282851270758,"pcap_cnt":218,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61648,"proto":"UDP","dns":{"type":"answer","id":11449,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.724524+0100","flow_id":1055376857605980,"pcap_cnt":93,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56622,"proto":"UDP","dns":{"type":"answer","id":65164,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"qeqinuqypoq.eu","rrtype":"A","ttl":300,"rdata":"23.253.126.58"}}
{"timestamp":"2017-12-12T18:32:35.724524+0100","flow_id":1055376857605980,"pcap_cnt":93,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56622,"proto":"UDP","dns":{"type":"answer","id":65164,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"qeqinuqypoq.eu","rrtype":"NS","ttl":7384,"rdata":"ns1.arbor-sinkhole.net"}}
{"timestamp":"2017-12-12T18:32:35.724524+0100","flow_id":1055376857605980,"pcap_cnt":93,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56622,"proto":"UDP","dns":{"type":"answer","id":65164,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"qeqinuqypoq.eu","rrtype":"NS","ttl":7384,"rdata":"ns1.asertdns.com"}}
{"timestamp":"2017-12-12T18:32:56.900464+0100","flow_id":1440120029363568,"pcap_cnt":165,"event_type":"dns","src_ip":"192.168.1.100","src_port":64812,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43958,"rrname":"xuguxujytej.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:56.913777+0100","flow_id":1713297129271665,"pcap_cnt":174,"event_type":"dns","src_ip":"192.168.1.100","src_port":50902,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11604,"rrname":"norumikemem.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.444317+0100","flow_id":1440120029363568,"pcap_cnt":221,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64812,"proto":"UDP","dns":{"type":"answer","id":43958,"rcode":"NXDOMAIN","rrname":"xuguxujytej.eu"}}
{"timestamp":"2017-12-12T18:32:57.444317+0100","flow_id":1440120029363568,"pcap_cnt":221,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64812,"proto":"UDP","dns":{"type":"answer","id":43958,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:57.458373+0100","flow_id":1713297129271665,"pcap_cnt":225,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50902,"proto":"UDP","dns":{"type":"answer","id":11604,"rcode":"NXDOMAIN","rrname":"norumikemem.eu"}}
{"timestamp":"2017-12-12T18:32:57.458373+0100","flow_id":1713297129271665,"pcap_cnt":225,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50902,"proto":"UDP","dns":{"type":"answer","id":11604,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.538610+0100","flow_id":920740370297284,"pcap_cnt":9,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54154,"proto":"UDP","dns":{"type":"answer","id":4970,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.734492+0100","flow_id":1901030148391301,"pcap_cnt":101,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53629,"proto":"UDP","dns":{"type":"answer","id":19472,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"lyruxyxaxaw.eu","rrtype":"A","ttl":300,"rdata":"104.239.157.210"}}
{"timestamp":"2017-12-12T18:32:57.506635+0100","flow_id":1121877985164958,"pcap_cnt":235,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53321,"proto":"UDP","dns":{"type":"answer","id":53441,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"bucksmedia.go2cloud.org","rrtype":"A","ttl":60,"rdata":"34.249.56.166"}}
{"timestamp":"2017-12-12T18:32:35.726130+0100","flow_id":199548789279616,"pcap_cnt":94,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64702,"proto":"UDP","dns":{"type":"answer","id":29557,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.702223+0100","flow_id":993853598591811,"pcap_cnt":73,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56166,"proto":"UDP","dns":{"type":"answer","id":19305,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.640677+0100","flow_id":1072376338127285,"pcap_cnt":41,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64725,"proto":"UDP","dns":{"type":"answer","id":38760,"rcode":"NXDOMAIN","rrname":"tunujolavez.eu"}}
{"timestamp":"2017-12-12T18:32:35.676302+0100","flow_id":420447547249102,"pcap_cnt":58,"event_type":"dns","src_ip":"192.168.1.100","src_port":57399,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38792,"rrname":"keraborigin.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.605572+0100","flow_id":469040807262638,"pcap_cnt":25,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60280,"proto":"UDP","dns":{"type":"answer","id":29803,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.640677+0100","flow_id":1072376338127285,"pcap_cnt":41,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64725,"proto":"UDP","dns":{"type":"answer","id":38760,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.596526+0100","flow_id":341186073326251,"pcap_cnt":22,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52498,"proto":"UDP","dns":{"type":"answer","id":4451,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"jewuqyjywyv.eu","rrtype":"A","ttl":300,"rdata":"23.253.126.58"}}
{"timestamp":"2017-12-12T18:32:35.718056+0100","flow_id":1832104513211805,"pcap_cnt":89,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58140,"proto":"UDP","dns":{"type":"answer","id":22733,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"jefapexytar.eu","rrtype":"A","ttl":300,"rdata":"23.253.126.58"}}
{"timestamp":"2017-12-12T18:32:57.426648+0100","flow_id":1874139359509625,"pcap_cnt":216,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51258,"proto":"UDP","dns":{"type":"answer","id":19057,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:57.506635+0100","flow_id":1121877985164958,"pcap_cnt":235,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53321,"proto":"UDP","dns":{"type":"answer","id":53441,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"bucksmedia.go2cloud.org","rrtype":"A","ttl":60,"rdata":"52.48.172.184"}}
{"timestamp":"2017-12-12T18:32:35.728716+0100","flow_id":433390431197644,"pcap_cnt":97,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57134,"proto":"UDP","dns":{"type":"answer","id":53401,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.718056+0100","flow_id":1832104513211805,"pcap_cnt":89,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58140,"proto":"UDP","dns":{"type":"answer","id":22733,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"jefapexytar.eu","rrtype":"A","ttl":300,"rdata":"104.239.157.210"}}
{"timestamp":"2017-12-12T18:32:35.637147+0100","flow_id":1635903964647638,"pcap_cnt":39,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57634,"proto":"UDP","dns":{"type":"answer","id":1135,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.741023+0100","flow_id":2168387567583322,"pcap_cnt":107,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56766,"proto":"UDP","dns":{"type":"answer","id":29900,"rcode":"NXDOMAIN","rrname":"qederepuduf.eu"}}
{"timestamp":"2017-12-12T18:32:56.859526+0100","flow_id":551330234506630,"pcap_cnt":144,"event_type":"dns","src_ip":"192.168.1.100","src_port":57317,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":39382,"rrname":"xudylenyrob.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.646075+0100","flow_id":8729834806203,"pcap_cnt":43,"event_type":"dns","src_ip":"192.168.1.100","src_port":65012,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30337,"rrname":"xuqohyxeqak.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.757568+0100","flow_id":2050041891246190,"pcap_cnt":116,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49442,"proto":"UDP","dns":{"type":"answer","id":31819,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"xuxusujenes.eu","rrtype":"A","ttl":300,"rdata":"208.100.26.251"}}
{"timestamp":"2017-12-12T18:32:36.582594+0100","flow_id":1574165957307695,"pcap_cnt":125,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50498,"proto":"UDP","dns":{"type":"answer","id":38473,"rcode":"NXDOMAIN","rrname":"tupazivenom.eu"}}
{"timestamp":"2017-12-12T18:32:56.876138+0100","flow_id":1460368652656234,"pcap_cnt":151,"event_type":"dns","src_ip":"192.168.1.100","src_port":57222,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":21088,"rrname":"tujybuqeqis.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.710091+0100","flow_id":942365530641867,"pcap_cnt":79,"event_type":"dns","src_ip":"192.168.1.100","src_port":52963,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4595,"rrname":"jejedudupuc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.726199+0100","flow_id":1429520050058648,"pcap_cnt":246,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62973,"proto":"UDP","dns":{"type":"answer","id":42903,"rcode":"NXDOMAIN","rrname":"pupujeguper.eu"}}
{"timestamp":"2017-12-12T18:32:35.753808+0100","flow_id":888541000479221,"pcap_cnt":114,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49409,"proto":"UDP","dns":{"type":"answer","id":1667,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:56.919288+0100","flow_id":795353096390392,"pcap_cnt":177,"event_type":"dns","src_ip":"192.168.1.100","src_port":62797,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45007,"rrname":"tulimolywan.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.736940+0100","flow_id":1061971779862188,"pcap_cnt":104,"event_type":"dns","src_ip":"192.168.1.100","src_port":54097,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":58634,"rrname":"ciqydofudyx.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.653060+0100","flow_id":140918190765828,"pcap_cnt":47,"event_type":"dns","src_ip":"192.168.1.100","src_port":53204,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40181,"rrname":"cinepycusaw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:56.967281+0100","flow_id":537208382079601,"pcap_cnt":194,"event_type":"dns","src_ip":"192.168.1.100","src_port":58649,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4694,"rrname":"xuxanexusov.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.756042+0100","flow_id":160020057786698,"pcap_cnt":115,"event_type":"dns","src_ip":"192.168.1.100","src_port":65060,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33701,"rrname":"kefuwidijyp.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.803291+0100","flow_id":1061971779862188,"pcap_cnt":119,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54097,"proto":"UDP","dns":{"type":"answer","id":58634,"rcode":"NXDOMAIN","rrname":"ciqydofudyx.eu"}}
{"timestamp":"2017-12-12T18:32:35.668712+0100","flow_id":747728350164008,"pcap_cnt":55,"event_type":"dns","src_ip":"192.168.1.100","src_port":59054,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53874,"rrname":"nozoxucavaq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.752417+0100","flow_id":223063735210436,"pcap_cnt":113,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61839,"proto":"UDP","dns":{"type":"answer","id":7085,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"gadufiwabim.eu","rrtype":"A","ttl":300,"rdata":"23.253.126.58"}}
{"timestamp":"2017-12-12T18:32:57.506635+0100","flow_id":1121877985164958,"pcap_cnt":235,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53321,"proto":"UDP","dns":{"type":"answer","id":53441,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"bucksmedia.go2cloud.org","rrtype":"A","ttl":60,"rdata":"52.208.119.205"}}
{"timestamp":"2017-12-12T18:32:35.681161+0100","flow_id":1024251229612313,"pcap_cnt":61,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64682,"proto":"UDP","dns":{"type":"answer","id":57631,"rcode":"NXDOMAIN","rrname":"gahihezenal.eu"}}
{"timestamp":"2017-12-12T18:32:35.718056+0100","flow_id":1832104513211805,"pcap_cnt":89,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58140,"proto":"UDP","dns":{"type":"answer","id":22733,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"jefapexytar.eu","rrtype":"NS","ttl":7384,"rdata":"ns1.arbor-sinkhole.net"}}
{"timestamp":"2017-12-12T18:32:40.680709+0100","flow_id":378135677264238,"pcap_cnt":132,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53067,"proto":"UDP","dns":{"type":"answer","id":44317,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"ipv6.microsoft.com","rrtype":"SOA","ttl":3569}}
{"timestamp":"2017-12-12T18:32:35.718056+0100","flow_id":1832104513211805,"pcap_cnt":89,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58140,"proto":"UDP","dns":{"type":"answer","id":22733,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"jefapexytar.eu","rrtype":"NS","ttl":7384,"rdata":"ns1.asertdns.com"}}
{"timestamp":"2017-12-12T18:32:35.692622+0100","flow_id":2049693998848630,"pcap_cnt":68,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53193,"proto":"UDP","dns":{"type":"answer","id":28554,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"ryqecolijet.eu","rrtype":"A","ttl":300,"rdata":"23.253.126.58"}}
{"timestamp":"2017-12-12T18:32:35.741023+0100","flow_id":2168387567583322,"pcap_cnt":107,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56766,"proto":"UDP","dns":{"type":"answer","id":29900,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:56.906184+0100","flow_id":1590914183648200,"pcap_cnt":170,"event_type":"dns","src_ip":"192.168.1.100","src_port":64053,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":32808,"rrname":"xukovoruput.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:56.865466+0100","flow_id":1689082103608506,"pcap_cnt":146,"event_type":"dns","src_ip":"192.168.1.100","src_port":64494,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42596,"rrname":"citifemifif.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:36.580398+0100","flow_id":72237368730492,"pcap_cnt":124,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60469,"proto":"UDP","dns":{"type":"answer","id":16261,"rcode":"NXDOMAIN","rrname":"rydinivoloh.eu"}}
{"timestamp":"2017-12-12T18:32:56.908643+0100","flow_id":477023005367651,"pcap_cnt":171,"event_type":"dns","src_ip":"192.168.1.100","src_port":56063,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2920,"rrname":"vofydatacut.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:36.580398+0100","flow_id":72237368730492,"pcap_cnt":124,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60469,"proto":"UDP","dns":{"type":"answer","id":16261,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.803167+0100","flow_id":1413920728957279,"pcap_cnt":321,"event_type":"dns","src_ip":"192.168.1.100","src_port":56765,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":58447,"rrname":"pumumagojef.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.680068+0100","flow_id":1053626658414724,"pcap_cnt":60,"event_type":"dns","src_ip":"192.168.1.100","src_port":61378,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40632,"rrname":"volebatijub.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.841578+0100","flow_id":2066154462566250,"pcap_cnt":352,"event_type":"dns","src_ip":"192.168.1.100","src_port":51309,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6731,"rrname":"ryhuzilywax.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.870320+0100","flow_id":1413920728957279,"pcap_cnt":369,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56765,"proto":"UDP","dns":{"type":"answer","id":58447,"rcode":"NXDOMAIN","rrname":"pumumagojef.eu"}}
{"timestamp":"2017-12-12T18:32:35.558598+0100","flow_id":1745949616725301,"pcap_cnt":11,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61337,"proto":"UDP","dns":{"type":"answer","id":21299,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"cihunemyror.eu","rrtype":"A","ttl":300,"rdata":"23.253.126.58"}}
{"timestamp":"2017-12-12T18:32:58.870320+0100","flow_id":1413920728957279,"pcap_cnt":369,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56765,"proto":"UDP","dns":{"type":"answer","id":58447,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.909938+0100","flow_id":2066154462566250,"pcap_cnt":393,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51309,"proto":"UDP","dns":{"type":"answer","id":6731,"rcode":"NXDOMAIN","rrname":"ryhuzilywax.eu"}}
{"timestamp":"2017-12-12T18:32:35.558598+0100","flow_id":1745949616725301,"pcap_cnt":11,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61337,"proto":"UDP","dns":{"type":"answer","id":21299,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"cihunemyror.eu","rrtype":"A","ttl":300,"rdata":"104.239.157.210"}}
{"timestamp":"2017-12-12T18:32:57.726199+0100","flow_id":1429520050058648,"pcap_cnt":246,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62973,"proto":"UDP","dns":{"type":"answer","id":42903,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.909938+0100","flow_id":2066154462566250,"pcap_cnt":393,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51309,"proto":"UDP","dns":{"type":"answer","id":6731,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.629404+0100","flow_id":688975345087106,"pcap_cnt":34,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55321,"proto":"UDP","dns":{"type":"answer","id":49464,"rcode":"NXDOMAIN","rrname":"masisokemep.eu"}}
{"timestamp":"2017-12-12T18:32:58.829281+0100","flow_id":90984902469473,"pcap_cnt":343,"event_type":"dns","src_ip":"192.168.1.100","src_port":49392,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":57823,"rrname":"divoxehaceb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.400534+0100","flow_id":551330234506630,"pcap_cnt":211,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57317,"proto":"UDP","dns":{"type":"answer","id":39382,"rcode":"NXDOMAIN","rrname":"xudylenyrob.eu"}}
{"timestamp":"2017-12-12T18:32:35.629404+0100","flow_id":688975345087106,"pcap_cnt":34,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55321,"proto":"UDP","dns":{"type":"answer","id":49464,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:59.792514+0100","flow_id":1383649799509954,"pcap_cnt":495,"event_type":"dns","src_ip":"192.168.1.100","src_port":58107,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11251,"rrname":"qetaseqyquv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.896226+0100","flow_id":90984902469473,"pcap_cnt":384,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49392,"proto":"UDP","dns":{"type":"answer","id":57823,"rcode":"NXDOMAIN","rrname":"divoxehaceb.eu"}}
{"timestamp":"2017-12-12T18:32:35.803291+0100","flow_id":1061971779862188,"pcap_cnt":119,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54097,"proto":"UDP","dns":{"type":"answer","id":58634,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:59.827272+0100","flow_id":892717857742728,"pcap_cnt":511,"event_type":"dns","src_ip":"192.168.1.100","src_port":60430,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38287,"rrname":"lyrimirohyp.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.699114+0100","flow_id":1661645851149189,"pcap_cnt":71,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49694,"proto":"UDP","dns":{"type":"answer","id":37147,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"fokyxazolar.eu","rrtype":"A","ttl":300,"rdata":"23.253.126.58"}}
{"timestamp":"2017-12-12T18:32:35.752417+0100","flow_id":223063735210436,"pcap_cnt":113,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61839,"proto":"UDP","dns":{"type":"answer","id":7085,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"gadufiwabim.eu","rrtype":"A","ttl":300,"rdata":"104.239.157.210"}}
{"timestamp":"2017-12-12T18:33:01.527058+0100","flow_id":970716611414738,"pcap_cnt":560,"event_type":"dns","src_ip":"192.168.1.100","src_port":57349,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51262,"rrname":"qekikyvutic.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.699114+0100","flow_id":1661645851149189,"pcap_cnt":71,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49694,"proto":"UDP","dns":{"type":"answer","id":37147,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"fokyxazolar.eu","rrtype":"A","ttl":300,"rdata":"104.239.157.210"}}
{"timestamp":"2017-12-12T18:32:35.752417+0100","flow_id":223063735210436,"pcap_cnt":113,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61839,"proto":"UDP","dns":{"type":"answer","id":7085,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"gadufiwabim.eu","rrtype":"NS","ttl":7384,"rdata":"ns1.asertdns.com"}}
{"timestamp":"2017-12-12T18:32:35.699114+0100","flow_id":1661645851149189,"pcap_cnt":71,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49694,"proto":"UDP","dns":{"type":"answer","id":37147,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"fokyxazolar.eu","rrtype":"NS","ttl":7384,"rdata":"ns1.arbor-sinkhole.net"}}
{"timestamp":"2017-12-12T18:33:01.562212+0100","flow_id":716488907265060,"pcap_cnt":569,"event_type":"dns","src_ip":"192.168.1.100","src_port":65264,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27373,"rrname":"foqesibojup.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.752417+0100","flow_id":223063735210436,"pcap_cnt":113,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61839,"proto":"UDP","dns":{"type":"answer","id":7085,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"gadufiwabim.eu","rrtype":"NS","ttl":7384,"rdata":"ns1.arbor-sinkhole.net"}}
{"timestamp":"2017-12-12T18:32:58.615932+0100","flow_id":1141840993109726,"pcap_cnt":282,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61154,"proto":"UDP","dns":{"type":"answer","id":56954,"rcode":"NXDOMAIN","rrname":"fogisysemyq.eu"}}
{"timestamp":"2017-12-12T18:32:35.626753+0100","flow_id":2030461135349078,"pcap_cnt":32,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58912,"proto":"UDP","dns":{"type":"answer","id":41834,"rcode":"NXDOMAIN","rrname":"nofyjikoxex.eu"}}
{"timestamp":"2017-12-12T18:33:01.685095+0100","flow_id":469040807262638,"pcap_cnt":635,"event_type":"dns","src_ip":"192.168.1.100","src_port":60280,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31114,"rrname":"rylefogohan.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:01.593700+0100","flow_id":970716611414738,"pcap_cnt":587,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57349,"proto":"UDP","dns":{"type":"answer","id":51262,"rcode":"NXDOMAIN","rrname":"qekikyvutic.eu"}}
{"timestamp":"2017-12-12T18:32:35.626753+0100","flow_id":2030461135349078,"pcap_cnt":32,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58912,"proto":"UDP","dns":{"type":"answer","id":41834,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.552071+0100","flow_id":1599053146671285,"pcap_cnt":270,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60785,"proto":"UDP","dns":{"type":"answer","id":18726,"rcode":"NXDOMAIN","rrname":"cidohukigeq.eu"}}
{"timestamp":"2017-12-12T18:33:01.593700+0100","flow_id":970716611414738,"pcap_cnt":587,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57349,"proto":"UDP","dns":{"type":"answer","id":51262,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:36.582594+0100","flow_id":1574165957307695,"pcap_cnt":125,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50498,"proto":"UDP","dns":{"type":"answer","id":38473,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:57.406010+0100","flow_id":1689082103608506,"pcap_cnt":212,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64494,"proto":"UDP","dns":{"type":"answer","id":42596,"rcode":"NXDOMAIN","rrname":"citifemifif.eu"}}
{"timestamp":"2017-12-12T18:32:57.740972+0100","flow_id":1491170010639944,"pcap_cnt":250,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63757,"proto":"UDP","dns":{"type":"answer","id":34659,"rcode":"NXDOMAIN","rrname":"ganycyhywek.eu"}}
{"timestamp":"2017-12-12T18:33:01.608024+0100","flow_id":716488907265060,"pcap_cnt":594,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65264,"proto":"UDP","dns":{"type":"answer","id":27373,"rcode":"NXDOMAIN","rrname":"foqesibojup.eu"}}
{"timestamp":"2017-12-12T18:32:57.133346+0100","flow_id":1590914183648200,"pcap_cnt":208,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64053,"proto":"UDP","dns":{"type":"answer","id":32808,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"xukovoruput.eu","rrtype":"A","ttl":300,"rdata":"104.239.157.210"}}
{"timestamp":"2017-12-12T18:33:01.608024+0100","flow_id":716488907265060,"pcap_cnt":594,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65264,"proto":"UDP","dns":{"type":"answer","id":27373,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.379410+0100","flow_id":1305734796258832,"pcap_cnt":2,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63967,"proto":"UDP","dns":{"type":"answer","id":54941,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"www.bing.com","rrtype":"CNAME","ttl":60,"rdata":"afddnsperftest-a.trafficmanager.net"}}
{"timestamp":"2017-12-12T18:32:56.803995+0100","flow_id":1532715229267099,"pcap_cnt":135,"event_type":"dns","src_ip":"192.168.1.100","src_port":58065,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42536,"rrname":"maxyjofytyt.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.801695+0100","flow_id":922759004895224,"pcap_cnt":118,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64084,"proto":"UDP","dns":{"type":"answer","id":38249,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.379410+0100","flow_id":1305734796258832,"pcap_cnt":2,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63967,"proto":"UDP","dns":{"type":"answer","id":54941,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"afddnsperftest-a.trafficmanager.net","rrtype":"CNAME","ttl":60,"rdata":"www-bing-com.a-0026.a-msedge.net"}}
{"timestamp":"2017-12-12T18:32:35.734492+0100","flow_id":1901030148391301,"pcap_cnt":101,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53629,"proto":"UDP","dns":{"type":"answer","id":19472,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"lyruxyxaxaw.eu","rrtype":"A","ttl":300,"rdata":"23.253.126.58"}}
{"timestamp":"2017-12-12T18:32:35.379410+0100","flow_id":1305734796258832,"pcap_cnt":2,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63967,"proto":"UDP","dns":{"type":"answer","id":54941,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"www-bing-com.a-0026.a-msedge.net","rrtype":"CNAME","ttl":240,"rdata":"a-0026.a-msedge.net"}}
{"timestamp":"2017-12-12T18:32:56.861338+0100","flow_id":1752168730731674,"pcap_cnt":145,"event_type":"dns","src_ip":"192.168.1.100","src_port":64096,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11885,"rrname":"tufecagemyl.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.379410+0100","flow_id":1305734796258832,"pcap_cnt":2,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63967,"proto":"UDP","dns":{"type":"answer","id":54941,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"a-0026.a-msedge.net","rrtype":"A","ttl":240,"rdata":"204.79.197.229"}}
{"timestamp":"2017-12-12T18:32:35.558598+0100","flow_id":1745949616725301,"pcap_cnt":11,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61337,"proto":"UDP","dns":{"type":"answer","id":21299,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"cihunemyror.eu","rrtype":"NS","ttl":7384,"rdata":"ns1.asertdns.com"}}
{"timestamp":"2017-12-12T18:32:56.960609+0100","flow_id":19922520942689,"pcap_cnt":190,"event_type":"dns","src_ip":"192.168.1.100","src_port":53467,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17973,"rrname":"kemygexaxab.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:59.662477+0100","flow_id":2224277978553293,"pcap_cnt":433,"event_type":"dns","src_ip":"192.168.1.100","src_port":64502,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19043,"rrname":"marugofazez.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.558598+0100","flow_id":1745949616725301,"pcap_cnt":11,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61337,"proto":"UDP","dns":{"type":"answer","id":21299,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"cihunemyror.eu","rrtype":"NS","ttl":7384,"rdata":"ns1.arbor-sinkhole.net"}}
{"timestamp":"2017-12-12T18:32:57.501556+0100","flow_id":19922520942689,"pcap_cnt":233,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53467,"proto":"UDP","dns":{"type":"answer","id":17973,"rcode":"NXDOMAIN","rrname":"kemygexaxab.eu"}}
{"timestamp":"2017-12-12T18:32:35.671827+0100","flow_id":1660342328574035,"pcap_cnt":56,"event_type":"dns","src_ip":"192.168.1.100","src_port":54319,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23024,"rrname":"makagucyraj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:59.715147+0100","flow_id":2224277978553293,"pcap_cnt":455,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64502,"proto":"UDP","dns":{"type":"answer","id":19043,"rcode":"NXDOMAIN","rrname":"marugofazez.eu"}}
{"timestamp":"2017-12-12T18:32:58.896226+0100","flow_id":90984902469473,"pcap_cnt":384,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49392,"proto":"UDP","dns":{"type":"answer","id":57823,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:59.715147+0100","flow_id":2224277978553293,"pcap_cnt":455,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64502,"proto":"UDP","dns":{"type":"answer","id":19043,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.760043+0100","flow_id":136569536367432,"pcap_cnt":117,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62586,"proto":"UDP","dns":{"type":"answer","id":1990,"rcode":"NXDOMAIN","rrname":"galokusemus.eu"}}
{"timestamp":"2017-12-12T18:32:59.765186+0100","flow_id":2104620189723906,"pcap_cnt":477,"event_type":"dns","src_ip":"192.168.1.100","src_port":49996,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4041,"rrname":"lyvevonifun.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.760043+0100","flow_id":136569536367432,"pcap_cnt":117,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62586,"proto":"UDP","dns":{"type":"answer","id":1990,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:00.335565+0100","flow_id":1383649799509954,"pcap_cnt":518,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58107,"proto":"UDP","dns":{"type":"answer","id":11251,"rcode":"NXDOMAIN","rrname":"qetaseqyquv.eu"}}
{"timestamp":"2017-12-12T18:32:36.576832+0100","flow_id":942365530641867,"pcap_cnt":122,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52963,"proto":"UDP","dns":{"type":"answer","id":4595,"rcode":"NXDOMAIN","rrname":"jejedudupuc.eu"}}
{"timestamp":"2017-12-12T18:32:35.995177+0100","flow_id":160020057786698,"pcap_cnt":121,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65060,"proto":"UDP","dns":{"type":"answer","id":33701,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"kefuwidijyp.eu","rrtype":"A","ttl":300,"rdata":"23.253.126.58"}}
{"timestamp":"2017-12-12T18:32:36.576832+0100","flow_id":942365530641867,"pcap_cnt":122,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52963,"proto":"UDP","dns":{"type":"answer","id":4595,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.604324+0100","flow_id":42303595517105,"pcap_cnt":278,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61670,"proto":"UDP","dns":{"type":"answer","id":12187,"rcode":"NXDOMAIN","rrname":"tucoqepyryk.eu"}}
{"timestamp":"2017-12-12T18:32:35.995177+0100","flow_id":160020057786698,"pcap_cnt":121,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65060,"proto":"UDP","dns":{"type":"answer","id":33701,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"kefuwidijyp.eu","rrtype":"A","ttl":300,"rdata":"104.239.157.210"}}
{"timestamp":"2017-12-12T18:32:56.939767+0100","flow_id":2007053564925687,"pcap_cnt":180,"event_type":"dns","src_ip":"192.168.1.100","src_port":49876,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":39822,"rrname":"rynudepebur.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.995177+0100","flow_id":160020057786698,"pcap_cnt":121,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65060,"proto":"UDP","dns":{"type":"answer","id":33701,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"kefuwidijyp.eu","rrtype":"NS","ttl":7384,"rdata":"ns1.asertdns.com"}}
{"timestamp":"2017-12-12T18:32:58.615932+0100","flow_id":1141840993109726,"pcap_cnt":282,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61154,"proto":"UDP","dns":{"type":"answer","id":56954,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.995177+0100","flow_id":160020057786698,"pcap_cnt":121,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65060,"proto":"UDP","dns":{"type":"answer","id":33701,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"kefuwidijyp.eu","rrtype":"NS","ttl":7384,"rdata":"ns1.arbor-sinkhole.net"}}
{"timestamp":"2017-12-12T18:32:35.757568+0100","flow_id":2050041891246190,"pcap_cnt":116,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49442,"proto":"UDP","dns":{"type":"answer","id":31819,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"xuxusujenes.eu","rrtype":"NS","ttl":7384,"rdata":"ns2.honeybot.us"}}
{"timestamp":"2017-12-12T18:32:56.848529+0100","flow_id":805358222766737,"pcap_cnt":141,"event_type":"dns","src_ip":"192.168.1.100","src_port":64309,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":24774,"rrname":"lygananavof.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.680752+0100","flow_id":1152458152370992,"pcap_cnt":293,"event_type":"dns","src_ip":"192.168.1.100","src_port":62695,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":12276,"rrname":"xubeqidudyh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.659949+0100","flow_id":1602063918830061,"pcap_cnt":288,"event_type":"dns","src_ip":"192.168.1.100","src_port":64064,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":12607,"rrname":"tunarivutop.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:56.885039+0100","flow_id":1000418457452847,"pcap_cnt":155,"event_type":"dns","src_ip":"192.168.1.100","src_port":60266,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1615,"rrname":"disafuwokis.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:02.585355+0100","flow_id":469040807262638,"pcap_cnt":671,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60280,"proto":"UDP","dns":{"type":"answer","id":31114,"rcode":"NXDOMAIN","rrname":"rylefogohan.eu"}}
{"timestamp":"2017-12-12T18:32:58.780262+0100","flow_id":1152458152370992,"pcap_cnt":316,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62695,"proto":"UDP","dns":{"type":"answer","id":12276,"rcode":"NXDOMAIN","rrname":"xubeqidudyh.eu"}}
{"timestamp":"2017-12-12T18:33:02.585355+0100","flow_id":469040807262638,"pcap_cnt":671,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60280,"proto":"UDP","dns":{"type":"answer","id":31114,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.659826+0100","flow_id":2021561963103319,"pcap_cnt":50,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49900,"proto":"UDP","dns":{"type":"answer","id":56076,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"ciliqikytec.eu","rrtype":"A","ttl":300,"rdata":"23.253.126.58"}}
{"timestamp":"2017-12-12T18:32:58.760291+0100","flow_id":1602063918830061,"pcap_cnt":306,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64064,"proto":"UDP","dns":{"type":"answer","id":12607,"rcode":"NXDOMAIN","rrname":"tunarivutop.eu"}}
{"timestamp":"2017-12-12T18:32:57.406010+0100","flow_id":1689082103608506,"pcap_cnt":212,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64494,"proto":"UDP","dns":{"type":"answer","id":42596,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.760291+0100","flow_id":1602063918830061,"pcap_cnt":306,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64064,"proto":"UDP","dns":{"type":"answer","id":12607,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.475884+0100","flow_id":144306921751276,"pcap_cnt":706,"event_type":"dns","src_ip":"192.168.1.100","src_port":50028,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44243,"rrname":"puvutaputeb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.133346+0100","flow_id":1590914183648200,"pcap_cnt":208,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64053,"proto":"UDP","dns":{"type":"answer","id":32808,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"xukovoruput.eu","rrtype":"A","ttl":300,"rdata":"23.253.126.58"}}
{"timestamp":"2017-12-12T18:33:03.477874+0100","flow_id":908931359525554,"pcap_cnt":708,"event_type":"dns","src_ip":"192.168.1.100","src_port":54559,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":32375,"rrname":"fokalesaxav.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:01.647886+0100","flow_id":735060345873102,"pcap_cnt":616,"event_type":"dns","src_ip":"192.168.1.100","src_port":63389,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23739,"rrname":"gacenysacew.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.133346+0100","flow_id":1590914183648200,"pcap_cnt":208,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64053,"proto":"UDP","dns":{"type":"answer","id":32808,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"xukovoruput.eu","rrtype":"NS","ttl":7385,"rdata":"ns1.arbor-sinkhole.net"}}
{"timestamp":"2017-12-12T18:33:03.531826+0100","flow_id":1605626594532722,"pcap_cnt":740,"event_type":"dns","src_ip":"192.168.1.100","src_port":53808,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42018,"rrname":"volocecaluk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.133346+0100","flow_id":1590914183648200,"pcap_cnt":208,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64053,"proto":"UDP","dns":{"type":"answer","id":32808,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"xukovoruput.eu","rrtype":"NS","ttl":7385,"rdata":"ns1.asertdns.com"}}
{"timestamp":"2017-12-12T18:32:56.850402+0100","flow_id":1532715229267099,"pcap_cnt":142,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58065,"proto":"UDP","dns":{"type":"answer","id":42536,"rcode":"NXDOMAIN","rrname":"maxyjofytyt.eu"}}
{"timestamp":"2017-12-12T18:32:35.744738+0100","flow_id":674091135896857,"pcap_cnt":109,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61174,"proto":"UDP","dns":{"type":"answer","id":5211,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:56.850402+0100","flow_id":1532715229267099,"pcap_cnt":142,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58065,"proto":"UDP","dns":{"type":"answer","id":42536,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.734492+0100","flow_id":1901030148391301,"pcap_cnt":101,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53629,"proto":"UDP","dns":{"type":"answer","id":19472,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"lyruxyxaxaw.eu","rrtype":"NS","ttl":7384,"rdata":"ns1.asertdns.com"}}
{"timestamp":"2017-12-12T18:32:59.644472+0100","flow_id":844201907180920,"pcap_cnt":425,"event_type":"dns","src_ip":"192.168.1.100","src_port":52724,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":21307,"rrname":"kevimudyqec.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.379410+0100","flow_id":1305734796258832,"pcap_cnt":2,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63967,"proto":"UDP","dns":{"type":"answer","id":54941,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"a-msedge.net","rrtype":"NS","ttl":22873,"rdata":"ns1.a-msedge.net"}}
{"timestamp":"2017-12-12T18:32:56.897223+0100","flow_id":1834574120792263,"pcap_cnt":163,"event_type":"dns","src_ip":"192.168.1.100","src_port":49552,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":21187,"rrname":"kezapyjolek.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.734492+0100","flow_id":1901030148391301,"pcap_cnt":101,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53629,"proto":"UDP","dns":{"type":"answer","id":19472,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"lyruxyxaxaw.eu","rrtype":"NS","ttl":7384,"rdata":"ns1.arbor-sinkhole.net"}}
{"timestamp":"2017-12-12T18:32:57.501556+0100","flow_id":19922520942689,"pcap_cnt":233,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53467,"proto":"UDP","dns":{"type":"answer","id":17973,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.581321+0100","flow_id":485396042726141,"pcap_cnt":16,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52861,"proto":"UDP","dns":{"type":"answer","id":45939,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"fodakyhijyv.eu","rrtype":"A","ttl":300,"rdata":"23.253.126.58"}}
{"timestamp":"2017-12-12T18:32:57.623185+0100","flow_id":1781389540819537,"pcap_cnt":240,"event_type":"dns","src_ip":"192.168.1.100","src_port":55619,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25431,"rrname":"www.whatsex.es","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.704621+0100","flow_id":1752168730731674,"pcap_cnt":242,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64096,"proto":"UDP","dns":{"type":"answer","id":11885,"rcode":"NXDOMAIN","rrname":"tufecagemyl.eu"}}
{"timestamp":"2017-12-12T18:33:01.515452+0100","flow_id":1683975387864444,"pcap_cnt":556,"event_type":"dns","src_ip":"192.168.1.100","src_port":62820,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":3932,"rrname":"xutevexecif.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.704621+0100","flow_id":1752168730731674,"pcap_cnt":242,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64096,"proto":"UDP","dns":{"type":"answer","id":11885,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:57.651358+0100","flow_id":1781389540819537,"pcap_cnt":241,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55619,"proto":"UDP","dns":{"type":"answer","id":25431,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"www.whatsex.es","rrtype":"A","ttl":60,"rdata":"13.33.235.119"}}
{"timestamp":"2017-12-12T18:32:59.811667+0100","flow_id":2104620189723906,"pcap_cnt":505,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49996,"proto":"UDP","dns":{"type":"answer","id":4041,"rcode":"NXDOMAIN","rrname":"lyvevonifun.eu"}}
{"timestamp":"2017-12-12T18:32:58.811716+0100","flow_id":2231676059673284,"pcap_cnt":326,"event_type":"dns","src_ip":"192.168.1.100","src_port":62902,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60158,"rrname":"gaciduwifuh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.566966+0100","flow_id":1386385693538406,"pcap_cnt":273,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50764,"proto":"UDP","dns":{"type":"answer","id":51626,"rcode":"NXDOMAIN","rrname":"qebahilojam.eu"}}
{"timestamp":"2017-12-12T18:33:01.581644+0100","flow_id":1683975387864444,"pcap_cnt":581,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62820,"proto":"UDP","dns":{"type":"answer","id":3932,"rcode":"NXDOMAIN","rrname":"xutevexecif.eu"}}
{"timestamp":"2017-12-12T18:32:35.681161+0100","flow_id":1024251229612313,"pcap_cnt":61,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64682,"proto":"UDP","dns":{"type":"answer","id":57631,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.581644+0100","flow_id":1683975387864444,"pcap_cnt":581,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62820,"proto":"UDP","dns":{"type":"answer","id":3932,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.604324+0100","flow_id":42303595517105,"pcap_cnt":278,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61670,"proto":"UDP","dns":{"type":"answer","id":12187,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.692622+0100","flow_id":2049693998848630,"pcap_cnt":68,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53193,"proto":"UDP","dns":{"type":"answer","id":28554,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"ryqecolijet.eu","rrtype":"A","ttl":300,"rdata":"104.239.157.210"}}
{"timestamp":"2017-12-12T18:32:35.713694+0100","flow_id":838313505398347,"pcap_cnt":84,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49408,"proto":"UDP","dns":{"type":"answer","id":12294,"rcode":"NXDOMAIN","rrname":"jepororyrih.eu"}}
{"timestamp":"2017-12-12T18:32:35.692622+0100","flow_id":2049693998848630,"pcap_cnt":68,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53193,"proto":"UDP","dns":{"type":"answer","id":28554,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"ryqecolijet.eu","rrtype":"NS","ttl":7384,"rdata":"ns1.arbor-sinkhole.net"}}
{"timestamp":"2017-12-12T18:32:58.732759+0100","flow_id":273439408139863,"pcap_cnt":298,"event_type":"dns","src_ip":"192.168.1.100","src_port":63084,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33783,"rrname":"lyrefanyril.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.713694+0100","flow_id":838313505398347,"pcap_cnt":84,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49408,"proto":"UDP","dns":{"type":"answer","id":12294,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:57.419966+0100","flow_id":799925089102664,"pcap_cnt":215,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62884,"proto":"UDP","dns":{"type":"answer","id":22188,"rcode":"NXDOMAIN","rrname":"ryleryqacic.eu"}}
{"timestamp":"2017-12-12T18:32:56.886627+0100","flow_id":95142430672739,"pcap_cnt":156,"event_type":"dns","src_ip":"192.168.1.100","src_port":57120,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28641,"rrname":"gaquviwyrup.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.552071+0100","flow_id":1599053146671285,"pcap_cnt":270,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60785,"proto":"UDP","dns":{"type":"answer","id":18726,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.810214+0100","flow_id":1633120827366630,"pcap_cnt":325,"event_type":"dns","src_ip":"192.168.1.100","src_port":54409,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33208,"rrname":"purowuqokuq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.726943+0100","flow_id":420447547249102,"pcap_cnt":95,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57399,"proto":"UDP","dns":{"type":"answer","id":38792,"rcode":"NXDOMAIN","rrname":"keraborigin.eu"}}
{"timestamp":"2017-12-12T18:32:36.589256+0100","flow_id":1934290375084020,"pcap_cnt":128,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59606,"proto":"UDP","dns":{"type":"answer","id":12650,"rcode":"NXDOMAIN","rrname":"dimutobihom.eu"}}
{"timestamp":"2017-12-12T18:32:56.952748+0100","flow_id":966608474900908,"pcap_cnt":184,"event_type":"dns","src_ip":"192.168.1.100","src_port":57174,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47021,"rrname":"teredo.ipv6.microsoft.com","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:59.650312+0100","flow_id":976523407125576,"pcap_cnt":429,"event_type":"dns","src_ip":"192.168.1.100","src_port":61259,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":15936,"rrname":"vofomifyrex.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.740972+0100","flow_id":1491170010639944,"pcap_cnt":250,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63757,"proto":"UDP","dns":{"type":"answer","id":34659,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.733731+0100","flow_id":1053626658414724,"pcap_cnt":100,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61378,"proto":"UDP","dns":{"type":"answer","id":40632,"rcode":"NXDOMAIN","rrname":"volebatijub.eu"}}
{"timestamp":"2017-12-12T18:32:56.953121+0100","flow_id":966608474900908,"pcap_cnt":185,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57174,"proto":"UDP","dns":{"type":"answer","id":47021,"rcode":"NXDOMAIN","rrname":"teredo.ipv6.microsoft.com"}}
{"timestamp":"2017-12-12T18:32:35.596526+0100","flow_id":341186073326251,"pcap_cnt":22,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52498,"proto":"UDP","dns":{"type":"answer","id":4451,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"jewuqyjywyv.eu","rrtype":"A","ttl":300,"rdata":"104.239.157.210"}}
{"timestamp":"2017-12-12T18:32:56.953121+0100","flow_id":966608474900908,"pcap_cnt":185,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57174,"proto":"UDP","dns":{"type":"answer","id":47021,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"ipv6.microsoft.com","rrtype":"SOA","ttl":3553}}
{"timestamp":"2017-12-12T18:32:56.887184+0100","flow_id":1895453134719376,"pcap_cnt":157,"event_type":"dns","src_ip":"192.168.1.100","src_port":60522,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26707,"rrname":"fotyriwavix.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.596526+0100","flow_id":341186073326251,"pcap_cnt":22,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52498,"proto":"UDP","dns":{"type":"answer","id":4451,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"jewuqyjywyv.eu","rrtype":"NS","ttl":7384,"rdata":"ns1.asertdns.com"}}
{"timestamp":"2017-12-12T18:33:01.696301+0100","flow_id":735060345873102,"pcap_cnt":641,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63389,"proto":"UDP","dns":{"type":"answer","id":23739,"rcode":"NXDOMAIN","rrname":"gacenysacew.eu"}}
{"timestamp":"2017-12-12T18:33:03.543774+0100","flow_id":144306921751276,"pcap_cnt":749,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50028,"proto":"UDP","dns":{"type":"answer","id":44243,"rcode":"NXDOMAIN","rrname":"puvutaputeb.eu"}}
{"timestamp":"2017-12-12T18:32:58.557112+0100","flow_id":477023005367651,"pcap_cnt":271,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56063,"proto":"UDP","dns":{"type":"answer","id":2920,"rcode":"NXDOMAIN","rrname":"vofydatacut.eu"}}
{"timestamp":"2017-12-12T18:33:01.696301+0100","flow_id":735060345873102,"pcap_cnt":641,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63389,"proto":"UDP","dns":{"type":"answer","id":23739,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.379410+0100","flow_id":1305734796258832,"pcap_cnt":2,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63967,"proto":"UDP","dns":{"type":"answer","id":54941,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"a-msedge.net","rrtype":"NS","ttl":22873,"rdata":"ns2.a-msedge.net"}}
{"timestamp":"2017-12-12T18:32:58.557112+0100","flow_id":477023005367651,"pcap_cnt":271,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56063,"proto":"UDP","dns":{"type":"answer","id":2920,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:59.646555+0100","flow_id":546165536578971,"pcap_cnt":427,"event_type":"dns","src_ip":"192.168.1.100","src_port":49422,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30581,"rrname":"cihipifebep.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.425812+0100","flow_id":68378342424404,"pcap_cnt":688,"event_type":"dns","src_ip":"192.168.1.100","src_port":57606,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":20599,"rrname":"xuxetiryqem.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.655012+0100","flow_id":1241217946549924,"pcap_cnt":287,"event_type":"dns","src_ip":"192.168.1.100","src_port":50883,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64696,"rrname":"ryqofuvenoc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.235815+0100","flow_id":1036448938170663,"pcap_cnt":209,"event_type":"dns","src_ip":"192.168.1.100","src_port":51099,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":57148,"rrname":"pxltrck.com","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:59.726608+0100","flow_id":113507710998096,"pcap_cnt":465,"event_type":"dns","src_ip":"192.168.1.100","src_port":53225,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":12666,"rrname":"nojibukojoj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.730900+0100","flow_id":2156870614263572,"pcap_cnt":297,"event_type":"dns","src_ip":"192.168.1.100","src_port":59742,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19096,"rrname":"kepolonavit.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.581321+0100","flow_id":485396042726141,"pcap_cnt":16,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52861,"proto":"UDP","dns":{"type":"answer","id":45939,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"fodakyhijyv.eu","rrtype":"A","ttl":300,"rdata":"104.239.157.210"}}
{"timestamp":"2017-12-12T18:32:59.777556+0100","flow_id":341192517344596,"pcap_cnt":489,"event_type":"dns","src_ip":"192.168.1.100","src_port":60405,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":201,"rrname":"nofucemihub.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.320135+0100","flow_id":1036448938170663,"pcap_cnt":210,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51099,"proto":"UDP","dns":{"type":"answer","id":57148,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"pxltrck.com","rrtype":"A","ttl":60,"rdata":"34.250.188.69"}}
{"timestamp":"2017-12-12T18:32:35.581321+0100","flow_id":485396042726141,"pcap_cnt":16,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52861,"proto":"UDP","dns":{"type":"answer","id":45939,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"fodakyhijyv.eu","rrtype":"NS","ttl":7384,"rdata":"ns1.asertdns.com"}}
{"timestamp":"2017-12-12T18:32:57.320135+0100","flow_id":1036448938170663,"pcap_cnt":210,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51099,"proto":"UDP","dns":{"type":"answer","id":57148,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"pxltrck.com","rrtype":"A","ttl":60,"rdata":"52.48.201.32"}}
{"timestamp":"2017-12-12T18:33:00.630203+0100","flow_id":341192517344596,"pcap_cnt":533,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60405,"proto":"UDP","dns":{"type":"answer","id":201,"rcode":"NXDOMAIN","rrname":"nofucemihub.eu"}}
{"timestamp":"2017-12-12T18:33:00.335565+0100","flow_id":1383649799509954,"pcap_cnt":518,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58107,"proto":"UDP","dns":{"type":"answer","id":11251,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.699114+0100","flow_id":1661645851149189,"pcap_cnt":71,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49694,"proto":"UDP","dns":{"type":"answer","id":37147,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"fokyxazolar.eu","rrtype":"NS","ttl":7384,"rdata":"ns1.asertdns.com"}}
{"timestamp":"2017-12-12T18:32:58.566966+0100","flow_id":1386385693538406,"pcap_cnt":273,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50764,"proto":"UDP","dns":{"type":"answer","id":51626,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.472032+0100","flow_id":892717857742728,"pcap_cnt":547,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60430,"proto":"UDP","dns":{"type":"answer","id":38287,"rcode":"NXDOMAIN","rrname":"lyrimirohyp.eu"}}
{"timestamp":"2017-12-12T18:32:35.705727+0100","flow_id":140918190765828,"pcap_cnt":76,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53204,"proto":"UDP","dns":{"type":"answer","id":40181,"rcode":"NXDOMAIN","rrname":"cinepycusaw.eu"}}
{"timestamp":"2017-12-12T18:33:01.720498+0100","flow_id":352604245589618,"pcap_cnt":652,"event_type":"dns","src_ip":"192.168.1.100","src_port":57539,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64591,"rrname":"gaqirahebof.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:01.472032+0100","flow_id":892717857742728,"pcap_cnt":547,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60430,"proto":"UDP","dns":{"type":"answer","id":38287,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.757568+0100","flow_id":2050041891246190,"pcap_cnt":116,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49442,"proto":"UDP","dns":{"type":"answer","id":31819,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"xuxusujenes.eu","rrtype":"NS","ttl":7384,"rdata":"ns1.honeybot.us"}}
{"timestamp":"2017-12-12T18:32:58.612136+0100","flow_id":638393516601108,"pcap_cnt":280,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55767,"proto":"UDP","dns":{"type":"answer","id":29,"rcode":"NXDOMAIN","rrname":"lyvitexemod.eu"}}
{"timestamp":"2017-12-12T18:32:35.692622+0100","flow_id":2049693998848630,"pcap_cnt":68,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53193,"proto":"UDP","dns":{"type":"answer","id":28554,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"ryqecolijet.eu","rrtype":"NS","ttl":7384,"rdata":"ns1.asertdns.com"}}
{"timestamp":"2017-12-12T18:33:01.820665+0100","flow_id":352604245589618,"pcap_cnt":659,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57539,"proto":"UDP","dns":{"type":"answer","id":64591,"rcode":"NXDOMAIN","rrname":"gaqirahebof.eu"}}
{"timestamp":"2017-12-12T18:32:58.612136+0100","flow_id":638393516601108,"pcap_cnt":280,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55767,"proto":"UDP","dns":{"type":"answer","id":29,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.726943+0100","flow_id":420447547249102,"pcap_cnt":95,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57399,"proto":"UDP","dns":{"type":"answer","id":38792,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.820665+0100","flow_id":352604245589618,"pcap_cnt":659,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57539,"proto":"UDP","dns":{"type":"answer","id":64591,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.772529+0100","flow_id":1306982485772721,"pcap_cnt":311,"event_type":"dns","src_ip":"192.168.1.100","src_port":50421,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47958,"rrname":"nojepofyren.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:56.871978+0100","flow_id":1146881137200682,"pcap_cnt":149,"event_type":"dns","src_ip":"192.168.1.100","src_port":49849,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":21304,"rrname":"mavulymupiv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.600384+0100","flow_id":5072671942976,"pcap_cnt":783,"event_type":"dns","src_ip":"192.168.1.100","src_port":56138,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2779,"rrname":"gacokahurol.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.812453+0100","flow_id":42303595517105,"pcap_cnt":328,"event_type":"dns","src_ip":"192.168.1.100","src_port":61670,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37703,"rrname":"fobykuwyruq.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:32:58.672875+0100","flow_id":1687810793423979,"pcap_cnt":291,"event_type":"dns","src_ip":"192.168.1.100","src_port":60769,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26780,"rrname":"dixilibaxop.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:00.501128+0100","flow_id":976523407125576,"pcap_cnt":530,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61259,"proto":"UDP","dns":{"type":"answer","id":15936,"rcode":"NXDOMAIN","rrname":"vofomifyrex.eu"}}
{"timestamp":"2017-12-12T18:33:03.609226+0100","flow_id":1346408138361802,"pcap_cnt":787,"event_type":"dns","src_ip":"192.168.1.100","src_port":52940,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35328,"rrname":"ciqapomogyg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.818151+0100","flow_id":1306982485772721,"pcap_cnt":335,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50421,"proto":"UDP","dns":{"type":"answer","id":47958,"rcode":"NXDOMAIN","rrname":"nojepofyren.eu"}}
{"timestamp":"2017-12-12T18:32:58.839340+0100","flow_id":188300271472300,"pcap_cnt":350,"event_type":"dns","src_ip":"192.168.1.100","src_port":54768,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49490,"rrname":"maxotikojax.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.733731+0100","flow_id":1053626658414724,"pcap_cnt":100,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61378,"proto":"UDP","dns":{"type":"answer","id":40632,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:56.974077+0100","flow_id":1915572909038845,"pcap_cnt":198,"event_type":"dns","src_ip":"192.168.1.100","src_port":51047,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40775,"rrname":"vojugycavov.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.419966+0100","flow_id":799925089102664,"pcap_cnt":215,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62884,"proto":"UDP","dns":{"type":"answer","id":22188,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.144926+0100","flow_id":5072671942976,"pcap_cnt":799,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56138,"proto":"UDP","dns":{"type":"answer","id":2779,"rcode":"NXDOMAIN","rrname":"gacokahurol.eu"}}
{"timestamp":"2017-12-12T18:32:58.907537+0100","flow_id":188300271472300,"pcap_cnt":391,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54768,"proto":"UDP","dns":{"type":"answer","id":49490,"rcode":"NXDOMAIN","rrname":"maxotikojax.eu"}}
{"timestamp":"2017-12-12T18:32:56.901714+0100","flow_id":130253788332626,"pcap_cnt":167,"event_type":"dns","src_ip":"192.168.1.100","src_port":61918,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28556,"rrname":"dirosehijel.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.144926+0100","flow_id":5072671942976,"pcap_cnt":799,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56138,"proto":"UDP","dns":{"type":"answer","id":2779,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.609221+0100","flow_id":1551458466571084,"pcap_cnt":279,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60451,"proto":"UDP","dns":{"type":"answer","id":57293,"rcode":"NXDOMAIN","rrname":"puzecypigyw.eu"}}
{"timestamp":"2017-12-12T18:32:35.665160+0100","flow_id":2139525387331144,"pcap_cnt":54,"event_type":"dns","src_ip":"192.168.1.100","src_port":61730,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5139,"rrname":"fogeliwokih.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.712113+0100","flow_id":1819874593831294,"pcap_cnt":82,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62268,"proto":"UDP","dns":{"type":"answer","id":9578,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"marytymenok.eu","rrtype":"A","ttl":300,"rdata":"104.239.157.210"}}
{"timestamp":"2017-12-12T18:32:58.609221+0100","flow_id":1551458466571084,"pcap_cnt":279,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60451,"proto":"UDP","dns":{"type":"answer","id":57293,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:57.506635+0100","flow_id":1121877985164958,"pcap_cnt":235,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53321,"proto":"UDP","dns":{"type":"answer","id":53441,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"go2cloud.org","rrtype":"NS","ttl":60666,"rdata":"ns-1897.awsdns-45.co.uk"}}
{"timestamp":"2017-12-12T18:33:03.543774+0100","flow_id":144306921751276,"pcap_cnt":749,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50028,"proto":"UDP","dns":{"type":"answer","id":44243,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:59.766520+0100","flow_id":642235365044792,"pcap_cnt":479,"event_type":"dns","src_ip":"192.168.1.100","src_port":63341,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4648,"rrname":"xuxukanoluf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.755616+0100","flow_id":1241217946549924,"pcap_cnt":305,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50883,"proto":"UDP","dns":{"type":"answer","id":64696,"rcode":"NXDOMAIN","rrname":"ryqofuvenoc.eu"}}
{"timestamp":"2017-12-12T18:32:57.506635+0100","flow_id":1121877985164958,"pcap_cnt":235,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53321,"proto":"UDP","dns":{"type":"answer","id":53441,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"go2cloud.org","rrtype":"NS","ttl":60666,"rdata":"ns-1511.awsdns-60.org"}}
{"timestamp":"2017-12-12T18:32:58.678783+0100","flow_id":376028996983679,"pcap_cnt":292,"event_type":"dns","src_ip":"192.168.1.100","src_port":50332,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44936,"rrname":"lymosudyqym.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.320135+0100","flow_id":1036448938170663,"pcap_cnt":210,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51099,"proto":"UDP","dns":{"type":"answer","id":57148,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"pxltrck.com","rrtype":"A","ttl":60,"rdata":"54.246.181.239"}}
{"timestamp":"2017-12-12T18:32:59.772196+0100","flow_id":113507710998096,"pcap_cnt":486,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53225,"proto":"UDP","dns":{"type":"answer","id":12666,"rcode":"NXDOMAIN","rrname":"nojibukojoj.eu"}}
{"timestamp":"2017-12-12T18:32:58.710352+0100","flow_id":2209361557116624,"pcap_cnt":294,"event_type":"dns","src_ip":"192.168.1.100","src_port":57068,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9798,"rrname":"fokafobeqix.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.400534+0100","flow_id":551330234506630,"pcap_cnt":211,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57317,"proto":"UDP","dns":{"type":"answer","id":39382,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:59.772196+0100","flow_id":113507710998096,"pcap_cnt":486,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53225,"proto":"UDP","dns":{"type":"answer","id":12666,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.817673+0100","flow_id":1216397330512393,"pcap_cnt":334,"event_type":"dns","src_ip":"192.168.1.100","src_port":60308,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42742,"rrname":"jelaqirozum.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:56.893807+0100","flow_id":1753616134742895,"pcap_cnt":161,"event_type":"dns","src_ip":"192.168.1.100","src_port":55905,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":3031,"rrname":"jecijyjudew.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:56.980482+0100","flow_id":116821278127618,"pcap_cnt":201,"event_type":"dns","src_ip":"192.168.1.100","src_port":50259,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14367,"rrname":"masenucifoc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.509956+0100","flow_id":537208382079601,"pcap_cnt":236,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58649,"proto":"UDP","dns":{"type":"answer","id":4694,"rcode":"NXDOMAIN","rrname":"xuxanexusov.eu"}}
{"timestamp":"2017-12-12T18:32:58.852389+0100","flow_id":1677384760295845,"pcap_cnt":361,"event_type":"dns","src_ip":"192.168.1.100","src_port":60674,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63438,"rrname":"foqilozutoz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.437670+0100","flow_id":1753616134742895,"pcap_cnt":219,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55905,"proto":"UDP","dns":{"type":"answer","id":3031,"rcode":"NXDOMAIN","rrname":"jecijyjudew.eu"}}
{"timestamp":"2017-12-12T18:32:57.482376+0100","flow_id":2007053564925687,"pcap_cnt":228,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49876,"proto":"UDP","dns":{"type":"answer","id":39822,"rcode":"NXDOMAIN","rrname":"rynudepebur.eu"}}
{"timestamp":"2017-12-12T18:32:58.878958+0100","flow_id":2231676059673284,"pcap_cnt":373,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62902,"proto":"UDP","dns":{"type":"answer","id":60158,"rcode":"NXDOMAIN","rrname":"gaciduwifuh.eu"}}
{"timestamp":"2017-12-12T18:32:57.437670+0100","flow_id":1753616134742895,"pcap_cnt":219,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55905,"proto":"UDP","dns":{"type":"answer","id":3031,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.659826+0100","flow_id":2021561963103319,"pcap_cnt":50,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49900,"proto":"UDP","dns":{"type":"answer","id":56076,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"ciliqikytec.eu","rrtype":"A","ttl":300,"rdata":"104.239.157.210"}}
{"timestamp":"2017-12-12T18:32:58.836720+0100","flow_id":72312532157552,"pcap_cnt":347,"event_type":"dns","src_ip":"192.168.1.100","src_port":55959,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18456,"rrname":"xutityjigac.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.731363+0100","flow_id":1895453134719376,"pcap_cnt":248,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60522,"proto":"UDP","dns":{"type":"answer","id":26707,"rcode":"NXDOMAIN","rrname":"fotyriwavix.eu"}}
{"timestamp":"2017-12-12T18:32:58.780262+0100","flow_id":1152458152370992,"pcap_cnt":316,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62695,"proto":"UDP","dns":{"type":"answer","id":12276,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:57.731363+0100","flow_id":1895453134719376,"pcap_cnt":248,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60522,"proto":"UDP","dns":{"type":"answer","id":26707,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:57.714888+0100","flow_id":1146881137200682,"pcap_cnt":244,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49849,"proto":"UDP","dns":{"type":"answer","id":21304,"rcode":"NXDOMAIN","rrname":"mavulymupiv.eu"}}
{"timestamp":"2017-12-12T18:32:58.777171+0100","flow_id":784199066508243,"pcap_cnt":314,"event_type":"dns","src_ip":"192.168.1.100","src_port":55348,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59261,"rrname":"qegovyqaxuk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:00.501128+0100","flow_id":976523407125576,"pcap_cnt":530,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61259,"proto":"UDP","dns":{"type":"answer","id":15936,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:59.770583+0100","flow_id":1732725414019607,"pcap_cnt":483,"event_type":"dns","src_ip":"192.168.1.100","src_port":60779,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13645,"rrname":"magalukacom.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.818151+0100","flow_id":1306982485772721,"pcap_cnt":335,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50421,"proto":"UDP","dns":{"type":"answer","id":47958,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.823789+0100","flow_id":784199066508243,"pcap_cnt":340,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55348,"proto":"UDP","dns":{"type":"answer","id":59261,"rcode":"NXDOMAIN","rrname":"qegovyqaxuk.eu"}}
{"timestamp":"2017-12-12T18:33:03.595145+0100","flow_id":649178179900617,"pcap_cnt":781,"event_type":"dns","src_ip":"192.168.1.100","src_port":54799,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":21330,"rrname":"xutohonutyn.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.823789+0100","flow_id":784199066508243,"pcap_cnt":340,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55348,"proto":"UDP","dns":{"type":"answer","id":59261,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:56.856111+0100","flow_id":897745116729391,"pcap_cnt":143,"event_type":"dns","src_ip":"192.168.1.100","src_port":57232,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17920,"rrname":"ryhoqagoxyr.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.907537+0100","flow_id":188300271472300,"pcap_cnt":391,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54768,"proto":"UDP","dns":{"type":"answer","id":49490,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:59.774664+0100","flow_id":2231053289509384,"pcap_cnt":487,"event_type":"dns","src_ip":"192.168.1.100","src_port":61413,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":12618,"rrname":"jewidonevin.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:56.935583+0100","flow_id":331155178538655,"pcap_cnt":179,"event_type":"dns","src_ip":"192.168.1.100","src_port":65114,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33295,"rrname":"nopiwatyqul.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:56.874550+0100","flow_id":1980094055209014,"pcap_cnt":150,"event_type":"dns","src_ip":"192.168.1.100","src_port":60124,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25660,"rrname":"qexofyqihid.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:59.616991+0100","flow_id":1972515585616415,"pcap_cnt":418,"event_type":"dns","src_ip":"192.168.1.100","src_port":49330,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":22219,"rrname":"fotoxysupyd.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.491844+0100","flow_id":68378342424404,"pcap_cnt":714,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57606,"proto":"UDP","dns":{"type":"answer","id":20599,"rcode":"NXDOMAIN","rrname":"xuxetiryqem.eu"}}
{"timestamp":"2017-12-12T18:33:00.626736+0100","flow_id":2231053289509384,"pcap_cnt":532,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61413,"proto":"UDP","dns":{"type":"answer","id":12618,"rcode":"NXDOMAIN","rrname":"jewidonevin.eu"}}
{"timestamp":"2017-12-12T18:32:56.940928+0100","flow_id":1760243269262208,"pcap_cnt":181,"event_type":"dns","src_ip":"192.168.1.100","src_port":50362,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64807,"rrname":"qeqekepokul.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.694569+0100","flow_id":622233700768041,"pcap_cnt":69,"event_type":"dns","src_ip":"192.168.1.100","src_port":57702,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40336,"rrname":"tuwikypabud.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:59.669661+0100","flow_id":1972515585616415,"pcap_cnt":439,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49330,"proto":"UDP","dns":{"type":"answer","id":22219,"rcode":"NXDOMAIN","rrname":"fotoxysupyd.eu"}}
{"timestamp":"2017-12-12T18:32:35.581321+0100","flow_id":485396042726141,"pcap_cnt":16,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52861,"proto":"UDP","dns":{"type":"answer","id":45939,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"fodakyhijyv.eu","rrtype":"NS","ttl":7384,"rdata":"ns1.arbor-sinkhole.net"}}
{"timestamp":"2017-12-12T18:32:59.669661+0100","flow_id":1972515585616415,"pcap_cnt":439,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49330,"proto":"UDP","dns":{"type":"answer","id":22219,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:57.038096+0100","flow_id":897745116729391,"pcap_cnt":206,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57232,"proto":"UDP","dns":{"type":"answer","id":17920,"rcode":"NXDOMAIN","rrname":"ryhoqagoxyr.eu"}}
{"timestamp":"2017-12-12T18:32:59.807998+0100","flow_id":904872615171134,"pcap_cnt":501,"event_type":"dns","src_ip":"192.168.1.100","src_port":50549,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":32279,"rrname":"ryturilidom.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.320135+0100","flow_id":1036448938170663,"pcap_cnt":210,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51099,"proto":"UDP","dns":{"type":"answer","id":57148,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"pxltrck.com","rrtype":"NS","ttl":133,"rdata":"ns-509.awsdns-63.com"}}
{"timestamp":"2017-12-12T18:33:01.452290+0100","flow_id":904872615171134,"pcap_cnt":544,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50549,"proto":"UDP","dns":{"type":"answer","id":32279,"rcode":"NXDOMAIN","rrname":"ryturilidom.eu"}}
{"timestamp":"2017-12-12T18:32:57.320135+0100","flow_id":1036448938170663,"pcap_cnt":210,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51099,"proto":"UDP","dns":{"type":"answer","id":57148,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"pxltrck.com","rrtype":"NS","ttl":133,"rdata":"ns-1290.awsdns-33.org"}}
{"timestamp":"2017-12-12T18:32:58.666803+0100","flow_id":1881629782584499,"pcap_cnt":290,"event_type":"dns","src_ip":"192.168.1.100","src_port":51595,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7081,"rrname":"kerijudacyj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.320135+0100","flow_id":1036448938170663,"pcap_cnt":210,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51099,"proto":"UDP","dns":{"type":"answer","id":57148,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"pxltrck.com","rrtype":"NS","ttl":133,"rdata":"ns-1000.awsdns-61.net"}}
{"timestamp":"2017-12-12T18:32:59.814652+0100","flow_id":642235365044792,"pcap_cnt":507,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63341,"proto":"UDP","dns":{"type":"answer","id":4648,"rcode":"NXDOMAIN","rrname":"xuxukanoluf.eu"}}
{"timestamp":"2017-12-12T18:32:57.320135+0100","flow_id":1036448938170663,"pcap_cnt":210,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51099,"proto":"UDP","dns":{"type":"answer","id":57148,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"pxltrck.com","rrtype":"NS","ttl":133,"rdata":"ns-1704.awsdns-21.co.uk"}}
{"timestamp":"2017-12-12T18:32:35.705727+0100","flow_id":140918190765828,"pcap_cnt":76,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53204,"proto":"UDP","dns":{"type":"answer","id":40181,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:59.814652+0100","flow_id":642235365044792,"pcap_cnt":507,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63341,"proto":"UDP","dns":{"type":"answer","id":4648,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:57.440453+0100","flow_id":1834574120792263,"pcap_cnt":220,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49552,"proto":"UDP","dns":{"type":"answer","id":21187,"rcode":"NXDOMAIN","rrname":"kezapyjolek.eu"}}
{"timestamp":"2017-12-12T18:32:58.799417+0100","flow_id":2122594627760825,"pcap_cnt":319,"event_type":"dns","src_ip":"192.168.1.100","src_port":53639,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18970,"rrname":"qedixogazen.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:00.492189+0100","flow_id":844201907180920,"pcap_cnt":526,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52724,"proto":"UDP","dns":{"type":"answer","id":21307,"rcode":"NXDOMAIN","rrname":"kevimudyqec.eu"}}
{"timestamp":"2017-12-12T18:32:59.663932+0100","flow_id":2016261974991228,"pcap_cnt":435,"event_type":"dns","src_ip":"192.168.1.100","src_port":64764,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":52256,"rrname":"rycovuvutiq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:00.492189+0100","flow_id":844201907180920,"pcap_cnt":526,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52724,"proto":"UDP","dns":{"type":"answer","id":21307,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.878958+0100","flow_id":2231676059673284,"pcap_cnt":373,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62902,"proto":"UDP","dns":{"type":"answer","id":60158,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:57.482376+0100","flow_id":2007053564925687,"pcap_cnt":228,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49876,"proto":"UDP","dns":{"type":"answer","id":39822,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:00.498582+0100","flow_id":546165536578971,"pcap_cnt":528,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49422,"proto":"UDP","dns":{"type":"answer","id":30581,"rcode":"NXDOMAIN","rrname":"cihipifebep.eu"}}
{"timestamp":"2017-12-12T18:32:35.659826+0100","flow_id":2021561963103319,"pcap_cnt":50,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49900,"proto":"UDP","dns":{"type":"answer","id":56076,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"ciliqikytec.eu","rrtype":"NS","ttl":7384,"rdata":"ns1.arbor-sinkhole.net"}}
{"timestamp":"2017-12-12T18:33:00.498582+0100","flow_id":546165536578971,"pcap_cnt":528,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49422,"proto":"UDP","dns":{"type":"answer","id":30581,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.659826+0100","flow_id":2021561963103319,"pcap_cnt":50,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49900,"proto":"UDP","dns":{"type":"answer","id":56076,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"ciliqikytec.eu","rrtype":"NS","ttl":7384,"rdata":"ns1.asertdns.com"}}
{"timestamp":"2017-12-12T18:32:58.629164+0100","flow_id":116821278127618,"pcap_cnt":285,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50259,"proto":"UDP","dns":{"type":"answer","id":14367,"rcode":"NXDOMAIN","rrname":"masenucifoc.eu"}}
{"timestamp":"2017-12-12T18:32:57.714888+0100","flow_id":1146881137200682,"pcap_cnt":244,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49849,"proto":"UDP","dns":{"type":"answer","id":21304,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.684289+0100","flow_id":810862221947137,"pcap_cnt":64,"event_type":"dns","src_ip":"192.168.1.100","src_port":56687,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43218,"rrname":"cicaratupig.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.822084+0100","flow_id":1001189404216132,"pcap_cnt":338,"event_type":"dns","src_ip":"192.168.1.100","src_port":61571,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30670,"rrname":"citeqotacyn.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.737088+0100","flow_id":810862221947137,"pcap_cnt":105,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56687,"proto":"UDP","dns":{"type":"answer","id":43218,"rcode":"NXDOMAIN","rrname":"cicaratupig.eu"}}
{"timestamp":"2017-12-12T18:33:01.567874+0100","flow_id":2032778271894082,"pcap_cnt":575,"event_type":"dns","src_ip":"192.168.1.100","src_port":49196,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":15336,"rrname":"lykysonalut.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.737088+0100","flow_id":810862221947137,"pcap_cnt":105,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56687,"proto":"UDP","dns":{"type":"answer","id":43218,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:57.030642+0100","flow_id":805358222766737,"pcap_cnt":205,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64309,"proto":"UDP","dns":{"type":"answer","id":24774,"rcode":"NXDOMAIN","rrname":"lygananavof.eu"}}
{"timestamp":"2017-12-12T18:32:58.830791+0100","flow_id":1141892532841799,"pcap_cnt":344,"event_type":"dns","src_ip":"192.168.1.100","src_port":50339,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17053,"rrname":"jejomejoled.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:56.837375+0100","flow_id":1898382302430975,"pcap_cnt":138,"event_type":"dns","src_ip":"192.168.1.100","src_port":63734,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17750,"rrname":"kejitanokon.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.742815+0100","flow_id":8729834806203,"pcap_cnt":108,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65012,"proto":"UDP","dns":{"type":"answer","id":30337,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"xuqohyxeqak.eu","rrtype":"A","ttl":300,"rdata":"104.239.157.210"}}
{"timestamp":"2017-12-12T18:33:01.616714+0100","flow_id":2032778271894082,"pcap_cnt":602,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49196,"proto":"UDP","dns":{"type":"answer","id":15336,"rcode":"NXDOMAIN","rrname":"lykysonalut.eu"}}
{"timestamp":"2017-12-12T18:33:04.152369+0100","flow_id":1346408138361802,"pcap_cnt":800,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52940,"proto":"UDP","dns":{"type":"answer","id":35328,"rcode":"NXDOMAIN","rrname":"ciqapomogyg.eu"}}
{"timestamp":"2017-12-12T18:32:56.911938+0100","flow_id":806343917759042,"pcap_cnt":173,"event_type":"dns","src_ip":"192.168.1.100","src_port":51306,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":12759,"rrname":"vopepukaxej.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.889280+0100","flow_id":1001189404216132,"pcap_cnt":380,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61571,"proto":"UDP","dns":{"type":"answer","id":30670,"rcode":"NXDOMAIN","rrname":"citeqotacyn.eu"}}
{"timestamp":"2017-12-12T18:33:03.491844+0100","flow_id":68378342424404,"pcap_cnt":714,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57606,"proto":"UDP","dns":{"type":"answer","id":20599,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.137192+0100","flow_id":649178179900617,"pcap_cnt":798,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54799,"proto":"UDP","dns":{"type":"answer","id":21330,"rcode":"NXDOMAIN","rrname":"xutohonutyn.eu"}}
{"timestamp":"2017-12-12T18:32:58.889280+0100","flow_id":1001189404216132,"pcap_cnt":380,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61571,"proto":"UDP","dns":{"type":"answer","id":30670,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.137192+0100","flow_id":649178179900617,"pcap_cnt":798,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54799,"proto":"UDP","dns":{"type":"answer","id":21330,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.755616+0100","flow_id":1241217946549924,"pcap_cnt":305,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50883,"proto":"UDP","dns":{"type":"answer","id":64696,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.528460+0100","flow_id":698261066354764,"pcap_cnt":981,"event_type":"dns","src_ip":"192.168.1.100","src_port":49766,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47961,"rrname":"qekovipynan.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.714965+0100","flow_id":2139525387331144,"pcap_cnt":85,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61730,"proto":"UDP","dns":{"type":"answer","id":5139,"rcode":"NXDOMAIN","rrname":"fogeliwokih.eu"}}
{"timestamp":"2017-12-12T18:32:58.897429+0100","flow_id":1141892532841799,"pcap_cnt":385,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50339,"proto":"UDP","dns":{"type":"answer","id":17053,"rcode":"NXDOMAIN","rrname":"jejomejoled.eu"}}
{"timestamp":"2017-12-12T18:32:57.506635+0100","flow_id":1121877985164958,"pcap_cnt":235,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53321,"proto":"UDP","dns":{"type":"answer","id":53441,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"go2cloud.org","rrtype":"NS","ttl":60666,"rdata":"ns-539.awsdns-03.net"}}
{"timestamp":"2017-12-12T18:32:35.714965+0100","flow_id":2139525387331144,"pcap_cnt":85,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61730,"proto":"UDP","dns":{"type":"answer","id":5139,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.596303+0100","flow_id":698261066354764,"pcap_cnt":1022,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49766,"proto":"UDP","dns":{"type":"answer","id":47961,"rcode":"NXDOMAIN","rrname":"qekovipynan.eu"}}
{"timestamp":"2017-12-12T18:32:35.614671+0100","flow_id":1192725616746767,"pcap_cnt":28,"event_type":"dns","src_ip":"192.168.1.100","src_port":50751,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64951,"rrname":"nopegymozow.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.506635+0100","flow_id":1121877985164958,"pcap_cnt":235,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53321,"proto":"UDP","dns":{"type":"answer","id":53441,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"go2cloud.org","rrtype":"NS","ttl":60666,"rdata":"ns-237.awsdns-29.com"}}
{"timestamp":"2017-12-12T18:33:06.596303+0100","flow_id":698261066354764,"pcap_cnt":1022,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49766,"proto":"UDP","dns":{"type":"answer","id":47961,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:57.038096+0100","flow_id":897745116729391,"pcap_cnt":206,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57232,"proto":"UDP","dns":{"type":"answer","id":17920,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.746643+0100","flow_id":622233700768041,"pcap_cnt":110,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57702,"proto":"UDP","dns":{"type":"answer","id":40336,"rcode":"NXDOMAIN","rrname":"tuwikypabud.eu"}}
{"timestamp":"2017-12-12T18:32:35.704226+0100","flow_id":1192725616746767,"pcap_cnt":74,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50751,"proto":"UDP","dns":{"type":"answer","id":64951,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"nopegymozow.eu","rrtype":"A","ttl":300,"rdata":"104.239.157.210"}}
{"timestamp":"2017-12-12T18:33:06.635804+0100","flow_id":1086216872309660,"pcap_cnt":1049,"event_type":"dns","src_ip":"192.168.1.100","src_port":57974,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26692,"rrname":"tujigevojyj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.383046+0100","flow_id":387921761298111,"pcap_cnt":680,"event_type":"dns","src_ip":"192.168.1.100","src_port":53117,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47101,"rrname":"marawukyqos.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:01.452290+0100","flow_id":904872615171134,"pcap_cnt":544,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50549,"proto":"UDP","dns":{"type":"answer","id":32279,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:57.440453+0100","flow_id":1834574120792263,"pcap_cnt":220,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49552,"proto":"UDP","dns":{"type":"answer","id":21187,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:56.953323+0100","flow_id":366397532703723,"pcap_cnt":186,"event_type":"dns","src_ip":"192.168.1.100","src_port":50906,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31206,"rrname":"fodutazenaf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:01.706219+0100","flow_id":1090243403826859,"pcap_cnt":643,"event_type":"dns","src_ip":"192.168.1.100","src_port":63766,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53643,"rrname":"fotyfahokab.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.711862+0100","flow_id":133406294465718,"pcap_cnt":295,"event_type":"dns","src_ip":"192.168.1.100","src_port":54773,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50060,"rrname":"jefubonokiz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:59.716592+0100","flow_id":2016261974991228,"pcap_cnt":456,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64764,"proto":"UDP","dns":{"type":"answer","id":52256,"rcode":"NXDOMAIN","rrname":"rycovuvutiq.eu"}}
{"timestamp":"2017-12-12T18:32:58.885808+0100","flow_id":1216397330512393,"pcap_cnt":378,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60308,"proto":"UDP","dns":{"type":"answer","id":42742,"rcode":"NXDOMAIN","rrname":"jelaqirozum.eu"}}
{"timestamp":"2017-12-12T18:32:59.716592+0100","flow_id":2016261974991228,"pcap_cnt":456,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64764,"proto":"UDP","dns":{"type":"answer","id":52256,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:36.589256+0100","flow_id":1934290375084020,"pcap_cnt":128,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59606,"proto":"UDP","dns":{"type":"answer","id":12650,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.851859+0100","flow_id":1888070086098835,"pcap_cnt":360,"event_type":"dns","src_ip":"192.168.1.100","src_port":64337,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47241,"rrname":"dirynozebot.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.773739+0100","flow_id":1687810793423979,"pcap_cnt":312,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60769,"proto":"UDP","dns":{"type":"answer","id":26780,"rcode":"NXDOMAIN","rrname":"dixilibaxop.eu"}}
{"timestamp":"2017-12-12T18:32:56.957446+0100","flow_id":568456416631814,"pcap_cnt":188,"event_type":"dns","src_ip":"192.168.1.100","src_port":50642,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2116,"rrname":"gatonazytab.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.773739+0100","flow_id":1687810793423979,"pcap_cnt":312,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60769,"proto":"UDP","dns":{"type":"answer","id":26780,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.629164+0100","flow_id":116821278127618,"pcap_cnt":285,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50259,"proto":"UDP","dns":{"type":"answer","id":14367,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.596526+0100","flow_id":341186073326251,"pcap_cnt":22,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52498,"proto":"UDP","dns":{"type":"answer","id":4451,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"jewuqyjywyv.eu","rrtype":"NS","ttl":7384,"rdata":"ns1.arbor-sinkhole.net"}}
{"timestamp":"2017-12-12T18:32:35.682426+0100","flow_id":1324042094340538,"pcap_cnt":62,"event_type":"dns","src_ip":"192.168.1.100","src_port":50743,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50479,"rrname":"nojuletacuf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:59.775467+0100","flow_id":1260399270548779,"pcap_cnt":488,"event_type":"dns","src_ip":"192.168.1.100","src_port":61833,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34268,"rrname":"vojeqamutuf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.500349+0100","flow_id":568456416631814,"pcap_cnt":232,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50642,"proto":"UDP","dns":{"type":"answer","id":2116,"rcode":"NXDOMAIN","rrname":"gatonazytab.eu"}}
{"timestamp":"2017-12-12T18:32:58.880403+0100","flow_id":42303595517105,"pcap_cnt":374,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61670,"proto":"UDP","dns":{"type":"answer","id":37703,"rcode":"NXDOMAIN","rrname":"fobykuwyruq.eu"}}
{"timestamp":"2017-12-12T18:32:57.030642+0100","flow_id":805358222766737,"pcap_cnt":205,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64309,"proto":"UDP","dns":{"type":"answer","id":24774,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:57.500349+0100","flow_id":568456416631814,"pcap_cnt":232,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50642,"proto":"UDP","dns":{"type":"answer","id":2116,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.742815+0100","flow_id":8729834806203,"pcap_cnt":108,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65012,"proto":"UDP","dns":{"type":"answer","id":30337,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"xuqohyxeqak.eu","rrtype":"A","ttl":300,"rdata":"23.253.126.58"}}
{"timestamp":"2017-12-12T18:32:59.810560+0100","flow_id":2151289304342080,"pcap_cnt":504,"event_type":"dns","src_ip":"192.168.1.100","src_port":57975,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48130,"rrname":"pumelilebon.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.152369+0100","flow_id":1346408138361802,"pcap_cnt":800,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52940,"proto":"UDP","dns":{"type":"answer","id":35328,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.742815+0100","flow_id":8729834806203,"pcap_cnt":108,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65012,"proto":"UDP","dns":{"type":"answer","id":30337,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"xuqohyxeqak.eu","rrtype":"NS","ttl":7384,"rdata":"ns1.asertdns.com"}}
{"timestamp":"2017-12-12T18:32:59.811667+0100","flow_id":2104620189723906,"pcap_cnt":505,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49996,"proto":"UDP","dns":{"type":"answer","id":4041,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:00.626736+0100","flow_id":2231053289509384,"pcap_cnt":532,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61413,"proto":"UDP","dns":{"type":"answer","id":12618,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.548703+0100","flow_id":908931359525554,"pcap_cnt":754,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54559,"proto":"UDP","dns":{"type":"answer","id":32375,"rcode":"NXDOMAIN","rrname":"fokalesaxav.eu"}}
{"timestamp":"2017-12-12T18:33:04.643813+0100","flow_id":1639634145694437,"pcap_cnt":852,"event_type":"dns","src_ip":"192.168.1.100","src_port":60108,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6912,"rrname":"fogytubuwyx.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:01.453760+0100","flow_id":2151289304342080,"pcap_cnt":545,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57975,"proto":"UDP","dns":{"type":"answer","id":48130,"rcode":"NXDOMAIN","rrname":"pumelilebon.eu"}}
{"timestamp":"2017-12-12T18:33:03.548703+0100","flow_id":908931359525554,"pcap_cnt":754,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54559,"proto":"UDP","dns":{"type":"answer","id":32375,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.568814+0100","flow_id":713246206963182,"pcap_cnt":576,"event_type":"dns","src_ip":"192.168.1.100","src_port":55816,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62502,"rrname":"xugiqonenuz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:01.453760+0100","flow_id":2151289304342080,"pcap_cnt":545,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57975,"proto":"UDP","dns":{"type":"answer","id":48130,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.770324+0100","flow_id":460863191040276,"pcap_cnt":310,"event_type":"dns","src_ip":"192.168.1.100","src_port":49228,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51575,"rrname":"volojifebeh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.651358+0100","flow_id":1781389540819537,"pcap_cnt":241,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55619,"proto":"UDP","dns":{"type":"answer","id":25431,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"www.whatsex.es","rrtype":"A","ttl":60,"rdata":"13.33.235.20"}}
{"timestamp":"2017-12-12T18:33:01.617696+0100","flow_id":713246206963182,"pcap_cnt":603,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55816,"proto":"UDP","dns":{"type":"answer","id":62502,"rcode":"NXDOMAIN","rrname":"xugiqonenuz.eu"}}
{"timestamp":"2017-12-12T18:32:58.766591+0100","flow_id":1881629782584499,"pcap_cnt":308,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51595,"proto":"UDP","dns":{"type":"answer","id":7081,"rcode":"NXDOMAIN","rrname":"kerijudacyj.eu"}}
{"timestamp":"2017-12-12T18:32:57.651358+0100","flow_id":1781389540819537,"pcap_cnt":241,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55619,"proto":"UDP","dns":{"type":"answer","id":25431,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"www.whatsex.es","rrtype":"A","ttl":60,"rdata":"13.33.235.58"}}
{"timestamp":"2017-12-12T18:32:35.746643+0100","flow_id":622233700768041,"pcap_cnt":110,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57702,"proto":"UDP","dns":{"type":"answer","id":40336,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:57.416800+0100","flow_id":1980094055209014,"pcap_cnt":214,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60124,"proto":"UDP","dns":{"type":"answer","id":25660,"rcode":"NXDOMAIN","rrname":"qexofyqihid.eu"}}
{"timestamp":"2017-12-12T18:32:58.766591+0100","flow_id":1881629782584499,"pcap_cnt":308,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51595,"proto":"UDP","dns":{"type":"answer","id":7081,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:57.509956+0100","flow_id":537208382079601,"pcap_cnt":236,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58649,"proto":"UDP","dns":{"type":"answer","id":4694,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.429520+0100","flow_id":387921761298111,"pcap_cnt":689,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53117,"proto":"UDP","dns":{"type":"answer","id":47101,"rcode":"NXDOMAIN","rrname":"marawukyqos.eu"}}
{"timestamp":"2017-12-12T18:32:56.869702+0100","flow_id":454334840587590,"pcap_cnt":148,"event_type":"dns","src_ip":"192.168.1.100","src_port":55088,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36016,"rrname":"nomebemenid.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.867905+0100","flow_id":2122594627760825,"pcap_cnt":367,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53639,"proto":"UDP","dns":{"type":"answer","id":18970,"rcode":"NXDOMAIN","rrname":"qedixogazen.eu"}}
{"timestamp":"2017-12-12T18:32:58.851376+0100","flow_id":965581977877936,"pcap_cnt":359,"event_type":"dns","src_ip":"192.168.1.100","src_port":54438,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":3973,"rrname":"rylicepyryf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.719896+0100","flow_id":1460368652656234,"pcap_cnt":245,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57222,"proto":"UDP","dns":{"type":"answer","id":21088,"rcode":"NXDOMAIN","rrname":"tujybuqeqis.eu"}}
{"timestamp":"2017-12-12T18:32:35.704226+0100","flow_id":1192725616746767,"pcap_cnt":74,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50751,"proto":"UDP","dns":{"type":"answer","id":64951,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"nopegymozow.eu","rrtype":"A","ttl":300,"rdata":"23.253.126.58"}}
{"timestamp":"2017-12-12T18:32:57.719896+0100","flow_id":1460368652656234,"pcap_cnt":245,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57222,"proto":"UDP","dns":{"type":"answer","id":21088,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.920567+0100","flow_id":965581977877936,"pcap_cnt":400,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54438,"proto":"UDP","dns":{"type":"answer","id":3973,"rcode":"NXDOMAIN","rrname":"rylicepyryf.eu"}}
{"timestamp":"2017-12-12T18:33:01.589278+0100","flow_id":1790726800014814,"pcap_cnt":584,"event_type":"dns","src_ip":"192.168.1.100","src_port":55898,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2,"rrname":"qebexequsyw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.854924+0100","flow_id":376430576405388,"pcap_cnt":364,"event_type":"dns","src_ip":"192.168.1.100","src_port":59404,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":58168,"rrname":"lykolexusol.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.568792+0100","flow_id":795353096390392,"pcap_cnt":274,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62797,"proto":"UDP","dns":{"type":"answer","id":45007,"rcode":"NXDOMAIN","rrname":"tulimolywan.eu"}}
{"timestamp":"2017-12-12T18:32:58.814279+0100","flow_id":60591566384327,"pcap_cnt":331,"event_type":"dns","src_ip":"192.168.1.100","src_port":58192,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2931,"rrname":"kejycirenuh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.568792+0100","flow_id":795353096390392,"pcap_cnt":274,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62797,"proto":"UDP","dns":{"type":"answer","id":45007,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.599277+0100","flow_id":472113856324845,"pcap_cnt":24,"event_type":"dns","src_ip":"192.168.1.100","src_port":61203,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43694,"rrname":"puvopalywet.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.686340+0100","flow_id":1681623891540228,"pcap_cnt":65,"event_type":"dns","src_ip":"192.168.1.100","src_port":59267,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":65016,"rrname":"magofetequb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.880403+0100","flow_id":42303595517105,"pcap_cnt":374,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61670,"proto":"UDP","dns":{"type":"answer","id":37703,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.712113+0100","flow_id":1819874593831294,"pcap_cnt":82,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62268,"proto":"UDP","dns":{"type":"answer","id":9578,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"marytymenok.eu","rrtype":"A","ttl":300,"rdata":"23.253.126.58"}}
{"timestamp":"2017-12-12T18:33:00.324985+0100","flow_id":1260399270548779,"pcap_cnt":516,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61833,"proto":"UDP","dns":{"type":"answer","id":34268,"rcode":"NXDOMAIN","rrname":"vojeqamutuf.eu"}}
{"timestamp":"2017-12-12T18:32:35.711442+0100","flow_id":503961038822061,"pcap_cnt":81,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65488,"proto":"UDP","dns":{"type":"answer","id":10497,"rcode":"NXDOMAIN","rrname":"vocumucokaj.eu"}}
{"timestamp":"2017-12-12T18:32:57.445661+0100","flow_id":130253788332626,"pcap_cnt":222,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61918,"proto":"UDP","dns":{"type":"answer","id":28556,"rcode":"NXDOMAIN","rrname":"dirosehijel.eu"}}
{"timestamp":"2017-12-12T18:32:56.975798+0100","flow_id":1105582879204278,"pcap_cnt":199,"event_type":"dns","src_ip":"192.168.1.100","src_port":54354,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59839,"rrname":"jepycudijyq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.445661+0100","flow_id":130253788332626,"pcap_cnt":222,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61918,"proto":"UDP","dns":{"type":"answer","id":28556,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.742815+0100","flow_id":8729834806203,"pcap_cnt":108,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65012,"proto":"UDP","dns":{"type":"answer","id":30337,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"xuqohyxeqak.eu","rrtype":"NS","ttl":7384,"rdata":"ns1.arbor-sinkhole.net"}}
{"timestamp":"2017-12-12T18:33:04.506577+0100","flow_id":1033251335486161,"pcap_cnt":813,"event_type":"dns","src_ip":"192.168.1.100","src_port":60710,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60026,"rrname":"tufozequwyd.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.584372+0100","flow_id":331155178538655,"pcap_cnt":275,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65114,"proto":"UDP","dns":{"type":"answer","id":33295,"rcode":"NXDOMAIN","rrname":"nopiwatyqul.eu"}}
{"timestamp":"2017-12-12T18:32:56.868180+0100","flow_id":1708385834123092,"pcap_cnt":147,"event_type":"dns","src_ip":"192.168.1.100","src_port":64195,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8558,"rrname":"voworemoziv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.897429+0100","flow_id":1141892532841799,"pcap_cnt":385,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50339,"proto":"UDP","dns":{"type":"answer","id":17053,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.584372+0100","flow_id":331155178538655,"pcap_cnt":275,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65114,"proto":"UDP","dns":{"type":"answer","id":33295,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.512555+0100","flow_id":1998242439877163,"pcap_cnt":555,"event_type":"dns","src_ip":"192.168.1.100","src_port":62746,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37555,"rrname":"lysowaxojib.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:00.630203+0100","flow_id":341192517344596,"pcap_cnt":533,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60405,"proto":"UDP","dns":{"type":"answer","id":201,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:56.909541+0100","flow_id":1068538786275557,"pcap_cnt":172,"event_type":"dns","src_ip":"192.168.1.100","src_port":54251,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63224,"rrname":"cihakotihuz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.741115+0100","flow_id":2120507273662203,"pcap_cnt":299,"event_type":"dns","src_ip":"192.168.1.100","src_port":52288,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":39078,"rrname":"xuquranifir.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.646739+0100","flow_id":2019618492309075,"pcap_cnt":855,"event_type":"dns","src_ip":"192.168.1.100","src_port":63838,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5958,"rrname":"gadinubidyp.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:56.965414+0100","flow_id":2140098766879526,"pcap_cnt":193,"event_type":"dns","src_ip":"192.168.1.100","src_port":50974,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":21567,"rrname":"jewezexigaf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.833677+0100","flow_id":458354930137229,"pcap_cnt":345,"event_type":"dns","src_ip":"192.168.1.100","src_port":49496,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":16628,"rrname":"kefaxyjebav.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.717190+0100","flow_id":1236684607058310,"pcap_cnt":87,"event_type":"dns","src_ip":"192.168.1.100","src_port":60371,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50425,"rrname":"puregivytoh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.651358+0100","flow_id":1781389540819537,"pcap_cnt":241,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55619,"proto":"UDP","dns":{"type":"answer","id":25431,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"www.whatsex.es","rrtype":"A","ttl":60,"rdata":"13.33.235.91"}}
{"timestamp":"2017-12-12T18:32:57.455791+0100","flow_id":1068538786275557,"pcap_cnt":224,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54251,"proto":"UDP","dns":{"type":"answer","id":63224,"rcode":"NXDOMAIN","rrname":"cihakotihuz.eu"}}
{"timestamp":"2017-12-12T18:32:57.416800+0100","flow_id":1980094055209014,"pcap_cnt":214,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60124,"proto":"UDP","dns":{"type":"answer","id":25660,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:57.455791+0100","flow_id":1068538786275557,"pcap_cnt":224,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54251,"proto":"UDP","dns":{"type":"answer","id":63224,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.684750+0100","flow_id":1086216872309660,"pcap_cnt":1067,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57974,"proto":"UDP","dns":{"type":"answer","id":26692,"rcode":"NXDOMAIN","rrname":"tujigevojyj.eu"}}
{"timestamp":"2017-12-12T18:33:03.355275+0100","flow_id":1090243403826859,"pcap_cnt":677,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63766,"proto":"UDP","dns":{"type":"answer","id":53643,"rcode":"NXDOMAIN","rrname":"fotyfahokab.eu"}}
{"timestamp":"2017-12-12T18:32:57.712718+0100","flow_id":1708385834123092,"pcap_cnt":243,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64195,"proto":"UDP","dns":{"type":"answer","id":8558,"rcode":"NXDOMAIN","rrname":"voworemoziv.eu"}}
{"timestamp":"2017-12-12T18:32:56.890445+0100","flow_id":1154036552734285,"pcap_cnt":159,"event_type":"dns","src_ip":"192.168.1.100","src_port":52246,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28421,"rrname":"mamixikusah.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.355275+0100","flow_id":1090243403826859,"pcap_cnt":677,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63766,"proto":"UDP","dns":{"type":"answer","id":53643,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:57.495866+0100","flow_id":366397532703723,"pcap_cnt":231,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50906,"proto":"UDP","dns":{"type":"answer","id":31206,"rcode":"NXDOMAIN","rrname":"fodutazenaf.eu"}}
{"timestamp":"2017-12-12T18:32:58.885808+0100","flow_id":1216397330512393,"pcap_cnt":378,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60308,"proto":"UDP","dns":{"type":"answer","id":42742,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:57.495866+0100","flow_id":366397532703723,"pcap_cnt":231,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50906,"proto":"UDP","dns":{"type":"answer","id":31206,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.539887+0100","flow_id":1153420225232111,"pcap_cnt":563,"event_type":"dns","src_ip":"192.168.1.100","src_port":61225,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26676,"rrname":"tufyquvaxic.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.920567+0100","flow_id":965581977877936,"pcap_cnt":400,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54438,"proto":"UDP","dns":{"type":"answer","id":3973,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.923269+0100","flow_id":1677384760295845,"pcap_cnt":402,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60674,"proto":"UDP","dns":{"type":"answer","id":63438,"rcode":"NXDOMAIN","rrname":"foqilozutoz.eu"}}
{"timestamp":"2017-12-12T18:32:59.608403+0100","flow_id":1048771199453331,"pcap_cnt":415,"event_type":"dns","src_ip":"192.168.1.100","src_port":64896,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":20558,"rrname":"pufepepazyd.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:01.570298+0100","flow_id":1921119859618746,"pcap_cnt":577,"event_type":"dns","src_ip":"192.168.1.100","src_port":58312,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":57152,"rrname":"cidacomutur.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.877454+0100","flow_id":1633120827366630,"pcap_cnt":372,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54409,"proto":"UDP","dns":{"type":"answer","id":33208,"rcode":"NXDOMAIN","rrname":"purowuqokuq.eu"}}
{"timestamp":"2017-12-12T18:32:58.715683+0100","flow_id":1516254767279011,"pcap_cnt":296,"event_type":"dns","src_ip":"192.168.1.100","src_port":65391,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45460,"rrname":"gaherobusit.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.877454+0100","flow_id":1633120827366630,"pcap_cnt":372,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54409,"proto":"UDP","dns":{"type":"answer","id":33208,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.605792+0100","flow_id":1153420225232111,"pcap_cnt":593,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61225,"proto":"UDP","dns":{"type":"answer","id":26676,"rcode":"NXDOMAIN","rrname":"tufyquvaxic.eu"}}
{"timestamp":"2017-12-12T18:32:35.712113+0100","flow_id":1819874593831294,"pcap_cnt":82,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62268,"proto":"UDP","dns":{"type":"answer","id":9578,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"marytymenok.eu","rrtype":"NS","ttl":7384,"rdata":"ns1.asertdns.com"}}
{"timestamp":"2017-12-12T18:32:59.683019+0100","flow_id":2163003827645451,"pcap_cnt":445,"event_type":"dns","src_ip":"192.168.1.100","src_port":53360,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2615,"rrname":"dikatahyqar.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.903089+0100","flow_id":72312532157552,"pcap_cnt":388,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55959,"proto":"UDP","dns":{"type":"answer","id":18456,"rcode":"NXDOMAIN","rrname":"xutityjigac.eu"}}
{"timestamp":"2017-12-12T18:32:57.429293+0100","flow_id":95142430672739,"pcap_cnt":217,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57120,"proto":"UDP","dns":{"type":"answer","id":28641,"rcode":"NXDOMAIN","rrname":"gaquviwyrup.eu"}}
{"timestamp":"2017-12-12T18:33:00.324985+0100","flow_id":1260399270548779,"pcap_cnt":516,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61833,"proto":"UDP","dns":{"type":"answer","id":34268,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.711442+0100","flow_id":503961038822061,"pcap_cnt":81,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65488,"proto":"UDP","dns":{"type":"answer","id":10497,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:59.702949+0100","flow_id":1203508133738981,"pcap_cnt":451,"event_type":"dns","src_ip":"192.168.1.100","src_port":55081,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11267,"rrname":"jepogejebak.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.855959+0100","flow_id":1526317875597207,"pcap_cnt":365,"event_type":"dns","src_ip":"192.168.1.100","src_port":52938,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42420,"rrname":"jeceraxaxol.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.573067+0100","flow_id":1033251335486161,"pcap_cnt":826,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60710,"proto":"UDP","dns":{"type":"answer","id":60026,"rcode":"NXDOMAIN","rrname":"tufozequwyd.eu"}}
{"timestamp":"2017-12-12T18:32:59.616518+0100","flow_id":713735833086022,"pcap_cnt":417,"event_type":"dns","src_ip":"192.168.1.100","src_port":53297,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62010,"rrname":"disumesenyv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.735858+0100","flow_id":1324042094340538,"pcap_cnt":103,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50743,"proto":"UDP","dns":{"type":"answer","id":50479,"rcode":"NXDOMAIN","rrname":"nojuletacuf.eu"}}
{"timestamp":"2017-12-12T18:33:00.622371+0100","flow_id":1732725414019607,"pcap_cnt":531,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60779,"proto":"UDP","dns":{"type":"answer","id":13645,"rcode":"NXDOMAIN","rrname":"magalukacom.eu"}}
{"timestamp":"2017-12-12T18:33:01.499428+0100","flow_id":52802643402468,"pcap_cnt":551,"event_type":"dns","src_ip":"192.168.1.100","src_port":63512,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11773,"rrname":"galavozaxog.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:59.664399+0100","flow_id":1312866590991183,"pcap_cnt":436,"event_type":"dns","src_ip":"192.168.1.100","src_port":59349,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38231,"rrname":"qeburuvenij.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:01.579720+0100","flow_id":1998242439877163,"pcap_cnt":580,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62746,"proto":"UDP","dns":{"type":"answer","id":37555,"rcode":"NXDOMAIN","rrname":"lysowaxojib.eu"}}
{"timestamp":"2017-12-12T18:33:01.527663+0100","flow_id":1655160452222255,"pcap_cnt":561,"event_type":"dns","src_ip":"192.168.1.100","src_port":51209,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":3723,"rrname":"maxyvycebid.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:01.579720+0100","flow_id":1998242439877163,"pcap_cnt":580,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62746,"proto":"UDP","dns":{"type":"answer","id":37555,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.516516+0100","flow_id":1826057200984484,"pcap_cnt":557,"event_type":"dns","src_ip":"192.168.1.100","src_port":63032,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23228,"rrname":"ciqukecywiv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.835181+0100","flow_id":229484712869485,"pcap_cnt":346,"event_type":"dns","src_ip":"192.168.1.100","src_port":61322,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27780,"rrname":"lysygyjytad.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.717627+0100","flow_id":747728350164008,"pcap_cnt":88,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59054,"proto":"UDP","dns":{"type":"answer","id":53874,"rcode":"NXDOMAIN","rrname":"nozoxucavaq.eu"}}
{"timestamp":"2017-12-12T18:32:57.651358+0100","flow_id":1781389540819537,"pcap_cnt":241,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55619,"proto":"UDP","dns":{"type":"answer","id":25431,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"www.whatsex.es","rrtype":"A","ttl":60,"rdata":"13.33.235.93"}}
{"timestamp":"2017-12-12T18:32:35.735858+0100","flow_id":1324042094340538,"pcap_cnt":103,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50743,"proto":"UDP","dns":{"type":"answer","id":50479,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.717627+0100","flow_id":747728350164008,"pcap_cnt":88,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59054,"proto":"UDP","dns":{"type":"answer","id":53874,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.534123+0100","flow_id":1283534111975019,"pcap_cnt":562,"event_type":"dns","src_ip":"192.168.1.100","src_port":57219,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59035,"rrname":"ryhadyvigis.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.867905+0100","flow_id":2122594627760825,"pcap_cnt":367,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53639,"proto":"UDP","dns":{"type":"answer","id":18970,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:57.712718+0100","flow_id":1708385834123092,"pcap_cnt":243,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64195,"proto":"UDP","dns":{"type":"answer","id":8558,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.739796+0100","flow_id":1681623891540228,"pcap_cnt":106,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59267,"proto":"UDP","dns":{"type":"answer","id":65016,"rcode":"NXDOMAIN","rrname":"magofetequb.eu"}}
{"timestamp":"2017-12-12T18:33:01.565718+0100","flow_id":52802643402468,"pcap_cnt":572,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63512,"proto":"UDP","dns":{"type":"answer","id":11773,"rcode":"NXDOMAIN","rrname":"galavozaxog.eu"}}
{"timestamp":"2017-12-12T18:33:03.441879+0100","flow_id":1151712975896087,"pcap_cnt":693,"event_type":"dns","src_ip":"192.168.1.100","src_port":52693,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4930,"rrname":"dikuvizigiz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.613374+0100","flow_id":2140098766879526,"pcap_cnt":281,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50974,"proto":"UDP","dns":{"type":"answer","id":21567,"rcode":"NXDOMAIN","rrname":"jewezexigaf.eu"}}
{"timestamp":"2017-12-12T18:32:58.743286+0100","flow_id":1081458047997814,"pcap_cnt":300,"event_type":"dns","src_ip":"192.168.1.100","src_port":57630,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11776,"rrname":"cinivamolil.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.613374+0100","flow_id":2140098766879526,"pcap_cnt":281,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50974,"proto":"UDP","dns":{"type":"answer","id":21567,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.635206+0100","flow_id":1790726800014814,"pcap_cnt":611,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55898,"proto":"UDP","dns":{"type":"answer","id":2,"rcode":"NXDOMAIN","rrname":"qebexequsyw.eu"}}
{"timestamp":"2017-12-12T18:32:59.826678+0100","flow_id":454566769040694,"pcap_cnt":510,"event_type":"dns","src_ip":"192.168.1.100","src_port":56721,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":55639,"rrname":"xuqaxiraxyx.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.815529+0100","flow_id":2028219163898281,"pcap_cnt":332,"event_type":"dns","src_ip":"192.168.1.100","src_port":54186,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23328,"rrname":"xudosorihug.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:59.661497+0100","flow_id":1048771199453331,"pcap_cnt":432,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64896,"proto":"UDP","dns":{"type":"answer","id":20558,"rcode":"NXDOMAIN","rrname":"pufepepazyd.eu"}}
{"timestamp":"2017-12-12T18:32:35.648382+0100","flow_id":472113856324845,"pcap_cnt":44,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61203,"proto":"UDP","dns":{"type":"answer","id":43694,"rcode":"NXDOMAIN","rrname":"puvopalywet.eu"}}
{"timestamp":"2017-12-12T18:32:58.883412+0100","flow_id":60591566384327,"pcap_cnt":376,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58192,"proto":"UDP","dns":{"type":"answer","id":2931,"rcode":"NXDOMAIN","rrname":"kejycirenuh.eu"}}
{"timestamp":"2017-12-12T18:32:35.648382+0100","flow_id":472113856324845,"pcap_cnt":44,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61203,"proto":"UDP","dns":{"type":"answer","id":43694,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.605792+0100","flow_id":1153420225232111,"pcap_cnt":593,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61225,"proto":"UDP","dns":{"type":"answer","id":26676,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.711095+0100","flow_id":640665552935351,"pcap_cnt":80,"event_type":"dns","src_ip":"192.168.1.100","src_port":54473,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4421,"rrname":"qegytuvufoq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.903089+0100","flow_id":72312532157552,"pcap_cnt":388,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55959,"proto":"UDP","dns":{"type":"answer","id":18456,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.618949+0100","flow_id":1921119859618746,"pcap_cnt":604,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58312,"proto":"UDP","dns":{"type":"answer","id":57152,"rcode":"NXDOMAIN","rrname":"cidacomutur.eu"}}
{"timestamp":"2017-12-12T18:32:57.429293+0100","flow_id":95142430672739,"pcap_cnt":217,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57120,"proto":"UDP","dns":{"type":"answer","id":28641,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.921793+0100","flow_id":1888070086098835,"pcap_cnt":401,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64337,"proto":"UDP","dns":{"type":"answer","id":47241,"rcode":"NXDOMAIN","rrname":"dirynozebot.eu"}}
{"timestamp":"2017-12-12T18:33:03.579493+0100","flow_id":1605626594532722,"pcap_cnt":772,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53808,"proto":"UDP","dns":{"type":"answer","id":42018,"rcode":"NXDOMAIN","rrname":"volocecaluk.eu"}}
{"timestamp":"2017-12-12T18:32:59.722103+0100","flow_id":1217097410217143,"pcap_cnt":461,"event_type":"dns","src_ip":"192.168.1.100","src_port":52680,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":12568,"rrname":"cicafykemaj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.921793+0100","flow_id":1888070086098835,"pcap_cnt":401,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64337,"proto":"UDP","dns":{"type":"answer","id":47241,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.579493+0100","flow_id":1605626594532722,"pcap_cnt":772,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53808,"proto":"UDP","dns":{"type":"answer","id":42018,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.928969+0100","flow_id":1526317875597207,"pcap_cnt":406,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52938,"proto":"UDP","dns":{"type":"answer","id":42420,"rcode":"NXDOMAIN","rrname":"jeceraxaxol.eu"}}
{"timestamp":"2017-12-12T18:33:00.622371+0100","flow_id":1732725414019607,"pcap_cnt":531,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60779,"proto":"UDP","dns":{"type":"answer","id":13645,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.928969+0100","flow_id":1526317875597207,"pcap_cnt":406,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52938,"proto":"UDP","dns":{"type":"answer","id":42420,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.596456+0100","flow_id":1527836146866664,"pcap_cnt":782,"event_type":"dns","src_ip":"192.168.1.100","src_port":60252,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51579,"rrname":"lysuxinebyg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.671839+0100","flow_id":1477902857158751,"pcap_cnt":880,"event_type":"dns","src_ip":"192.168.1.100","src_port":64583,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62197,"rrname":"foderasyqaw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:59.713937+0100","flow_id":1312866590991183,"pcap_cnt":454,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59349,"proto":"UDP","dns":{"type":"answer","id":38231,"rcode":"NXDOMAIN","rrname":"qeburuvenij.eu"}}
{"timestamp":"2017-12-12T18:33:01.722391+0100","flow_id":301060343006679,"pcap_cnt":653,"event_type":"dns","src_ip":"192.168.1.100","src_port":53180,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50462,"rrname":"lyxufejazov.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:01.595248+0100","flow_id":1655160452222255,"pcap_cnt":589,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51209,"proto":"UDP","dns":{"type":"answer","id":3723,"rcode":"NXDOMAIN","rrname":"maxyvycebid.eu"}}
{"timestamp":"2017-12-12T18:33:03.429520+0100","flow_id":387921761298111,"pcap_cnt":689,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53117,"proto":"UDP","dns":{"type":"answer","id":47101,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.821835+0100","flow_id":301060343006679,"pcap_cnt":660,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53180,"proto":"UDP","dns":{"type":"answer","id":50462,"rcode":"NXDOMAIN","rrname":"lyxufejazov.eu"}}
{"timestamp":"2017-12-12T18:32:57.651358+0100","flow_id":1781389540819537,"pcap_cnt":241,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55619,"proto":"UDP","dns":{"type":"answer","id":25431,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"www.whatsex.es","rrtype":"A","ttl":60,"rdata":"13.33.235.97"}}
{"timestamp":"2017-12-12T18:33:03.500391+0100","flow_id":591726549901991,"pcap_cnt":718,"event_type":"dns","src_ip":"192.168.1.100","src_port":51572,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7423,"rrname":"kericoxojil.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.588026+0100","flow_id":1760243269262208,"pcap_cnt":276,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50362,"proto":"UDP","dns":{"type":"answer","id":64807,"rcode":"NXDOMAIN","rrname":"qeqekepokul.eu"}}
{"timestamp":"2017-12-12T18:32:57.651358+0100","flow_id":1781389540819537,"pcap_cnt":241,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55619,"proto":"UDP","dns":{"type":"answer","id":25431,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"www.whatsex.es","rrtype":"A","ttl":60,"rdata":"13.33.235.106"}}
{"timestamp":"2017-12-12T18:33:03.503581+0100","flow_id":859182753361693,"pcap_cnt":722,"event_type":"dns","src_ip":"192.168.1.100","src_port":57727,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25342,"rrname":"ciciqacidir.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.812428+0100","flow_id":133406294465718,"pcap_cnt":327,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54773,"proto":"UDP","dns":{"type":"answer","id":50060,"rcode":"NXDOMAIN","rrname":"jefubonokiz.eu"}}
{"timestamp":"2017-12-12T18:32:57.651358+0100","flow_id":1781389540819537,"pcap_cnt":241,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55619,"proto":"UDP","dns":{"type":"answer","id":25431,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"www.whatsex.es","rrtype":"A","ttl":60,"rdata":"13.33.235.117"}}
{"timestamp":"2017-12-12T18:32:58.812428+0100","flow_id":133406294465718,"pcap_cnt":327,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54773,"proto":"UDP","dns":{"type":"answer","id":50060,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:56.972430+0100","flow_id":769104403814030,"pcap_cnt":197,"event_type":"dns","src_ip":"192.168.1.100","src_port":52238,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27064,"rrname":"gadaqusupyj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.651358+0100","flow_id":1781389540819537,"pcap_cnt":241,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55619,"proto":"UDP","dns":{"type":"answer","id":25431,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"whatsex.es","rrtype":"NS","ttl":50932,"rdata":"ns-1815.awsdns-34.co.uk"}}
{"timestamp":"2017-12-12T18:33:01.565718+0100","flow_id":52802643402468,"pcap_cnt":572,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63512,"proto":"UDP","dns":{"type":"answer","id":11773,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:59.658823+0100","flow_id":1540317321563527,"pcap_cnt":431,"event_type":"dns","src_ip":"192.168.1.100","src_port":57284,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31216,"rrname":"nopexifigep.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.704226+0100","flow_id":1192725616746767,"pcap_cnt":74,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50751,"proto":"UDP","dns":{"type":"answer","id":64951,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"nopegymozow.eu","rrtype":"NS","ttl":7384,"rdata":"ns1.arbor-sinkhole.net"}}
{"timestamp":"2017-12-12T18:33:03.508534+0100","flow_id":1151712975896087,"pcap_cnt":726,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52693,"proto":"UDP","dns":{"type":"answer","id":4930,"rcode":"NXDOMAIN","rrname":"dikuvizigiz.eu"}}
{"timestamp":"2017-12-12T18:32:57.087828+0100","flow_id":1154036552734285,"pcap_cnt":207,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52246,"proto":"UDP","dns":{"type":"answer","id":28421,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"mamixikusah.eu","rrtype":"A","ttl":300,"rdata":"104.27.137.34"}}
{"timestamp":"2017-12-12T18:33:01.583122+0100","flow_id":1826057200984484,"pcap_cnt":582,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63032,"proto":"UDP","dns":{"type":"answer","id":23228,"rcode":"NXDOMAIN","rrname":"ciqukecywiv.eu"}}
{"timestamp":"2017-12-12T18:32:59.707381+0100","flow_id":1540317321563527,"pcap_cnt":453,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57284,"proto":"UDP","dns":{"type":"answer","id":31216,"rcode":"NXDOMAIN","rrname":"nopexifigep.eu"}}
{"timestamp":"2017-12-12T18:32:57.087828+0100","flow_id":1154036552734285,"pcap_cnt":207,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52246,"proto":"UDP","dns":{"type":"answer","id":28421,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"mamixikusah.eu","rrtype":"A","ttl":300,"rdata":"104.27.136.34"}}
{"timestamp":"2017-12-12T18:32:59.707381+0100","flow_id":1540317321563527,"pcap_cnt":453,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57284,"proto":"UDP","dns":{"type":"answer","id":31216,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.807315+0100","flow_id":1614180021588371,"pcap_cnt":323,"event_type":"dns","src_ip":"192.168.1.100","src_port":51431,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":61573,"rrname":"tupudyqusuj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.087828+0100","flow_id":1154036552734285,"pcap_cnt":207,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52246,"proto":"UDP","dns":{"type":"answer","id":28421,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"mamixikusah.eu","rrtype":"NS","ttl":7385,"rdata":"tara.ns.cloudflare.com"}}
{"timestamp":"2017-12-12T18:33:01.616714+0100","flow_id":2032778271894082,"pcap_cnt":602,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49196,"proto":"UDP","dns":{"type":"answer","id":15336,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.843005+0100","flow_id":44240625917181,"pcap_cnt":354,"event_type":"dns","src_ip":"192.168.1.100","src_port":53179,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25336,"rrname":"tufigolidat.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.883412+0100","flow_id":60591566384327,"pcap_cnt":376,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58192,"proto":"UDP","dns":{"type":"answer","id":2931,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.712113+0100","flow_id":1819874593831294,"pcap_cnt":82,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62268,"proto":"UDP","dns":{"type":"answer","id":9578,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"marytymenok.eu","rrtype":"NS","ttl":7384,"rdata":"ns1.arbor-sinkhole.net"}}
{"timestamp":"2017-12-12T18:32:57.019348+0100","flow_id":1898382302430975,"pcap_cnt":203,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63734,"proto":"UDP","dns":{"type":"answer","id":17750,"rcode":"NXDOMAIN","rrname":"kejitanokon.eu"}}
{"timestamp":"2017-12-12T18:32:36.578172+0100","flow_id":640665552935351,"pcap_cnt":123,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54473,"proto":"UDP","dns":{"type":"answer","id":4421,"rcode":"NXDOMAIN","rrname":"qegytuvufoq.eu"}}
{"timestamp":"2017-12-12T18:33:01.618949+0100","flow_id":1921119859618746,"pcap_cnt":604,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58312,"proto":"UDP","dns":{"type":"answer","id":57152,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:57.019348+0100","flow_id":1898382302430975,"pcap_cnt":203,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63734,"proto":"UDP","dns":{"type":"answer","id":17750,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.724073+0100","flow_id":1660342328574035,"pcap_cnt":92,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54319,"proto":"UDP","dns":{"type":"answer","id":23024,"rcode":"NXDOMAIN","rrname":"makagucyraj.eu"}}
{"timestamp":"2017-12-12T18:32:59.636400+0100","flow_id":1879218158548464,"pcap_cnt":422,"event_type":"dns","src_ip":"192.168.1.100","src_port":57740,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50848,"rrname":"noralycifok.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.491775+0100","flow_id":1960083803046143,"pcap_cnt":713,"event_type":"dns","src_ip":"192.168.1.100","src_port":61997,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53743,"rrname":"lyrelydevac.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:59.734672+0100","flow_id":2163003827645451,"pcap_cnt":467,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53360,"proto":"UDP","dns":{"type":"answer","id":2615,"rcode":"NXDOMAIN","rrname":"dikatahyqar.eu"}}
{"timestamp":"2017-12-12T18:32:58.927483+0100","flow_id":376430576405388,"pcap_cnt":405,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59404,"proto":"UDP","dns":{"type":"answer","id":58168,"rcode":"NXDOMAIN","rrname":"lykolexusol.eu"}}
{"timestamp":"2017-12-12T18:32:58.558962+0100","flow_id":806343917759042,"pcap_cnt":272,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51306,"proto":"UDP","dns":{"type":"answer","id":12759,"rcode":"NXDOMAIN","rrname":"vopepukaxej.eu"}}
{"timestamp":"2017-12-12T18:32:59.734672+0100","flow_id":2163003827645451,"pcap_cnt":467,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53360,"proto":"UDP","dns":{"type":"answer","id":2615,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:59.713937+0100","flow_id":1312866590991183,"pcap_cnt":454,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59349,"proto":"UDP","dns":{"type":"answer","id":38231,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.558962+0100","flow_id":806343917759042,"pcap_cnt":272,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51306,"proto":"UDP","dns":{"type":"answer","id":12759,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.448767+0100","flow_id":1527836146866664,"pcap_cnt":803,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60252,"proto":"UDP","dns":{"type":"answer","id":51579,"rcode":"NXDOMAIN","rrname":"lysuxinebyg.eu"}}
{"timestamp":"2017-12-12T18:33:01.595248+0100","flow_id":1655160452222255,"pcap_cnt":589,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51209,"proto":"UDP","dns":{"type":"answer","id":3723,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:59.720541+0100","flow_id":2116351892913821,"pcap_cnt":460,"event_type":"dns","src_ip":"192.168.1.100","src_port":57989,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11813,"rrname":"xubolyjazaq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:01.821835+0100","flow_id":301060343006679,"pcap_cnt":660,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53180,"proto":"UDP","dns":{"type":"answer","id":50462,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.667661+0100","flow_id":649313471246349,"pcap_cnt":623,"event_type":"dns","src_ip":"192.168.1.100","src_port":50159,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18384,"rrname":"digyxywifyq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:59.767307+0100","flow_id":2116351892913821,"pcap_cnt":480,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57989,"proto":"UDP","dns":{"type":"answer","id":11813,"rcode":"NXDOMAIN","rrname":"xubolyjazaq.eu"}}
{"timestamp":"2017-12-12T18:33:03.450116+0100","flow_id":553363902029380,"pcap_cnt":698,"event_type":"dns","src_ip":"192.168.1.100","src_port":59079,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":21202,"rrname":"qetunopifef.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:36.583806+0100","flow_id":1236684607058310,"pcap_cnt":126,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60371,"proto":"UDP","dns":{"type":"answer","id":50425,"rcode":"NXDOMAIN","rrname":"puregivytoh.eu"}}
{"timestamp":"2017-12-12T18:33:01.673087+0100","flow_id":573739226711359,"pcap_cnt":628,"event_type":"dns","src_ip":"192.168.1.100","src_port":53653,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17625,"rrname":"nomytifazah.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.552091+0100","flow_id":591726549901991,"pcap_cnt":757,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51572,"proto":"UDP","dns":{"type":"answer","id":7423,"rcode":"NXDOMAIN","rrname":"kericoxojil.eu"}}
{"timestamp":"2017-12-12T18:32:59.578138+0100","flow_id":273439408139863,"pcap_cnt":409,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63084,"proto":"UDP","dns":{"type":"answer","id":33783,"rcode":"NXDOMAIN","rrname":"lyrefanyril.eu"}}
{"timestamp":"2017-12-12T18:33:03.552091+0100","flow_id":591726549901991,"pcap_cnt":757,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51572,"proto":"UDP","dns":{"type":"answer","id":7423,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.713195+0100","flow_id":649313471246349,"pcap_cnt":648,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50159,"proto":"UDP","dns":{"type":"answer","id":18384,"rcode":"NXDOMAIN","rrname":"digyxywifyq.eu"}}
{"timestamp":"2017-12-12T18:32:59.578138+0100","flow_id":273439408139863,"pcap_cnt":409,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63084,"proto":"UDP","dns":{"type":"answer","id":33783,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.923269+0100","flow_id":1677384760295845,"pcap_cnt":402,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60674,"proto":"UDP","dns":{"type":"answer","id":63438,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.554580+0100","flow_id":859182753361693,"pcap_cnt":759,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57727,"proto":"UDP","dns":{"type":"answer","id":25342,"rcode":"NXDOMAIN","rrname":"ciciqacidir.eu"}}
{"timestamp":"2017-12-12T18:33:01.713195+0100","flow_id":649313471246349,"pcap_cnt":648,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50159,"proto":"UDP","dns":{"type":"answer","id":18384,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:59.769737+0100","flow_id":1328386455355081,"pcap_cnt":482,"event_type":"dns","src_ip":"192.168.1.100","src_port":58046,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44471,"rrname":"cilodamenub.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:35.704226+0100","flow_id":1192725616746767,"pcap_cnt":74,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50751,"proto":"UDP","dns":{"type":"answer","id":64951,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"nopegymozow.eu","rrtype":"NS","ttl":7384,"rdata":"ns1.asertdns.com"}}
{"timestamp":"2017-12-12T18:33:03.554580+0100","flow_id":859182753361693,"pcap_cnt":759,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57727,"proto":"UDP","dns":{"type":"answer","id":25342,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.508534+0100","flow_id":1151712975896087,"pcap_cnt":726,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52693,"proto":"UDP","dns":{"type":"answer","id":4930,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:59.634706+0100","flow_id":1579476685926226,"pcap_cnt":421,"event_type":"dns","src_ip":"192.168.1.100","src_port":63328,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":58471,"rrname":"vopibycywow.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:02.573271+0100","flow_id":573739226711359,"pcap_cnt":667,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53653,"proto":"UDP","dns":{"type":"answer","id":17625,"rcode":"NXDOMAIN","rrname":"nomytifazah.eu"}}
{"timestamp":"2017-12-12T18:33:00.318368+0100","flow_id":1328386455355081,"pcap_cnt":514,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58046,"proto":"UDP","dns":{"type":"answer","id":44471,"rcode":"NXDOMAIN","rrname":"cilodamenub.eu"}}
{"timestamp":"2017-12-12T18:32:59.686623+0100","flow_id":1579476685926226,"pcap_cnt":446,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63328,"proto":"UDP","dns":{"type":"answer","id":58471,"rcode":"NXDOMAIN","rrname":"vopibycywow.eu"}}
{"timestamp":"2017-12-12T18:32:59.661497+0100","flow_id":1048771199453331,"pcap_cnt":432,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64896,"proto":"UDP","dns":{"type":"answer","id":20558,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:59.686623+0100","flow_id":1579476685926226,"pcap_cnt":446,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63328,"proto":"UDP","dns":{"type":"answer","id":58471,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:59.736912+0100","flow_id":2109452027903632,"pcap_cnt":468,"event_type":"dns","src_ip":"192.168.1.100","src_port":59176,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":32617,"rrname":"fodavibusim.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.087828+0100","flow_id":1154036552734285,"pcap_cnt":207,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52246,"proto":"UDP","dns":{"type":"answer","id":28421,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"mamixikusah.eu","rrtype":"NS","ttl":7385,"rdata":"bob.ns.cloudflare.com"}}
{"timestamp":"2017-12-12T18:33:01.583122+0100","flow_id":1826057200984484,"pcap_cnt":582,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63032,"proto":"UDP","dns":{"type":"answer","id":23228,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.615675+0100","flow_id":672016668386555,"pcap_cnt":601,"event_type":"dns","src_ip":"192.168.1.100","src_port":59408,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49452,"rrname":"makexotevyl.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:59.783119+0100","flow_id":2109452027903632,"pcap_cnt":492,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59176,"proto":"UDP","dns":{"type":"answer","id":32617,"rcode":"NXDOMAIN","rrname":"fodavibusim.eu"}}
{"timestamp":"2017-12-12T18:32:57.515388+0100","flow_id":1915572909038845,"pcap_cnt":238,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51047,"proto":"UDP","dns":{"type":"answer","id":40775,"rcode":"NXDOMAIN","rrname":"vojugycavov.eu"}}
{"timestamp":"2017-12-12T18:32:58.884580+0100","flow_id":2028219163898281,"pcap_cnt":377,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54186,"proto":"UDP","dns":{"type":"answer","id":23328,"rcode":"NXDOMAIN","rrname":"xudosorihug.eu"}}
{"timestamp":"2017-12-12T18:32:59.783119+0100","flow_id":2109452027903632,"pcap_cnt":492,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59176,"proto":"UDP","dns":{"type":"answer","id":32617,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.668627+0100","flow_id":672016668386555,"pcap_cnt":624,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59408,"proto":"UDP","dns":{"type":"answer","id":49452,"rcode":"NXDOMAIN","rrname":"makexotevyl.eu"}}
{"timestamp":"2017-12-12T18:32:35.724073+0100","flow_id":1660342328574035,"pcap_cnt":92,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54319,"proto":"UDP","dns":{"type":"answer","id":23024,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.668627+0100","flow_id":672016668386555,"pcap_cnt":624,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59408,"proto":"UDP","dns":{"type":"answer","id":49452,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.528671+0100","flow_id":551540688359711,"pcap_cnt":738,"event_type":"dns","src_ip":"192.168.1.100","src_port":56181,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41491,"rrname":"tupikogyqoz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.845177+0100","flow_id":109945035613561,"pcap_cnt":356,"event_type":"dns","src_ip":"192.168.1.100","src_port":52899,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18566,"rrname":"nomojatudyn.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:36.578172+0100","flow_id":640665552935351,"pcap_cnt":123,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54473,"proto":"UDP","dns":{"type":"answer","id":4421,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.420876+0100","flow_id":1202114417093644,"pcap_cnt":685,"event_type":"dns","src_ip":"192.168.1.100","src_port":58413,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25560,"rrname":"cilynitiseg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.542572+0100","flow_id":1960083803046143,"pcap_cnt":748,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61997,"proto":"UDP","dns":{"type":"answer","id":53743,"rcode":"NXDOMAIN","rrname":"lyrelydevac.eu"}}
{"timestamp":"2017-12-12T18:32:59.575748+0100","flow_id":2156870614263572,"pcap_cnt":408,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59742,"proto":"UDP","dns":{"type":"answer","id":19096,"rcode":"NXDOMAIN","rrname":"kepolonavit.eu"}}
{"timestamp":"2017-12-12T18:33:04.691601+0100","flow_id":1639634145694437,"pcap_cnt":897,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60108,"proto":"UDP","dns":{"type":"answer","id":6912,"rcode":"NXDOMAIN","rrname":"fogytubuwyx.eu"}}
{"timestamp":"2017-12-12T18:33:03.542572+0100","flow_id":1960083803046143,"pcap_cnt":748,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61997,"proto":"UDP","dns":{"type":"answer","id":53743,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:59.575748+0100","flow_id":2156870614263572,"pcap_cnt":408,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59742,"proto":"UDP","dns":{"type":"answer","id":19096,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.691601+0100","flow_id":1639634145694437,"pcap_cnt":897,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60108,"proto":"UDP","dns":{"type":"answer","id":6912,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.624489+0100","flow_id":1105582879204278,"pcap_cnt":284,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54354,"proto":"UDP","dns":{"type":"answer","id":59839,"rcode":"NXDOMAIN","rrname":"jepycudijyq.eu"}}
{"timestamp":"2017-12-12T18:33:06.684750+0100","flow_id":1086216872309660,"pcap_cnt":1067,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57974,"proto":"UDP","dns":{"type":"answer","id":26692,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.694027+0100","flow_id":2019618492309075,"pcap_cnt":899,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63838,"proto":"UDP","dns":{"type":"answer","id":5958,"rcode":"NXDOMAIN","rrname":"gadinubidyp.eu"}}
{"timestamp":"2017-12-12T18:32:59.767307+0100","flow_id":2116351892913821,"pcap_cnt":480,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57989,"proto":"UDP","dns":{"type":"answer","id":11813,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.694027+0100","flow_id":2019618492309075,"pcap_cnt":899,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63838,"proto":"UDP","dns":{"type":"answer","id":5958,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.863358+0100","flow_id":1059725513993342,"pcap_cnt":1123,"event_type":"dns","src_ip":"192.168.1.100","src_port":65001,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47393,"rrname":"xuqiloxyvyf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:36.583806+0100","flow_id":1236684607058310,"pcap_cnt":126,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60371,"proto":"UDP","dns":{"type":"answer","id":50425,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.739796+0100","flow_id":1681623891540228,"pcap_cnt":106,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59267,"proto":"UDP","dns":{"type":"answer","id":65016,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.710670+0100","flow_id":1368535809972238,"pcap_cnt":910,"event_type":"dns","src_ip":"192.168.1.100","src_port":57783,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25981,"rrname":"tuniqigison.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:56.901107+0100","flow_id":511556689903603,"pcap_cnt":166,"event_type":"dns","src_ip":"192.168.1.100","src_port":64404,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":22434,"rrname":"lykemujebeq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:01.635206+0100","flow_id":1790726800014814,"pcap_cnt":611,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55898,"proto":"UDP","dns":{"type":"answer","id":2,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.556055+0100","flow_id":1116193596406807,"pcap_cnt":821,"event_type":"dns","src_ip":"192.168.1.100","src_port":55399,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":10362,"rrname":"foqinywenec.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.550002+0100","flow_id":511556689903603,"pcap_cnt":269,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64404,"proto":"UDP","dns":{"type":"answer","id":22434,"rcode":"NXDOMAIN","rrname":"lykemujebeq.eu"}}
{"timestamp":"2017-12-12T18:32:35.727710+0100","flow_id":537073089190558,"pcap_cnt":96,"event_type":"dns","src_ip":"192.168.1.100","src_port":55773,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60450,"rrname":"xutekidywyp.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.438899+0100","flow_id":2180795729949299,"pcap_cnt":692,"event_type":"dns","src_ip":"192.168.1.100","src_port":54516,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":58626,"rrname":"nofagoteveg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.525236+0100","flow_id":1512009192375220,"pcap_cnt":736,"event_type":"dns","src_ip":"192.168.1.100","src_port":62683,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":32618,"rrname":"rydyvigecot.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:00.369305+0100","flow_id":454566769040694,"pcap_cnt":523,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56721,"proto":"UDP","dns":{"type":"answer","id":55639,"rcode":"NXDOMAIN","rrname":"xuqaxiraxyx.eu"}}
{"timestamp":"2017-12-12T18:33:03.505619+0100","flow_id":2180795729949299,"pcap_cnt":723,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54516,"proto":"UDP","dns":{"type":"answer","id":58626,"rcode":"NXDOMAIN","rrname":"nofagoteveg.eu"}}
{"timestamp":"2017-12-12T18:33:00.318368+0100","flow_id":1328386455355081,"pcap_cnt":514,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58046,"proto":"UDP","dns":{"type":"answer","id":44471,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:00.369305+0100","flow_id":454566769040694,"pcap_cnt":523,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56721,"proto":"UDP","dns":{"type":"answer","id":55639,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:59.772079+0100","flow_id":1946335612487663,"pcap_cnt":485,"event_type":"dns","src_ip":"192.168.1.100","src_port":53983,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":52312,"rrname":"qedefulywoh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.912670+0100","flow_id":44240625917181,"pcap_cnt":395,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53179,"proto":"UDP","dns":{"type":"answer","id":25336,"rcode":"NXDOMAIN","rrname":"tufigolidat.eu"}}
{"timestamp":"2017-12-12T18:33:01.669172+0100","flow_id":1225564938384884,"pcap_cnt":625,"event_type":"dns","src_ip":"192.168.1.100","src_port":57208,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13038,"rrname":"fodihywalyj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.410141+0100","flow_id":454334840587590,"pcap_cnt":213,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55088,"proto":"UDP","dns":{"type":"answer","id":36016,"rcode":"NXDOMAIN","rrname":"nomebemenid.eu"}}
{"timestamp":"2017-12-12T18:32:58.912670+0100","flow_id":44240625917181,"pcap_cnt":395,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53179,"proto":"UDP","dns":{"type":"answer","id":25336,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:57.515388+0100","flow_id":1915572909038845,"pcap_cnt":238,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51047,"proto":"UDP","dns":{"type":"answer","id":40775,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.670700+0100","flow_id":767910403193836,"pcap_cnt":626,"event_type":"dns","src_ip":"192.168.1.100","src_port":52865,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19286,"rrname":"vowagufifam.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.884580+0100","flow_id":2028219163898281,"pcap_cnt":377,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54186,"proto":"UDP","dns":{"type":"answer","id":23328,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:59.738996+0100","flow_id":1596046669727412,"pcap_cnt":469,"event_type":"dns","src_ip":"192.168.1.100","src_port":60597,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44758,"rrname":"digowibymih.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.727689+0100","flow_id":1000418457452847,"pcap_cnt":247,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60266,"proto":"UDP","dns":{"type":"answer","id":1615,"rcode":"NXDOMAIN","rrname":"disafuwokis.eu"}}
{"timestamp":"2017-12-12T18:32:59.603524+0100","flow_id":288396631815556,"pcap_cnt":414,"event_type":"dns","src_ip":"192.168.1.100","src_port":60588,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":54826,"rrname":"tujajepifyv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.727689+0100","flow_id":1000418457452847,"pcap_cnt":247,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60266,"proto":"UDP","dns":{"type":"answer","id":1615,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:59.784935+0100","flow_id":1596046669727412,"pcap_cnt":493,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60597,"proto":"UDP","dns":{"type":"answer","id":44758,"rcode":"NXDOMAIN","rrname":"digowibymih.eu"}}
{"timestamp":"2017-12-12T18:33:03.519676+0100","flow_id":201099274350076,"pcap_cnt":733,"event_type":"dns","src_ip":"192.168.1.100","src_port":54142,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50407,"rrname":"qegarigohox.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:59.655185+0100","flow_id":288396631815556,"pcap_cnt":430,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60588,"proto":"UDP","dns":{"type":"answer","id":54826,"rcode":"NXDOMAIN","rrname":"tujajepifyv.eu"}}
{"timestamp":"2017-12-12T18:32:58.927483+0100","flow_id":376430576405388,"pcap_cnt":405,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59404,"proto":"UDP","dns":{"type":"answer","id":58168,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:59.673486+0100","flow_id":1856055399892686,"pcap_cnt":442,"event_type":"dns","src_ip":"192.168.1.100","src_port":52725,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":58384,"rrname":"rynenogupez.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:59.655185+0100","flow_id":288396631815556,"pcap_cnt":430,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60588,"proto":"UDP","dns":{"type":"answer","id":54826,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.448767+0100","flow_id":1527836146866664,"pcap_cnt":803,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60252,"proto":"UDP","dns":{"type":"answer","id":51579,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.838802+0100","flow_id":31091583536274,"pcap_cnt":349,"event_type":"dns","src_ip":"192.168.1.100","src_port":59043,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49363,"rrname":"vonezukemac.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:59.641899+0100","flow_id":1503137937214315,"pcap_cnt":423,"event_type":"dns","src_ip":"192.168.1.100","src_port":63370,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":52870,"rrname":"mamyfycoliq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:59.704737+0100","flow_id":1902733104496865,"pcap_cnt":452,"event_type":"dns","src_ip":"192.168.1.100","src_port":53537,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":65381,"rrname":"keretejuraw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.498153+0100","flow_id":919342360336873,"pcap_cnt":810,"event_type":"dns","src_ip":"192.168.1.100","src_port":57613,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41793,"rrname":"citydekohiw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.580681+0100","flow_id":551540688359711,"pcap_cnt":773,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56181,"proto":"UDP","dns":{"type":"answer","id":41491,"rcode":"NXDOMAIN","rrname":"tupikogyqoz.eu"}}
{"timestamp":"2017-12-12T18:32:58.899671+0100","flow_id":458354930137229,"pcap_cnt":386,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49496,"proto":"UDP","dns":{"type":"answer","id":16628,"rcode":"NXDOMAIN","rrname":"kefaxyjebav.eu"}}
{"timestamp":"2017-12-12T18:32:58.624489+0100","flow_id":1105582879204278,"pcap_cnt":284,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54354,"proto":"UDP","dns":{"type":"answer","id":59839,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.466180+0100","flow_id":1202114417093644,"pcap_cnt":705,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58413,"proto":"UDP","dns":{"type":"answer","id":25560,"rcode":"NXDOMAIN","rrname":"cilynitiseg.eu"}}
{"timestamp":"2017-12-12T18:33:03.482497+0100","flow_id":1773375132228801,"pcap_cnt":709,"event_type":"dns","src_ip":"192.168.1.100","src_port":63192,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40170,"rrname":"gahyfesyqad.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:59.793500+0100","flow_id":2134167417199516,"pcap_cnt":496,"event_type":"dns","src_ip":"192.168.1.100","src_port":61585,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31952,"rrname":"ryqyqequsud.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.651358+0100","flow_id":1781389540819537,"pcap_cnt":241,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55619,"proto":"UDP","dns":{"type":"answer","id":25431,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"whatsex.es","rrtype":"NS","ttl":50932,"rdata":"ns-697.awsdns-23.net"}}
{"timestamp":"2017-12-12T18:33:03.516886+0100","flow_id":553363902029380,"pcap_cnt":731,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59079,"proto":"UDP","dns":{"type":"answer","id":21202,"rcode":"NXDOMAIN","rrname":"qetunopifef.eu"}}
{"timestamp":"2017-12-12T18:32:57.651358+0100","flow_id":1781389540819537,"pcap_cnt":241,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55619,"proto":"UDP","dns":{"type":"answer","id":25431,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"whatsex.es","rrtype":"NS","ttl":50932,"rdata":"ns-288.awsdns-36.com"}}
{"timestamp":"2017-12-12T18:32:59.589480+0100","flow_id":1081458047997814,"pcap_cnt":411,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57630,"proto":"UDP","dns":{"type":"answer","id":11776,"rcode":"NXDOMAIN","rrname":"cinivamolil.eu"}}
{"timestamp":"2017-12-12T18:33:03.516886+0100","flow_id":553363902029380,"pcap_cnt":731,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59079,"proto":"UDP","dns":{"type":"answer","id":21202,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.750446+0100","flow_id":2231963820949978,"pcap_cnt":112,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61909,"proto":"UDP","dns":{"type":"answer","id":45915,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"tucyguqaciq.eu","rrtype":"A","ttl":300,"rdata":"23.253.126.58"}}
{"timestamp":"2017-12-12T18:32:59.589480+0100","flow_id":1081458047997814,"pcap_cnt":411,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57630,"proto":"UDP","dns":{"type":"answer","id":11776,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.550002+0100","flow_id":511556689903603,"pcap_cnt":269,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64404,"proto":"UDP","dns":{"type":"answer","id":22434,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.539432+0100","flow_id":115706734525224,"pcap_cnt":745,"event_type":"dns","src_ip":"192.168.1.100","src_port":63501,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":3798,"rrname":"magusecutuk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.606179+0100","flow_id":1116193596406807,"pcap_cnt":833,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55399,"proto":"UDP","dns":{"type":"answer","id":10362,"rcode":"NXDOMAIN","rrname":"foqinywenec.eu"}}
{"timestamp":"2017-12-12T18:33:02.573271+0100","flow_id":573739226711359,"pcap_cnt":667,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53653,"proto":"UDP","dns":{"type":"answer","id":17625,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:59.834892+0100","flow_id":1561555934887244,"pcap_cnt":513,"event_type":"dns","src_ip":"192.168.1.100","src_port":53492,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35464,"rrname":"cinyhotyqyt.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.575134+0100","flow_id":1512009192375220,"pcap_cnt":770,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62683,"proto":"UDP","dns":{"type":"answer","id":32618,"rcode":"NXDOMAIN","rrname":"rydyvigecot.eu"}}
{"timestamp":"2017-12-12T18:33:03.505619+0100","flow_id":2180795729949299,"pcap_cnt":723,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54516,"proto":"UDP","dns":{"type":"answer","id":58626,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.575134+0100","flow_id":1512009192375220,"pcap_cnt":770,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62683,"proto":"UDP","dns":{"type":"answer","id":32618,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.446886+0100","flow_id":385052723630502,"pcap_cnt":696,"event_type":"dns","src_ip":"192.168.1.100","src_port":58628,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":21035,"rrname":"masytoturen.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:01.600371+0100","flow_id":1283534111975019,"pcap_cnt":590,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57219,"proto":"UDP","dns":{"type":"answer","id":59035,"rcode":"NXDOMAIN","rrname":"ryhadyvigis.eu"}}
{"timestamp":"2017-12-12T18:33:04.632036+0100","flow_id":1590667223540964,"pcap_cnt":844,"event_type":"dns","src_ip":"192.168.1.100","src_port":61036,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":54994,"rrname":"vofapacebuv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.508487+0100","flow_id":1409574222414407,"pcap_cnt":725,"event_type":"dns","src_ip":"192.168.1.100","src_port":60029,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8771,"rrname":"makififupap.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.410141+0100","flow_id":454334840587590,"pcap_cnt":213,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55088,"proto":"UDP","dns":{"type":"answer","id":36016,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.679483+0100","flow_id":1590667223540964,"pcap_cnt":887,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61036,"proto":"UDP","dns":{"type":"answer","id":54994,"rcode":"NXDOMAIN","rrname":"vofapacebuv.eu"}}
{"timestamp":"2017-12-12T18:33:01.617696+0100","flow_id":713246206963182,"pcap_cnt":603,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55816,"proto":"UDP","dns":{"type":"answer","id":62502,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.715515+0100","flow_id":1225564938384884,"pcap_cnt":650,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57208,"proto":"UDP","dns":{"type":"answer","id":13038,"rcode":"NXDOMAIN","rrname":"fodihywalyj.eu"}}
{"timestamp":"2017-12-12T18:32:59.668402+0100","flow_id":713735833086022,"pcap_cnt":438,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53297,"proto":"UDP","dns":{"type":"answer","id":62010,"rcode":"NXDOMAIN","rrname":"disumesenyv.eu"}}
{"timestamp":"2017-12-12T18:33:01.715515+0100","flow_id":1225564938384884,"pcap_cnt":650,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57208,"proto":"UDP","dns":{"type":"answer","id":13038,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.634815+0100","flow_id":818593164799935,"pcap_cnt":610,"event_type":"dns","src_ip":"192.168.1.100","src_port":58587,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43437,"rrname":"rycuheqojyk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:59.820477+0100","flow_id":417819028849917,"pcap_cnt":509,"event_type":"dns","src_ip":"192.168.1.100","src_port":51715,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43044,"rrname":"gahocuwalyc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:59.668402+0100","flow_id":713735833086022,"pcap_cnt":438,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53297,"proto":"UDP","dns":{"type":"answer","id":62010,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:59.784935+0100","flow_id":1596046669727412,"pcap_cnt":493,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60597,"proto":"UDP","dns":{"type":"answer","id":44758,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:02.570041+0100","flow_id":767910403193836,"pcap_cnt":665,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52865,"proto":"UDP","dns":{"type":"answer","id":19286,"rcode":"NXDOMAIN","rrname":"vowagufifam.eu"}}
{"timestamp":"2017-12-12T18:33:03.570412+0100","flow_id":201099274350076,"pcap_cnt":766,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54142,"proto":"UDP","dns":{"type":"answer","id":50407,"rcode":"NXDOMAIN","rrname":"qegarigohox.eu"}}
{"timestamp":"2017-12-12T18:32:59.732871+0100","flow_id":474093837823687,"pcap_cnt":466,"event_type":"dns","src_ip":"192.168.1.100","src_port":52300,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45415,"rrname":"pujuduvaxim.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:59.687820+0100","flow_id":1879218158548464,"pcap_cnt":447,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57740,"proto":"UDP","dns":{"type":"answer","id":50848,"rcode":"NXDOMAIN","rrname":"noralycifok.eu"}}
{"timestamp":"2017-12-12T18:32:59.693228+0100","flow_id":1503137937214315,"pcap_cnt":448,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63370,"proto":"UDP","dns":{"type":"answer","id":52870,"rcode":"NXDOMAIN","rrname":"mamyfycoliq.eu"}}
{"timestamp":"2017-12-12T18:32:59.687820+0100","flow_id":1879218158548464,"pcap_cnt":447,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57740,"proto":"UDP","dns":{"type":"answer","id":50848,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:59.778331+0100","flow_id":474093837823687,"pcap_cnt":490,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52300,"proto":"UDP","dns":{"type":"answer","id":45415,"rcode":"NXDOMAIN","rrname":"pujuduvaxim.eu"}}
{"timestamp":"2017-12-12T18:32:59.693228+0100","flow_id":1503137937214315,"pcap_cnt":448,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63370,"proto":"UDP","dns":{"type":"answer","id":52870,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.580681+0100","flow_id":551540688359711,"pcap_cnt":773,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56181,"proto":"UDP","dns":{"type":"answer","id":41491,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:59.778331+0100","flow_id":474093837823687,"pcap_cnt":490,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52300,"proto":"UDP","dns":{"type":"answer","id":45415,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.564455+0100","flow_id":919342360336873,"pcap_cnt":823,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57613,"proto":"UDP","dns":{"type":"answer","id":41793,"rcode":"NXDOMAIN","rrname":"citydekohiw.eu"}}
{"timestamp":"2017-12-12T18:32:59.700120+0100","flow_id":392682732760792,"pcap_cnt":450,"event_type":"dns","src_ip":"192.168.1.100","src_port":64758,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":54101,"rrname":"gaduzehokar.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.415711+0100","flow_id":527007835183071,"pcap_cnt":683,"event_type":"dns","src_ip":"192.168.1.100","src_port":56395,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":46924,"rrname":"kemuxurohym.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.899671+0100","flow_id":458354930137229,"pcap_cnt":386,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49496,"proto":"UDP","dns":{"type":"answer","id":16628,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:59.748661+0100","flow_id":392682732760792,"pcap_cnt":472,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64758,"proto":"UDP","dns":{"type":"answer","id":54101,"rcode":"NXDOMAIN","rrname":"gaduzehokar.eu"}}
{"timestamp":"2017-12-12T18:33:03.466180+0100","flow_id":1202114417093644,"pcap_cnt":705,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58413,"proto":"UDP","dns":{"type":"answer","id":25560,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:59.748661+0100","flow_id":392682732760792,"pcap_cnt":472,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64758,"proto":"UDP","dns":{"type":"answer","id":54101,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.436670+0100","flow_id":2134167417199516,"pcap_cnt":542,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61585,"proto":"UDP","dns":{"type":"answer","id":31952,"rcode":"NXDOMAIN","rrname":"ryqyqequsud.eu"}}
{"timestamp":"2017-12-12T18:33:03.605447+0100","flow_id":1675797770222855,"pcap_cnt":785,"event_type":"dns","src_ip":"192.168.1.100","src_port":49497,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64575,"rrname":"jeledajifor.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:59.797120+0100","flow_id":537234152040896,"pcap_cnt":498,"event_type":"dns","src_ip":"192.168.1.100","src_port":61857,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37438,"rrname":"puvojyqevus.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.753430+0100","flow_id":1368535809972238,"pcap_cnt":917,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57783,"proto":"UDP","dns":{"type":"answer","id":25981,"rcode":"NXDOMAIN","rrname":"tuniqigison.eu"}}
{"timestamp":"2017-12-12T18:32:35.750446+0100","flow_id":2231963820949978,"pcap_cnt":112,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61909,"proto":"UDP","dns":{"type":"answer","id":45915,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"tucyguqaciq.eu","rrtype":"A","ttl":300,"rdata":"104.239.157.210"}}
{"timestamp":"2017-12-12T18:32:59.668294+0100","flow_id":1168302286779014,"pcap_cnt":437,"event_type":"dns","src_ip":"192.168.1.100","src_port":64990,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":46947,"rrname":"puzigagacal.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:59.819476+0100","flow_id":1464981447737620,"pcap_cnt":508,"event_type":"dns","src_ip":"192.168.1.100","src_port":54236,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33614,"rrname":"jefejurenyp.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.606179+0100","flow_id":1116193596406807,"pcap_cnt":833,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55399,"proto":"UDP","dns":{"type":"answer","id":10362,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.550971+0100","flow_id":1773375132228801,"pcap_cnt":756,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63192,"proto":"UDP","dns":{"type":"answer","id":40170,"rcode":"NXDOMAIN","rrname":"gahyfesyqad.eu"}}
{"timestamp":"2017-12-12T18:32:58.853747+0100","flow_id":1845214902355699,"pcap_cnt":362,"event_type":"dns","src_ip":"192.168.1.100","src_port":61309,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29622,"rrname":"ganofazigor.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:01.585122+0100","flow_id":2029995133103522,"pcap_cnt":583,"event_type":"dns","src_ip":"192.168.1.100","src_port":52934,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45177,"rrname":"vopejamogul.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.550971+0100","flow_id":1773375132228801,"pcap_cnt":756,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63192,"proto":"UDP","dns":{"type":"answer","id":40170,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.659420+0100","flow_id":1779061668974556,"pcap_cnt":867,"event_type":"dns","src_ip":"192.168.1.100","src_port":51509,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42997,"rrname":"cidufitojex.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.874522+0100","flow_id":1614180021588371,"pcap_cnt":371,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51431,"proto":"UDP","dns":{"type":"answer","id":61573,"rcode":"NXDOMAIN","rrname":"tupudyqusuj.eu"}}
{"timestamp":"2017-12-12T18:33:01.631509+0100","flow_id":2029995133103522,"pcap_cnt":608,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52934,"proto":"UDP","dns":{"type":"answer","id":45177,"rcode":"NXDOMAIN","rrname":"vopejamogul.eu"}}
{"timestamp":"2017-12-12T18:32:58.778760+0100","flow_id":376028996983679,"pcap_cnt":315,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50332,"proto":"UDP","dns":{"type":"answer","id":44936,"rcode":"NXDOMAIN","rrname":"lymosudyqym.eu"}}
{"timestamp":"2017-12-12T18:33:04.679483+0100","flow_id":1590667223540964,"pcap_cnt":887,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61036,"proto":"UDP","dns":{"type":"answer","id":54994,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.631509+0100","flow_id":2029995133103522,"pcap_cnt":608,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52934,"proto":"UDP","dns":{"type":"answer","id":45177,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.778760+0100","flow_id":376028996983679,"pcap_cnt":315,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50332,"proto":"UDP","dns":{"type":"answer","id":44936,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.510992+0100","flow_id":395238238571536,"pcap_cnt":728,"event_type":"dns","src_ip":"192.168.1.100","src_port":58957,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":12235,"rrname":"nozulufynax.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.553336+0100","flow_id":1229958690271608,"pcap_cnt":995,"event_type":"dns","src_ip":"192.168.1.100","src_port":64031,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6602,"rrname":"foqykasisof.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.915898+0100","flow_id":109945035613561,"pcap_cnt":397,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52899,"proto":"UDP","dns":{"type":"answer","id":18566,"rcode":"NXDOMAIN","rrname":"nomojatudyn.eu"}}
{"timestamp":"2017-12-12T18:33:03.544084+0100","flow_id":1145053629074772,"pcap_cnt":750,"event_type":"dns","src_ip":"192.168.1.100","src_port":58898,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35305,"rrname":"rytecyvaxuj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.585294+0100","flow_id":1269541108903502,"pcap_cnt":1012,"event_type":"dns","src_ip":"192.168.1.100","src_port":59236,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62391,"rrname":"purumulazux.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:01.464628+0100","flow_id":417819028849917,"pcap_cnt":546,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51715,"proto":"UDP","dns":{"type":"answer","id":43044,"rcode":"NXDOMAIN","rrname":"gahocuwalyc.eu"}}
{"timestamp":"2017-12-12T18:33:03.559282+0100","flow_id":395238238571536,"pcap_cnt":762,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58957,"proto":"UDP","dns":{"type":"answer","id":12235,"rcode":"NXDOMAIN","rrname":"nozulufynax.eu"}}
{"timestamp":"2017-12-12T18:33:02.570041+0100","flow_id":767910403193836,"pcap_cnt":665,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52865,"proto":"UDP","dns":{"type":"answer","id":19286,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.464628+0100","flow_id":417819028849917,"pcap_cnt":546,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51715,"proto":"UDP","dns":{"type":"answer","id":43044,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.570412+0100","flow_id":201099274350076,"pcap_cnt":766,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54142,"proto":"UDP","dns":{"type":"answer","id":50407,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:59.754250+0100","flow_id":1203508133738981,"pcap_cnt":474,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55081,"proto":"UDP","dns":{"type":"answer","id":11267,"rcode":"NXDOMAIN","rrname":"jepogejebak.eu"}}
{"timestamp":"2017-12-12T18:33:01.718641+0100","flow_id":1049505639036721,"pcap_cnt":651,"event_type":"dns","src_ip":"192.168.1.100","src_port":53792,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26514,"rrname":"xukorejymod.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:59.763616+0100","flow_id":221300652746464,"pcap_cnt":475,"event_type":"dns","src_ip":"192.168.1.100","src_port":58481,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":32463,"rrname":"gatykibojig.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.705773+0100","flow_id":1512490228827373,"pcap_cnt":907,"event_type":"dns","src_ip":"192.168.1.100","src_port":51899,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51865,"rrname":"lymutinutyz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:59.722158+0100","flow_id":1856055399892686,"pcap_cnt":462,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52725,"proto":"UDP","dns":{"type":"answer","id":58384,"rcode":"NXDOMAIN","rrname":"rynenogupez.eu"}}
{"timestamp":"2017-12-12T18:33:01.818784+0100","flow_id":1049505639036721,"pcap_cnt":658,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53792,"proto":"UDP","dns":{"type":"answer","id":26514,"rcode":"NXDOMAIN","rrname":"xukorejymod.eu"}}
{"timestamp":"2017-12-12T18:33:04.548763+0100","flow_id":851638643351451,"pcap_cnt":817,"event_type":"dns","src_ip":"192.168.1.100","src_port":58458,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41378,"rrname":"dirutewaled.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.749756+0100","flow_id":1512490228827373,"pcap_cnt":915,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51899,"proto":"UDP","dns":{"type":"answer","id":51865,"rcode":"NXDOMAIN","rrname":"lymutinutyz.eu"}}
{"timestamp":"2017-12-12T18:33:01.818784+0100","flow_id":1049505639036721,"pcap_cnt":658,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53792,"proto":"UDP","dns":{"type":"answer","id":26514,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.564455+0100","flow_id":919342360336873,"pcap_cnt":823,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57613,"proto":"UDP","dns":{"type":"answer","id":41793,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.749756+0100","flow_id":1512490228827373,"pcap_cnt":915,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51899,"proto":"UDP","dns":{"type":"answer","id":51865,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.614777+0100","flow_id":851638643351451,"pcap_cnt":839,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58458,"proto":"UDP","dns":{"type":"answer","id":41378,"rcode":"NXDOMAIN","rrname":"dirutewaled.eu"}}
{"timestamp":"2017-12-12T18:32:58.901376+0100","flow_id":229484712869485,"pcap_cnt":387,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61322,"proto":"UDP","dns":{"type":"answer","id":27780,"rcode":"NXDOMAIN","rrname":"lysygyjytad.eu"}}
{"timestamp":"2017-12-12T18:32:59.806144+0100","flow_id":670670196002048,"pcap_cnt":500,"event_type":"dns","src_ip":"192.168.1.100","src_port":61143,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48348,"rrname":"tuwobiloloh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.663418+0100","flow_id":1536580700348282,"pcap_cnt":871,"event_type":"dns","src_ip":"192.168.1.100","src_port":64582,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34294,"rrname":"qebifopalaz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.901376+0100","flow_id":229484712869485,"pcap_cnt":387,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61322,"proto":"UDP","dns":{"type":"answer","id":27780,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.456589+0100","flow_id":1675797770222855,"pcap_cnt":804,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49497,"proto":"UDP","dns":{"type":"answer","id":64575,"rcode":"NXDOMAIN","rrname":"jeledajifor.eu"}}
{"timestamp":"2017-12-12T18:33:04.753430+0100","flow_id":1368535809972238,"pcap_cnt":917,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57783,"proto":"UDP","dns":{"type":"answer","id":25981,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.905776+0100","flow_id":31091583536274,"pcap_cnt":390,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59043,"proto":"UDP","dns":{"type":"answer","id":49363,"rcode":"NXDOMAIN","rrname":"vonezukemac.eu"}}
{"timestamp":"2017-12-12T18:32:35.750446+0100","flow_id":2231963820949978,"pcap_cnt":112,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61909,"proto":"UDP","dns":{"type":"answer","id":45915,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"tucyguqaciq.eu","rrtype":"NS","ttl":7384,"rdata":"ns1.arbor-sinkhole.net"}}
{"timestamp":"2017-12-12T18:33:05.517205+0100","flow_id":1477902857158751,"pcap_cnt":924,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64583,"proto":"UDP","dns":{"type":"answer","id":62197,"rcode":"NXDOMAIN","rrname":"foderasyqaw.eu"}}
{"timestamp":"2017-12-12T18:33:01.477648+0100","flow_id":1561555934887244,"pcap_cnt":548,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53492,"proto":"UDP","dns":{"type":"answer","id":35464,"rcode":"NXDOMAIN","rrname":"cinyhotyqyt.eu"}}
{"timestamp":"2017-12-12T18:32:35.750446+0100","flow_id":2231963820949978,"pcap_cnt":112,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61909,"proto":"UDP","dns":{"type":"answer","id":45915,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"tucyguqaciq.eu","rrtype":"NS","ttl":7384,"rdata":"ns1.asertdns.com"}}
{"timestamp":"2017-12-12T18:33:01.477648+0100","flow_id":1561555934887244,"pcap_cnt":548,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53492,"proto":"UDP","dns":{"type":"answer","id":35464,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:00.323747+0100","flow_id":1946335612487663,"pcap_cnt":515,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53983,"proto":"UDP","dns":{"type":"answer","id":52312,"rcode":"NXDOMAIN","rrname":"qedefulywoh.eu"}}
{"timestamp":"2017-12-12T18:33:04.546733+0100","flow_id":1892783813056429,"pcap_cnt":816,"event_type":"dns","src_ip":"192.168.1.100","src_port":54159,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37946,"rrname":"qexusulakiq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:00.323747+0100","flow_id":1946335612487663,"pcap_cnt":515,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53983,"proto":"UDP","dns":{"type":"answer","id":52312,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.571216+0100","flow_id":901806008809296,"pcap_cnt":767,"event_type":"dns","src_ip":"192.168.1.100","src_port":50622,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60697,"rrname":"divamubojum.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.874522+0100","flow_id":1614180021588371,"pcap_cnt":371,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51431,"proto":"UDP","dns":{"type":"answer","id":61573,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.662720+0100","flow_id":1845592859679936,"pcap_cnt":618,"event_type":"dns","src_ip":"192.168.1.100","src_port":52354,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33680,"rrname":"xudunudeveq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.513413+0100","flow_id":385052723630502,"pcap_cnt":729,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58628,"proto":"UDP","dns":{"type":"answer","id":21035,"rcode":"NXDOMAIN","rrname":"masytoturen.eu"}}
{"timestamp":"2017-12-12T18:33:04.710868+0100","flow_id":1779061668974556,"pcap_cnt":911,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51509,"proto":"UDP","dns":{"type":"answer","id":42997,"rcode":"NXDOMAIN","rrname":"cidufitojex.eu"}}
{"timestamp":"2017-12-12T18:32:58.620810+0100","flow_id":769104403814030,"pcap_cnt":283,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52238,"proto":"UDP","dns":{"type":"answer","id":27064,"rcode":"NXDOMAIN","rrname":"gadaqusupyj.eu"}}
{"timestamp":"2017-12-12T18:32:58.924457+0100","flow_id":1845214902355699,"pcap_cnt":403,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61309,"proto":"UDP","dns":{"type":"answer","id":29622,"rcode":"NXDOMAIN","rrname":"ganofazigor.eu"}}
{"timestamp":"2017-12-12T18:33:04.710868+0100","flow_id":1779061668974556,"pcap_cnt":911,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51509,"proto":"UDP","dns":{"type":"answer","id":42997,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.620810+0100","flow_id":769104403814030,"pcap_cnt":283,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52238,"proto":"UDP","dns":{"type":"answer","id":27064,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.924457+0100","flow_id":1845214902355699,"pcap_cnt":403,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61309,"proto":"UDP","dns":{"type":"answer","id":29622,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.573067+0100","flow_id":1033251335486161,"pcap_cnt":826,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60710,"proto":"UDP","dns":{"type":"answer","id":60026,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.468890+0100","flow_id":1631538132428698,"pcap_cnt":952,"event_type":"dns","src_ip":"192.168.1.100","src_port":51376,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":21175,"rrname":"gahoqohofib.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.559282+0100","flow_id":395238238571536,"pcap_cnt":762,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58957,"proto":"UDP","dns":{"type":"answer","id":12235,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:59.562048+0100","flow_id":1516254767279011,"pcap_cnt":407,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65391,"proto":"UDP","dns":{"type":"answer","id":45460,"rcode":"NXDOMAIN","rrname":"gaherobusit.eu"}}
{"timestamp":"2017-12-12T18:33:04.541526+0100","flow_id":1776884120568662,"pcap_cnt":815,"event_type":"dns","src_ip":"192.168.1.100","src_port":65503,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":52420,"rrname":"mavejykidij.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:59.562048+0100","flow_id":1516254767279011,"pcap_cnt":407,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65391,"proto":"UDP","dns":{"type":"answer","id":45460,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:59.809169+0100","flow_id":221300652746464,"pcap_cnt":503,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58481,"proto":"UDP","dns":{"type":"answer","id":32463,"rcode":"NXDOMAIN","rrname":"gatykibojig.eu"}}
{"timestamp":"2017-12-12T18:33:04.608359+0100","flow_id":1776884120568662,"pcap_cnt":835,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65503,"proto":"UDP","dns":{"type":"answer","id":52420,"rcode":"NXDOMAIN","rrname":"mavejykidij.eu"}}
{"timestamp":"2017-12-12T18:32:59.722158+0100","flow_id":1856055399892686,"pcap_cnt":462,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52725,"proto":"UDP","dns":{"type":"answer","id":58384,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.588026+0100","flow_id":1760243269262208,"pcap_cnt":276,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50362,"proto":"UDP","dns":{"type":"answer","id":64807,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.767019+0100","flow_id":1364724026094635,"pcap_cnt":309,"event_type":"dns","src_ip":"192.168.1.100","src_port":57980,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64057,"rrname":"cicucifokym.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.454542+0100","flow_id":1238116980486030,"pcap_cnt":700,"event_type":"dns","src_ip":"192.168.1.100","src_port":60509,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31798,"rrname":"ryqozapaleb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.509608+0100","flow_id":1059725513993342,"pcap_cnt":1214,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65001,"proto":"UDP","dns":{"type":"answer","id":47393,"rcode":"NXDOMAIN","rrname":"xuqiloxyvyf.eu"}}
{"timestamp":"2017-12-12T18:32:58.746134+0100","flow_id":1011441491141270,"pcap_cnt":301,"event_type":"dns","src_ip":"192.168.1.100","src_port":55187,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11237,"rrname":"vocakemenir.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.461952+0100","flow_id":527007835183071,"pcap_cnt":702,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56395,"proto":"UDP","dns":{"type":"answer","id":46924,"rcode":"NXDOMAIN","rrname":"kemuxurohym.eu"}}
{"timestamp":"2017-12-12T18:33:06.769599+0100","flow_id":155349282897471,"pcap_cnt":1090,"event_type":"dns","src_ip":"192.168.1.100","src_port":51108,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6633,"rrname":"masygekevuq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.651358+0100","flow_id":1781389540819537,"pcap_cnt":241,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55619,"proto":"UDP","dns":{"type":"answer","id":25431,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"whatsex.es","rrtype":"NS","ttl":50932,"rdata":"ns-1415.awsdns-48.org"}}
{"timestamp":"2017-12-12T18:33:01.436670+0100","flow_id":2134167417199516,"pcap_cnt":542,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61585,"proto":"UDP","dns":{"type":"answer","id":31952,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.821203+0100","flow_id":863402558392275,"pcap_cnt":337,"event_type":"dns","src_ip":"192.168.1.100","src_port":60259,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64813,"rrname":"lygujirupum.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.669833+0100","flow_id":843957094332553,"pcap_cnt":878,"event_type":"dns","src_ip":"192.168.1.100","src_port":63142,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":61947,"rrname":"pujulapohar.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.456589+0100","flow_id":1675797770222855,"pcap_cnt":804,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49497,"proto":"UDP","dns":{"type":"answer","id":64575,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.749913+0100","flow_id":435621668221273,"pcap_cnt":303,"event_type":"dns","src_ip":"192.168.1.100","src_port":62179,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31071,"rrname":"nozydemutik.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.905776+0100","flow_id":31091583536274,"pcap_cnt":390,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59043,"proto":"UDP","dns":{"type":"answer","id":49363,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:35.730504+0100","flow_id":1813966866294152,"pcap_cnt":98,"event_type":"dns","src_ip":"192.168.1.100","src_port":63575,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":32565,"rrname":"fobonobaxog.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.699101+0100","flow_id":869074063108829,"pcap_cnt":903,"event_type":"dns","src_ip":"192.168.1.100","src_port":58020,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":15110,"rrname":"ryqudigyqog.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.795777+0100","flow_id":435621668221273,"pcap_cnt":317,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62179,"proto":"UDP","dns":{"type":"answer","id":31071,"rcode":"NXDOMAIN","rrname":"nozydemutik.eu"}}
{"timestamp":"2017-12-12T18:32:59.587852+0100","flow_id":2120507273662203,"pcap_cnt":410,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52288,"proto":"UDP","dns":{"type":"answer","id":39078,"rcode":"NXDOMAIN","rrname":"xuquranifir.eu"}}
{"timestamp":"2017-12-12T18:33:05.508986+0100","flow_id":1536580700348282,"pcap_cnt":918,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64582,"proto":"UDP","dns":{"type":"answer","id":34294,"rcode":"NXDOMAIN","rrname":"qebifopalaz.eu"}}
{"timestamp":"2017-12-12T18:33:01.600371+0100","flow_id":1283534111975019,"pcap_cnt":590,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57219,"proto":"UDP","dns":{"type":"answer","id":59035,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:59.587852+0100","flow_id":2120507273662203,"pcap_cnt":410,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52288,"proto":"UDP","dns":{"type":"answer","id":39078,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.665049+0100","flow_id":2089993678693849,"pcap_cnt":620,"event_type":"dns","src_ip":"192.168.1.100","src_port":64388,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":15996,"rrname":"kejogydideq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.513413+0100","flow_id":385052723630502,"pcap_cnt":729,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58628,"proto":"UDP","dns":{"type":"answer","id":21035,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:59.623050+0100","flow_id":844266331668938,"pcap_cnt":420,"event_type":"dns","src_ip":"192.168.1.100","src_port":57884,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29424,"rrname":"gaqehysohec.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:01.637154+0100","flow_id":1849262909274338,"pcap_cnt":612,"event_type":"dns","src_ip":"192.168.1.100","src_port":50689,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53031,"rrname":"fobatesohek.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.664835+0100","flow_id":1210768775849219,"pcap_cnt":289,"event_type":"dns","src_ip":"192.168.1.100","src_port":57705,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63639,"rrname":"puvybivihox.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:59.676030+0100","flow_id":844266331668938,"pcap_cnt":443,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57884,"proto":"UDP","dns":{"type":"answer","id":29424,"rcode":"NXDOMAIN","rrname":"gaqehysohec.eu"}}
{"timestamp":"2017-12-12T18:32:58.798656+0100","flow_id":473851172106176,"pcap_cnt":318,"event_type":"dns","src_ip":"192.168.1.100","src_port":64358,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29202,"rrname":"rytahagemeg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:01.666379+0100","flow_id":461045727308555,"pcap_cnt":621,"event_type":"dns","src_ip":"192.168.1.100","src_port":57520,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5369,"rrname":"jeluzydyqej.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.915898+0100","flow_id":109945035613561,"pcap_cnt":397,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52899,"proto":"UDP","dns":{"type":"answer","id":18566,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.650398+0100","flow_id":1676716892941470,"pcap_cnt":286,"event_type":"dns","src_ip":"192.168.1.100","src_port":54165,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":20391,"rrname":"qetuluvolos.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.600005+0100","flow_id":1229958690271608,"pcap_cnt":1027,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64031,"proto":"UDP","dns":{"type":"answer","id":6602,"rcode":"NXDOMAIN","rrname":"foqykasisof.eu"}}
{"timestamp":"2017-12-12T18:33:01.687103+0100","flow_id":818593164799935,"pcap_cnt":637,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58587,"proto":"UDP","dns":{"type":"answer","id":43437,"rcode":"NXDOMAIN","rrname":"rycuheqojyk.eu"}}
{"timestamp":"2017-12-12T18:32:59.645823+0100","flow_id":2015845363210943,"pcap_cnt":426,"event_type":"dns","src_ip":"192.168.1.100","src_port":60373,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":15221,"rrname":"lyxaxududes.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.750523+0100","flow_id":1676716892941470,"pcap_cnt":304,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54165,"proto":"UDP","dns":{"type":"answer","id":20391,"rcode":"NXDOMAIN","rrname":"qetuluvolos.eu"}}
{"timestamp":"2017-12-12T18:33:06.600005+0100","flow_id":1229958690271608,"pcap_cnt":1027,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64031,"proto":"UDP","dns":{"type":"answer","id":6602,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.520684+0100","flow_id":1631538132428698,"pcap_cnt":979,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51376,"proto":"UDP","dns":{"type":"answer","id":21175,"rcode":"NXDOMAIN","rrname":"gahoqohofib.eu"}}
{"timestamp":"2017-12-12T18:33:03.590334+0100","flow_id":1145053629074772,"pcap_cnt":779,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58898,"proto":"UDP","dns":{"type":"answer","id":35305,"rcode":"NXDOMAIN","rrname":"rytecyvaxuj.eu"}}
{"timestamp":"2017-12-12T18:32:59.809169+0100","flow_id":221300652746464,"pcap_cnt":503,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58481,"proto":"UDP","dns":{"type":"answer","id":32463,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.608359+0100","flow_id":1776884120568662,"pcap_cnt":835,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65503,"proto":"UDP","dns":{"type":"answer","id":52420,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.621010+0100","flow_id":1538341636962770,"pcap_cnt":841,"event_type":"dns","src_ip":"192.168.1.100","src_port":53849,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":61394,"rrname":"kevopoxecun.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.596176+0100","flow_id":18406397974736,"pcap_cnt":829,"event_type":"dns","src_ip":"192.168.1.100","src_port":53528,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8560,"rrname":"ganazywutes.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:59.751919+0100","flow_id":1902733104496865,"pcap_cnt":473,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53537,"proto":"UDP","dns":{"type":"answer","id":65381,"rcode":"NXDOMAIN","rrname":"keretejuraw.eu"}}
{"timestamp":"2017-12-12T18:33:06.543756+0100","flow_id":929865030323212,"pcap_cnt":986,"event_type":"dns","src_ip":"192.168.1.100","src_port":54318,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44613,"rrname":"vocijekyqiv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.812914+0100","flow_id":1558908087461746,"pcap_cnt":329,"event_type":"dns","src_ip":"192.168.1.100","src_port":51050,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":32378,"rrname":"dimevuwevuj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:59.751919+0100","flow_id":1902733104496865,"pcap_cnt":473,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53537,"proto":"UDP","dns":{"type":"answer","id":65381,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.589477+0100","flow_id":929865030323212,"pcap_cnt":1015,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54318,"proto":"UDP","dns":{"type":"answer","id":44613,"rcode":"NXDOMAIN","rrname":"vocijekyqiv.eu"}}
{"timestamp":"2017-12-12T18:33:08.509608+0100","flow_id":1059725513993342,"pcap_cnt":1214,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65001,"proto":"UDP","dns":{"type":"answer","id":47393,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.589477+0100","flow_id":929865030323212,"pcap_cnt":1015,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54318,"proto":"UDP","dns":{"type":"answer","id":44613,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:59.766105+0100","flow_id":297274329247897,"pcap_cnt":478,"event_type":"dns","src_ip":"192.168.1.100","src_port":52272,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38319,"rrname":"kemawonywig.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:00.347403+0100","flow_id":670670196002048,"pcap_cnt":520,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61143,"proto":"UDP","dns":{"type":"answer","id":48348,"rcode":"NXDOMAIN","rrname":"tuwobiloloh.eu"}}
{"timestamp":"2017-12-12T18:33:06.792496+0100","flow_id":223123866785712,"pcap_cnt":1094,"event_type":"dns","src_ip":"192.168.1.100","src_port":49626,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":16384,"rrname":"lyxilunogem.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:01.594047+0100","flow_id":2117829361733759,"pcap_cnt":588,"event_type":"dns","src_ip":"192.168.1.100","src_port":50973,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27486,"rrname":"norupamaxur.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:00.347403+0100","flow_id":670670196002048,"pcap_cnt":520,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61143,"proto":"UDP","dns":{"type":"answer","id":48348,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:59.830278+0100","flow_id":290685849414470,"pcap_cnt":512,"event_type":"dns","src_ip":"192.168.1.100","src_port":64376,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50934,"rrname":"kepypirutyx.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:59.719362+0100","flow_id":1168302286779014,"pcap_cnt":459,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64990,"proto":"UDP","dns":{"type":"answer","id":46947,"rcode":"NXDOMAIN","rrname":"puzigagacal.eu"}}
{"timestamp":"2017-12-12T18:33:03.418399+0100","flow_id":755796448076383,"pcap_cnt":684,"event_type":"dns","src_ip":"192.168.1.100","src_port":65407,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43925,"rrname":"lyvoguraxeh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:56.835507+0100","flow_id":65960275394483,"pcap_cnt":136,"event_type":"dns","src_ip":"192.168.1.100","src_port":61547,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53580,"rrname":"jeluganusog.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:59.719362+0100","flow_id":1168302286779014,"pcap_cnt":459,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64990,"proto":"UDP","dns":{"type":"answer","id":46947,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.442986+0100","flow_id":1590789630050922,"pcap_cnt":694,"event_type":"dns","src_ip":"192.168.1.100","src_port":50716,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1381,"rrname":"puzewilurip.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:56.944754+0100","flow_id":1090378694945394,"pcap_cnt":183,"event_type":"dns","src_ip":"192.168.1.100","src_port":62965,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13223,"rrname":"pujoxolufag.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.613293+0100","flow_id":1892783813056429,"pcap_cnt":838,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54159,"proto":"UDP","dns":{"type":"answer","id":37946,"rcode":"NXDOMAIN","rrname":"qexusulakiq.eu"}}
{"timestamp":"2017-12-12T18:33:03.447975+0100","flow_id":1381418564310503,"pcap_cnt":697,"event_type":"dns","src_ip":"192.168.1.100","src_port":49546,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38790,"rrname":"fogokozazit.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:56.970708+0100","flow_id":384371970854868,"pcap_cnt":196,"event_type":"dns","src_ip":"192.168.1.100","src_port":57578,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4276,"rrname":"cilyzycojod.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.465463+0100","flow_id":1301813492914743,"pcap_cnt":704,"event_type":"dns","src_ip":"192.168.1.100","src_port":54419,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30836,"rrname":"tunegapenef.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.463696+0100","flow_id":755796448076383,"pcap_cnt":703,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65407,"proto":"UDP","dns":{"type":"answer","id":43925,"rcode":"NXDOMAIN","rrname":"lyvoguraxeh.eu"}}
{"timestamp":"2017-12-12T18:32:57.018276+0100","flow_id":65960275394483,"pcap_cnt":202,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61547,"proto":"UDP","dns":{"type":"answer","id":53580,"rcode":"NXDOMAIN","rrname":"jeluganusog.eu"}}
{"timestamp":"2017-12-12T18:33:03.490019+0100","flow_id":301275091532323,"pcap_cnt":712,"event_type":"dns","src_ip":"192.168.1.100","src_port":50742,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50067,"rrname":"kepabydokas.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.018276+0100","flow_id":65960275394483,"pcap_cnt":202,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61547,"proto":"UDP","dns":{"type":"answer","id":53580,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.684731+0100","flow_id":1849262909274338,"pcap_cnt":634,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50689,"proto":"UDP","dns":{"type":"answer","id":53031,"rcode":"NXDOMAIN","rrname":"fobatesohek.eu"}}
{"timestamp":"2017-12-12T18:32:59.676030+0100","flow_id":844266331668938,"pcap_cnt":443,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57884,"proto":"UDP","dns":{"type":"answer","id":29424,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.531838+0100","flow_id":1301813492914743,"pcap_cnt":741,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54419,"proto":"UDP","dns":{"type":"answer","id":30836,"rcode":"NXDOMAIN","rrname":"tunegapenef.eu"}}
{"timestamp":"2017-12-12T18:33:01.684731+0100","flow_id":1849262909274338,"pcap_cnt":634,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50689,"proto":"UDP","dns":{"type":"answer","id":53031,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.531838+0100","flow_id":1301813492914743,"pcap_cnt":741,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54419,"proto":"UDP","dns":{"type":"answer","id":30836,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.642445+0100","flow_id":1486250126134669,"pcap_cnt":851,"event_type":"dns","src_ip":"192.168.1.100","src_port":56811,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":57615,"rrname":"puzoxyvojyc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.525644+0100","flow_id":2064492310496588,"pcap_cnt":737,"event_type":"dns","src_ip":"192.168.1.100","src_port":61367,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17349,"rrname":"xubysaxywil.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:01.687103+0100","flow_id":818593164799935,"pcap_cnt":637,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58587,"proto":"UDP","dns":{"type":"answer","id":43437,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.540960+0100","flow_id":2221189897339168,"pcap_cnt":746,"event_type":"dns","src_ip":"192.168.1.100","src_port":54498,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":39232,"rrname":"qedoqyvoguq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:01.683545+0100","flow_id":2222575024172569,"pcap_cnt":633,"event_type":"dns","src_ip":"192.168.1.100","src_port":49638,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44079,"rrname":"qexoligupag.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.557175+0100","flow_id":1328833132200055,"pcap_cnt":761,"event_type":"dns","src_ip":"192.168.1.100","src_port":64453,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5142,"rrname":"tuwyjyvymuq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.750523+0100","flow_id":1676716892941470,"pcap_cnt":304,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54165,"proto":"UDP","dns":{"type":"answer","id":20391,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.693507+0100","flow_id":1485653125469443,"pcap_cnt":639,"event_type":"dns","src_ip":"192.168.1.100","src_port":63144,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29347,"rrname":"pufobogyqan.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:00.495156+0100","flow_id":2015845363210943,"pcap_cnt":527,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60373,"proto":"UDP","dns":{"type":"answer","id":15221,"rcode":"NXDOMAIN","rrname":"lyxaxududes.eu"}}
{"timestamp":"2017-12-12T18:33:02.583896+0100","flow_id":2222575024172569,"pcap_cnt":670,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49638,"proto":"UDP","dns":{"type":"answer","id":44079,"rcode":"NXDOMAIN","rrname":"qexoligupag.eu"}}
{"timestamp":"2017-12-12T18:33:03.569291+0100","flow_id":1631336268804043,"pcap_cnt":765,"event_type":"dns","src_ip":"192.168.1.100","src_port":65356,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63901,"rrname":"jejopiniduh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:00.495156+0100","flow_id":2015845363210943,"pcap_cnt":527,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60373,"proto":"UDP","dns":{"type":"answer","id":15221,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.520684+0100","flow_id":1631538132428698,"pcap_cnt":979,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51376,"proto":"UDP","dns":{"type":"answer","id":21175,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.645375+0100","flow_id":18406397974736,"pcap_cnt":854,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53528,"proto":"UDP","dns":{"type":"answer","id":8560,"rcode":"NXDOMAIN","rrname":"ganazywutes.eu"}}
{"timestamp":"2017-12-12T18:33:03.577260+0100","flow_id":2064492310496588,"pcap_cnt":771,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61367,"proto":"UDP","dns":{"type":"answer","id":17349,"rcode":"NXDOMAIN","rrname":"xubysaxywil.eu"}}
{"timestamp":"2017-12-12T18:33:01.633444+0100","flow_id":1004191586560612,"pcap_cnt":609,"event_type":"dns","src_ip":"192.168.1.100","src_port":55026,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6790,"rrname":"dimigesupew.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.597226+0100","flow_id":1328468060151018,"pcap_cnt":1023,"event_type":"dns","src_ip":"192.168.1.100","src_port":57829,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42014,"rrname":"kejaxoxuqut.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.645375+0100","flow_id":18406397974736,"pcap_cnt":854,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53528,"proto":"UDP","dns":{"type":"answer","id":8560,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.537719+0100","flow_id":1084017849349239,"pcap_cnt":1481,"event_type":"dns","src_ip":"192.168.1.100","src_port":51162,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4992,"rrname":"ganikuzosem.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:59.782088+0100","flow_id":874827171491592,"pcap_cnt":491,"event_type":"dns","src_ip":"192.168.1.100","src_port":49484,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36657,"rrname":"masijemaxud.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:01.686040+0100","flow_id":1004191586560612,"pcap_cnt":636,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55026,"proto":"UDP","dns":{"type":"answer","id":6790,"rcode":"NXDOMAIN","rrname":"dimigesupew.eu"}}
{"timestamp":"2017-12-12T18:33:01.640322+0100","flow_id":2117829361733759,"pcap_cnt":613,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50973,"proto":"UDP","dns":{"type":"answer","id":27486,"rcode":"NXDOMAIN","rrname":"norupamaxur.eu"}}
{"timestamp":"2017-12-12T18:33:06.647845+0100","flow_id":1328468060151018,"pcap_cnt":1055,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57829,"proto":"UDP","dns":{"type":"answer","id":42014,"rcode":"NXDOMAIN","rrname":"kejaxoxuqut.eu"}}
{"timestamp":"2017-12-12T18:33:11.585054+0100","flow_id":1084017849349239,"pcap_cnt":1494,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51162,"proto":"UDP","dns":{"type":"answer","id":4992,"rcode":"NXDOMAIN","rrname":"ganikuzosem.eu"}}
{"timestamp":"2017-12-12T18:32:59.789264+0100","flow_id":1291078221892368,"pcap_cnt":494,"event_type":"dns","src_ip":"192.168.1.100","src_port":53175,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27298,"rrname":"tunicyqokuv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:36.594390+0100","flow_id":537073089190558,"pcap_cnt":129,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55773,"proto":"UDP","dns":{"type":"answer","id":60450,"rcode":"NXDOMAIN","rrname":"xutekidywyp.eu"}}
{"timestamp":"2017-12-12T18:33:07.311014+0100","flow_id":155349282897471,"pcap_cnt":1144,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51108,"proto":"UDP","dns":{"type":"answer","id":6633,"rcode":"NXDOMAIN","rrname":"masygekevuq.eu"}}
{"timestamp":"2017-12-12T18:33:06.632256+0100","flow_id":1269541108903502,"pcap_cnt":1047,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59236,"proto":"UDP","dns":{"type":"answer","id":62391,"rcode":"NXDOMAIN","rrname":"purumulazux.eu"}}
{"timestamp":"2017-12-12T18:32:58.795777+0100","flow_id":435621668221273,"pcap_cnt":317,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62179,"proto":"UDP","dns":{"type":"answer","id":31071,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:07.311014+0100","flow_id":155349282897471,"pcap_cnt":1144,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51108,"proto":"UDP","dns":{"type":"answer","id":6633,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:05.508986+0100","flow_id":1536580700348282,"pcap_cnt":918,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64582,"proto":"UDP","dns":{"type":"answer","id":34294,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.632256+0100","flow_id":1269541108903502,"pcap_cnt":1047,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59236,"proto":"UDP","dns":{"type":"answer","id":62391,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.613293+0100","flow_id":1892783813056429,"pcap_cnt":838,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54159,"proto":"UDP","dns":{"type":"answer","id":37946,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:07.332439+0100","flow_id":223123866785712,"pcap_cnt":1146,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49626,"proto":"UDP","dns":{"type":"answer","id":16384,"rcode":"NXDOMAIN","rrname":"lyxilunogem.eu"}}
{"timestamp":"2017-12-12T18:33:03.586423+0100","flow_id":115706734525224,"pcap_cnt":777,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63501,"proto":"UDP","dns":{"type":"answer","id":3798,"rcode":"NXDOMAIN","rrname":"magusecutuk.eu"}}
{"timestamp":"2017-12-12T18:33:05.514993+0100","flow_id":843957094332553,"pcap_cnt":922,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63142,"proto":"UDP","dns":{"type":"answer","id":61947,"rcode":"NXDOMAIN","rrname":"pujulapohar.eu"}}
{"timestamp":"2017-12-12T18:33:01.672138+0100","flow_id":314265219973514,"pcap_cnt":627,"event_type":"dns","src_ip":"192.168.1.100","src_port":59559,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31070,"rrname":"citizufurah.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.586423+0100","flow_id":115706734525224,"pcap_cnt":777,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63501,"proto":"UDP","dns":{"type":"answer","id":3798,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.463696+0100","flow_id":755796448076383,"pcap_cnt":703,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65407,"proto":"UDP","dns":{"type":"answer","id":43925,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.765388+0100","flow_id":1210768775849219,"pcap_cnt":307,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57705,"proto":"UDP","dns":{"type":"answer","id":63639,"rcode":"NXDOMAIN","rrname":"puvybivihox.eu"}}
{"timestamp":"2017-12-12T18:32:57.511649+0100","flow_id":384371970854868,"pcap_cnt":237,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57578,"proto":"UDP","dns":{"type":"answer","id":4276,"rcode":"NXDOMAIN","rrname":"cilyzycojod.eu"}}
{"timestamp":"2017-12-12T18:33:03.509865+0100","flow_id":1590789630050922,"pcap_cnt":727,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50716,"proto":"UDP","dns":{"type":"answer","id":1381,"rcode":"NXDOMAIN","rrname":"puzewilurip.eu"}}
{"timestamp":"2017-12-12T18:32:58.810061+0100","flow_id":2209361557116624,"pcap_cnt":324,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57068,"proto":"UDP","dns":{"type":"answer","id":9798,"rcode":"NXDOMAIN","rrname":"fokafobeqix.eu"}}
{"timestamp":"2017-12-12T18:32:57.511649+0100","flow_id":384371970854868,"pcap_cnt":237,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57578,"proto":"UDP","dns":{"type":"answer","id":4276,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.810061+0100","flow_id":2209361557116624,"pcap_cnt":324,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57068,"proto":"UDP","dns":{"type":"answer","id":9798,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:59.676186+0100","flow_id":2196992051335514,"pcap_cnt":444,"event_type":"dns","src_ip":"192.168.1.100","src_port":64462,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30933,"rrname":"tucyzogojat.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.541372+0100","flow_id":301275091532323,"pcap_cnt":747,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50742,"proto":"UDP","dns":{"type":"answer","id":50067,"rcode":"NXDOMAIN","rrname":"kepabydokas.eu"}}
{"timestamp":"2017-12-12T18:32:58.592909+0100","flow_id":1090378694945394,"pcap_cnt":277,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62965,"proto":"UDP","dns":{"type":"answer","id":13223,"rcode":"NXDOMAIN","rrname":"pujoxolufag.eu"}}
{"timestamp":"2017-12-12T18:33:04.689838+0100","flow_id":1486250126134669,"pcap_cnt":896,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56811,"proto":"UDP","dns":{"type":"answer","id":57615,"rcode":"NXDOMAIN","rrname":"puzoxyvojyc.eu"}}
{"timestamp":"2017-12-12T18:32:58.592909+0100","flow_id":1090378694945394,"pcap_cnt":277,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62965,"proto":"UDP","dns":{"type":"answer","id":13223,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:59.698832+0100","flow_id":351083827014096,"pcap_cnt":449,"event_type":"dns","src_ip":"192.168.1.100","src_port":49515,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53067,"rrname":"fogynahidal.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:59.618014+0100","flow_id":1584183970065950,"pcap_cnt":419,"event_type":"dns","src_ip":"192.168.1.100","src_port":52310,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27070,"rrname":"cidyrecavok.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.689838+0100","flow_id":1486250126134669,"pcap_cnt":896,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56811,"proto":"UDP","dns":{"type":"answer","id":57615,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.806140+0100","flow_id":921672379682044,"pcap_cnt":322,"event_type":"dns","src_ip":"192.168.1.100","src_port":62215,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":3958,"rrname":"rydekyqyquw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:02.583896+0100","flow_id":2222575024172569,"pcap_cnt":670,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49638,"proto":"UDP","dns":{"type":"answer","id":44079,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.476489+0100","flow_id":692849407575369,"pcap_cnt":956,"event_type":"dns","src_ip":"192.168.1.100","src_port":54355,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19271,"rrname":"tuwaraqidek.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:01.710873+0100","flow_id":461045727308555,"pcap_cnt":646,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57520,"proto":"UDP","dns":{"type":"answer","id":5369,"rcode":"NXDOMAIN","rrname":"jeluzydyqej.eu"}}
{"timestamp":"2017-12-12T18:32:58.873051+0100","flow_id":921672379682044,"pcap_cnt":370,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62215,"proto":"UDP","dns":{"type":"answer","id":3958,"rcode":"NXDOMAIN","rrname":"rydekyqyquw.eu"}}
{"timestamp":"2017-12-12T18:32:58.813597+0100","flow_id":1364724026094635,"pcap_cnt":330,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57980,"proto":"UDP","dns":{"type":"answer","id":64057,"rcode":"NXDOMAIN","rrname":"cicucifokym.eu"}}
{"timestamp":"2017-12-12T18:33:03.400007+0100","flow_id":746205786086023,"pcap_cnt":681,"event_type":"dns","src_ip":"192.168.1.100","src_port":50948,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5408,"rrname":"qeqyvulidox.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.873051+0100","flow_id":921672379682044,"pcap_cnt":370,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62215,"proto":"UDP","dns":{"type":"answer","id":3958,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.710873+0100","flow_id":461045727308555,"pcap_cnt":646,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57520,"proto":"UDP","dns":{"type":"answer","id":5369,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.686040+0100","flow_id":1004191586560612,"pcap_cnt":636,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55026,"proto":"UDP","dns":{"type":"answer","id":6790,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.446794+0100","flow_id":746205786086023,"pcap_cnt":695,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50948,"proto":"UDP","dns":{"type":"answer","id":5408,"rcode":"NXDOMAIN","rrname":"qeqyvulidox.eu"}}
{"timestamp":"2017-12-12T18:33:00.338758+0100","flow_id":537234152040896,"pcap_cnt":519,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61857,"proto":"UDP","dns":{"type":"answer","id":37438,"rcode":"NXDOMAIN","rrname":"puvojyqevus.eu"}}
{"timestamp":"2017-12-12T18:33:01.493940+0100","flow_id":795726758906228,"pcap_cnt":550,"event_type":"dns","src_ip":"192.168.1.100","src_port":53886,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19267,"rrname":"foxirozigon.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:02.594241+0100","flow_id":1485653125469443,"pcap_cnt":672,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63144,"proto":"UDP","dns":{"type":"answer","id":29347,"rcode":"NXDOMAIN","rrname":"pufobogyqan.eu"}}
{"timestamp":"2017-12-12T18:33:00.338758+0100","flow_id":537234152040896,"pcap_cnt":519,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61857,"proto":"UDP","dns":{"type":"answer","id":37438,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.625058+0100","flow_id":1304115595282850,"pcap_cnt":607,"event_type":"dns","src_ip":"192.168.1.100","src_port":61717,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":65526,"rrname":"puryxepenek.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:02.594241+0100","flow_id":1485653125469443,"pcap_cnt":672,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63144,"proto":"UDP","dns":{"type":"answer","id":29347,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.560465+0100","flow_id":795726758906228,"pcap_cnt":568,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53886,"proto":"UDP","dns":{"type":"answer","id":19267,"rcode":"NXDOMAIN","rrname":"foxirozigon.eu"}}
{"timestamp":"2017-12-12T18:33:01.504223+0100","flow_id":518748612964767,"pcap_cnt":553,"event_type":"dns","src_ip":"192.168.1.100","src_port":61808,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28945,"rrname":"jejykaxymob.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:01.560465+0100","flow_id":795726758906228,"pcap_cnt":568,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53886,"proto":"UDP","dns":{"type":"answer","id":19267,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.606155+0100","flow_id":1440244584038347,"pcap_cnt":1034,"event_type":"dns","src_ip":"192.168.1.100","src_port":63529,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49539,"rrname":"vowezacuryr.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.802613+0100","flow_id":1451372844302133,"pcap_cnt":1099,"event_type":"dns","src_ip":"192.168.1.100","src_port":55095,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18809,"rrname":"puvugulynum.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:01.570660+0100","flow_id":518748612964767,"pcap_cnt":578,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61808,"proto":"UDP","dns":{"type":"answer","id":28945,"rcode":"NXDOMAIN","rrname":"jejykaxymob.eu"}}
{"timestamp":"2017-12-12T18:33:03.560482+0100","flow_id":1409574222414407,"pcap_cnt":763,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60029,"proto":"UDP","dns":{"type":"answer","id":8771,"rcode":"NXDOMAIN","rrname":"makififupap.eu"}}
{"timestamp":"2017-12-12T18:33:01.602535+0100","flow_id":246864298193319,"pcap_cnt":592,"event_type":"dns","src_ip":"192.168.1.100","src_port":55698,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1686,"rrname":"qeguhapyrer.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:07.332439+0100","flow_id":223123866785712,"pcap_cnt":1146,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49626,"proto":"UDP","dns":{"type":"answer","id":16384,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:05.514993+0100","flow_id":843957094332553,"pcap_cnt":922,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63142,"proto":"UDP","dns":{"type":"answer","id":61947,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:05.517205+0100","flow_id":1477902857158751,"pcap_cnt":924,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64583,"proto":"UDP","dns":{"type":"answer","id":62197,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.615355+0100","flow_id":848136097457083,"pcap_cnt":790,"event_type":"dns","src_ip":"192.168.1.100","src_port":59449,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37305,"rrname":"novixamymyf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.399701+0100","flow_id":869074063108829,"pcap_cnt":939,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58020,"proto":"UDP","dns":{"type":"answer","id":15110,"rcode":"NXDOMAIN","rrname":"ryqudigyqog.eu"}}
{"timestamp":"2017-12-12T18:33:08.552505+0100","flow_id":1884447281802809,"pcap_cnt":1223,"event_type":"dns","src_ip":"192.168.1.100","src_port":51272,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43783,"rrname":"tupibevecev.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.399701+0100","flow_id":869074063108829,"pcap_cnt":939,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58020,"proto":"UDP","dns":{"type":"answer","id":15110,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.509865+0100","flow_id":1590789630050922,"pcap_cnt":727,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50716,"proto":"UDP","dns":{"type":"answer","id":1381,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.618821+0100","flow_id":1884447281802809,"pcap_cnt":1245,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51272,"proto":"UDP","dns":{"type":"answer","id":43783,"rcode":"NXDOMAIN","rrname":"tupibevecev.eu"}}
{"timestamp":"2017-12-12T18:33:06.453926+0100","flow_id":1258249639882022,"pcap_cnt":950,"event_type":"dns","src_ip":"192.168.1.100","src_port":55337,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7590,"rrname":"qedylaqecel.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.541372+0100","flow_id":301275091532323,"pcap_cnt":747,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50742,"proto":"UDP","dns":{"type":"answer","id":50067,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.618821+0100","flow_id":1884447281802809,"pcap_cnt":1245,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51272,"proto":"UDP","dns":{"type":"answer","id":43783,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.590334+0100","flow_id":1145053629074772,"pcap_cnt":779,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58898,"proto":"UDP","dns":{"type":"answer","id":35305,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.667755+0100","flow_id":1538341636962770,"pcap_cnt":875,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53849,"proto":"UDP","dns":{"type":"answer","id":61394,"rcode":"NXDOMAIN","rrname":"kevopoxecun.eu"}}
{"timestamp":"2017-12-12T18:33:06.502233+0100","flow_id":1258249639882022,"pcap_cnt":971,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55337,"proto":"UDP","dns":{"type":"answer","id":7590,"rcode":"NXDOMAIN","rrname":"qedylaqecel.eu"}}
{"timestamp":"2017-12-12T18:33:04.667755+0100","flow_id":1538341636962770,"pcap_cnt":875,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53849,"proto":"UDP","dns":{"type":"answer","id":61394,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.598982+0100","flow_id":847429575386054,"pcap_cnt":830,"event_type":"dns","src_ip":"192.168.1.100","src_port":53965,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64733,"rrname":"jecygyrogec.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.461952+0100","flow_id":527007835183071,"pcap_cnt":702,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56395,"proto":"UDP","dns":{"type":"answer","id":46924,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.486980+0100","flow_id":758974724075076,"pcap_cnt":966,"event_type":"dns","src_ip":"192.168.1.100","src_port":52287,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27292,"rrname":"xutyrurojah.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.551507+0100","flow_id":1714572735179347,"pcap_cnt":993,"event_type":"dns","src_ip":"192.168.1.100","src_port":53546,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36162,"rrname":"diravasymob.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.887564+0100","flow_id":863402558392275,"pcap_cnt":379,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60259,"proto":"UDP","dns":{"type":"answer","id":64813,"rcode":"NXDOMAIN","rrname":"lygujirupum.eu"}}
{"timestamp":"2017-12-12T18:33:03.520617+0100","flow_id":1238116980486030,"pcap_cnt":734,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60509,"proto":"UDP","dns":{"type":"answer","id":31798,"rcode":"NXDOMAIN","rrname":"ryqozapaleb.eu"}}
{"timestamp":"2017-12-12T18:33:06.544098+0100","flow_id":692849407575369,"pcap_cnt":987,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54355,"proto":"UDP","dns":{"type":"answer","id":19271,"rcode":"NXDOMAIN","rrname":"tuwaraqidek.eu"}}
{"timestamp":"2017-12-12T18:33:03.520617+0100","flow_id":1238116980486030,"pcap_cnt":734,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60509,"proto":"UDP","dns":{"type":"answer","id":31798,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.446794+0100","flow_id":746205786086023,"pcap_cnt":695,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50948,"proto":"UDP","dns":{"type":"answer","id":5408,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.544098+0100","flow_id":692849407575369,"pcap_cnt":987,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54355,"proto":"UDP","dns":{"type":"answer","id":19271,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.647845+0100","flow_id":1328468060151018,"pcap_cnt":1055,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57829,"proto":"UDP","dns":{"type":"answer","id":42014,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.600789+0100","flow_id":1125674736691925,"pcap_cnt":831,"event_type":"dns","src_ip":"192.168.1.100","src_port":61725,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31145,"rrname":"pufyjulogih.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.506160+0100","flow_id":1651533352515888,"pcap_cnt":724,"event_type":"dns","src_ip":"192.168.1.100","src_port":50032,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59332,"rrname":"lymajaxecir.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.585054+0100","flow_id":1084017849349239,"pcap_cnt":1494,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51162,"proto":"UDP","dns":{"type":"answer","id":4992,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.432828+0100","flow_id":1781866282785468,"pcap_cnt":946,"event_type":"dns","src_ip":"192.168.1.100","src_port":50271,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59836,"rrname":"dixyjohevon.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.611481+0100","flow_id":1087552606983321,"pcap_cnt":836,"event_type":"dns","src_ip":"192.168.1.100","src_port":51957,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43029,"rrname":"fotaqizymig.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:59.813458+0100","flow_id":297274329247897,"pcap_cnt":506,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52272,"proto":"UDP","dns":{"type":"answer","id":38319,"rcode":"NXDOMAIN","rrname":"kemawonywig.eu"}}
{"timestamp":"2017-12-12T18:33:00.360387+0100","flow_id":1464981447737620,"pcap_cnt":522,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54236,"proto":"UDP","dns":{"type":"answer","id":33614,"rcode":"NXDOMAIN","rrname":"jefejurenyp.eu"}}
{"timestamp":"2017-12-12T18:33:04.644286+0100","flow_id":642628354888894,"pcap_cnt":853,"event_type":"dns","src_ip":"192.168.1.100","src_port":51369,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50508,"rrname":"dikegybecys.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:01.674578+0100","flow_id":1304115595282850,"pcap_cnt":630,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61717,"proto":"UDP","dns":{"type":"answer","id":65526,"rcode":"NXDOMAIN","rrname":"puryxepenek.eu"}}
{"timestamp":"2017-12-12T18:33:00.360387+0100","flow_id":1464981447737620,"pcap_cnt":522,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54236,"proto":"UDP","dns":{"type":"answer","id":33614,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.827929+0100","flow_id":129115622122009,"pcap_cnt":342,"event_type":"dns","src_ip":"192.168.1.100","src_port":52689,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47928,"rrname":"galupehudev.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:01.674578+0100","flow_id":1304115595282850,"pcap_cnt":630,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61717,"proto":"UDP","dns":{"type":"answer","id":65526,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.570660+0100","flow_id":518748612964767,"pcap_cnt":578,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61808,"proto":"UDP","dns":{"type":"answer","id":28945,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:00.372706+0100","flow_id":290685849414470,"pcap_cnt":524,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64376,"proto":"UDP","dns":{"type":"answer","id":50934,"rcode":"NXDOMAIN","rrname":"kepypirutyx.eu"}}
{"timestamp":"2017-12-12T18:33:01.709347+0100","flow_id":559213647352547,"pcap_cnt":644,"event_type":"dns","src_ip":"192.168.1.100","src_port":60041,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19018,"rrname":"kevylejigod.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.560482+0100","flow_id":1409574222414407,"pcap_cnt":763,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60029,"proto":"UDP","dns":{"type":"answer","id":8771,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:00.372706+0100","flow_id":290685849414470,"pcap_cnt":524,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64376,"proto":"UDP","dns":{"type":"answer","id":50934,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.648945+0100","flow_id":246864298193319,"pcap_cnt":617,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55698,"proto":"UDP","dns":{"type":"answer","id":1686,"rcode":"NXDOMAIN","rrname":"qeguhapyrer.eu"}}
{"timestamp":"2017-12-12T18:33:01.709552+0100","flow_id":1845592859679936,"pcap_cnt":645,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52354,"proto":"UDP","dns":{"type":"answer","id":33680,"rcode":"NXDOMAIN","rrname":"xudunudeveq.eu"}}
{"timestamp":"2017-12-12T18:33:01.648945+0100","flow_id":246864298193319,"pcap_cnt":617,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55698,"proto":"UDP","dns":{"type":"answer","id":1686,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.572014+0100","flow_id":201941088254574,"pcap_cnt":1229,"event_type":"dns","src_ip":"192.168.1.100","src_port":55475,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49587,"rrname":"kejudunogex.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:01.709552+0100","flow_id":1845592859679936,"pcap_cnt":645,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52354,"proto":"UDP","dns":{"type":"answer","id":33680,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.616984+0100","flow_id":901806008809296,"pcap_cnt":791,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50622,"proto":"UDP","dns":{"type":"answer","id":60697,"rcode":"NXDOMAIN","rrname":"divamubojum.eu"}}
{"timestamp":"2017-12-12T18:33:01.679432+0100","flow_id":1398156051701256,"pcap_cnt":632,"event_type":"dns","src_ip":"192.168.1.100","src_port":59174,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":55660,"rrname":"mavinifenam.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.448303+0100","flow_id":1451372844302133,"pcap_cnt":1202,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55095,"proto":"UDP","dns":{"type":"answer","id":18809,"rcode":"NXDOMAIN","rrname":"puvugulynum.eu"}}
{"timestamp":"2017-12-12T18:33:01.714408+0100","flow_id":2089993678693849,"pcap_cnt":649,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64388,"proto":"UDP","dns":{"type":"answer","id":15996,"rcode":"NXDOMAIN","rrname":"kejogydideq.eu"}}
{"timestamp":"2017-12-12T18:33:03.514966+0100","flow_id":1381418564310503,"pcap_cnt":730,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49546,"proto":"UDP","dns":{"type":"answer","id":38790,"rcode":"NXDOMAIN","rrname":"fogokozazit.eu"}}
{"timestamp":"2017-12-12T18:33:08.448303+0100","flow_id":1451372844302133,"pcap_cnt":1202,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55095,"proto":"UDP","dns":{"type":"answer","id":18809,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.514966+0100","flow_id":1381418564310503,"pcap_cnt":730,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49546,"proto":"UDP","dns":{"type":"answer","id":38790,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.614777+0100","flow_id":851638643351451,"pcap_cnt":839,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58458,"proto":"UDP","dns":{"type":"answer","id":41378,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.636249+0100","flow_id":1764733658379609,"pcap_cnt":1254,"event_type":"dns","src_ip":"192.168.1.100","src_port":56206,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27097,"rrname":"disojawogaw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.779386+0100","flow_id":1973814813713530,"pcap_cnt":1092,"event_type":"dns","src_ip":"192.168.1.100","src_port":58910,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":21616,"rrname":"qetityluruj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.502233+0100","flow_id":1258249639882022,"pcap_cnt":971,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55337,"proto":"UDP","dns":{"type":"answer","id":7590,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.577260+0100","flow_id":2064492310496588,"pcap_cnt":771,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61367,"proto":"UDP","dns":{"type":"answer","id":17349,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.646794+0100","flow_id":847429575386054,"pcap_cnt":856,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53965,"proto":"UDP","dns":{"type":"answer","id":64733,"rcode":"NXDOMAIN","rrname":"jecygyrogec.eu"}}
{"timestamp":"2017-12-12T18:33:10.432264+0100","flow_id":1672421926410376,"pcap_cnt":1364,"event_type":"dns","src_ip":"192.168.1.100","src_port":56842,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60821,"rrname":"cicynefogic.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.646794+0100","flow_id":847429575386054,"pcap_cnt":856,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53965,"proto":"UDP","dns":{"type":"answer","id":64733,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.587683+0100","flow_id":2221189897339168,"pcap_cnt":778,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54498,"proto":"UDP","dns":{"type":"answer","id":39232,"rcode":"NXDOMAIN","rrname":"qedoqyvoguq.eu"}}
{"timestamp":"2017-12-12T18:32:58.813597+0100","flow_id":1364724026094635,"pcap_cnt":330,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57980,"proto":"UDP","dns":{"type":"answer","id":64057,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.587683+0100","flow_id":2221189897339168,"pcap_cnt":778,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54498,"proto":"UDP","dns":{"type":"answer","id":39232,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.703835+0100","flow_id":1876383480462683,"pcap_cnt":905,"event_type":"dns","src_ip":"192.168.1.100","src_port":61109,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":16711,"rrname":"masovufohoh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:01.640322+0100","flow_id":2117829361733759,"pcap_cnt":613,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50973,"proto":"UDP","dns":{"type":"answer","id":27486,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.597774+0100","flow_id":1714572735179347,"pcap_cnt":1024,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53546,"proto":"UDP","dns":{"type":"answer","id":36162,"rcode":"NXDOMAIN","rrname":"diravasymob.eu"}}
{"timestamp":"2017-12-12T18:33:03.602908+0100","flow_id":1328833132200055,"pcap_cnt":784,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64453,"proto":"UDP","dns":{"type":"answer","id":5142,"rcode":"NXDOMAIN","rrname":"tuwyjyvymuq.eu"}}
{"timestamp":"2017-12-12T18:33:01.730435+0100","flow_id":426162002928963,"pcap_cnt":656,"event_type":"dns","src_ip":"192.168.1.100","src_port":59626,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27403,"rrname":"vofukykojos.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.555438+0100","flow_id":758974724075076,"pcap_cnt":998,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52287,"proto":"UDP","dns":{"type":"answer","id":27292,"rcode":"NXDOMAIN","rrname":"xutyrurojah.eu"}}
{"timestamp":"2017-12-12T18:33:03.602908+0100","flow_id":1328833132200055,"pcap_cnt":784,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64453,"proto":"UDP","dns":{"type":"answer","id":5142,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.556852+0100","flow_id":1651533352515888,"pcap_cnt":760,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50032,"proto":"UDP","dns":{"type":"answer","id":59332,"rcode":"NXDOMAIN","rrname":"lymajaxecir.eu"}}
{"timestamp":"2017-12-12T18:33:06.555438+0100","flow_id":758974724075076,"pcap_cnt":998,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52287,"proto":"UDP","dns":{"type":"answer","id":27292,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.697881+0100","flow_id":1004595314140697,"pcap_cnt":1544,"event_type":"dns","src_ip":"192.168.1.100","src_port":62171,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29474,"rrname":"nopabefipuq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.556852+0100","flow_id":1651533352515888,"pcap_cnt":760,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50032,"proto":"UDP","dns":{"type":"answer","id":59332,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.482290+0100","flow_id":1781866282785468,"pcap_cnt":962,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50271,"proto":"UDP","dns":{"type":"answer","id":59836,"rcode":"NXDOMAIN","rrname":"dixyjohevon.eu"}}
{"timestamp":"2017-12-12T18:33:06.809304+0100","flow_id":508560950843736,"pcap_cnt":1102,"event_type":"dns","src_ip":"192.168.1.100","src_port":51135,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1634,"rrname":"qequroquweb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.618889+0100","flow_id":1135158024499593,"pcap_cnt":840,"event_type":"dns","src_ip":"192.168.1.100","src_port":65468,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9595,"rrname":"jenujoxojug.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.848209+0100","flow_id":1537154078667089,"pcap_cnt":1113,"event_type":"dns","src_ip":"192.168.1.100","src_port":55163,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":54429,"rrname":"dixotuzipuh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.649545+0100","flow_id":1125674736691925,"pcap_cnt":860,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61725,"proto":"UDP","dns":{"type":"answer","id":31145,"rcode":"NXDOMAIN","rrname":"pufyjulogih.eu"}}
{"timestamp":"2017-12-12T18:33:06.654911+0100","flow_id":1440244584038347,"pcap_cnt":1060,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63529,"proto":"UDP","dns":{"type":"answer","id":49539,"rcode":"NXDOMAIN","rrname":"vowezacuryr.eu"}}
{"timestamp":"2017-12-12T18:33:04.649545+0100","flow_id":1125674736691925,"pcap_cnt":860,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61725,"proto":"UDP","dns":{"type":"answer","id":31145,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.758378+0100","flow_id":264003365540458,"pcap_cnt":1084,"event_type":"dns","src_ip":"192.168.1.100","src_port":59939,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":3288,"rrname":"kemimojitir.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.641556+0100","flow_id":562340383738388,"pcap_cnt":850,"event_type":"dns","src_ip":"192.168.1.100","src_port":55030,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8999,"rrname":"tucumyvipys.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.435732+0100","flow_id":359594304972308,"pcap_cnt":691,"event_type":"dns","src_ip":"192.168.1.100","src_port":52718,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9100,"rrname":"tucadilebix.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.360508+0100","flow_id":559213647352547,"pcap_cnt":678,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60041,"proto":"UDP","dns":{"type":"answer","id":19018,"rcode":"NXDOMAIN","rrname":"kevylejigod.eu"}}
{"timestamp":"2017-12-12T18:33:01.525661+0100","flow_id":1328040710571357,"pcap_cnt":559,"event_type":"dns","src_ip":"192.168.1.100","src_port":55749,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":16292,"rrname":"novewecoliv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.501908+0100","flow_id":359594304972308,"pcap_cnt":720,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52718,"proto":"UDP","dns":{"type":"answer","id":9100,"rcode":"NXDOMAIN","rrname":"tucadilebix.eu"}}
{"timestamp":"2017-12-12T18:33:03.563644+0100","flow_id":1412477620296124,"pcap_cnt":764,"event_type":"dns","src_ip":"192.168.1.100","src_port":61608,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13804,"rrname":"pumipuvupuj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.765388+0100","flow_id":1210768775849219,"pcap_cnt":307,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57705,"proto":"UDP","dns":{"type":"answer","id":63639,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.501908+0100","flow_id":359594304972308,"pcap_cnt":720,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52718,"proto":"UDP","dns":{"type":"answer","id":9100,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.592272+0100","flow_id":1328040710571357,"pcap_cnt":586,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55749,"proto":"UDP","dns":{"type":"answer","id":16292,"rcode":"NXDOMAIN","rrname":"novewecoliv.eu"}}
{"timestamp":"2017-12-12T18:32:58.801095+0100","flow_id":1650710865918279,"pcap_cnt":320,"event_type":"dns","src_ip":"192.168.1.100","src_port":59313,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7390,"rrname":"tuwypagupeb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:01.592272+0100","flow_id":1328040710571357,"pcap_cnt":586,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55749,"proto":"UDP","dns":{"type":"answer","id":16292,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.826726+0100","flow_id":341892596931942,"pcap_cnt":341,"event_type":"dns","src_ip":"192.168.1.100","src_port":56726,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63598,"rrname":"foxehehywef.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.842302+0100","flow_id":762958305745470,"pcap_cnt":353,"event_type":"dns","src_ip":"192.168.1.100","src_port":58515,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":61220,"rrname":"novugukupap.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.638238+0100","flow_id":201941088254574,"pcap_cnt":1256,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55475,"proto":"UDP","dns":{"type":"answer","id":49587,"rcode":"NXDOMAIN","rrname":"kejudunogex.eu"}}
{"timestamp":"2017-12-12T18:32:59.725065+0100","flow_id":2196992051335514,"pcap_cnt":464,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64462,"proto":"UDP","dns":{"type":"answer","id":30933,"rcode":"NXDOMAIN","rrname":"tucyzogojat.eu"}}
{"timestamp":"2017-12-12T18:33:03.613240+0100","flow_id":787568468646776,"pcap_cnt":788,"event_type":"dns","src_ip":"192.168.1.100","src_port":59465,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":46630,"rrname":"vonymomaxyb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:59.671099+0100","flow_id":1584183970065950,"pcap_cnt":440,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52310,"proto":"UDP","dns":{"type":"answer","id":27070,"rcode":"NXDOMAIN","rrname":"cidyrecavok.eu"}}
{"timestamp":"2017-12-12T18:32:59.725065+0100","flow_id":2196992051335514,"pcap_cnt":464,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64462,"proto":"UDP","dns":{"type":"answer","id":30933,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.795513+0100","flow_id":441422022058873,"pcap_cnt":1096,"event_type":"dns","src_ip":"192.168.1.100","src_port":65275,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":10449,"rrname":"cihyrimymen.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.465210+0100","flow_id":787568468646776,"pcap_cnt":805,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59465,"proto":"UDP","dns":{"type":"answer","id":46630,"rcode":"NXDOMAIN","rrname":"vonymomaxyb.eu"}}
{"timestamp":"2017-12-12T18:33:04.678058+0100","flow_id":396019922655402,"pcap_cnt":886,"event_type":"dns","src_ip":"192.168.1.100","src_port":50441,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":54113,"rrname":"xuxivydifoj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.465210+0100","flow_id":787568468646776,"pcap_cnt":805,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59465,"proto":"UDP","dns":{"type":"answer","id":46630,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.887564+0100","flow_id":863402558392275,"pcap_cnt":379,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60259,"proto":"UDP","dns":{"type":"answer","id":64813,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.848294+0100","flow_id":528596972794278,"pcap_cnt":357,"event_type":"dns","src_ip":"192.168.1.100","src_port":60568,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14839,"rrname":"pupatololoz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:59.591942+0100","flow_id":1011441491141270,"pcap_cnt":412,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55187,"proto":"UDP","dns":{"type":"answer","id":11237,"rcode":"NXDOMAIN","rrname":"vocakemenir.eu"}}
{"timestamp":"2017-12-12T18:32:59.591942+0100","flow_id":1011441491141270,"pcap_cnt":412,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55187,"proto":"UDP","dns":{"type":"answer","id":11237,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.881880+0100","flow_id":1558908087461746,"pcap_cnt":375,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51050,"proto":"UDP","dns":{"type":"answer","id":32378,"rcode":"NXDOMAIN","rrname":"dimevuwevuj.eu"}}
{"timestamp":"2017-12-12T18:32:36.594390+0100","flow_id":537073089190558,"pcap_cnt":129,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55773,"proto":"UDP","dns":{"type":"answer","id":60450,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.735539+0100","flow_id":1756639792019763,"pcap_cnt":657,"event_type":"dns","src_ip":"192.168.1.100","src_port":54440,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48213,"rrname":"nopodykecoc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:10.466556+0100","flow_id":1689378457263740,"pcap_cnt":1379,"event_type":"dns","src_ip":"192.168.1.100","src_port":58730,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13508,"rrname":"jefyqynofaj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.615051+0100","flow_id":1631336268804043,"pcap_cnt":789,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65356,"proto":"UDP","dns":{"type":"answer","id":63901,"rcode":"NXDOMAIN","rrname":"jejopiniduh.eu"}}
{"timestamp":"2017-12-12T18:33:01.830472+0100","flow_id":426162002928963,"pcap_cnt":663,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59626,"proto":"UDP","dns":{"type":"answer","id":27403,"rcode":"NXDOMAIN","rrname":"vofukykojos.eu"}}
{"timestamp":"2017-12-12T18:32:59.813458+0100","flow_id":297274329247897,"pcap_cnt":506,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52272,"proto":"UDP","dns":{"type":"answer","id":38319,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.615051+0100","flow_id":1631336268804043,"pcap_cnt":789,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65356,"proto":"UDP","dns":{"type":"answer","id":63901,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.378409+0100","flow_id":1147501760464425,"pcap_cnt":679,"event_type":"dns","src_ip":"192.168.1.100","src_port":57258,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":61517,"rrname":"gatopuwenyq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.750025+0100","flow_id":1004595314140697,"pcap_cnt":1578,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62171,"proto":"UDP","dns":{"type":"answer","id":29474,"rcode":"NXDOMAIN","rrname":"nopabefipuq.eu"}}
{"timestamp":"2017-12-12T18:33:00.328650+0100","flow_id":874827171491592,"pcap_cnt":517,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49484,"proto":"UDP","dns":{"type":"answer","id":36657,"rcode":"NXDOMAIN","rrname":"masijemaxud.eu"}}
{"timestamp":"2017-12-12T18:33:03.424168+0100","flow_id":1147501760464425,"pcap_cnt":687,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57258,"proto":"UDP","dns":{"type":"answer","id":61517,"rcode":"NXDOMAIN","rrname":"gatopuwenyq.eu"}}
{"timestamp":"2017-12-12T18:33:11.750025+0100","flow_id":1004595314140697,"pcap_cnt":1578,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62171,"proto":"UDP","dns":{"type":"answer","id":29474,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:00.328650+0100","flow_id":874827171491592,"pcap_cnt":517,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49484,"proto":"UDP","dns":{"type":"answer","id":36657,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.424168+0100","flow_id":1147501760464425,"pcap_cnt":687,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57258,"proto":"UDP","dns":{"type":"answer","id":61517,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.654911+0100","flow_id":1440244584038347,"pcap_cnt":1060,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63529,"proto":"UDP","dns":{"type":"answer","id":49539,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:00.641285+0100","flow_id":1291078221892368,"pcap_cnt":534,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53175,"proto":"UDP","dns":{"type":"answer","id":27298,"rcode":"NXDOMAIN","rrname":"tunicyqokuv.eu"}}
{"timestamp":"2017-12-12T18:33:03.538101+0100","flow_id":1885755099002357,"pcap_cnt":744,"event_type":"dns","src_ip":"192.168.1.100","src_port":58445,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38171,"rrname":"nojejecebuw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.659333+0100","flow_id":1087552606983321,"pcap_cnt":866,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51957,"proto":"UDP","dns":{"type":"answer","id":43029,"rcode":"NXDOMAIN","rrname":"fotaqizymig.eu"}}
{"timestamp":"2017-12-12T18:33:14.570720+0100","flow_id":335439409624416,"pcap_cnt":1807,"event_type":"dns","src_ip":"192.168.1.100","src_port":49406,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53,"rrname":"divotabofov.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.360508+0100","flow_id":559213647352547,"pcap_cnt":678,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60041,"proto":"UDP","dns":{"type":"answer","id":19018,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:59.754250+0100","flow_id":1203508133738981,"pcap_cnt":474,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55081,"proto":"UDP","dns":{"type":"answer","id":11267,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.816216+0100","flow_id":460863191040276,"pcap_cnt":333,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49228,"proto":"UDP","dns":{"type":"answer","id":51575,"rcode":"NXDOMAIN","rrname":"volojifebeh.eu"}}
{"timestamp":"2017-12-12T18:33:03.609090+0100","flow_id":1412477620296124,"pcap_cnt":786,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61608,"proto":"UDP","dns":{"type":"answer","id":13804,"rcode":"NXDOMAIN","rrname":"pumipuvupuj.eu"}}
{"timestamp":"2017-12-12T18:32:59.768489+0100","flow_id":1217097410217143,"pcap_cnt":481,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52680,"proto":"UDP","dns":{"type":"answer","id":12568,"rcode":"NXDOMAIN","rrname":"cicafykemaj.eu"}}
{"timestamp":"2017-12-12T18:33:02.579501+0100","flow_id":1398156051701256,"pcap_cnt":669,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59174,"proto":"UDP","dns":{"type":"answer","id":55660,"rcode":"NXDOMAIN","rrname":"mavinifenam.eu"}}
{"timestamp":"2017-12-12T18:32:59.768489+0100","flow_id":1217097410217143,"pcap_cnt":481,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52680,"proto":"UDP","dns":{"type":"answer","id":12568,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.714408+0100","flow_id":2089993678693849,"pcap_cnt":649,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64388,"proto":"UDP","dns":{"type":"answer","id":15996,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:02.579501+0100","flow_id":1398156051701256,"pcap_cnt":669,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59174,"proto":"UDP","dns":{"type":"answer","id":55660,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.701589+0100","flow_id":886986224022677,"pcap_cnt":642,"event_type":"dns","src_ip":"192.168.1.100","src_port":60014,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":16645,"rrname":"diselahidaf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.840204+0100","flow_id":2079619185037836,"pcap_cnt":351,"event_type":"dns","src_ip":"192.168.1.100","src_port":58410,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":57304,"rrname":"qekenilacap.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:02.571564+0100","flow_id":314265219973514,"pcap_cnt":666,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59559,"proto":"UDP","dns":{"type":"answer","id":31070,"rcode":"NXDOMAIN","rrname":"citizufurah.eu"}}
{"timestamp":"2017-12-12T18:33:08.638238+0100","flow_id":201941088254574,"pcap_cnt":1256,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55475,"proto":"UDP","dns":{"type":"answer","id":49587,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:02.571564+0100","flow_id":314265219973514,"pcap_cnt":666,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59559,"proto":"UDP","dns":{"type":"answer","id":31070,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.583551+0100","flow_id":193237336909695,"pcap_cnt":1010,"event_type":"dns","src_ip":"192.168.1.100","src_port":63391,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38860,"rrname":"tupepulofup.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:59.671099+0100","flow_id":1584183970065950,"pcap_cnt":440,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52310,"proto":"UDP","dns":{"type":"answer","id":27070,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:59.746731+0100","flow_id":351083827014096,"pcap_cnt":470,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49515,"proto":"UDP","dns":{"type":"answer","id":53067,"rcode":"NXDOMAIN","rrname":"fogynahidal.eu"}}
{"timestamp":"2017-12-12T18:33:06.615605+0100","flow_id":687089856439477,"pcap_cnt":1039,"event_type":"dns","src_ip":"192.168.1.100","src_port":50911,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44292,"rrname":"cidaqyfynos.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:59.746731+0100","flow_id":351083827014096,"pcap_cnt":470,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49515,"proto":"UDP","dns":{"type":"answer","id":53067,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.377526+0100","flow_id":396019922655402,"pcap_cnt":936,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50441,"proto":"UDP","dns":{"type":"answer","id":54113,"rcode":"NXDOMAIN","rrname":"xuxivydifoj.eu"}}
{"timestamp":"2017-12-12T18:33:04.606221+0100","flow_id":808630988324877,"pcap_cnt":834,"event_type":"dns","src_ip":"192.168.1.100","src_port":57438,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45012,"rrname":"disisizazim.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.377526+0100","flow_id":396019922655402,"pcap_cnt":936,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50441,"proto":"UDP","dns":{"type":"answer","id":54113,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.597774+0100","flow_id":1714572735179347,"pcap_cnt":1024,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53546,"proto":"UDP","dns":{"type":"answer","id":36162,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.641264+0100","flow_id":1914022426167536,"pcap_cnt":614,"event_type":"dns","src_ip":"192.168.1.100","src_port":63165,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28286,"rrname":"tulipeqevyw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.881880+0100","flow_id":1558908087461746,"pcap_cnt":375,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51050,"proto":"UDP","dns":{"type":"answer","id":32378,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.609743+0100","flow_id":1260476580384207,"pcap_cnt":1037,"event_type":"dns","src_ip":"192.168.1.100","src_port":49625,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":58605,"rrname":"mavitacazyw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.783642+0100","flow_id":989908673164570,"pcap_cnt":1093,"event_type":"dns","src_ip":"192.168.1.100","src_port":63988,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23677,"rrname":"ryqanylofuq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:59.748653+0100","flow_id":101664338701421,"pcap_cnt":471,"event_type":"dns","src_ip":"192.168.1.100","src_port":57835,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9554,"rrname":"tulekuvigij.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:01.689355+0100","flow_id":1914022426167536,"pcap_cnt":638,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63165,"proto":"UDP","dns":{"type":"answer","id":28286,"rcode":"NXDOMAIN","rrname":"tulipeqevyw.eu"}}
{"timestamp":"2017-12-12T18:33:06.482290+0100","flow_id":1781866282785468,"pcap_cnt":962,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50271,"proto":"UDP","dns":{"type":"answer","id":59836,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:59.794540+0100","flow_id":101664338701421,"pcap_cnt":497,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57835,"proto":"UDP","dns":{"type":"answer","id":9554,"rcode":"NXDOMAIN","rrname":"tulekuvigij.eu"}}
{"timestamp":"2017-12-12T18:33:06.530289+0100","flow_id":1114995300636529,"pcap_cnt":982,"event_type":"dns","src_ip":"192.168.1.100","src_port":51091,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43454,"rrname":"xuqeqejohiv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:59.794540+0100","flow_id":101664338701421,"pcap_cnt":497,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57835,"proto":"UDP","dns":{"type":"answer","id":9554,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.661299+0100","flow_id":1260476580384207,"pcap_cnt":1063,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49625,"proto":"UDP","dns":{"type":"answer","id":58605,"rcode":"NXDOMAIN","rrname":"mavitacazyw.eu"}}
{"timestamp":"2017-12-12T18:33:04.664538+0100","flow_id":1135158024499593,"pcap_cnt":872,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65468,"proto":"UDP","dns":{"type":"answer","id":9595,"rcode":"NXDOMAIN","rrname":"jenujoxojug.eu"}}
{"timestamp":"2017-12-12T18:32:58.837153+0100","flow_id":886919651837473,"pcap_cnt":348,"event_type":"dns","src_ip":"192.168.1.100","src_port":59888,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40921,"rrname":"ciqanukaxas.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.598861+0100","flow_id":1114995300636529,"pcap_cnt":1026,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51091,"proto":"UDP","dns":{"type":"answer","id":43454,"rcode":"NXDOMAIN","rrname":"xuqeqejohiv.eu"}}
{"timestamp":"2017-12-12T18:33:06.807022+0100","flow_id":1498583124824174,"pcap_cnt":1101,"event_type":"dns","src_ip":"192.168.1.100","src_port":50102,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":52784,"rrname":"marefomecef.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:00.641285+0100","flow_id":1291078221892368,"pcap_cnt":534,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53175,"proto":"UDP","dns":{"type":"answer","id":27298,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.598861+0100","flow_id":1114995300636529,"pcap_cnt":1026,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51091,"proto":"UDP","dns":{"type":"answer","id":43454,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.811897+0100","flow_id":483394589975417,"pcap_cnt":1104,"event_type":"dns","src_ip":"192.168.1.100","src_port":52099,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19771,"rrname":"puzydaqybad.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.659333+0100","flow_id":1087552606983321,"pcap_cnt":866,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51957,"proto":"UDP","dns":{"type":"answer","id":43029,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.626733+0100","flow_id":1885755099002357,"pcap_cnt":795,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58445,"proto":"UDP","dns":{"type":"answer","id":38171,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"nojejecebuw.eu","rrtype":"A","ttl":300,"rdata":"23.253.126.58"}}
{"timestamp":"2017-12-12T18:33:03.616984+0100","flow_id":901806008809296,"pcap_cnt":791,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50622,"proto":"UDP","dns":{"type":"answer","id":60697,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.626733+0100","flow_id":1885755099002357,"pcap_cnt":795,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58445,"proto":"UDP","dns":{"type":"answer","id":38171,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"nojejecebuw.eu","rrtype":"A","ttl":300,"rdata":"104.239.157.210"}}
{"timestamp":"2017-12-12T18:33:14.611850+0100","flow_id":733789036369418,"pcap_cnt":1826,"event_type":"dns","src_ip":"192.168.1.100","src_port":58295,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7395,"rrname":"qegosegodej.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:07.354447+0100","flow_id":483394589975417,"pcap_cnt":1151,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52099,"proto":"UDP","dns":{"type":"answer","id":19771,"rcode":"NXDOMAIN","rrname":"puzydaqybad.eu"}}
{"timestamp":"2017-12-12T18:33:03.414167+0100","flow_id":236695963259351,"pcap_cnt":682,"event_type":"dns","src_ip":"192.168.1.100","src_port":50995,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":56494,"rrname":"jewemurutyj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.816216+0100","flow_id":460863191040276,"pcap_cnt":333,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49228,"proto":"UDP","dns":{"type":"answer","id":51575,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.609090+0100","flow_id":1412477620296124,"pcap_cnt":786,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61608,"proto":"UDP","dns":{"type":"answer","id":13804,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.421815+0100","flow_id":335439409624416,"pcap_cnt":1855,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49406,"proto":"UDP","dns":{"type":"answer","id":53,"rcode":"NXDOMAIN","rrname":"divotabofov.eu"}}
{"timestamp":"2017-12-12T18:33:03.451597+0100","flow_id":2143672180139021,"pcap_cnt":699,"event_type":"dns","src_ip":"192.168.1.100","src_port":62411,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2130,"rrname":"gadedozymiz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.866560+0100","flow_id":473851172106176,"pcap_cnt":366,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64358,"proto":"UDP","dns":{"type":"answer","id":29202,"rcode":"NXDOMAIN","rrname":"rytahagemeg.eu"}}
{"timestamp":"2017-12-12T18:33:03.593793+0100","flow_id":1756871720374145,"pcap_cnt":780,"event_type":"dns","src_ip":"192.168.1.100","src_port":49808,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5190,"rrname":"kefeminalyn.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.866560+0100","flow_id":473851172106176,"pcap_cnt":366,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64358,"proto":"UDP","dns":{"type":"answer","id":29202,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.518097+0100","flow_id":2143672180139021,"pcap_cnt":732,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62411,"proto":"UDP","dns":{"type":"answer","id":2130,"rcode":"NXDOMAIN","rrname":"gadedozymiz.eu"}}
{"timestamp":"2017-12-12T18:32:59.808494+0100","flow_id":960247628518958,"pcap_cnt":502,"event_type":"dns","src_ip":"192.168.1.100","src_port":60789,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":54003,"rrname":"fokuquwifys.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.645011+0100","flow_id":1756871720374145,"pcap_cnt":797,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49808,"proto":"UDP","dns":{"type":"answer","id":5190,"rcode":"NXDOMAIN","rrname":"kefeminalyn.eu"}}
{"timestamp":"2017-12-12T18:33:06.526019+0100","flow_id":1274843245971139,"pcap_cnt":980,"event_type":"dns","src_ip":"192.168.1.100","src_port":57914,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4815,"rrname":"maxuwitalag.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.645011+0100","flow_id":1756871720374145,"pcap_cnt":797,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49808,"proto":"UDP","dns":{"type":"answer","id":5190,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:00.352814+0100","flow_id":960247628518958,"pcap_cnt":521,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60789,"proto":"UDP","dns":{"type":"answer","id":54003,"rcode":"NXDOMAIN","rrname":"fokuquwifys.eu"}}
{"timestamp":"2017-12-12T18:33:08.671545+0100","flow_id":1208011407507257,"pcap_cnt":1277,"event_type":"dns","src_ip":"192.168.1.100","src_port":62886,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19423,"rrname":"jeniceripoj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:00.352814+0100","flow_id":960247628518958,"pcap_cnt":521,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60789,"proto":"UDP","dns":{"type":"answer","id":54003,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.594171+0100","flow_id":1274843245971139,"pcap_cnt":1018,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57914,"proto":"UDP","dns":{"type":"answer","id":4815,"rcode":"NXDOMAIN","rrname":"maxuwitalag.eu"}}
{"timestamp":"2017-12-12T18:33:06.404367+0100","flow_id":1876383480462683,"pcap_cnt":941,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61109,"proto":"UDP","dns":{"type":"answer","id":16711,"rcode":"NXDOMAIN","rrname":"masovufohoh.eu"}}
{"timestamp":"2017-12-12T18:33:06.631034+0100","flow_id":193237336909695,"pcap_cnt":1046,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63391,"proto":"UDP","dns":{"type":"answer","id":38860,"rcode":"NXDOMAIN","rrname":"tupepulofup.eu"}}
{"timestamp":"2017-12-12T18:33:01.623397+0100","flow_id":994006071608101,"pcap_cnt":606,"event_type":"dns","src_ip":"192.168.1.100","src_port":57481,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2265,"rrname":"tupamapazer.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:01.830472+0100","flow_id":426162002928963,"pcap_cnt":663,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59626,"proto":"UDP","dns":{"type":"answer","id":27403,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.631034+0100","flow_id":193237336909695,"pcap_cnt":1046,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63391,"proto":"UDP","dns":{"type":"answer","id":38860,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.723915+0100","flow_id":1208011407507257,"pcap_cnt":1302,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62886,"proto":"UDP","dns":{"type":"answer","id":19423,"rcode":"NXDOMAIN","rrname":"jeniceripoj.eu"}}
{"timestamp":"2017-12-12T18:33:01.835423+0100","flow_id":1756639792019763,"pcap_cnt":664,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54440,"proto":"UDP","dns":{"type":"answer","id":48213,"rcode":"NXDOMAIN","rrname":"nopodykecoc.eu"}}
{"timestamp":"2017-12-12T18:33:01.689355+0100","flow_id":1914022426167536,"pcap_cnt":638,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63165,"proto":"UDP","dns":{"type":"answer","id":28286,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.723915+0100","flow_id":1208011407507257,"pcap_cnt":1302,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62886,"proto":"UDP","dns":{"type":"answer","id":19423,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.917853+0100","flow_id":528596972794278,"pcap_cnt":398,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60568,"proto":"UDP","dns":{"type":"answer","id":14839,"rcode":"NXDOMAIN","rrname":"pupatololoz.eu"}}
{"timestamp":"2017-12-12T18:33:07.352641+0100","flow_id":508560950843736,"pcap_cnt":1150,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51135,"proto":"UDP","dns":{"type":"answer","id":1634,"rcode":"NXDOMAIN","rrname":"qequroquweb.eu"}}
{"timestamp":"2017-12-12T18:32:58.917853+0100","flow_id":528596972794278,"pcap_cnt":398,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60568,"proto":"UDP","dns":{"type":"answer","id":14839,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.485333+0100","flow_id":1062854397683669,"pcap_cnt":965,"event_type":"dns","src_ip":"192.168.1.100","src_port":49482,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48898,"rrname":"kefilyrymaj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:07.352641+0100","flow_id":508560950843736,"pcap_cnt":1150,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51135,"proto":"UDP","dns":{"type":"answer","id":1634,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:59.610185+0100","flow_id":495611623985033,"pcap_cnt":416,"event_type":"dns","src_ip":"192.168.1.100","src_port":59794,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":39978,"rrname":"xugefexojow.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.554025+0100","flow_id":1062854397683669,"pcap_cnt":996,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49482,"proto":"UDP","dns":{"type":"answer","id":48898,"rcode":"NXDOMAIN","rrname":"kefilyrymaj.eu"}}
{"timestamp":"2017-12-12T18:33:04.664538+0100","flow_id":1135158024499593,"pcap_cnt":872,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65468,"proto":"UDP","dns":{"type":"answer","id":9595,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:59.662667+0100","flow_id":495611623985033,"pcap_cnt":434,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59794,"proto":"UDP","dns":{"type":"answer","id":39978,"rcode":"NXDOMAIN","rrname":"xugefexojow.eu"}}
{"timestamp":"2017-12-12T18:32:58.894459+0100","flow_id":129115622122009,"pcap_cnt":383,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52689,"proto":"UDP","dns":{"type":"answer","id":47928,"rcode":"NXDOMAIN","rrname":"galupehudev.eu"}}
{"timestamp":"2017-12-12T18:32:59.662667+0100","flow_id":495611623985033,"pcap_cnt":434,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59794,"proto":"UDP","dns":{"type":"answer","id":39978,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.542360+0100","flow_id":539046628378264,"pcap_cnt":564,"event_type":"dns","src_ip":"192.168.1.100","src_port":57816,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30613,"rrname":"nozomotokyt.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.894459+0100","flow_id":129115622122009,"pcap_cnt":383,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52689,"proto":"UDP","dns":{"type":"answer","id":47928,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.692844+0100","flow_id":642628354888894,"pcap_cnt":898,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51369,"proto":"UDP","dns":{"type":"answer","id":50508,"rcode":"NXDOMAIN","rrname":"dikegybecys.eu"}}
{"timestamp":"2017-12-12T18:32:59.805630+0100","flow_id":1898262043511550,"pcap_cnt":499,"event_type":"dns","src_ip":"192.168.1.100","src_port":49944,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8620,"rrname":"dixesywyruc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.835645+0100","flow_id":817435671445565,"pcap_cnt":1107,"event_type":"dns","src_ip":"192.168.1.100","src_port":54868,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27862,"rrname":"dikiwewutav.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.692844+0100","flow_id":642628354888894,"pcap_cnt":898,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51369,"proto":"UDP","dns":{"type":"answer","id":50508,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.450677+0100","flow_id":1898262043511550,"pcap_cnt":543,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49944,"proto":"UDP","dns":{"type":"answer","id":8620,"rcode":"NXDOMAIN","rrname":"dixesywyruc.eu"}}
{"timestamp":"2017-12-12T18:33:07.354447+0100","flow_id":483394589975417,"pcap_cnt":1151,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52099,"proto":"UDP","dns":{"type":"answer","id":19771,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.793649+0100","flow_id":374983172955185,"pcap_cnt":1095,"event_type":"dns","src_ip":"192.168.1.100","src_port":59577,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60042,"rrname":"xukafinezeg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:07.300227+0100","flow_id":264003365540458,"pcap_cnt":1141,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59939,"proto":"UDP","dns":{"type":"answer","id":3288,"rcode":"NXDOMAIN","rrname":"kemimojitir.eu"}}
{"timestamp":"2017-12-12T18:33:06.845358+0100","flow_id":20734270432814,"pcap_cnt":1111,"event_type":"dns","src_ip":"192.168.1.100","src_port":64235,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":54171,"rrname":"lymevyrajas.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.734177+0100","flow_id":1182838604182497,"pcap_cnt":1311,"event_type":"dns","src_ip":"192.168.1.100","src_port":50631,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25051,"rrname":"mamunekuryd.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.854238+0100","flow_id":1961374440360158,"pcap_cnt":363,"event_type":"dns","src_ip":"192.168.1.100","src_port":52085,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7240,"rrname":"kezubaxemor.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.447709+0100","flow_id":105708050896093,"pcap_cnt":948,"event_type":"dns","src_ip":"192.168.1.100","src_port":59096,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25152,"rrname":"nojotomipel.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:02.601634+0100","flow_id":886986224022677,"pcap_cnt":674,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60014,"proto":"UDP","dns":{"type":"answer","id":16645,"rcode":"NXDOMAIN","rrname":"diselahidaf.eu"}}
{"timestamp":"2017-12-12T18:32:58.869125+0100","flow_id":1650710865918279,"pcap_cnt":368,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59313,"proto":"UDP","dns":{"type":"answer","id":7390,"rcode":"NXDOMAIN","rrname":"tuwypagupeb.eu"}}
{"timestamp":"2017-12-12T18:32:58.893245+0100","flow_id":341892596931942,"pcap_cnt":382,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56726,"proto":"UDP","dns":{"type":"answer","id":63598,"rcode":"NXDOMAIN","rrname":"foxehehywef.eu"}}
{"timestamp":"2017-12-12T18:33:02.601634+0100","flow_id":886986224022677,"pcap_cnt":674,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60014,"proto":"UDP","dns":{"type":"answer","id":16645,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.518097+0100","flow_id":2143672180139021,"pcap_cnt":732,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62411,"proto":"UDP","dns":{"type":"answer","id":2130,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.649694+0100","flow_id":1114668883306974,"pcap_cnt":1262,"event_type":"dns","src_ip":"192.168.1.100","src_port":50342,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50622,"rrname":"pupexuguwun.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.495919+0100","flow_id":1781868430070063,"pcap_cnt":716,"event_type":"dns","src_ip":"192.168.1.100","src_port":52918,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62817,"rrname":"jepuqoxupit.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.714050+0100","flow_id":309897238603074,"pcap_cnt":1075,"event_type":"dns","src_ip":"192.168.1.100","src_port":57841,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8602,"rrname":"jenerunybem.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.594171+0100","flow_id":1274843245971139,"pcap_cnt":1018,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57914,"proto":"UDP","dns":{"type":"answer","id":4815,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.546199+0100","flow_id":1781868430070063,"pcap_cnt":752,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52918,"proto":"UDP","dns":{"type":"answer","id":62817,"rcode":"NXDOMAIN","rrname":"jepuqoxupit.eu"}}
{"timestamp":"2017-12-12T18:33:04.639678+0100","flow_id":772415824118462,"pcap_cnt":849,"event_type":"dns","src_ip":"192.168.1.100","src_port":61466,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51926,"rrname":"qeqohevazud.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.750284+0100","flow_id":2094769682674380,"pcap_cnt":1081,"event_type":"dns","src_ip":"192.168.1.100","src_port":59812,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":39577,"rrname":"gatahohalir.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.439710+0100","flow_id":374983172955185,"pcap_cnt":1200,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59577,"proto":"UDP","dns":{"type":"answer","id":60042,"rcode":"NXDOMAIN","rrname":"xukafinezeg.eu"}}
{"timestamp":"2017-12-12T18:33:04.652538+0100","flow_id":808630988324877,"pcap_cnt":862,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57438,"proto":"UDP","dns":{"type":"answer","id":45012,"rcode":"NXDOMAIN","rrname":"disisizazim.eu"}}
{"timestamp":"2017-12-12T18:33:10.498627+0100","flow_id":1672421926410376,"pcap_cnt":1398,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56842,"proto":"UDP","dns":{"type":"answer","id":60821,"rcode":"NXDOMAIN","rrname":"cicynefogic.eu"}}
{"timestamp":"2017-12-12T18:33:04.652538+0100","flow_id":808630988324877,"pcap_cnt":862,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57438,"proto":"UDP","dns":{"type":"answer","id":45012,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.835423+0100","flow_id":1756639792019763,"pcap_cnt":664,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54440,"proto":"UDP","dns":{"type":"answer","id":48213,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.731725+0100","flow_id":212349941328461,"pcap_cnt":1080,"event_type":"dns","src_ip":"192.168.1.100","src_port":58298,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":46155,"rrname":"digumihurit.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.664534+0100","flow_id":687089856439477,"pcap_cnt":1064,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50911,"proto":"UDP","dns":{"type":"answer","id":44292,"rcode":"NXDOMAIN","rrname":"cidaqyfynos.eu"}}
{"timestamp":"2017-12-12T18:33:08.700866+0100","flow_id":1114668883306974,"pcap_cnt":1291,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50342,"proto":"UDP","dns":{"type":"answer","id":50622,"rcode":"NXDOMAIN","rrname":"pupexuguwun.eu"}}
{"timestamp":"2017-12-12T18:33:03.433544+0100","flow_id":1026083034996104,"pcap_cnt":690,"event_type":"dns","src_ip":"192.168.1.100","src_port":57568,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59776,"rrname":"vojizitoken.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.664534+0100","flow_id":687089856439477,"pcap_cnt":1064,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50911,"proto":"UDP","dns":{"type":"answer","id":44292,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:07.320180+0100","flow_id":1973814813713530,"pcap_cnt":1145,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58910,"proto":"UDP","dns":{"type":"answer","id":21616,"rcode":"NXDOMAIN","rrname":"qetityluruj.eu"}}
{"timestamp":"2017-12-12T18:33:06.484871+0100","flow_id":93572620772871,"pcap_cnt":964,"event_type":"dns","src_ip":"192.168.1.100","src_port":60326,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":39674,"rrname":"pumebeqalew.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:07.320180+0100","flow_id":1973814813713530,"pcap_cnt":1145,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58910,"proto":"UDP","dns":{"type":"answer","id":21616,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.687456+0100","flow_id":772415824118462,"pcap_cnt":894,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61466,"proto":"UDP","dns":{"type":"answer","id":51926,"rcode":"NXDOMAIN","rrname":"qeqohevazud.eu"}}
{"timestamp":"2017-12-12T18:33:04.650932+0100","flow_id":1733474886151860,"pcap_cnt":861,"event_type":"dns","src_ip":"192.168.1.100","src_port":60892,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9436,"rrname":"lykonurymex.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.506615+0100","flow_id":1148605567253239,"pcap_cnt":973,"event_type":"dns","src_ip":"192.168.1.100","src_port":52737,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49105,"rrname":"kepujajynib.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.701449+0100","flow_id":1040806182958089,"pcap_cnt":904,"event_type":"dns","src_ip":"192.168.1.100","src_port":60337,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40355,"rrname":"nofuwufutom.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:07.336694+0100","flow_id":441422022058873,"pcap_cnt":1147,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65275,"proto":"UDP","dns":{"type":"answer","id":10449,"rcode":"NXDOMAIN","rrname":"cihyrimymen.eu"}}
{"timestamp":"2017-12-12T18:33:04.674933+0100","flow_id":980893536636021,"pcap_cnt":882,"event_type":"dns","src_ip":"192.168.1.100","src_port":58040,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34000,"rrname":"lyvywyduroq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:07.336694+0100","flow_id":441422022058873,"pcap_cnt":1147,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65275,"proto":"UDP","dns":{"type":"answer","id":10449,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.402133+0100","flow_id":1040806182958089,"pcap_cnt":940,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60337,"proto":"UDP","dns":{"type":"answer","id":40355,"rcode":"NXDOMAIN","rrname":"nofuwufutom.eu"}}
{"timestamp":"2017-12-12T18:33:04.680673+0100","flow_id":178250048365281,"pcap_cnt":889,"event_type":"dns","src_ip":"192.168.1.100","src_port":64106,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50785,"rrname":"cilakyfaloq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:01.450677+0100","flow_id":1898262043511550,"pcap_cnt":543,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49944,"proto":"UDP","dns":{"type":"answer","id":8620,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.688645+0100","flow_id":562340383738388,"pcap_cnt":895,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55030,"proto":"UDP","dns":{"type":"answer","id":8999,"rcode":"NXDOMAIN","rrname":"tucumyvipys.eu"}}
{"timestamp":"2017-12-12T18:33:03.626733+0100","flow_id":1885755099002357,"pcap_cnt":795,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58445,"proto":"UDP","dns":{"type":"answer","id":38171,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"nojejecebuw.eu","rrtype":"NS","ttl":7387,"rdata":"ns1.arbor-sinkhole.net"}}
{"timestamp":"2017-12-12T18:33:04.688645+0100","flow_id":562340383738388,"pcap_cnt":895,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55030,"proto":"UDP","dns":{"type":"answer","id":8999,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.648905+0100","flow_id":1892450953389769,"pcap_cnt":1261,"event_type":"dns","src_ip":"192.168.1.100","src_port":63884,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23841,"rrname":"ryhipugajim.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.626733+0100","flow_id":1885755099002357,"pcap_cnt":795,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58445,"proto":"UDP","dns":{"type":"answer","id":38171,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"nojejecebuw.eu","rrtype":"NS","ttl":7387,"rdata":"ns1.asertdns.com"}}
{"timestamp":"2017-12-12T18:33:04.698455+0100","flow_id":1733474886151860,"pcap_cnt":902,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60892,"proto":"UDP","dns":{"type":"answer","id":9436,"rcode":"NXDOMAIN","rrname":"lykonurymex.eu"}}
{"timestamp":"2017-12-12T18:33:15.421815+0100","flow_id":335439409624416,"pcap_cnt":1855,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49406,"proto":"UDP","dns":{"type":"answer","id":53,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.452422+0100","flow_id":949503768323910,"pcap_cnt":949,"event_type":"dns","src_ip":"192.168.1.100","src_port":60914,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36794,"rrname":"maganomojer.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.479631+0100","flow_id":660686544982415,"pcap_cnt":960,"event_type":"dns","src_ip":"192.168.1.100","src_port":60226,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40107,"rrname":"foxofewuteq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.687602+0100","flow_id":1764733658379609,"pcap_cnt":1286,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56206,"proto":"UDP","dns":{"type":"answer","id":27097,"rcode":"NXDOMAIN","rrname":"disojawogaw.eu"}}
{"timestamp":"2017-12-12T18:32:58.893245+0100","flow_id":341892596931942,"pcap_cnt":382,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56726,"proto":"UDP","dns":{"type":"answer","id":63598,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.687602+0100","flow_id":1764733658379609,"pcap_cnt":1286,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56206,"proto":"UDP","dns":{"type":"answer","id":27097,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.696251+0100","flow_id":1892450953389769,"pcap_cnt":1289,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63884,"proto":"UDP","dns":{"type":"answer","id":23841,"rcode":"NXDOMAIN","rrname":"ryhipugajim.eu"}}
{"timestamp":"2017-12-12T18:32:58.908736+0100","flow_id":2079619185037836,"pcap_cnt":392,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58410,"proto":"UDP","dns":{"type":"answer","id":57304,"rcode":"NXDOMAIN","rrname":"qekenilacap.eu"}}
{"timestamp":"2017-12-12T18:33:08.696251+0100","flow_id":1892450953389769,"pcap_cnt":1289,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63884,"proto":"UDP","dns":{"type":"answer","id":23841,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.908736+0100","flow_id":2079619185037836,"pcap_cnt":392,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58410,"proto":"UDP","dns":{"type":"answer","id":57304,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.404367+0100","flow_id":1876383480462683,"pcap_cnt":941,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61109,"proto":"UDP","dns":{"type":"answer","id":16711,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:59.648900+0100","flow_id":378502898247364,"pcap_cnt":428,"event_type":"dns","src_ip":"192.168.1.100","src_port":59261,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11731,"rrname":"xukyhudokex.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:36.596958+0100","flow_id":1813966866294152,"pcap_cnt":130,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63575,"proto":"UDP","dns":{"type":"answer","id":32565,"rcode":"NXDOMAIN","rrname":"fobonobaxog.eu"}}
{"timestamp":"2017-12-12T18:33:00.499799+0100","flow_id":378502898247364,"pcap_cnt":529,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59261,"proto":"UDP","dns":{"type":"answer","id":11731,"rcode":"NXDOMAIN","rrname":"xukyhudokex.eu"}}
{"timestamp":"2017-12-12T18:33:06.581217+0100","flow_id":1830444510404193,"pcap_cnt":1007,"event_type":"dns","src_ip":"192.168.1.100","src_port":54268,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":54844,"rrname":"nozapekidis.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:01.673186+0100","flow_id":994006071608101,"pcap_cnt":629,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57481,"proto":"UDP","dns":{"type":"answer","id":2265,"rcode":"NXDOMAIN","rrname":"tupamapazer.eu"}}
{"timestamp":"2017-12-12T18:33:00.499799+0100","flow_id":378502898247364,"pcap_cnt":529,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59261,"proto":"UDP","dns":{"type":"answer","id":11731,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.439710+0100","flow_id":374983172955185,"pcap_cnt":1200,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59577,"proto":"UDP","dns":{"type":"answer","id":60042,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.627806+0100","flow_id":1830444510404193,"pcap_cnt":1044,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54268,"proto":"UDP","dns":{"type":"answer","id":54844,"rcode":"NXDOMAIN","rrname":"nozapekidis.eu"}}
{"timestamp":"2017-12-12T18:33:10.498627+0100","flow_id":1672421926410376,"pcap_cnt":1398,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56842,"proto":"UDP","dns":{"type":"answer","id":60821,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.857239+0100","flow_id":1439608928867479,"pcap_cnt":1118,"event_type":"dns","src_ip":"192.168.1.100","src_port":54039,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":65200,"rrname":"cicidutuwap.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.782304+0100","flow_id":1182838604182497,"pcap_cnt":1335,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50631,"proto":"UDP","dns":{"type":"answer","id":25051,"rcode":"NXDOMAIN","rrname":"mamunekuryd.eu"}}
{"timestamp":"2017-12-12T18:33:04.631053+0100","flow_id":1138024915181837,"pcap_cnt":843,"event_type":"dns","src_ip":"192.168.1.100","src_port":49284,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4755,"rrname":"xukuxaxidub.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:10.426828+0100","flow_id":1087477445460812,"pcap_cnt":1360,"event_type":"dns","src_ip":"192.168.1.100","src_port":64493,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":10626,"rrname":"keryxadalid.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.782304+0100","flow_id":1182838604182497,"pcap_cnt":1335,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50631,"proto":"UDP","dns":{"type":"answer","id":25051,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.700866+0100","flow_id":1114668883306974,"pcap_cnt":1291,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50342,"proto":"UDP","dns":{"type":"answer","id":50622,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.661299+0100","flow_id":1260476580384207,"pcap_cnt":1063,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49625,"proto":"UDP","dns":{"type":"answer","id":58605,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:07.399231+0100","flow_id":1439608928867479,"pcap_cnt":1158,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54039,"proto":"UDP","dns":{"type":"answer","id":65200,"rcode":"NXDOMAIN","rrname":"cicidutuwap.eu"}}
{"timestamp":"2017-12-12T18:33:06.554025+0100","flow_id":1062854397683669,"pcap_cnt":996,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49482,"proto":"UDP","dns":{"type":"answer","id":48898,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.415155+0100","flow_id":984170597078451,"pcap_cnt":1357,"event_type":"dns","src_ip":"192.168.1.100","src_port":61382,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40129,"rrname":"foguhosecib.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.580882+0100","flow_id":1517848200797458,"pcap_cnt":1231,"event_type":"dns","src_ip":"192.168.1.100","src_port":59502,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53392,"rrname":"lygowunezep.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.579828+0100","flow_id":1712476791167220,"pcap_cnt":1006,"event_type":"dns","src_ip":"192.168.1.100","src_port":57787,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41363,"rrname":"xugosedaloc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.858098+0100","flow_id":2081356499785714,"pcap_cnt":1119,"event_type":"dns","src_ip":"192.168.1.100","src_port":55993,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63775,"rrname":"kepatixidyg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.552619+0100","flow_id":93572620772871,"pcap_cnt":994,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60326,"proto":"UDP","dns":{"type":"answer","id":39674,"rcode":"NXDOMAIN","rrname":"pumebeqalew.eu"}}
{"timestamp":"2017-12-12T18:33:08.601291+0100","flow_id":729945040235723,"pcap_cnt":1237,"event_type":"dns","src_ip":"192.168.1.100","src_port":51704,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18959,"rrname":"lysumedalik.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:10.420839+0100","flow_id":302902884592615,"pcap_cnt":1358,"event_type":"dns","src_ip":"192.168.1.100","src_port":63213,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29557,"rrname":"gadoposuwif.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.158193+0100","flow_id":848136097457083,"pcap_cnt":801,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59449,"proto":"UDP","dns":{"type":"answer","id":37305,"rcode":"NXDOMAIN","rrname":"novixamymyf.eu"}}
{"timestamp":"2017-12-12T18:33:06.402133+0100","flow_id":1040806182958089,"pcap_cnt":940,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60337,"proto":"UDP","dns":{"type":"answer","id":40355,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.646852+0100","flow_id":1517848200797458,"pcap_cnt":1259,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59502,"proto":"UDP","dns":{"type":"answer","id":53392,"rcode":"NXDOMAIN","rrname":"lygowunezep.eu"}}
{"timestamp":"2017-12-12T18:33:03.460553+0100","flow_id":236695963259351,"pcap_cnt":701,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50995,"proto":"UDP","dns":{"type":"answer","id":56494,"rcode":"NXDOMAIN","rrname":"jewemurutyj.eu"}}
{"timestamp":"2017-12-12T18:33:01.543384+0100","flow_id":261724885043864,"pcap_cnt":565,"event_type":"dns","src_ip":"192.168.1.100","src_port":53912,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40177,"rrname":"pupucuvymup.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.646852+0100","flow_id":1517848200797458,"pcap_cnt":1259,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59502,"proto":"UDP","dns":{"type":"answer","id":53392,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.420453+0100","flow_id":78699149027941,"pcap_cnt":942,"event_type":"dns","src_ip":"192.168.1.100","src_port":59414,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":10840,"rrname":"xuboninogyt.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.460553+0100","flow_id":236695963259351,"pcap_cnt":701,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50995,"proto":"UDP","dns":{"type":"answer","id":56494,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.503429+0100","flow_id":949503768323910,"pcap_cnt":972,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60914,"proto":"UDP","dns":{"type":"answer","id":36794,"rcode":"NXDOMAIN","rrname":"maganomojer.eu"}}
{"timestamp":"2017-12-12T18:33:01.511992+0100","flow_id":1443515201343480,"pcap_cnt":554,"event_type":"dns","src_ip":"192.168.1.100","src_port":60067,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":54887,"rrname":"kefidaxupif.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:01.611710+0100","flow_id":261724885043864,"pcap_cnt":597,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53912,"proto":"UDP","dns":{"type":"answer","id":40177,"rcode":"NXDOMAIN","rrname":"pupucuvymup.eu"}}
{"timestamp":"2017-12-12T18:33:06.503429+0100","flow_id":949503768323910,"pcap_cnt":972,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60914,"proto":"UDP","dns":{"type":"answer","id":36794,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.624071+0100","flow_id":1549976703305159,"pcap_cnt":794,"event_type":"dns","src_ip":"192.168.1.100","src_port":63615,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28861,"rrname":"qeketaqojyf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.667757+0100","flow_id":729945040235723,"pcap_cnt":1273,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51704,"proto":"UDP","dns":{"type":"answer","id":18959,"rcode":"NXDOMAIN","rrname":"lysumedalik.eu"}}
{"timestamp":"2017-12-12T18:33:01.611710+0100","flow_id":261724885043864,"pcap_cnt":597,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53912,"proto":"UDP","dns":{"type":"answer","id":40177,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.535680+0100","flow_id":779972819168384,"pcap_cnt":984,"event_type":"dns","src_ip":"192.168.1.100","src_port":50913,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44908,"rrname":"cinycekecid.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.166937+0100","flow_id":1549976703305159,"pcap_cnt":802,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63615,"proto":"UDP","dns":{"type":"answer","id":28861,"rcode":"NXDOMAIN","rrname":"qeketaqojyf.eu"}}
{"timestamp":"2017-12-12T18:33:08.726848+0100","flow_id":2058666187691840,"pcap_cnt":1304,"event_type":"dns","src_ip":"192.168.1.100","src_port":60354,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":22534,"rrname":"lykatojexub.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.488543+0100","flow_id":2030461135349078,"pcap_cnt":710,"event_type":"dns","src_ip":"192.168.1.100","src_port":58912,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30789,"rrname":"jefiredisav.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:04.166937+0100","flow_id":1549976703305159,"pcap_cnt":802,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63615,"proto":"UDP","dns":{"type":"answer","id":28861,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.603956+0100","flow_id":779972819168384,"pcap_cnt":1031,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50913,"proto":"UDP","dns":{"type":"answer","id":44908,"rcode":"NXDOMAIN","rrname":"cinycekecid.eu"}}
{"timestamp":"2017-12-12T18:32:36.596958+0100","flow_id":1813966866294152,"pcap_cnt":130,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63575,"proto":"UDP","dns":{"type":"answer","id":32565,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.673186+0100","flow_id":994006071608101,"pcap_cnt":629,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57481,"proto":"UDP","dns":{"type":"answer","id":2265,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.495303+0100","flow_id":105708050896093,"pcap_cnt":969,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59096,"proto":"UDP","dns":{"type":"answer","id":25152,"rcode":"NXDOMAIN","rrname":"nojotomipel.eu"}}
{"timestamp":"2017-12-12T18:33:04.633189+0100","flow_id":1071740684904805,"pcap_cnt":845,"event_type":"dns","src_ip":"192.168.1.100","src_port":61757,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29410,"rrname":"cihihacakuf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.495303+0100","flow_id":105708050896093,"pcap_cnt":969,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59096,"proto":"UDP","dns":{"type":"answer","id":25152,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:07.275386+0100","flow_id":212349941328461,"pcap_cnt":1139,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58298,"proto":"UDP","dns":{"type":"answer","id":46155,"rcode":"NXDOMAIN","rrname":"digumihurit.eu"}}
{"timestamp":"2017-12-12T18:33:01.695242+0100","flow_id":155542556089290,"pcap_cnt":640,"event_type":"dns","src_ip":"192.168.1.100","src_port":56366,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":21261,"rrname":"tujurogacag.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:10.532601+0100","flow_id":1689378457263740,"pcap_cnt":1415,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58730,"proto":"UDP","dns":{"type":"answer","id":13508,"rcode":"NXDOMAIN","rrname":"jefyqynofaj.eu"}}
{"timestamp":"2017-12-12T18:33:01.562972+0100","flow_id":1039189127567132,"pcap_cnt":570,"event_type":"dns","src_ip":"192.168.1.100","src_port":60821,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50655,"rrname":"ganuqibevux.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.654382+0100","flow_id":827378520620078,"pcap_cnt":864,"event_type":"dns","src_ip":"192.168.1.100","src_port":54270,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49749,"rrname":"xugelurisep.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:10.532601+0100","flow_id":1689378457263740,"pcap_cnt":1415,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58730,"proto":"UDP","dns":{"type":"answer","id":13508,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.718735+0100","flow_id":1656298619271055,"pcap_cnt":1565,"event_type":"dns","src_ip":"192.168.1.100","src_port":55638,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47857,"rrname":"rynoryguwuh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.716372+0100","flow_id":1996837986037332,"pcap_cnt":1298,"event_type":"dns","src_ip":"192.168.1.100","src_port":53438,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14925,"rrname":"tulyrylynyc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.676719+0100","flow_id":1138024915181837,"pcap_cnt":885,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49284,"proto":"UDP","dns":{"type":"answer","id":4755,"rcode":"NXDOMAIN","rrname":"xukuxaxidub.eu"}}
{"timestamp":"2017-12-12T18:33:04.687456+0100","flow_id":772415824118462,"pcap_cnt":894,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61466,"proto":"UDP","dns":{"type":"answer","id":51926,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.676719+0100","flow_id":1138024915181837,"pcap_cnt":885,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49284,"proto":"UDP","dns":{"type":"answer","id":4755,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.475682+0100","flow_id":1087477445460812,"pcap_cnt":1387,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64493,"proto":"UDP","dns":{"type":"answer","id":10626,"rcode":"NXDOMAIN","rrname":"keryxadalid.eu"}}
{"timestamp":"2017-12-12T18:33:06.462013+0100","flow_id":1182086984764605,"pcap_cnt":951,"event_type":"dns","src_ip":"192.168.1.100","src_port":58947,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1544,"rrname":"rytifaquwer.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.494590+0100","flow_id":1537154078667089,"pcap_cnt":1209,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55163,"proto":"UDP","dns":{"type":"answer","id":54429,"rcode":"NXDOMAIN","rrname":"dixotuzipuh.eu"}}
{"timestamp":"2017-12-12T18:33:10.475682+0100","flow_id":1087477445460812,"pcap_cnt":1387,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64493,"proto":"UDP","dns":{"type":"answer","id":10626,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.552619+0100","flow_id":93572620772871,"pcap_cnt":994,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60326,"proto":"UDP","dns":{"type":"answer","id":39674,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.870305+0100","flow_id":1936444303230881,"pcap_cnt":1130,"event_type":"dns","src_ip":"192.168.1.100","src_port":54661,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":24412,"rrname":"pumojopymol.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.484812+0100","flow_id":1594517661705676,"pcap_cnt":807,"event_type":"dns","src_ip":"192.168.1.100","src_port":56197,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":46208,"rrname":"kejywajazok.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.574349+0100","flow_id":1148605567253239,"pcap_cnt":1003,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52737,"proto":"UDP","dns":{"type":"answer","id":49105,"rcode":"NXDOMAIN","rrname":"kepujajynib.eu"}}
{"timestamp":"2017-12-12T18:33:07.415467+0100","flow_id":1936444303230881,"pcap_cnt":1164,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54661,"proto":"UDP","dns":{"type":"answer","id":24412,"rcode":"NXDOMAIN","rrname":"pumojopymol.eu"}}
{"timestamp":"2017-12-12T18:33:04.158193+0100","flow_id":848136097457083,"pcap_cnt":801,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59449,"proto":"UDP","dns":{"type":"answer","id":37305,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:07.415467+0100","flow_id":1936444303230881,"pcap_cnt":1164,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54661,"proto":"UDP","dns":{"type":"answer","id":24412,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.465351+0100","flow_id":984170597078451,"pcap_cnt":1378,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61382,"proto":"UDP","dns":{"type":"answer","id":40129,"rcode":"NXDOMAIN","rrname":"foguhosecib.eu"}}
{"timestamp":"2017-12-12T18:33:01.609211+0100","flow_id":539046628378264,"pcap_cnt":595,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57816,"proto":"UDP","dns":{"type":"answer","id":30613,"rcode":"NXDOMAIN","rrname":"nozomotokyt.eu"}}
{"timestamp":"2017-12-12T18:33:04.503173+0100","flow_id":2060399206772101,"pcap_cnt":811,"event_type":"dns","src_ip":"192.168.1.100","src_port":50609,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":61927,"rrname":"vowuqykecij.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.503950+0100","flow_id":2081356499785714,"pcap_cnt":1212,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55993,"proto":"UDP","dns":{"type":"answer","id":63775,"rcode":"NXDOMAIN","rrname":"kepatixidyg.eu"}}
{"timestamp":"2017-12-12T18:33:07.300227+0100","flow_id":264003365540458,"pcap_cnt":1141,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59939,"proto":"UDP","dns":{"type":"answer","id":3288,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.869125+0100","flow_id":1650710865918279,"pcap_cnt":368,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59313,"proto":"UDP","dns":{"type":"answer","id":7390,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.503950+0100","flow_id":2081356499785714,"pcap_cnt":1212,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55993,"proto":"UDP","dns":{"type":"answer","id":63775,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.569162+0100","flow_id":2060399206772101,"pcap_cnt":824,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50609,"proto":"UDP","dns":{"type":"answer","id":61927,"rcode":"NXDOMAIN","rrname":"vowuqykecij.eu"}}
{"timestamp":"2017-12-12T18:33:03.523658+0100","flow_id":1497812178042250,"pcap_cnt":735,"event_type":"dns","src_ip":"192.168.1.100","src_port":55046,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":21194,"rrname":"fobuvohevor.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:01.724846+0100","flow_id":1442312610451310,"pcap_cnt":655,"event_type":"dns","src_ip":"192.168.1.100","src_port":57058,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":24648,"rrname":"jenabejurov.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:01.578248+0100","flow_id":1443515201343480,"pcap_cnt":579,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60067,"proto":"UDP","dns":{"type":"answer","id":54887,"rcode":"NXDOMAIN","rrname":"kefidaxupif.eu"}}
{"timestamp":"2017-12-12T18:32:58.911480+0100","flow_id":762958305745470,"pcap_cnt":394,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58515,"proto":"UDP","dns":{"type":"answer","id":61220,"rcode":"NXDOMAIN","rrname":"novugukupap.eu"}}
{"timestamp":"2017-12-12T18:33:11.616114+0100","flow_id":1338930600830642,"pcap_cnt":1511,"event_type":"dns","src_ip":"192.168.1.100","src_port":53296,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":32562,"rrname":"jewujenezac.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.572829+0100","flow_id":1497812178042250,"pcap_cnt":768,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55046,"proto":"UDP","dns":{"type":"answer","id":21194,"rcode":"NXDOMAIN","rrname":"fobuvohevor.eu"}}
{"timestamp":"2017-12-12T18:33:01.825525+0100","flow_id":1442312610451310,"pcap_cnt":662,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57058,"proto":"UDP","dns":{"type":"answer","id":24648,"rcode":"NXDOMAIN","rrname":"jenabejurov.eu"}}
{"timestamp":"2017-12-12T18:33:07.651117+0100","flow_id":2094769682674380,"pcap_cnt":1171,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59812,"proto":"UDP","dns":{"type":"answer","id":39577,"rcode":"NXDOMAIN","rrname":"gatahohalir.eu"}}
{"timestamp":"2017-12-12T18:33:03.496875+0100","flow_id":1116732614743275,"pcap_cnt":717,"event_type":"dns","src_ip":"192.168.1.100","src_port":52852,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23463,"rrname":"cinorufifac.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:01.825525+0100","flow_id":1442312610451310,"pcap_cnt":662,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57058,"proto":"UDP","dns":{"type":"answer","id":24648,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:07.651117+0100","flow_id":2094769682674380,"pcap_cnt":1171,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59812,"proto":"UDP","dns":{"type":"answer","id":39577,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.755451+0100","flow_id":758936069506811,"pcap_cnt":1325,"event_type":"dns","src_ip":"192.168.1.100","src_port":50726,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31987,"rrname":"kemelixakyz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.536195+0100","flow_id":2030461135349078,"pcap_cnt":743,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58912,"proto":"UDP","dns":{"type":"answer","id":30789,"rcode":"NXDOMAIN","rrname":"jefiredisav.eu"}}
{"timestamp":"2017-12-12T18:33:08.541362+0100","flow_id":516987676803762,"pcap_cnt":1220,"event_type":"dns","src_ip":"192.168.1.100","src_port":57117,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35654,"rrname":"makolacynyd.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.647154+0100","flow_id":1937709171007474,"pcap_cnt":857,"event_type":"dns","src_ip":"192.168.1.100","src_port":65333,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":3255,"rrname":"kezituraxep.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:09.601733+0100","flow_id":758936069506811,"pcap_cnt":1346,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50726,"proto":"UDP","dns":{"type":"answer","id":31987,"rcode":"NXDOMAIN","rrname":"kemelixakyz.eu"}}
{"timestamp":"2017-12-12T18:33:08.608280+0100","flow_id":516987676803762,"pcap_cnt":1239,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57117,"proto":"UDP","dns":{"type":"answer","id":35654,"rcode":"NXDOMAIN","rrname":"makolacynyd.eu"}}
{"timestamp":"2017-12-12T18:33:07.275386+0100","flow_id":212349941328461,"pcap_cnt":1139,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58298,"proto":"UDP","dns":{"type":"answer","id":46155,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.547272+0100","flow_id":660686544982415,"pcap_cnt":989,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60226,"proto":"UDP","dns":{"type":"answer","id":40107,"rcode":"NXDOMAIN","rrname":"foxofewuteq.eu"}}
{"timestamp":"2017-12-12T18:33:09.601733+0100","flow_id":758936069506811,"pcap_cnt":1346,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50726,"proto":"UDP","dns":{"type":"answer","id":31987,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.567486+0100","flow_id":1075696349587646,"pcap_cnt":574,"event_type":"dns","src_ip":"192.168.1.100","src_port":62160,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60491,"rrname":"kezajonifuz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.547272+0100","flow_id":660686544982415,"pcap_cnt":989,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60226,"proto":"UDP","dns":{"type":"answer","id":40107,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.452232+0100","flow_id":1498583124824174,"pcap_cnt":1203,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50102,"proto":"UDP","dns":{"type":"answer","id":52784,"rcode":"NXDOMAIN","rrname":"marefomecef.eu"}}
{"timestamp":"2017-12-12T18:33:10.421772+0100","flow_id":1008800087043980,"pcap_cnt":1359,"event_type":"dns","src_ip":"192.168.1.100","src_port":64413,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42542,"rrname":"jepemadodiv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.732304+0100","flow_id":1780852670606480,"pcap_cnt":1309,"event_type":"dns","src_ip":"192.168.1.100","src_port":56386,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":24652,"rrname":"vopogakakud.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.452232+0100","flow_id":1498583124824174,"pcap_cnt":1203,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50102,"proto":"UDP","dns":{"type":"answer","id":52784,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.645279+0100","flow_id":1439067763366047,"pcap_cnt":1526,"event_type":"dns","src_ip":"192.168.1.100","src_port":64197,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62372,"rrname":"fotinosuwir.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.589512+0100","flow_id":1202114417093644,"pcap_cnt":1016,"event_type":"dns","src_ip":"192.168.1.100","src_port":58413,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":61937,"rrname":"gacypizohut.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:07.399231+0100","flow_id":1439608928867479,"pcap_cnt":1158,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54039,"proto":"UDP","dns":{"type":"answer","id":65200,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.494590+0100","flow_id":1537154078667089,"pcap_cnt":1209,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55163,"proto":"UDP","dns":{"type":"answer","id":54429,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.625786+0100","flow_id":735285831961722,"pcap_cnt":1042,"event_type":"dns","src_ip":"192.168.1.100","src_port":52840,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37571,"rrname":"rylyzevipyw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.551534+0100","flow_id":1594517661705676,"pcap_cnt":818,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56197,"proto":"UDP","dns":{"type":"answer","id":46208,"rcode":"NXDOMAIN","rrname":"kejywajazok.eu"}}
{"timestamp":"2017-12-12T18:33:07.613854+0100","flow_id":309897238603074,"pcap_cnt":1168,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57841,"proto":"UDP","dns":{"type":"answer","id":8602,"rcode":"NXDOMAIN","rrname":"jenerunybem.eu"}}
{"timestamp":"2017-12-12T18:33:10.479284+0100","flow_id":962356458180660,"pcap_cnt":1389,"event_type":"dns","src_ip":"192.168.1.100","src_port":57999,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31388,"rrname":"galefihituz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.551534+0100","flow_id":1594517661705676,"pcap_cnt":818,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56197,"proto":"UDP","dns":{"type":"answer","id":46208,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.465351+0100","flow_id":984170597078451,"pcap_cnt":1378,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61382,"proto":"UDP","dns":{"type":"answer","id":40129,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.481860+0100","flow_id":817435671445565,"pcap_cnt":1206,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54868,"proto":"UDP","dns":{"type":"answer","id":27862,"rcode":"NXDOMAIN","rrname":"dikiwewutav.eu"}}
{"timestamp":"2017-12-12T18:33:08.638248+0100","flow_id":2184302571076904,"pcap_cnt":1257,"event_type":"dns","src_ip":"192.168.1.100","src_port":58067,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35293,"rrname":"tujeqoqybar.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.652612+0100","flow_id":909143960515908,"pcap_cnt":863,"event_type":"dns","src_ip":"192.168.1.100","src_port":56875,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1331,"rrname":"jepazunalyx.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.427562+0100","flow_id":1899816822146602,"pcap_cnt":945,"event_type":"dns","src_ip":"192.168.1.100","src_port":56915,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41032,"rrname":"volugomymet.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.463664+0100","flow_id":733789036369418,"pcap_cnt":1863,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58295,"proto":"UDP","dns":{"type":"answer","id":7395,"rcode":"NXDOMAIN","rrname":"qegosegodej.eu"}}
{"timestamp":"2017-12-12T18:33:04.569162+0100","flow_id":2060399206772101,"pcap_cnt":824,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50609,"proto":"UDP","dns":{"type":"answer","id":61927,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.670785+0100","flow_id":683829976120385,"pcap_cnt":879,"event_type":"dns","src_ip":"192.168.1.100","src_port":59587,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17521,"rrname":"gatuvesisak.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.911480+0100","flow_id":762958305745470,"pcap_cnt":394,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58515,"proto":"UDP","dns":{"type":"answer","id":61220,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.471996+0100","flow_id":78699149027941,"pcap_cnt":954,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59414,"proto":"UDP","dns":{"type":"answer","id":10840,"rcode":"NXDOMAIN","rrname":"xuboninogyt.eu"}}
{"timestamp":"2017-12-12T18:33:06.489317+0100","flow_id":961076557674341,"pcap_cnt":967,"event_type":"dns","src_ip":"192.168.1.100","src_port":58950,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53860,"rrname":"lysafurisam.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.572829+0100","flow_id":1497812178042250,"pcap_cnt":768,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55046,"proto":"UDP","dns":{"type":"answer","id":21194,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.471996+0100","flow_id":78699149027941,"pcap_cnt":954,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59414,"proto":"UDP","dns":{"type":"answer","id":10840,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.925729+0100","flow_id":1961374440360158,"pcap_cnt":404,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52085,"proto":"UDP","dns":{"type":"answer","id":7240,"rcode":"NXDOMAIN","rrname":"kezubaxemor.eu"}}
{"timestamp":"2017-12-12T18:33:06.556609+0100","flow_id":961076557674341,"pcap_cnt":999,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58950,"proto":"UDP","dns":{"type":"answer","id":53860,"rcode":"NXDOMAIN","rrname":"lysafurisam.eu"}}
{"timestamp":"2017-12-12T18:33:08.491916+0100","flow_id":20734270432814,"pcap_cnt":1208,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64235,"proto":"UDP","dns":{"type":"answer","id":54171,"rcode":"NXDOMAIN","rrname":"lymevyrajas.eu"}}
{"timestamp":"2017-12-12T18:33:08.770516+0100","flow_id":2058666187691840,"pcap_cnt":1328,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60354,"proto":"UDP","dns":{"type":"answer","id":22534,"rcode":"NXDOMAIN","rrname":"lykatojexub.eu"}}
{"timestamp":"2017-12-12T18:33:03.423218+0100","flow_id":1825732931056946,"pcap_cnt":686,"event_type":"dns","src_ip":"192.168.1.100","src_port":58318,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":55059,"rrname":"rynikulokop.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.556609+0100","flow_id":961076557674341,"pcap_cnt":999,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58950,"proto":"UDP","dns":{"type":"answer","id":53860,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.536195+0100","flow_id":2030461135349078,"pcap_cnt":743,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58912,"proto":"UDP","dns":{"type":"answer","id":30789,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.770516+0100","flow_id":2058666187691840,"pcap_cnt":1328,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60354,"proto":"UDP","dns":{"type":"answer","id":22534,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.608280+0100","flow_id":516987676803762,"pcap_cnt":1239,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57117,"proto":"UDP","dns":{"type":"answer","id":35654,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.500732+0100","flow_id":1026083034996104,"pcap_cnt":719,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57568,"proto":"UDP","dns":{"type":"answer","id":59776,"rcode":"NXDOMAIN","rrname":"vojizitoken.eu"}}
{"timestamp":"2017-12-12T18:33:06.558979+0100","flow_id":1974087544113027,"pcap_cnt":1001,"event_type":"dns","src_ip":"192.168.1.100","src_port":61720,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43491,"rrname":"kezeceduwov.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:12.564842+0100","flow_id":1656298619271055,"pcap_cnt":1596,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55638,"proto":"UDP","dns":{"type":"answer","id":47857,"rcode":"NXDOMAIN","rrname":"rynoryguwuh.eu"}}
{"timestamp":"2017-12-12T18:33:03.549626+0100","flow_id":1116732614743275,"pcap_cnt":755,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52852,"proto":"UDP","dns":{"type":"answer","id":23463,"rcode":"NXDOMAIN","rrname":"cinorufifac.eu"}}
{"timestamp":"2017-12-12T18:33:01.610430+0100","flow_id":1039189127567132,"pcap_cnt":596,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60821,"proto":"UDP","dns":{"type":"answer","id":50655,"rcode":"NXDOMAIN","rrname":"ganuqibevux.eu"}}
{"timestamp":"2017-12-12T18:33:12.564842+0100","flow_id":1656298619271055,"pcap_cnt":1596,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55638,"proto":"UDP","dns":{"type":"answer","id":47857,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:56.892305+0100","flow_id":1095539098164625,"pcap_cnt":160,"event_type":"dns","src_ip":"192.168.1.100","src_port":57496,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":56120,"rrname":"foqaqehacew.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.706924+0100","flow_id":827378520620078,"pcap_cnt":908,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54270,"proto":"UDP","dns":{"type":"answer","id":49749,"rcode":"NXDOMAIN","rrname":"xugelurisep.eu"}}
{"timestamp":"2017-12-12T18:33:10.471497+0100","flow_id":1008800087043980,"pcap_cnt":1382,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64413,"proto":"UDP","dns":{"type":"answer","id":42542,"rcode":"NXDOMAIN","rrname":"jepemadodiv.eu"}}
{"timestamp":"2017-12-12T18:33:13.433194+0100","flow_id":1799613088111658,"pcap_cnt":1619,"event_type":"dns","src_ip":"192.168.1.100","src_port":53016,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34169,"rrname":"tuwiqelages.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:56.899206+0100","flow_id":1702778754349190,"pcap_cnt":164,"event_type":"dns","src_ip":"192.168.1.100","src_port":60940,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9406,"rrname":"kevedorozup.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.712014+0100","flow_id":1439067763366047,"pcap_cnt":1559,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64197,"proto":"UDP","dns":{"type":"answer","id":62372,"rcode":"NXDOMAIN","rrname":"fotinosuwir.eu"}}
{"timestamp":"2017-12-12T18:32:56.935079+0100","flow_id":435196466316455,"pcap_cnt":178,"event_type":"dns","src_ip":"192.168.1.100","src_port":54432,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31932,"rrname":"maravatudur.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.574349+0100","flow_id":1148605567253239,"pcap_cnt":1003,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52737,"proto":"UDP","dns":{"type":"answer","id":49105,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.712014+0100","flow_id":1439067763366047,"pcap_cnt":1559,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64197,"proto":"UDP","dns":{"type":"answer","id":62372,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:07.613854+0100","flow_id":309897238603074,"pcap_cnt":1168,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57841,"proto":"UDP","dns":{"type":"answer","id":8602,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.618352+0100","flow_id":239223551717232,"pcap_cnt":1040,"event_type":"dns","src_ip":"192.168.1.100","src_port":65005,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8312,"rrname":"qexanevymyk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.522066+0100","flow_id":483059583022930,"pcap_cnt":1648,"event_type":"dns","src_ip":"192.168.1.100","src_port":56798,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8825,"rrname":"jejecyxyvex.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.479871+0100","flow_id":1799613088111658,"pcap_cnt":1640,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53016,"proto":"UDP","dns":{"type":"answer","id":34169,"rcode":"NXDOMAIN","rrname":"tuwiqelages.eu"}}
{"timestamp":"2017-12-12T18:33:10.521388+0100","flow_id":1087477445460812,"pcap_cnt":1410,"event_type":"dns","src_ip":"192.168.1.100","src_port":64493,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7274,"rrname":"xutufojisyl.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:13.479871+0100","flow_id":1799613088111658,"pcap_cnt":1640,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53016,"proto":"UDP","dns":{"type":"answer","id":34169,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.481860+0100","flow_id":817435671445565,"pcap_cnt":1206,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54868,"proto":"UDP","dns":{"type":"answer","id":27862,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.470070+0100","flow_id":302902884592615,"pcap_cnt":1381,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63213,"proto":"UDP","dns":{"type":"answer","id":29557,"rcode":"NXDOMAIN","rrname":"gadoposuwif.eu"}}
{"timestamp":"2017-12-12T18:33:06.665744+0100","flow_id":239223551717232,"pcap_cnt":1065,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65005,"proto":"UDP","dns":{"type":"answer","id":8312,"rcode":"NXDOMAIN","rrname":"qexanevymyk.eu"}}
{"timestamp":"2017-12-12T18:33:08.429818+0100","flow_id":989908673164570,"pcap_cnt":1199,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63988,"proto":"UDP","dns":{"type":"answer","id":23677,"rcode":"NXDOMAIN","rrname":"ryqanylofuq.eu"}}
{"timestamp":"2017-12-12T18:33:10.470070+0100","flow_id":302902884592615,"pcap_cnt":1381,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63213,"proto":"UDP","dns":{"type":"answer","id":29557,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.665744+0100","flow_id":239223551717232,"pcap_cnt":1065,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65005,"proto":"UDP","dns":{"type":"answer","id":8312,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.429818+0100","flow_id":989908673164570,"pcap_cnt":1199,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63988,"proto":"UDP","dns":{"type":"answer","id":23677,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.578248+0100","flow_id":1443515201343480,"pcap_cnt":579,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60067,"proto":"UDP","dns":{"type":"answer","id":54887,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.546199+0100","flow_id":1781868430070063,"pcap_cnt":752,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52918,"proto":"UDP","dns":{"type":"answer","id":62817,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.650136+0100","flow_id":690429193677720,"pcap_cnt":1263,"event_type":"dns","src_ip":"192.168.1.100","src_port":59631,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25572,"rrname":"tufamugevih.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.705717+0100","flow_id":909143960515908,"pcap_cnt":906,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56875,"proto":"UDP","dns":{"type":"answer","id":1331,"rcode":"NXDOMAIN","rrname":"jepazunalyx.eu"}}
{"timestamp":"2017-12-12T18:33:01.663185+0100","flow_id":1251341184605841,"pcap_cnt":619,"event_type":"dns","src_ip":"192.168.1.100","src_port":51018,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":16438,"rrname":"pujamyqywyk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.603956+0100","flow_id":779972819168384,"pcap_cnt":1031,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50913,"proto":"UDP","dns":{"type":"answer","id":44908,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.702581+0100","flow_id":690429193677720,"pcap_cnt":1293,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59631,"proto":"UDP","dns":{"type":"answer","id":25572,"rcode":"NXDOMAIN","rrname":"tufamugevih.eu"}}
{"timestamp":"2017-12-12T18:33:01.675477+0100","flow_id":301002360966805,"pcap_cnt":631,"event_type":"dns","src_ip":"192.168.1.100","src_port":49571,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36861,"rrname":"lygetudokej.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.478118+0100","flow_id":1899816822146602,"pcap_cnt":957,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56915,"proto":"UDP","dns":{"type":"answer","id":41032,"rcode":"NXDOMAIN","rrname":"volugomymet.eu"}}
{"timestamp":"2017-12-12T18:33:08.491916+0100","flow_id":20734270432814,"pcap_cnt":1208,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64235,"proto":"UDP","dns":{"type":"answer","id":54171,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.478118+0100","flow_id":1899816822146602,"pcap_cnt":957,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56915,"proto":"UDP","dns":{"type":"answer","id":41032,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.667571+0100","flow_id":1493729811640243,"pcap_cnt":874,"event_type":"dns","src_ip":"192.168.1.100","src_port":60556,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2488,"rrname":"rycaropynar.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.625759+0100","flow_id":2098330210700383,"pcap_cnt":1249,"event_type":"dns","src_ip":"192.168.1.100","src_port":57536,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":683,"rrname":"rylodoqakal.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.489716+0100","flow_id":1825732931056946,"pcap_cnt":711,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58318,"proto":"UDP","dns":{"type":"answer","id":55059,"rcode":"NXDOMAIN","rrname":"rynikulokop.eu"}}
{"timestamp":"2017-12-12T18:33:06.481306+0100","flow_id":350673658075162,"pcap_cnt":961,"event_type":"dns","src_ip":"192.168.1.100","src_port":58474,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":22763,"rrname":"galerywogej.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.676666+0100","flow_id":2098330210700383,"pcap_cnt":1282,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57536,"proto":"UDP","dns":{"type":"answer","id":683,"rcode":"NXDOMAIN","rrname":"rylodoqakal.eu"}}
{"timestamp":"2017-12-12T18:33:10.408309+0100","flow_id":804037521193717,"pcap_cnt":1356,"event_type":"dns","src_ip":"192.168.1.100","src_port":50467,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31879,"rrname":"vojykocezel.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.680874+0100","flow_id":1071740684904805,"pcap_cnt":890,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61757,"proto":"UDP","dns":{"type":"answer","id":29410,"rcode":"NXDOMAIN","rrname":"cihihacakuf.eu"}}
{"timestamp":"2017-12-12T18:33:03.500732+0100","flow_id":1026083034996104,"pcap_cnt":719,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57568,"proto":"UDP","dns":{"type":"answer","id":59776,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.676666+0100","flow_id":2098330210700383,"pcap_cnt":1282,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57536,"proto":"UDP","dns":{"type":"answer","id":683,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.904329+0100","flow_id":886919651837473,"pcap_cnt":389,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59888,"proto":"UDP","dns":{"type":"answer","id":40921,"rcode":"NXDOMAIN","rrname":"ciqanukaxas.eu"}}
{"timestamp":"2017-12-12T18:33:06.606519+0100","flow_id":1974087544113027,"pcap_cnt":1035,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61720,"proto":"UDP","dns":{"type":"answer","id":43491,"rcode":"NXDOMAIN","rrname":"kezeceduwov.eu"}}
{"timestamp":"2017-12-12T18:32:58.904329+0100","flow_id":886919651837473,"pcap_cnt":389,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59888,"proto":"UDP","dns":{"type":"answer","id":40921,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.610430+0100","flow_id":1039189127567132,"pcap_cnt":596,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60821,"proto":"UDP","dns":{"type":"answer","id":50655,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:02.595483+0100","flow_id":155542556089290,"pcap_cnt":673,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56366,"proto":"UDP","dns":{"type":"answer","id":21261,"rcode":"NXDOMAIN","rrname":"tujurogacag.eu"}}
{"timestamp":"2017-12-12T18:32:59.642476+0100","flow_id":147343463402924,"pcap_cnt":424,"event_type":"dns","src_ip":"192.168.1.100","src_port":64593,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48057,"rrname":"jenupydaces.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.706924+0100","flow_id":827378520620078,"pcap_cnt":908,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54270,"proto":"UDP","dns":{"type":"answer","id":49749,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.615399+0100","flow_id":1075696349587646,"pcap_cnt":600,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62160,"proto":"UDP","dns":{"type":"answer","id":60491,"rcode":"NXDOMAIN","rrname":"kezajonifuz.eu"}}
{"timestamp":"2017-12-12T18:33:08.778653+0100","flow_id":1780852670606480,"pcap_cnt":1332,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56386,"proto":"UDP","dns":{"type":"answer","id":24652,"rcode":"NXDOMAIN","rrname":"vopogakakud.eu"}}
{"timestamp":"2017-12-12T18:33:00.490813+0100","flow_id":147343463402924,"pcap_cnt":525,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64593,"proto":"UDP","dns":{"type":"answer","id":48057,"rcode":"NXDOMAIN","rrname":"jenupydaces.eu"}}
{"timestamp":"2017-12-12T18:33:10.471497+0100","flow_id":1008800087043980,"pcap_cnt":1382,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64413,"proto":"UDP","dns":{"type":"answer","id":42542,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.778653+0100","flow_id":1780852670606480,"pcap_cnt":1332,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56386,"proto":"UDP","dns":{"type":"answer","id":24652,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.509378+0100","flow_id":1182086984764605,"pcap_cnt":974,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58947,"proto":"UDP","dns":{"type":"answer","id":1544,"rcode":"NXDOMAIN","rrname":"rytifaquwer.eu"}}
{"timestamp":"2017-12-12T18:33:11.661938+0100","flow_id":1338930600830642,"pcap_cnt":1532,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53296,"proto":"UDP","dns":{"type":"answer","id":32562,"rcode":"NXDOMAIN","rrname":"jewujenezac.eu"}}
{"timestamp":"2017-12-12T18:33:01.609211+0100","flow_id":539046628378264,"pcap_cnt":595,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57816,"proto":"UDP","dns":{"type":"answer","id":30613,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.661938+0100","flow_id":1338930600830642,"pcap_cnt":1532,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53296,"proto":"UDP","dns":{"type":"answer","id":32562,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:57.479338+0100","flow_id":435196466316455,"pcap_cnt":227,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54432,"proto":"UDP","dns":{"type":"answer","id":31932,"rcode":"NXDOMAIN","rrname":"maravatudur.eu"}}
{"timestamp":"2017-12-12T18:33:10.539965+0100","flow_id":2078377940237629,"pcap_cnt":1422,"event_type":"dns","src_ip":"192.168.1.100","src_port":55981,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50006,"rrname":"vonabakyvyk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.729656+0100","flow_id":376572310987320,"pcap_cnt":1306,"event_type":"dns","src_ip":"192.168.1.100","src_port":63787,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28013,"rrname":"xugynajuquf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.667757+0100","flow_id":729945040235723,"pcap_cnt":1273,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51704,"proto":"UDP","dns":{"type":"answer","id":18959,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.546868+0100","flow_id":962356458180660,"pcap_cnt":1428,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57999,"proto":"UDP","dns":{"type":"answer","id":31388,"rcode":"NXDOMAIN","rrname":"galefihituz.eu"}}
{"timestamp":"2017-12-12T18:33:08.771964+0100","flow_id":376572310987320,"pcap_cnt":1329,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63787,"proto":"UDP","dns":{"type":"answer","id":28013,"rcode":"NXDOMAIN","rrname":"xugynajuquf.eu"}}
{"timestamp":"2017-12-12T18:33:10.362714+0100","flow_id":1996837986037332,"pcap_cnt":1348,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53438,"proto":"UDP","dns":{"type":"answer","id":14925,"rcode":"NXDOMAIN","rrname":"tulyrylynyc.eu"}}
{"timestamp":"2017-12-12T18:33:04.675531+0100","flow_id":848383058136779,"pcap_cnt":883,"event_type":"dns","src_ip":"192.168.1.100","src_port":53432,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53054,"rrname":"kemadedevak.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.771964+0100","flow_id":376572310987320,"pcap_cnt":1329,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63787,"proto":"UDP","dns":{"type":"answer","id":28013,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.381397+0100","flow_id":1404145384214997,"pcap_cnt":1349,"event_type":"dns","src_ip":"192.168.1.100","src_port":63568,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":61717,"rrname":"rynyhipexon.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.925729+0100","flow_id":1961374440360158,"pcap_cnt":404,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52085,"proto":"UDP","dns":{"type":"answer","id":7240,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.679952+0100","flow_id":1510306237931536,"pcap_cnt":888,"event_type":"dns","src_ip":"192.168.1.100","src_port":58207,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9259,"rrname":"keryginebyp.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.686596+0100","flow_id":2184302571076904,"pcap_cnt":1285,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58067,"proto":"UDP","dns":{"type":"answer","id":35293,"rcode":"NXDOMAIN","rrname":"tujeqoqybar.eu"}}
{"timestamp":"2017-12-12T18:33:10.404436+0100","flow_id":64723325692884,"pcap_cnt":1355,"event_type":"dns","src_ip":"192.168.1.100","src_port":53464,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8560,"rrname":"cilavocofer.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:05.521638+0100","flow_id":848383058136779,"pcap_cnt":927,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53432,"proto":"UDP","dns":{"type":"answer","id":53054,"rcode":"NXDOMAIN","rrname":"kemadedevak.eu"}}
{"timestamp":"2017-12-12T18:33:08.686596+0100","flow_id":2184302571076904,"pcap_cnt":1285,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58067,"proto":"UDP","dns":{"type":"answer","id":35293,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.702581+0100","flow_id":690429193677720,"pcap_cnt":1293,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59631,"proto":"UDP","dns":{"type":"answer","id":25572,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:05.521638+0100","flow_id":848383058136779,"pcap_cnt":927,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53432,"proto":"UDP","dns":{"type":"answer","id":53054,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.712020+0100","flow_id":1251341184605841,"pcap_cnt":647,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51018,"proto":"UDP","dns":{"type":"answer","id":16438,"rcode":"NXDOMAIN","rrname":"pujamyqywyk.eu"}}
{"timestamp":"2017-12-12T18:33:10.498920+0100","flow_id":2067170223103208,"pcap_cnt":1399,"event_type":"dns","src_ip":"192.168.1.100","src_port":52670,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33204,"rrname":"puvewevodek.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:01.712020+0100","flow_id":1251341184605841,"pcap_cnt":647,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51018,"proto":"UDP","dns":{"type":"answer","id":16438,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.380215+0100","flow_id":1510306237931536,"pcap_cnt":937,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58207,"proto":"UDP","dns":{"type":"answer","id":9259,"rcode":"NXDOMAIN","rrname":"keryginebyp.eu"}}
{"timestamp":"2017-12-12T18:33:10.447296+0100","flow_id":1653618559603520,"pcap_cnt":1370,"event_type":"dns","src_ip":"192.168.1.100","src_port":57158,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5859,"rrname":"magetyfisus.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.705584+0100","flow_id":2201611289281584,"pcap_cnt":1296,"event_type":"dns","src_ip":"192.168.1.100","src_port":51212,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5277,"rrname":"nopuputyboh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.380215+0100","flow_id":1510306237931536,"pcap_cnt":937,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58207,"proto":"UDP","dns":{"type":"answer","id":9259,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.455543+0100","flow_id":804037521193717,"pcap_cnt":1375,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50467,"proto":"UDP","dns":{"type":"answer","id":31879,"rcode":"NXDOMAIN","rrname":"vojykocezel.eu"}}
{"timestamp":"2017-12-12T18:33:03.549626+0100","flow_id":1116732614743275,"pcap_cnt":755,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52852,"proto":"UDP","dns":{"type":"answer","id":23463,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.524870+0100","flow_id":1546856409989702,"pcap_cnt":1413,"event_type":"dns","src_ip":"192.168.1.100","src_port":59733,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":21048,"rrname":"vococumecan.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:10.455543+0100","flow_id":804037521193717,"pcap_cnt":1375,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50467,"proto":"UDP","dns":{"type":"answer","id":31879,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.648192+0100","flow_id":373187876545536,"pcap_cnt":858,"event_type":"dns","src_ip":"192.168.1.100","src_port":57201,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1237,"rrname":"pupegeqifev.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:10.571089+0100","flow_id":1546856409989702,"pcap_cnt":1448,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59733,"proto":"UDP","dns":{"type":"answer","id":21048,"rcode":"NXDOMAIN","rrname":"vococumecan.eu"}}
{"timestamp":"2017-12-12T18:33:06.606519+0100","flow_id":1974087544113027,"pcap_cnt":1035,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61720,"proto":"UDP","dns":{"type":"answer","id":43491,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.571089+0100","flow_id":1546856409989702,"pcap_cnt":1448,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59733,"proto":"UDP","dns":{"type":"answer","id":21048,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:02.595483+0100","flow_id":155542556089290,"pcap_cnt":673,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56366,"proto":"UDP","dns":{"type":"answer","id":21261,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.585712+0100","flow_id":787574911660016,"pcap_cnt":1495,"event_type":"dns","src_ip":"192.168.1.100","src_port":64271,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49900,"rrname":"vowemytybip.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.701056+0100","flow_id":553363902029380,"pcap_cnt":1070,"event_type":"dns","src_ip":"192.168.1.100","src_port":59079,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23480,"rrname":"vopycyfutoc.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:06.471093+0100","flow_id":1171628739407925,"pcap_cnt":953,"event_type":"dns","src_ip":"192.168.1.100","src_port":57106,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44937,"rrname":"jefecajazif.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.495257+0100","flow_id":1827779482979993,"pcap_cnt":715,"event_type":"dns","src_ip":"192.168.1.100","src_port":59869,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63721,"rrname":"xuqufyduras.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.611140+0100","flow_id":363610099897156,"pcap_cnt":1508,"event_type":"dns","src_ip":"192.168.1.100","src_port":53380,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30215,"rrname":"digusebyvad.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.698455+0100","flow_id":1733474886151860,"pcap_cnt":902,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60892,"proto":"UDP","dns":{"type":"answer","id":9436,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.538988+0100","flow_id":1171628739407925,"pcap_cnt":985,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57106,"proto":"UDP","dns":{"type":"answer","id":44937,"rcode":"NXDOMAIN","rrname":"jefecajazif.eu"}}
{"timestamp":"2017-12-12T18:33:10.498433+0100","flow_id":855383855241985,"pcap_cnt":1397,"event_type":"dns","src_ip":"192.168.1.100","src_port":54772,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":15715,"rrname":"tunodavuqew.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.706997+0100","flow_id":1494949582391733,"pcap_cnt":909,"event_type":"dns","src_ip":"192.168.1.100","src_port":55385,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":22061,"rrname":"qetekugexom.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.560400+0100","flow_id":1008394212838672,"pcap_cnt":1670,"event_type":"dns","src_ip":"192.168.1.100","src_port":58175,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37735,"rrname":"qexiveguwys.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.479338+0100","flow_id":435196466316455,"pcap_cnt":227,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54432,"proto":"UDP","dns":{"type":"answer","id":31932,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.492824+0100","flow_id":755435671291160,"pcap_cnt":1392,"event_type":"dns","src_ip":"192.168.1.100","src_port":49276,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":12568,"rrname":"nofidocyner.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.573051+0100","flow_id":888330548919931,"pcap_cnt":769,"event_type":"dns","src_ip":"192.168.1.100","src_port":59811,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28945,"rrname":"foxyxubecuh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.610785+0100","flow_id":1008394212838672,"pcap_cnt":1705,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58175,"proto":"UDP","dns":{"type":"answer","id":37735,"rcode":"NXDOMAIN","rrname":"qexiveguwys.eu"}}
{"timestamp":"2017-12-12T18:33:11.700557+0100","flow_id":108542729629837,"pcap_cnt":1547,"event_type":"dns","src_ip":"192.168.1.100","src_port":64772,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2349,"rrname":"marylefajuj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.610785+0100","flow_id":1008394212838672,"pcap_cnt":1705,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58175,"proto":"UDP","dns":{"type":"answer","id":37735,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.619215+0100","flow_id":888330548919931,"pcap_cnt":793,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59811,"proto":"UDP","dns":{"type":"answer","id":28945,"rcode":"NXDOMAIN","rrname":"foxyxubecuh.eu"}}
{"timestamp":"2017-12-12T18:33:10.396519+0100","flow_id":1336531861507303,"pcap_cnt":1353,"event_type":"dns","src_ip":"192.168.1.100","src_port":52930,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":20741,"rrname":"xuxorixurez.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.705717+0100","flow_id":909143960515908,"pcap_cnt":906,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56875,"proto":"UDP","dns":{"type":"answer","id":1331,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.362714+0100","flow_id":1996837986037332,"pcap_cnt":1348,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53438,"proto":"UDP","dns":{"type":"answer","id":14925,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.706667+0100","flow_id":128619553933419,"pcap_cnt":1072,"event_type":"dns","src_ip":"192.168.1.100","src_port":58090,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59804,"rrname":"fotulybidyq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.425022+0100","flow_id":659606360718398,"pcap_cnt":943,"event_type":"dns","src_ip":"192.168.1.100","src_port":54112,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":39597,"rrname":"puvacigakog.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:10.474338+0100","flow_id":1766249781935330,"pcap_cnt":1385,"event_type":"dns","src_ip":"192.168.1.100","src_port":55810,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53410,"rrname":"kepicynezam.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:10.430451+0100","flow_id":1404145384214997,"pcap_cnt":1362,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63568,"proto":"UDP","dns":{"type":"answer","id":61717,"rcode":"NXDOMAIN","rrname":"rynyhipexon.eu"}}
{"timestamp":"2017-12-12T18:32:59.723957+0100","flow_id":614335257447413,"pcap_cnt":463,"event_type":"dns","src_ip":"192.168.1.100","src_port":61436,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49925,"rrname":"volyrukupoq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:10.447306+0100","flow_id":1336531861507303,"pcap_cnt":1371,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52930,"proto":"UDP","dns":{"type":"answer","id":20741,"rcode":"NXDOMAIN","rrname":"xuxorixurez.eu"}}
{"timestamp":"2017-12-12T18:33:06.473587+0100","flow_id":659606360718398,"pcap_cnt":955,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54112,"proto":"UDP","dns":{"type":"answer","id":39597,"rcode":"NXDOMAIN","rrname":"puvacigakog.eu"}}
{"timestamp":"2017-12-12T18:33:03.489716+0100","flow_id":1825732931056946,"pcap_cnt":711,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58318,"proto":"UDP","dns":{"type":"answer","id":55059,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.447306+0100","flow_id":1336531861507303,"pcap_cnt":1371,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52930,"proto":"UDP","dns":{"type":"answer","id":20741,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.473587+0100","flow_id":659606360718398,"pcap_cnt":955,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54112,"proto":"UDP","dns":{"type":"answer","id":39597,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.456674+0100","flow_id":64723325692884,"pcap_cnt":1376,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53464,"proto":"UDP","dns":{"type":"answer","id":8560,"rcode":"NXDOMAIN","rrname":"cilavocofer.eu"}}
{"timestamp":"2017-12-12T18:33:10.513681+0100","flow_id":1653618559603520,"pcap_cnt":1406,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57158,"proto":"UDP","dns":{"type":"answer","id":5859,"rcode":"NXDOMAIN","rrname":"magetyfisus.eu"}}
{"timestamp":"2017-12-12T18:33:06.518219+0100","flow_id":134692637698123,"pcap_cnt":978,"event_type":"dns","src_ip":"192.168.1.100","src_port":54313,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60129,"rrname":"vonokutuwah.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.499119+0100","flow_id":1819629782736303,"pcap_cnt":970,"event_type":"dns","src_ip":"192.168.1.100","src_port":52191,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53745,"rrname":"noveditifan.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:10.513681+0100","flow_id":1653618559603520,"pcap_cnt":1406,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57158,"proto":"UDP","dns":{"type":"answer","id":5859,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.586727+0100","flow_id":134692637698123,"pcap_cnt":1013,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54313,"proto":"UDP","dns":{"type":"answer","id":60129,"rcode":"NXDOMAIN","rrname":"vonokutuwah.eu"}}
{"timestamp":"2017-12-12T18:33:06.532944+0100","flow_id":1880188821578192,"pcap_cnt":983,"event_type":"dns","src_ip":"192.168.1.100","src_port":50449,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51655,"rrname":"tufydopogab.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.697219+0100","flow_id":373187876545536,"pcap_cnt":901,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57201,"proto":"UDP","dns":{"type":"answer","id":1237,"rcode":"NXDOMAIN","rrname":"pupegeqifev.eu"}}
{"timestamp":"2017-12-12T18:33:06.586727+0100","flow_id":134692637698123,"pcap_cnt":1013,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54313,"proto":"UDP","dns":{"type":"answer","id":60129,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.615399+0100","flow_id":1075696349587646,"pcap_cnt":600,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62160,"proto":"UDP","dns":{"type":"answer","id":60491,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.697219+0100","flow_id":373187876545536,"pcap_cnt":901,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57201,"proto":"UDP","dns":{"type":"answer","id":1237,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.626689+0100","flow_id":1712476791167220,"pcap_cnt":1043,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57787,"proto":"UDP","dns":{"type":"answer","id":41363,"rcode":"NXDOMAIN","rrname":"xugosedaloc.eu"}}
{"timestamp":"2017-12-12T18:33:06.637510+0100","flow_id":82912511965766,"pcap_cnt":1051,"event_type":"dns","src_ip":"192.168.1.100","src_port":52864,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13732,"rrname":"pufotyvecyq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.707539+0100","flow_id":1334532554017747,"pcap_cnt":1073,"event_type":"dns","src_ip":"192.168.1.100","src_port":63315,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":22271,"rrname":"gaqofubakeh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.504961+0100","flow_id":1353013798155393,"pcap_cnt":812,"event_type":"dns","src_ip":"192.168.1.100","src_port":55598,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42903,"rrname":"ryhuneqevyv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.686175+0100","flow_id":82912511965766,"pcap_cnt":1068,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52864,"proto":"UDP","dns":{"type":"answer","id":13732,"rcode":"NXDOMAIN","rrname":"pufotyvecyq.eu"}}
{"timestamp":"2017-12-12T18:33:06.509378+0100","flow_id":1182086984764605,"pcap_cnt":974,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58947,"proto":"UDP","dns":{"type":"answer","id":1544,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.686175+0100","flow_id":82912511965766,"pcap_cnt":1068,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52864,"proto":"UDP","dns":{"type":"answer","id":13732,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.733609+0100","flow_id":1572793717371305,"pcap_cnt":1310,"event_type":"dns","src_ip":"192.168.1.100","src_port":50558,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17498,"rrname":"noretekyvuv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:10.548083+0100","flow_id":2067170223103208,"pcap_cnt":1429,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52670,"proto":"UDP","dns":{"type":"answer","id":33204,"rcode":"NXDOMAIN","rrname":"puvewevodek.eu"}}
{"timestamp":"2017-12-12T18:33:01.723983+0100","flow_id":1647886925106191,"pcap_cnt":654,"event_type":"dns","src_ip":"192.168.1.100","src_port":51048,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34743,"rrname":"cihevykupoc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:10.548083+0100","flow_id":2067170223103208,"pcap_cnt":1429,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52670,"proto":"UDP","dns":{"type":"answer","id":33204,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.736321+0100","flow_id":876871576468545,"pcap_cnt":1313,"event_type":"dns","src_ip":"192.168.1.100","src_port":53198,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2079,"rrname":"qebolelofyc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.750969+0100","flow_id":1494949582391733,"pcap_cnt":916,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55385,"proto":"UDP","dns":{"type":"answer","id":22061,"rcode":"NXDOMAIN","rrname":"qetekugexom.eu"}}
{"timestamp":"2017-12-12T18:33:10.545603+0100","flow_id":855383855241985,"pcap_cnt":1427,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54772,"proto":"UDP","dns":{"type":"answer","id":15715,"rcode":"NXDOMAIN","rrname":"tunodavuqew.eu"}}
{"timestamp":"2017-12-12T18:33:04.750969+0100","flow_id":1494949582391733,"pcap_cnt":916,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55385,"proto":"UDP","dns":{"type":"answer","id":22061,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.463664+0100","flow_id":733789036369418,"pcap_cnt":1863,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58295,"proto":"UDP","dns":{"type":"answer","id":7395,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.545603+0100","flow_id":855383855241985,"pcap_cnt":1427,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54772,"proto":"UDP","dns":{"type":"answer","id":15715,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.725584+0100","flow_id":520537467458128,"pcap_cnt":1568,"event_type":"dns","src_ip":"192.168.1.100","src_port":64192,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":21154,"rrname":"puvixoqezor.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:05.520449+0100","flow_id":980893536636021,"pcap_cnt":926,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58040,"proto":"UDP","dns":{"type":"answer","id":34000,"rcode":"NXDOMAIN","rrname":"lyvywyduroq.eu"}}
{"timestamp":"2017-12-12T18:33:11.521056+0100","flow_id":392128682783584,"pcap_cnt":1477,"event_type":"dns","src_ip":"192.168.1.100","src_port":53236,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64663,"rrname":"pupodylahej.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.531187+0100","flow_id":1068437855738611,"pcap_cnt":1875,"event_type":"dns","src_ip":"192.168.1.100","src_port":54201,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":16866,"rrname":"direfiwahur.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:12.568334+0100","flow_id":520537467458128,"pcap_cnt":1598,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64192,"proto":"UDP","dns":{"type":"answer","id":21154,"rcode":"NXDOMAIN","rrname":"puvixoqezor.eu"}}
{"timestamp":"2017-12-12T18:33:05.516212+0100","flow_id":683829976120385,"pcap_cnt":923,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59587,"proto":"UDP","dns":{"type":"answer","id":17521,"rcode":"NXDOMAIN","rrname":"gatuvesisak.eu"}}
{"timestamp":"2017-12-12T18:33:11.569174+0100","flow_id":392128682783584,"pcap_cnt":1491,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53236,"proto":"UDP","dns":{"type":"answer","id":64663,"rcode":"NXDOMAIN","rrname":"pupodylahej.eu"}}
{"timestamp":"2017-12-12T18:33:12.568334+0100","flow_id":520537467458128,"pcap_cnt":1598,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64192,"proto":"UDP","dns":{"type":"answer","id":21154,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.627806+0100","flow_id":1830444510404193,"pcap_cnt":1044,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54268,"proto":"UDP","dns":{"type":"answer","id":54844,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.613110+0100","flow_id":1155161835395830,"pcap_cnt":1904,"event_type":"dns","src_ip":"192.168.1.100","src_port":59885,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51790,"rrname":"tulaqypiqyh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:10.430451+0100","flow_id":1404145384214997,"pcap_cnt":1362,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63568,"proto":"UDP","dns":{"type":"answer","id":61717,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:13.426285+0100","flow_id":832730050429229,"pcap_cnt":1615,"event_type":"dns","src_ip":"192.168.1.100","src_port":56118,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25587,"rrname":"xuqonerekij.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:59.770620+0100","flow_id":614335257447413,"pcap_cnt":484,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61436,"proto":"UDP","dns":{"type":"answer","id":49925,"rcode":"NXDOMAIN","rrname":"volyrukupoq.eu"}}
{"timestamp":"2017-12-12T18:33:10.495087+0100","flow_id":1913996656938479,"pcap_cnt":1394,"event_type":"dns","src_ip":"192.168.1.100","src_port":60076,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23112,"rrname":"qetevavahew.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:59.770620+0100","flow_id":614335257447413,"pcap_cnt":484,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61436,"proto":"UDP","dns":{"type":"answer","id":49925,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.509547+0100","flow_id":1596046669727412,"pcap_cnt":1404,"event_type":"dns","src_ip":"192.168.1.100","src_port":60597,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40970,"rrname":"lyrojunynah.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:10.500699+0100","flow_id":1467234158814171,"pcap_cnt":1400,"event_type":"dns","src_ip":"192.168.1.100","src_port":51819,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40341,"rrname":"dixuvebakeq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.494376+0100","flow_id":1829856099732264,"pcap_cnt":809,"event_type":"dns","src_ip":"192.168.1.100","src_port":53526,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29703,"rrname":"xudakejupok.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:01.545406+0100","flow_id":2072287676027518,"pcap_cnt":566,"event_type":"dns","src_ip":"192.168.1.100","src_port":61352,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28195,"rrname":"dirojubusux.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.554808+0100","flow_id":1036743144339256,"pcap_cnt":1484,"event_type":"dns","src_ip":"192.168.1.100","src_port":49168,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":58923,"rrname":"xugokixofen.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:10.554723+0100","flow_id":1596046669727412,"pcap_cnt":1435,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60597,"proto":"UDP","dns":{"type":"answer","id":40970,"rcode":"NXDOMAIN","rrname":"lyrojunynah.eu"}}
{"timestamp":"2017-12-12T18:33:06.730345+0100","flow_id":497922316838121,"pcap_cnt":1079,"event_type":"dns","src_ip":"192.168.1.100","src_port":63138,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60468,"rrname":"pujepigeviz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:10.554723+0100","flow_id":1596046669727412,"pcap_cnt":1435,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60597,"proto":"UDP","dns":{"type":"answer","id":40970,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.566270+0100","flow_id":1819629782736303,"pcap_cnt":1002,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52191,"proto":"UDP","dns":{"type":"answer","id":53745,"rcode":"NXDOMAIN","rrname":"noveditifan.eu"}}
{"timestamp":"2017-12-12T18:33:06.860167+0100","flow_id":2029335855898631,"pcap_cnt":1121,"event_type":"dns","src_ip":"192.168.1.100","src_port":50490,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47963,"rrname":"nojycutalop.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:10.558166+0100","flow_id":2236769891681366,"pcap_cnt":1437,"event_type":"dns","src_ip":"192.168.1.100","src_port":59823,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49647,"rrname":"qekorelelyq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.566270+0100","flow_id":1819629782736303,"pcap_cnt":1002,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52191,"proto":"UDP","dns":{"type":"answer","id":53745,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:00.490813+0100","flow_id":147343463402924,"pcap_cnt":525,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64593,"proto":"UDP","dns":{"type":"answer","id":48057,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.867385+0100","flow_id":725400964709433,"pcap_cnt":1127,"event_type":"dns","src_ip":"192.168.1.100","src_port":51675,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1604,"rrname":"nozubacezyb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.601497+0100","flow_id":1880188821578192,"pcap_cnt":1028,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50449,"proto":"UDP","dns":{"type":"answer","id":51655,"rcode":"NXDOMAIN","rrname":"tufydopogab.eu"}}
{"timestamp":"2017-12-12T18:33:04.571351+0100","flow_id":1353013798155393,"pcap_cnt":825,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55598,"proto":"UDP","dns":{"type":"answer","id":42903,"rcode":"NXDOMAIN","rrname":"ryhuneqevyv.eu"}}
{"timestamp":"2017-12-12T18:33:01.492062+0100","flow_id":913668708336158,"pcap_cnt":549,"event_type":"dns","src_ip":"192.168.1.100","src_port":57760,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":299,"rrname":"divufozutog.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.868321+0100","flow_id":2129447248609249,"pcap_cnt":1128,"event_type":"dns","src_ip":"192.168.1.100","src_port":59918,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":57509,"rrname":"ryteqipogoz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.571351+0100","flow_id":1353013798155393,"pcap_cnt":825,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55598,"proto":"UDP","dns":{"type":"answer","id":42903,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.631473+0100","flow_id":787574911660016,"pcap_cnt":1517,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64271,"proto":"UDP","dns":{"type":"answer","id":49900,"rcode":"NXDOMAIN","rrname":"vowemytybip.eu"}}
{"timestamp":"2017-12-12T18:33:01.524821+0100","flow_id":1843666566840853,"pcap_cnt":558,"event_type":"dns","src_ip":"192.168.1.100","src_port":55881,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":3768,"rrname":"vonodecidid.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.538988+0100","flow_id":1171628739407925,"pcap_cnt":985,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57106,"proto":"UDP","dns":{"type":"answer","id":44937,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.631473+0100","flow_id":787574911660016,"pcap_cnt":1517,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64271,"proto":"UDP","dns":{"type":"answer","id":49900,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:13.537600+0100","flow_id":7744142259200,"pcap_cnt":1653,"event_type":"dns","src_ip":"192.168.1.100","src_port":52391,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8190,"rrname":"maxemocexar.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:01.558603+0100","flow_id":913668708336158,"pcap_cnt":567,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57760,"proto":"UDP","dns":{"type":"answer","id":299,"rcode":"NXDOMAIN","rrname":"divufozutog.eu"}}
{"timestamp":"2017-12-12T18:33:01.824324+0100","flow_id":1647886925106191,"pcap_cnt":661,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51048,"proto":"UDP","dns":{"type":"answer","id":34743,"rcode":"NXDOMAIN","rrname":"cihevykupoc.eu"}}
{"timestamp":"2017-12-12T18:33:06.596293+0100","flow_id":1277456733575493,"pcap_cnt":1021,"event_type":"dns","src_ip":"192.168.1.100","src_port":58274,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6221,"rrname":"lygegoxidul.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:01.824324+0100","flow_id":1647886925106191,"pcap_cnt":661,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51048,"proto":"UDP","dns":{"type":"answer","id":34743,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:14.371059+0100","flow_id":483059583022930,"pcap_cnt":1727,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56798,"proto":"UDP","dns":{"type":"answer","id":8825,"rcode":"NXDOMAIN","rrname":"jejecyxyvex.eu"}}
{"timestamp":"2017-12-12T18:33:08.742662+0100","flow_id":1980454833247494,"pcap_cnt":1317,"event_type":"dns","src_ip":"192.168.1.100","src_port":62881,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":57752,"rrname":"fodyfuzexyp.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.736285+0100","flow_id":1095539098164625,"pcap_cnt":249,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57496,"proto":"UDP","dns":{"type":"answer","id":56120,"rcode":"NXDOMAIN","rrname":"foqaqehacew.eu"}}
{"timestamp":"2017-12-12T18:33:14.371059+0100","flow_id":483059583022930,"pcap_cnt":1727,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56798,"proto":"UDP","dns":{"type":"answer","id":8825,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.619215+0100","flow_id":888330548919931,"pcap_cnt":793,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59811,"proto":"UDP","dns":{"type":"answer","id":28945,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.481611+0100","flow_id":739114793278293,"pcap_cnt":2021,"event_type":"dns","src_ip":"192.168.1.100","src_port":61906,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63942,"rrname":"qegynolyzow.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:08.779868+0100","flow_id":1572793717371305,"pcap_cnt":1333,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50558,"proto":"UDP","dns":{"type":"answer","id":17498,"rcode":"NXDOMAIN","rrname":"noretekyvuv.eu"}}
{"timestamp":"2017-12-12T18:33:06.712616+0100","flow_id":1180508584337320,"pcap_cnt":1074,"event_type":"dns","src_ip":"192.168.1.100","src_port":63886,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":15326,"rrname":"mamasufexix.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.731553+0100","flow_id":2231341053389217,"pcap_cnt":2130,"event_type":"dns","src_ip":"192.168.1.100","src_port":53636,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":32700,"rrname":"tufecagemyl.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.779868+0100","flow_id":1572793717371305,"pcap_cnt":1333,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50558,"proto":"UDP","dns":{"type":"answer","id":17498,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.851503+0100","flow_id":623928067423791,"pcap_cnt":1114,"event_type":"dns","src_ip":"192.168.1.100","src_port":61562,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":56195,"rrname":"fokenuzohym.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.569174+0100","flow_id":392128682783584,"pcap_cnt":1491,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53236,"proto":"UDP","dns":{"type":"answer","id":64663,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.549016+0100","flow_id":350673658075162,"pcap_cnt":991,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58474,"proto":"UDP","dns":{"type":"answer","id":22763,"rcode":"NXDOMAIN","rrname":"galerywogej.eu"}}
{"timestamp":"2017-12-12T18:33:13.429818+0100","flow_id":935070531161850,"pcap_cnt":1616,"event_type":"dns","src_ip":"192.168.1.100","src_port":50734,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28374,"rrname":"pumocelexec.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.549016+0100","flow_id":350673658075162,"pcap_cnt":991,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58474,"proto":"UDP","dns":{"type":"answer","id":22763,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.680874+0100","flow_id":1071740684904805,"pcap_cnt":890,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61757,"proto":"UDP","dns":{"type":"answer","id":29410,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.535082+0100","flow_id":2212531243723306,"pcap_cnt":1418,"event_type":"dns","src_ip":"192.168.1.100","src_port":51479,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17333,"rrname":"qegiqiqakof.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.852657+0100","flow_id":1749450017079985,"pcap_cnt":1115,"event_type":"dns","src_ip":"192.168.1.100","src_port":60040,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":52568,"rrname":"gahuzuzecyg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.659212+0100","flow_id":1155161835395830,"pcap_cnt":1938,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59885,"proto":"UDP","dns":{"type":"answer","id":51790,"rcode":"NXDOMAIN","rrname":"tulaqypiqyh.eu"}}
{"timestamp":"2017-12-12T18:33:01.612884+0100","flow_id":2072287676027518,"pcap_cnt":598,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61352,"proto":"UDP","dns":{"type":"answer","id":28195,"rcode":"NXDOMAIN","rrname":"dirojubusux.eu"}}
{"timestamp":"2017-12-12T18:33:15.659212+0100","flow_id":1155161835395830,"pcap_cnt":1938,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59885,"proto":"UDP","dns":{"type":"answer","id":51790,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.561303+0100","flow_id":1829856099732264,"pcap_cnt":822,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53526,"proto":"UDP","dns":{"type":"answer","id":29703,"rcode":"NXDOMAIN","rrname":"xudakejupok.eu"}}
{"timestamp":"2017-12-12T18:33:01.612884+0100","flow_id":2072287676027518,"pcap_cnt":598,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61352,"proto":"UDP","dns":{"type":"answer","id":28195,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.530501+0100","flow_id":1290687380133957,"pcap_cnt":739,"event_type":"dns","src_ip":"192.168.1.100","src_port":52747,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28354,"rrname":"purodogidot.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.598690+0100","flow_id":472435981230754,"pcap_cnt":1499,"event_type":"dns","src_ip":"192.168.1.100","src_port":51194,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29696,"rrname":"rylunupumit.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.591681+0100","flow_id":297761808451393,"pcap_cnt":1017,"event_type":"dns","src_ip":"192.168.1.100","src_port":54101,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9091,"rrname":"dimoxuzynup.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.442796+0100","flow_id":1061963191992748,"pcap_cnt":947,"event_type":"dns","src_ip":"192.168.1.100","src_port":58500,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44533,"rrname":"fokisohurif.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.626689+0100","flow_id":1712476791167220,"pcap_cnt":1043,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57787,"proto":"UDP","dns":{"type":"answer","id":41363,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.533576+0100","flow_id":878334012499016,"pcap_cnt":742,"event_type":"dns","src_ip":"192.168.1.100","src_port":54095,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30821,"rrname":"dimewohokol.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.637732+0100","flow_id":297761808451393,"pcap_cnt":1052,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54101,"proto":"UDP","dns":{"type":"answer","id":9091,"rcode":"NXDOMAIN","rrname":"dimoxuzynup.eu"}}
{"timestamp":"2017-12-12T18:33:11.631532+0100","flow_id":92483846906604,"pcap_cnt":1518,"event_type":"dns","src_ip":"192.168.1.100","src_port":63209,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34526,"rrname":"gaqozosodul.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.637732+0100","flow_id":297761808451393,"pcap_cnt":1052,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54101,"proto":"UDP","dns":{"type":"answer","id":9091,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.601497+0100","flow_id":1880188821578192,"pcap_cnt":1028,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50449,"proto":"UDP","dns":{"type":"answer","id":51655,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.547426+0100","flow_id":1827779482979993,"pcap_cnt":753,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59869,"proto":"UDP","dns":{"type":"answer","id":63721,"rcode":"NXDOMAIN","rrname":"xuqufyduras.eu"}}
{"timestamp":"2017-12-12T18:33:06.729886+0100","flow_id":664517655798558,"pcap_cnt":1078,"event_type":"dns","src_ip":"192.168.1.100","src_port":59990,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":15502,"rrname":"tulojigakit.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.547426+0100","flow_id":1827779482979993,"pcap_cnt":753,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59869,"proto":"UDP","dns":{"type":"answer","id":63721,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.606543+0100","flow_id":1036743144339256,"pcap_cnt":1503,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49168,"proto":"UDP","dns":{"type":"answer","id":58923,"rcode":"NXDOMAIN","rrname":"xugokixofen.eu"}}
{"timestamp":"2017-12-12T18:33:04.593894+0100","flow_id":723371592519654,"pcap_cnt":827,"event_type":"dns","src_ip":"192.168.1.100","src_port":50760,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":55824,"rrname":"tujaculurim.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.884212+0100","flow_id":553363902029380,"pcap_cnt":1134,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59079,"proto":"UDP","dns":{"type":"answer","id":23480,"rcode":"NXDOMAIN","rrname":"vopycyfutoc.eu"}}
{"timestamp":"2017-12-12T18:33:03.581976+0100","flow_id":878334012499016,"pcap_cnt":775,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54095,"proto":"UDP","dns":{"type":"answer","id":30821,"rcode":"NXDOMAIN","rrname":"dimewohokol.eu"}}
{"timestamp":"2017-12-12T18:33:04.639277+0100","flow_id":1480574326849837,"pcap_cnt":848,"event_type":"dns","src_ip":"192.168.1.100","src_port":64608,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35020,"rrname":"rynepevymuc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.581976+0100","flow_id":878334012499016,"pcap_cnt":775,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54095,"proto":"UDP","dns":{"type":"answer","id":30821,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.884212+0100","flow_id":553363902029380,"pcap_cnt":1134,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59079,"proto":"UDP","dns":{"type":"answer","id":23480,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.546868+0100","flow_id":962356458180660,"pcap_cnt":1428,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57999,"proto":"UDP","dns":{"type":"answer","id":31388,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.648352+0100","flow_id":723371592519654,"pcap_cnt":859,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50760,"proto":"UDP","dns":{"type":"answer","id":55824,"rcode":"NXDOMAIN","rrname":"tujaculurim.eu"}}
{"timestamp":"2017-12-12T18:33:02.575733+0100","flow_id":301002360966805,"pcap_cnt":668,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49571,"proto":"UDP","dns":{"type":"answer","id":36861,"rcode":"NXDOMAIN","rrname":"lygetudokej.eu"}}
{"timestamp":"2017-12-12T18:33:04.673575+0100","flow_id":1387803033224999,"pcap_cnt":881,"event_type":"dns","src_ip":"192.168.1.100","src_port":51560,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30533,"rrname":"jewokedokaw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.736285+0100","flow_id":1095539098164625,"pcap_cnt":249,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57496,"proto":"UDP","dns":{"type":"answer","id":56120,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.648352+0100","flow_id":723371592519654,"pcap_cnt":859,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50760,"proto":"UDP","dns":{"type":"answer","id":55824,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.662503+0100","flow_id":915062425394151,"pcap_cnt":870,"event_type":"dns","src_ip":"192.168.1.100","src_port":50189,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26292,"rrname":"mamylotifat.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:05.518569+0100","flow_id":1387803033224999,"pcap_cnt":925,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51560,"proto":"UDP","dns":{"type":"answer","id":30533,"rcode":"NXDOMAIN","rrname":"jewokedokaw.eu"}}
{"timestamp":"2017-12-12T18:32:57.742921+0100","flow_id":1702778754349190,"pcap_cnt":251,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60940,"proto":"UDP","dns":{"type":"answer","id":9406,"rcode":"NXDOMAIN","rrname":"kevedorozup.eu"}}
{"timestamp":"2017-12-12T18:33:04.685448+0100","flow_id":1480574326849837,"pcap_cnt":893,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64608,"proto":"UDP","dns":{"type":"answer","id":35020,"rcode":"NXDOMAIN","rrname":"rynepevymuc.eu"}}
{"timestamp":"2017-12-12T18:33:13.575191+0100","flow_id":543655129106135,"pcap_cnt":1685,"event_type":"dns","src_ip":"192.168.1.100","src_port":55738,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6796,"rrname":"lykegynahom.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:57.742921+0100","flow_id":1702778754349190,"pcap_cnt":251,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60940,"proto":"UDP","dns":{"type":"answer","id":9406,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:14.385292+0100","flow_id":7744142259200,"pcap_cnt":1731,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52391,"proto":"UDP","dns":{"type":"answer","id":8190,"rcode":"NXDOMAIN","rrname":"maxemocexar.eu"}}
{"timestamp":"2017-12-12T18:33:07.394010+0100","flow_id":623928067423791,"pcap_cnt":1156,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61562,"proto":"UDP","dns":{"type":"answer","id":56195,"rcode":"NXDOMAIN","rrname":"fokenuzohym.eu"}}
{"timestamp":"2017-12-12T18:33:04.695544+0100","flow_id":1937709171007474,"pcap_cnt":900,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65333,"proto":"UDP","dns":{"type":"answer","id":3255,"rcode":"NXDOMAIN","rrname":"kezituraxep.eu"}}
{"timestamp":"2017-12-12T18:32:58.747534+0100","flow_id":256439927597070,"pcap_cnt":302,"event_type":"dns","src_ip":"192.168.1.100","src_port":61548,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62303,"rrname":"makiwemihiw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:14.385292+0100","flow_id":7744142259200,"pcap_cnt":1731,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52391,"proto":"UDP","dns":{"type":"answer","id":8190,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.456674+0100","flow_id":64723325692884,"pcap_cnt":1376,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53464,"proto":"UDP","dns":{"type":"answer","id":8560,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:07.394010+0100","flow_id":623928067423791,"pcap_cnt":1156,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61562,"proto":"UDP","dns":{"type":"answer","id":56195,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.695544+0100","flow_id":1937709171007474,"pcap_cnt":900,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65333,"proto":"UDP","dns":{"type":"answer","id":3255,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.619848+0100","flow_id":1448538165572936,"pcap_cnt":605,"event_type":"dns","src_ip":"192.168.1.100","src_port":62812,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7890,"rrname":"rydopapifel.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.774145+0100","flow_id":542759627444225,"pcap_cnt":313,"event_type":"dns","src_ip":"192.168.1.100","src_port":53737,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34987,"rrname":"magymofigeg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:14.505533+0100","flow_id":1194993362056893,"pcap_cnt":1761,"event_type":"dns","src_ip":"192.168.1.100","src_port":58974,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33678,"rrname":"fogixezajaq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:05.511261+0100","flow_id":1493729811640243,"pcap_cnt":920,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60556,"proto":"UDP","dns":{"type":"answer","id":2488,"rcode":"NXDOMAIN","rrname":"rycaropynar.eu"}}
{"timestamp":"2017-12-12T18:33:15.663066+0100","flow_id":2239177221152282,"pcap_cnt":1941,"event_type":"dns","src_ip":"192.168.1.100","src_port":55723,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38043,"rrname":"pufexalopas.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:05.511261+0100","flow_id":1493729811640243,"pcap_cnt":920,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60556,"proto":"UDP","dns":{"type":"answer","id":2488,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.698679+0100","flow_id":92483846906604,"pcap_cnt":1545,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63209,"proto":"UDP","dns":{"type":"answer","id":34526,"rcode":"NXDOMAIN","rrname":"gaqozosodul.eu"}}
{"timestamp":"2017-12-12T18:33:15.733692+0100","flow_id":2239177221152282,"pcap_cnt":1979,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55723,"proto":"UDP","dns":{"type":"answer","id":38043,"rcode":"NXDOMAIN","rrname":"pufexalopas.eu"}}
{"timestamp":"2017-12-12T18:33:06.797045+0100","flow_id":1493729811640243,"pcap_cnt":1097,"event_type":"dns","src_ip":"192.168.1.100","src_port":60556,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6933,"rrname":"vofubimipeg.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:11.698679+0100","flow_id":92483846906604,"pcap_cnt":1545,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63209,"proto":"UDP","dns":{"type":"answer","id":34526,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.746225+0100","flow_id":1804133540848369,"pcap_cnt":1318,"event_type":"dns","src_ip":"192.168.1.100","src_port":60224,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28457,"rrname":"jecuzojitub.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.733692+0100","flow_id":2239177221152282,"pcap_cnt":1979,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55723,"proto":"UDP","dns":{"type":"answer","id":38043,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.842855+0100","flow_id":1416154112515175,"pcap_cnt":1110,"event_type":"dns","src_ip":"192.168.1.100","src_port":52999,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":56303,"rrname":"kerowyripac.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:01.558603+0100","flow_id":913668708336158,"pcap_cnt":567,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57760,"proto":"UDP","dns":{"type":"answer","id":299,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:09.591915+0100","flow_id":1804133540848369,"pcap_cnt":1342,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60224,"proto":"UDP","dns":{"type":"answer","id":28457,"rcode":"NXDOMAIN","rrname":"jecuzojitub.eu"}}
{"timestamp":"2017-12-12T18:33:11.657758+0100","flow_id":363610099897156,"pcap_cnt":1530,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53380,"proto":"UDP","dns":{"type":"answer","id":30215,"rcode":"NXDOMAIN","rrname":"digusebyvad.eu"}}
{"timestamp":"2017-12-12T18:33:01.564240+0100","flow_id":1504329790757904,"pcap_cnt":571,"event_type":"dns","src_ip":"192.168.1.100","src_port":55412,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":58560,"rrname":"jecocinywut.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:07.414065+0100","flow_id":2129447248609249,"pcap_cnt":1163,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59918,"proto":"UDP","dns":{"type":"answer","id":57509,"rcode":"NXDOMAIN","rrname":"ryteqipogoz.eu"}}
{"timestamp":"2017-12-12T18:33:11.657758+0100","flow_id":363610099897156,"pcap_cnt":1530,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53380,"proto":"UDP","dns":{"type":"answer","id":30215,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.604958+0100","flow_id":2141002858117918,"pcap_cnt":1032,"event_type":"dns","src_ip":"192.168.1.100","src_port":57298,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":55201,"rrname":"citonocebyl.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:01.590801+0100","flow_id":1843666566840853,"pcap_cnt":585,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55881,"proto":"UDP","dns":{"type":"answer","id":3768,"rcode":"NXDOMAIN","rrname":"vonodecidid.eu"}}
{"timestamp":"2017-12-12T18:33:11.753452+0100","flow_id":108542729629837,"pcap_cnt":1580,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64772,"proto":"UDP","dns":{"type":"answer","id":2349,"rcode":"NXDOMAIN","rrname":"marylefajuj.eu"}}
{"timestamp":"2017-12-12T18:33:01.590801+0100","flow_id":1843666566840853,"pcap_cnt":585,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55881,"proto":"UDP","dns":{"type":"answer","id":3768,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:02.575733+0100","flow_id":301002360966805,"pcap_cnt":668,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49571,"proto":"UDP","dns":{"type":"answer","id":36861,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.753452+0100","flow_id":108542729629837,"pcap_cnt":1580,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64772,"proto":"UDP","dns":{"type":"answer","id":2349,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:05.516212+0100","flow_id":683829976120385,"pcap_cnt":923,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59587,"proto":"UDP","dns":{"type":"answer","id":17521,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.799089+0100","flow_id":1541199937810801,"pcap_cnt":1098,"event_type":"dns","src_ip":"192.168.1.100","src_port":56785,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":58100,"rrname":"tunyzylazuj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:14.421934+0100","flow_id":2011196062068782,"pcap_cnt":1740,"event_type":"dns","src_ip":"192.168.1.100","src_port":50412,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62411,"rrname":"ryceziqofig.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:05.518569+0100","flow_id":1387803033224999,"pcap_cnt":925,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51560,"proto":"UDP","dns":{"type":"answer","id":30533,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.715719+0100","flow_id":915062425394151,"pcap_cnt":914,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50189,"proto":"UDP","dns":{"type":"answer","id":26292,"rcode":"NXDOMAIN","rrname":"mamylotifat.eu"}}
{"timestamp":"2017-12-12T18:33:07.249305+0100","flow_id":128619553933419,"pcap_cnt":1135,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58090,"proto":"UDP","dns":{"type":"answer","id":59804,"rcode":"NXDOMAIN","rrname":"fotulybidyq.eu"}}
{"timestamp":"2017-12-12T18:33:14.489782+0100","flow_id":2011196062068782,"pcap_cnt":1753,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50412,"proto":"UDP","dns":{"type":"answer","id":62411,"rcode":"NXDOMAIN","rrname":"ryceziqofig.eu"}}
{"timestamp":"2017-12-12T18:33:06.483640+0100","flow_id":961896896422200,"pcap_cnt":963,"event_type":"dns","src_ip":"192.168.1.100","src_port":58372,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":20962,"rrname":"jejubyrexeq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:07.249305+0100","flow_id":128619553933419,"pcap_cnt":1135,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58090,"proto":"UDP","dns":{"type":"answer","id":59804,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.685448+0100","flow_id":1480574326849837,"pcap_cnt":893,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64608,"proto":"UDP","dns":{"type":"answer","id":35020,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.567829+0100","flow_id":1087477445460812,"pcap_cnt":1445,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64493,"proto":"UDP","dns":{"type":"answer","id":7274,"rcode":"NXDOMAIN","rrname":"xutufojisyl.eu"}}
{"timestamp":"2017-12-12T18:33:10.536560+0100","flow_id":1928822884020208,"pcap_cnt":1419,"event_type":"dns","src_ip":"192.168.1.100","src_port":54884,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14191,"rrname":"ciqirokajyr.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.551235+0100","flow_id":961896896422200,"pcap_cnt":992,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58372,"proto":"UDP","dns":{"type":"answer","id":20962,"rcode":"NXDOMAIN","rrname":"jejubyrexeq.eu"}}
{"timestamp":"2017-12-12T18:33:10.558715+0100","flow_id":755435671291160,"pcap_cnt":1438,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49276,"proto":"UDP","dns":{"type":"answer","id":12568,"rcode":"NXDOMAIN","rrname":"nofidocyner.eu"}}
{"timestamp":"2017-12-12T18:33:06.551235+0100","flow_id":961896896422200,"pcap_cnt":992,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58372,"proto":"UDP","dns":{"type":"answer","id":20962,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.541446+0100","flow_id":1766249781935330,"pcap_cnt":1424,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55810,"proto":"UDP","dns":{"type":"answer","id":53410,"rcode":"NXDOMAIN","rrname":"kepicynezam.eu"}}
{"timestamp":"2017-12-12T18:33:06.491743+0100","flow_id":1061963191992748,"pcap_cnt":968,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58500,"proto":"UDP","dns":{"type":"answer","id":44533,"rcode":"NXDOMAIN","rrname":"fokisohurif.eu"}}
{"timestamp":"2017-12-12T18:33:06.866863+0100","flow_id":920630850632239,"pcap_cnt":1126,"event_type":"dns","src_ip":"192.168.1.100","src_port":63122,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53072,"rrname":"vocerocofyf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.648976+0100","flow_id":1277456733575493,"pcap_cnt":1056,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58274,"proto":"UDP","dns":{"type":"answer","id":6221,"rcode":"NXDOMAIN","rrname":"lygegoxidul.eu"}}
{"timestamp":"2017-12-12T18:33:14.531718+0100","flow_id":1895588427341062,"pcap_cnt":1774,"event_type":"dns","src_ip":"192.168.1.100","src_port":51230,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50603,"rrname":"lyvularekud.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.648976+0100","flow_id":1277456733575493,"pcap_cnt":1056,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58274,"proto":"UDP","dns":{"type":"answer","id":6221,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.635967+0100","flow_id":1202114417093644,"pcap_cnt":1050,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58413,"proto":"UDP","dns":{"type":"answer","id":61937,"rcode":"NXDOMAIN","rrname":"gacypizohut.eu"}}
{"timestamp":"2017-12-12T18:33:14.552478+0100","flow_id":1194993362056893,"pcap_cnt":1791,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58974,"proto":"UDP","dns":{"type":"answer","id":33678,"rcode":"NXDOMAIN","rrname":"fogixezajaq.eu"}}
{"timestamp":"2017-12-12T18:33:06.652439+0100","flow_id":2141002858117918,"pcap_cnt":1058,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57298,"proto":"UDP","dns":{"type":"answer","id":55201,"rcode":"NXDOMAIN","rrname":"citonocebyl.eu"}}
{"timestamp":"2017-12-12T18:33:14.552478+0100","flow_id":1194993362056893,"pcap_cnt":1791,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58974,"proto":"UDP","dns":{"type":"answer","id":33678,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.652439+0100","flow_id":2141002858117918,"pcap_cnt":1058,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57298,"proto":"UDP","dns":{"type":"answer","id":55201,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.606543+0100","flow_id":1036743144339256,"pcap_cnt":1503,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49168,"proto":"UDP","dns":{"type":"answer","id":58923,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.813056+0100","flow_id":2151186225588224,"pcap_cnt":1105,"event_type":"dns","src_ip":"192.168.1.100","src_port":58226,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":22684,"rrname":"tucakaqalav.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:14.578248+0100","flow_id":1895588427341062,"pcap_cnt":1809,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51230,"proto":"UDP","dns":{"type":"answer","id":50603,"rcode":"NXDOMAIN","rrname":"lyvularekud.eu"}}
{"timestamp":"2017-12-12T18:33:11.645209+0100","flow_id":472435981230754,"pcap_cnt":1525,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51194,"proto":"UDP","dns":{"type":"answer","id":29696,"rcode":"NXDOMAIN","rrname":"rylunupumit.eu"}}
{"timestamp":"2017-12-12T18:33:16.376972+0100","flow_id":1068437855738611,"pcap_cnt":1991,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54201,"proto":"UDP","dns":{"type":"answer","id":16866,"rcode":"NXDOMAIN","rrname":"direfiwahur.eu"}}
{"timestamp":"2017-12-12T18:33:11.645209+0100","flow_id":472435981230754,"pcap_cnt":1525,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51194,"proto":"UDP","dns":{"type":"answer","id":29696,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.376972+0100","flow_id":1068437855738611,"pcap_cnt":1991,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54201,"proto":"UDP","dns":{"type":"answer","id":16866,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:07.273118+0100","flow_id":664517655798558,"pcap_cnt":1138,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59990,"proto":"UDP","dns":{"type":"answer","id":15502,"rcode":"NXDOMAIN","rrname":"tulojigakit.eu"}}
{"timestamp":"2017-12-12T18:33:13.396909+0100","flow_id":2173809966255725,"pcap_cnt":1609,"event_type":"dns","src_ip":"192.168.1.100","src_port":58699,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23811,"rrname":"fokytowipiw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.406740+0100","flow_id":825617584764116,"pcap_cnt":1997,"event_type":"dns","src_ip":"192.168.1.100","src_port":63177,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31701,"rrname":"masimafoded.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:07.273118+0100","flow_id":664517655798558,"pcap_cnt":1138,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59990,"proto":"UDP","dns":{"type":"answer","id":15502,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:05.520449+0100","flow_id":980893536636021,"pcap_cnt":926,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58040,"proto":"UDP","dns":{"type":"answer","id":34000,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:13.444376+0100","flow_id":2173809966255725,"pcap_cnt":1623,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58699,"proto":"UDP","dns":{"type":"answer","id":23811,"rcode":"NXDOMAIN","rrname":"fokytowipiw.eu"}}
{"timestamp":"2017-12-12T18:33:03.476339+0100","flow_id":2043126995698867,"pcap_cnt":707,"event_type":"dns","src_ip":"192.168.1.100","src_port":49165,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":21655,"rrname":"dixonesohed.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.478188+0100","flow_id":1708231215959020,"pcap_cnt":958,"event_type":"dns","src_ip":"192.168.1.100","src_port":59571,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49278,"rrname":"divulewybek.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.381408+0100","flow_id":178250048365281,"pcap_cnt":938,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64106,"proto":"UDP","dns":{"type":"answer","id":50785,"rcode":"NXDOMAIN","rrname":"cilakyfaloq.eu"}}
{"timestamp":"2017-12-12T18:33:06.608083+0100","flow_id":107005130983251,"pcap_cnt":1036,"event_type":"dns","src_ip":"192.168.1.100","src_port":51204,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35808,"rrname":"nomugacogyk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.381408+0100","flow_id":178250048365281,"pcap_cnt":938,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64106,"proto":"UDP","dns":{"type":"answer","id":50785,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.550486+0100","flow_id":1889356429551190,"pcap_cnt":1432,"event_type":"dns","src_ip":"192.168.1.100","src_port":55929,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42302,"rrname":"novylakuwyw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.715719+0100","flow_id":915062425394151,"pcap_cnt":914,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50189,"proto":"UDP","dns":{"type":"answer","id":26292,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:14.489782+0100","flow_id":2011196062068782,"pcap_cnt":1753,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50412,"proto":"UDP","dns":{"type":"answer","id":62411,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:07.607926+0100","flow_id":1334532554017747,"pcap_cnt":1167,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63315,"proto":"UDP","dns":{"type":"answer","id":22271,"rcode":"NXDOMAIN","rrname":"gaqofubakeh.eu"}}
{"timestamp":"2017-12-12T18:33:06.588055+0100","flow_id":1325987716593943,"pcap_cnt":1014,"event_type":"dns","src_ip":"192.168.1.100","src_port":52369,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27742,"rrname":"fobahizipux.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.557911+0100","flow_id":1420859249165143,"pcap_cnt":1000,"event_type":"dns","src_ip":"192.168.1.100","src_port":59480,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8277,"rrname":"jecoqedevod.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.091416+0100","flow_id":1889356429551190,"pcap_cnt":1463,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55929,"proto":"UDP","dns":{"type":"answer","id":42302,"rcode":"NXDOMAIN","rrname":"novylakuwyw.eu"}}
{"timestamp":"2017-12-12T18:33:03.583452+0100","flow_id":1290687380133957,"pcap_cnt":776,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52747,"proto":"UDP","dns":{"type":"answer","id":28354,"rcode":"NXDOMAIN","rrname":"purodogidot.eu"}}
{"timestamp":"2017-12-12T18:33:15.607788+0100","flow_id":1903924958938668,"pcap_cnt":1900,"event_type":"dns","src_ip":"192.168.1.100","src_port":60294,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":20257,"rrname":"mamevetopym.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.426632+0100","flow_id":462581178466952,"pcap_cnt":944,"event_type":"dns","src_ip":"192.168.1.100","src_port":58101,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6947,"rrname":"cicezomaxyz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.583452+0100","flow_id":1290687380133957,"pcap_cnt":776,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52747,"proto":"UDP","dns":{"type":"answer","id":28354,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.667325+0100","flow_id":1448538165572936,"pcap_cnt":622,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62812,"proto":"UDP","dns":{"type":"answer","id":7890,"rcode":"NXDOMAIN","rrname":"rydopapifel.eu"}}
{"timestamp":"2017-12-12T18:33:10.558715+0100","flow_id":755435671291160,"pcap_cnt":1438,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49276,"proto":"UDP","dns":{"type":"answer","id":12568,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.541446+0100","flow_id":1766249781935330,"pcap_cnt":1424,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55810,"proto":"UDP","dns":{"type":"answer","id":53410,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:13.471419+0100","flow_id":2061623273009531,"pcap_cnt":1633,"event_type":"dns","src_ip":"192.168.1.100","src_port":61360,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50626,"rrname":"makanytezih.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:07.385391+0100","flow_id":1416154112515175,"pcap_cnt":1154,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52999,"proto":"UDP","dns":{"type":"answer","id":56303,"rcode":"NXDOMAIN","rrname":"kerowyripac.eu"}}
{"timestamp":"2017-12-12T18:33:06.656860+0100","flow_id":107005130983251,"pcap_cnt":1061,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51204,"proto":"UDP","dns":{"type":"answer","id":35808,"rcode":"NXDOMAIN","rrname":"nomugacogyk.eu"}}
{"timestamp":"2017-12-12T18:33:13.471491+0100","flow_id":832730050429229,"pcap_cnt":1634,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56118,"proto":"UDP","dns":{"type":"answer","id":25587,"rcode":"NXDOMAIN","rrname":"xuqonerekij.eu"}}
{"timestamp":"2017-12-12T18:33:07.385391+0100","flow_id":1416154112515175,"pcap_cnt":1154,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52999,"proto":"UDP","dns":{"type":"answer","id":56303,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:13.471491+0100","flow_id":832730050429229,"pcap_cnt":1634,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56118,"proto":"UDP","dns":{"type":"answer","id":25587,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.568122+0100","flow_id":2230640973359930,"pcap_cnt":1446,"event_type":"dns","src_ip":"192.168.1.100","src_port":61894,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51314,"rrname":"ryhevelynyj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:07.630871+0100","flow_id":497922316838121,"pcap_cnt":1170,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63138,"proto":"UDP","dns":{"type":"answer","id":60468,"rcode":"NXDOMAIN","rrname":"pujepigeviz.eu"}}
{"timestamp":"2017-12-12T18:33:06.635967+0100","flow_id":1202114417093644,"pcap_cnt":1050,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58413,"proto":"UDP","dns":{"type":"answer","id":61937,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:13.544868+0100","flow_id":1049505639036721,"pcap_cnt":1659,"event_type":"dns","src_ip":"192.168.1.100","src_port":53792,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31681,"rrname":"kefyjuxiwap.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:07.630871+0100","flow_id":497922316838121,"pcap_cnt":1170,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63138,"proto":"UDP","dns":{"type":"answer","id":60468,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.601421+0100","flow_id":230629322403149,"pcap_cnt":1458,"event_type":"dns","src_ip":"192.168.1.100","src_port":64409,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30417,"rrname":"gacuhawipod.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.626968+0100","flow_id":543655129106135,"pcap_cnt":1716,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55738,"proto":"UDP","dns":{"type":"answer","id":6796,"rcode":"NXDOMAIN","rrname":"lykegynahom.eu"}}
{"timestamp":"2017-12-12T18:33:14.578248+0100","flow_id":1895588427341062,"pcap_cnt":1809,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51230,"proto":"UDP","dns":{"type":"answer","id":50603,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.561303+0100","flow_id":1829856099732264,"pcap_cnt":822,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53526,"proto":"UDP","dns":{"type":"answer","id":29703,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:13.521216+0100","flow_id":1943835942450176,"pcap_cnt":1647,"event_type":"dns","src_ip":"192.168.1.100","src_port":65167,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60003,"rrname":"kejilodirub.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.671534+0100","flow_id":699319776395054,"pcap_cnt":1945,"event_type":"dns","src_ip":"192.168.1.100","src_port":57318,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":54691,"rrname":"kemojidezyf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.110854+0100","flow_id":2230640973359930,"pcap_cnt":1465,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61894,"proto":"UDP","dns":{"type":"answer","id":51314,"rcode":"NXDOMAIN","rrname":"ryhevelynyj.eu"}}
{"timestamp":"2017-12-12T18:33:08.506112+0100","flow_id":2029335855898631,"pcap_cnt":1213,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50490,"proto":"UDP","dns":{"type":"answer","id":47963,"rcode":"NXDOMAIN","rrname":"nojycutalop.eu"}}
{"timestamp":"2017-12-12T18:33:13.420546+0100","flow_id":299477648370370,"pcap_cnt":1614,"event_type":"dns","src_ip":"192.168.1.100","src_port":52532,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40449,"rrname":"lyruterodiq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:01.601248+0100","flow_id":1509415032007840,"pcap_cnt":591,"event_type":"dns","src_ip":"192.168.1.100","src_port":57472,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51262,"rrname":"mamomamymyl.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.110854+0100","flow_id":2230640973359930,"pcap_cnt":1465,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61894,"proto":"UDP","dns":{"type":"answer","id":51314,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:13.444376+0100","flow_id":2173809966255725,"pcap_cnt":1623,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58699,"proto":"UDP","dns":{"type":"answer","id":23811,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.516213+0100","flow_id":795567845466229,"pcap_cnt":977,"event_type":"dns","src_ip":"192.168.1.100","src_port":60418,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7300,"rrname":"ciqivutevam.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.501065+0100","flow_id":230629322403149,"pcap_cnt":1474,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64409,"proto":"UDP","dns":{"type":"answer","id":30417,"rcode":"NXDOMAIN","rrname":"gacuhawipod.eu"}}
{"timestamp":"2017-12-12T18:33:13.464511+0100","flow_id":1771457429968511,"pcap_cnt":1630,"event_type":"dns","src_ip":"192.168.1.100","src_port":54920,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63666,"rrname":"nozitytogim.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.501065+0100","flow_id":230629322403149,"pcap_cnt":1474,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64409,"proto":"UDP","dns":{"type":"answer","id":30417,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.594525+0100","flow_id":1097667255079517,"pcap_cnt":1019,"event_type":"dns","src_ip":"192.168.1.100","src_port":51216,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31280,"rrname":"jelimixecuz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.510719+0100","flow_id":1541453341379327,"pcap_cnt":1645,"event_type":"dns","src_ip":"192.168.1.100","src_port":50270,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":56286,"rrname":"fobifisoduf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.608986+0100","flow_id":2100400385116890,"pcap_cnt":1506,"event_type":"dns","src_ip":"192.168.1.100","src_port":59268,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38001,"rrname":"tulacavosad.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.634440+0100","flow_id":1325987716593943,"pcap_cnt":1048,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52369,"proto":"UDP","dns":{"type":"answer","id":27742,"rcode":"NXDOMAIN","rrname":"fobahizipux.eu"}}
{"timestamp":"2017-12-12T18:33:06.578400+0100","flow_id":1376621086036832,"pcap_cnt":1004,"event_type":"dns","src_ip":"192.168.1.100","src_port":59398,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":54668,"rrname":"lykujedofod.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.634440+0100","flow_id":1325987716593943,"pcap_cnt":1048,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52369,"proto":"UDP","dns":{"type":"answer","id":27742,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.820847+0100","flow_id":542759627444225,"pcap_cnt":336,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53737,"proto":"UDP","dns":{"type":"answer","id":34987,"rcode":"NXDOMAIN","rrname":"magymofigeg.eu"}}
{"timestamp":"2017-12-12T18:33:07.256130+0100","flow_id":1180508584337320,"pcap_cnt":1136,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63886,"proto":"UDP","dns":{"type":"answer","id":15326,"rcode":"NXDOMAIN","rrname":"mamasufexix.eu"}}
{"timestamp":"2017-12-12T18:32:58.820847+0100","flow_id":542759627444225,"pcap_cnt":336,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53737,"proto":"UDP","dns":{"type":"answer","id":34987,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.640454+0100","flow_id":1097667255079517,"pcap_cnt":1054,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51216,"proto":"UDP","dns":{"type":"answer","id":31280,"rcode":"NXDOMAIN","rrname":"jelimixecuz.eu"}}
{"timestamp":"2017-12-12T18:33:07.256130+0100","flow_id":1180508584337320,"pcap_cnt":1136,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63886,"proto":"UDP","dns":{"type":"answer","id":15326,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.479414+0100","flow_id":462581178466952,"pcap_cnt":959,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58101,"proto":"UDP","dns":{"type":"answer","id":6947,"rcode":"NXDOMAIN","rrname":"cicezomaxyz.eu"}}
{"timestamp":"2017-12-12T18:32:58.823176+0100","flow_id":1554739821711240,"pcap_cnt":339,"event_type":"dns","src_ip":"192.168.1.100","src_port":49813,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44830,"rrname":"vowucotyqyg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.491743+0100","flow_id":1061963191992748,"pcap_cnt":968,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58500,"proto":"UDP","dns":{"type":"answer","id":44533,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.844500+0100","flow_id":657727312028372,"pcap_cnt":355,"event_type":"dns","src_ip":"192.168.1.100","src_port":49620,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27408,"rrname":"mavasatokyf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:10.550311+0100","flow_id":1467234158814171,"pcap_cnt":1431,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51819,"proto":"UDP","dns":{"type":"answer","id":40341,"rcode":"NXDOMAIN","rrname":"dixuvebakeq.eu"}}
{"timestamp":"2017-12-12T18:33:06.640015+0100","flow_id":297338754221071,"pcap_cnt":1053,"event_type":"dns","src_ip":"192.168.1.100","src_port":61188,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":21651,"rrname":"disenybuqyj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:10.550311+0100","flow_id":1467234158814171,"pcap_cnt":1431,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51819,"proto":"UDP","dns":{"type":"answer","id":40341,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:07.411794+0100","flow_id":920630850632239,"pcap_cnt":1162,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63122,"proto":"UDP","dns":{"type":"answer","id":53072,"rcode":"NXDOMAIN","rrname":"vocerocofyf.eu"}}
{"timestamp":"2017-12-12T18:33:06.656860+0100","flow_id":107005130983251,"pcap_cnt":1061,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51204,"proto":"UDP","dns":{"type":"answer","id":35808,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:07.411794+0100","flow_id":920630850632239,"pcap_cnt":1162,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63122,"proto":"UDP","dns":{"type":"answer","id":53072,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:13.476276+0100","flow_id":935070531161850,"pcap_cnt":1637,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50734,"proto":"UDP","dns":{"type":"answer","id":28374,"rcode":"NXDOMAIN","rrname":"pumocelexec.eu"}}
{"timestamp":"2017-12-12T18:33:08.498258+0100","flow_id":1749450017079985,"pcap_cnt":1210,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60040,"proto":"UDP","dns":{"type":"answer","id":52568,"rcode":"NXDOMAIN","rrname":"gahuzuzecyg.eu"}}
{"timestamp":"2017-12-12T18:33:06.863763+0100","flow_id":1463686515535379,"pcap_cnt":1124,"event_type":"dns","src_ip":"192.168.1.100","src_port":62092,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":57716,"rrname":"cinafocuryb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.838461+0100","flow_id":1778400244190013,"pcap_cnt":1108,"event_type":"dns","src_ip":"192.168.1.100","src_port":49826,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":10086,"rrname":"gadekewexac.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.688174+0100","flow_id":297338754221071,"pcap_cnt":1069,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61188,"proto":"UDP","dns":{"type":"answer","id":21651,"rcode":"NXDOMAIN","rrname":"disenybuqyj.eu"}}
{"timestamp":"2017-12-12T18:33:13.596191+0100","flow_id":1049505639036721,"pcap_cnt":1696,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53792,"proto":"UDP","dns":{"type":"answer","id":31681,"rcode":"NXDOMAIN","rrname":"kefyjuxiwap.eu"}}
{"timestamp":"2017-12-12T18:33:06.673934+0100","flow_id":735285831961722,"pcap_cnt":1066,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52840,"proto":"UDP","dns":{"type":"answer","id":37571,"rcode":"NXDOMAIN","rrname":"rylyzevipyw.eu"}}
{"timestamp":"2017-12-12T18:33:13.626968+0100","flow_id":543655129106135,"pcap_cnt":1716,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55738,"proto":"UDP","dns":{"type":"answer","id":6796,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:13.596191+0100","flow_id":1049505639036721,"pcap_cnt":1696,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53792,"proto":"UDP","dns":{"type":"answer","id":31681,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:07.414065+0100","flow_id":2129447248609249,"pcap_cnt":1163,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59918,"proto":"UDP","dns":{"type":"answer","id":57509,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:14.491367+0100","flow_id":1873840860462951,"pcap_cnt":1755,"event_type":"dns","src_ip":"192.168.1.100","src_port":64840,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59631,"rrname":"puzapelumaq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.505046+0100","flow_id":1935437134083286,"pcap_cnt":2037,"event_type":"dns","src_ip":"192.168.1.100","src_port":52599,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":39539,"rrname":"tuwiduqotug.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.545996+0100","flow_id":776893327758540,"pcap_cnt":1221,"event_type":"dns","src_ip":"192.168.1.100","src_port":63434,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44157,"rrname":"qegefavipev.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.739572+0100","flow_id":699319776395054,"pcap_cnt":1982,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57318,"proto":"UDP","dns":{"type":"answer","id":54691,"rcode":"NXDOMAIN","rrname":"kemojidezyf.eu"}}
{"timestamp":"2017-12-12T18:33:16.506606+0100","flow_id":825617584764116,"pcap_cnt":2039,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63177,"proto":"UDP","dns":{"type":"answer","id":31701,"rcode":"NXDOMAIN","rrname":"masimafoded.eu"}}
{"timestamp":"2017-12-12T18:33:15.739572+0100","flow_id":699319776395054,"pcap_cnt":1982,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57318,"proto":"UDP","dns":{"type":"answer","id":54691,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.612146+0100","flow_id":776893327758540,"pcap_cnt":1242,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63434,"proto":"UDP","dns":{"type":"answer","id":44157,"rcode":"NXDOMAIN","rrname":"qegefavipev.eu"}}
{"timestamp":"2017-12-12T18:33:13.466921+0100","flow_id":299477648370370,"pcap_cnt":1631,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52532,"proto":"UDP","dns":{"type":"answer","id":40449,"rcode":"NXDOMAIN","rrname":"lyruterodiq.eu"}}
{"timestamp":"2017-12-12T18:33:06.548255+0100","flow_id":1161161904119199,"pcap_cnt":990,"event_type":"dns","src_ip":"192.168.1.100","src_port":56215,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40988,"rrname":"pupiwopexof.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.612146+0100","flow_id":776893327758540,"pcap_cnt":1242,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63434,"proto":"UDP","dns":{"type":"answer","id":44157,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:13.559045+0100","flow_id":1090391580968901,"pcap_cnt":1669,"event_type":"dns","src_ip":"192.168.1.100","src_port":53155,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14473,"rrname":"mavywefycyc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:07.607926+0100","flow_id":1334532554017747,"pcap_cnt":1167,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63315,"proto":"UDP","dns":{"type":"answer","id":22271,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.714994+0100","flow_id":1303559397501170,"pcap_cnt":1297,"event_type":"dns","src_ip":"192.168.1.100","src_port":63121,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":21870,"rrname":"marimutitom.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.091416+0100","flow_id":1889356429551190,"pcap_cnt":1463,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55929,"proto":"UDP","dns":{"type":"answer","id":42302,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:13.607249+0100","flow_id":1090391580968901,"pcap_cnt":1702,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53155,"proto":"UDP","dns":{"type":"answer","id":14473,"rcode":"NXDOMAIN","rrname":"mavywefycyc.eu"}}
{"timestamp":"2017-12-12T18:33:08.620632+0100","flow_id":1509457982158936,"pcap_cnt":1247,"event_type":"dns","src_ip":"192.168.1.100","src_port":64147,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":55814,"rrname":"novomyfexij.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.598776+0100","flow_id":1828108048147192,"pcap_cnt":1025,"event_type":"dns","src_ip":"192.168.1.100","src_port":50029,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25738,"rrname":"makymykakic.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.607249+0100","flow_id":1090391580968901,"pcap_cnt":1702,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53155,"proto":"UDP","dns":{"type":"answer","id":14473,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.753880+0100","flow_id":1019301281956056,"pcap_cnt":1324,"event_type":"dns","src_ip":"192.168.1.100","src_port":63378,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36856,"rrname":"jewobuxisyt.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:14.368549+0100","flow_id":1943835942450176,"pcap_cnt":1726,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65167,"proto":"UDP","dns":{"type":"answer","id":60003,"rcode":"NXDOMAIN","rrname":"kejilodirub.eu"}}
{"timestamp":"2017-12-12T18:33:11.654884+0100","flow_id":2100400385116890,"pcap_cnt":1529,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59268,"proto":"UDP","dns":{"type":"answer","id":38001,"rcode":"NXDOMAIN","rrname":"tulacavosad.eu"}}
{"timestamp":"2017-12-12T18:33:14.368549+0100","flow_id":1943835942450176,"pcap_cnt":1726,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65167,"proto":"UDP","dns":{"type":"answer","id":60003,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:13.565076+0100","flow_id":1771457429968511,"pcap_cnt":1674,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54920,"proto":"UDP","dns":{"type":"answer","id":63666,"rcode":"NXDOMAIN","rrname":"nozitytogim.eu"}}
{"timestamp":"2017-12-12T18:33:06.479414+0100","flow_id":462581178466952,"pcap_cnt":959,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58101,"proto":"UDP","dns":{"type":"answer","id":6947,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.457788+0100","flow_id":2236769891681366,"pcap_cnt":1470,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59823,"proto":"UDP","dns":{"type":"answer","id":49647,"rcode":"NXDOMAIN","rrname":"qekorelelyq.eu"}}
{"timestamp":"2017-12-12T18:33:13.565076+0100","flow_id":1771457429968511,"pcap_cnt":1674,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54920,"proto":"UDP","dns":{"type":"answer","id":63666,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.654736+0100","flow_id":1903924958938668,"pcap_cnt":1931,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60294,"proto":"UDP","dns":{"type":"answer","id":20257,"rcode":"NXDOMAIN","rrname":"mamevetopym.eu"}}
{"timestamp":"2017-12-12T18:33:06.814683+0100","flow_id":63269479018075,"pcap_cnt":1106,"event_type":"dns","src_ip":"192.168.1.100","src_port":52992,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40787,"rrname":"fogavewogad.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.731791+0100","flow_id":2231341053389217,"pcap_cnt":2131,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53636,"proto":"UDP","dns":{"type":"answer","id":32700,"rcode":"NXDOMAIN","rrname":"tufecagemyl.eu"}}
{"timestamp":"2017-12-12T18:33:15.654736+0100","flow_id":1903924958938668,"pcap_cnt":1931,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60294,"proto":"UDP","dns":{"type":"answer","id":20257,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:13.476276+0100","flow_id":935070531161850,"pcap_cnt":1637,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50734,"proto":"UDP","dns":{"type":"answer","id":28374,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.445732+0100","flow_id":1303896552951076,"pcap_cnt":2009,"event_type":"dns","src_ip":"192.168.1.100","src_port":62882,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":39847,"rrname":"jefamyjejat.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.410377+0100","flow_id":42692291347209,"pcap_cnt":1999,"event_type":"dns","src_ip":"192.168.1.100","src_port":51837,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2599,"rrname":"ryqehegubes.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.765359+0100","flow_id":753947464871343,"pcap_cnt":1088,"event_type":"dns","src_ip":"192.168.1.100","src_port":59246,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":16940,"rrname":"vojomekisuw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.668970+0100","flow_id":1968263568569642,"pcap_cnt":1275,"event_type":"dns","src_ip":"192.168.1.100","src_port":61223,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":52464,"rrname":"fotasawezak.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.875234+0100","flow_id":1392527497386722,"pcap_cnt":1133,"event_type":"dns","src_ip":"192.168.1.100","src_port":51625,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":65226,"rrname":"galicasevor.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:14.518474+0100","flow_id":2228145597638986,"pcap_cnt":1770,"event_type":"dns","src_ip":"192.168.1.100","src_port":55414,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":56638,"rrname":"jepepyxiwam.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.571592+0100","flow_id":2061623273009531,"pcap_cnt":1680,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61360,"proto":"UDP","dns":{"type":"answer","id":50626,"rcode":"NXDOMAIN","rrname":"makanytezih.eu"}}
{"timestamp":"2017-12-12T18:33:06.845792+0100","flow_id":2055601728448480,"pcap_cnt":1112,"event_type":"dns","src_ip":"192.168.1.100","src_port":54693,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":58727,"rrname":"xubukyrecax.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:07.381298+0100","flow_id":1778400244190013,"pcap_cnt":1153,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49826,"proto":"UDP","dns":{"type":"answer","id":10086,"rcode":"NXDOMAIN","rrname":"gadekewexac.eu"}}
{"timestamp":"2017-12-12T18:33:07.409626+0100","flow_id":1463686515535379,"pcap_cnt":1161,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62092,"proto":"UDP","dns":{"type":"answer","id":57716,"rcode":"NXDOMAIN","rrname":"cinafocuryb.eu"}}
{"timestamp":"2017-12-12T18:33:06.673934+0100","flow_id":735285831961722,"pcap_cnt":1066,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52840,"proto":"UDP","dns":{"type":"answer","id":37571,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.688174+0100","flow_id":297338754221071,"pcap_cnt":1069,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61188,"proto":"UDP","dns":{"type":"answer","id":21651,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:07.409626+0100","flow_id":1463686515535379,"pcap_cnt":1161,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62092,"proto":"UDP","dns":{"type":"answer","id":57716,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.854331+0100","flow_id":1472190550772027,"pcap_cnt":1116,"event_type":"dns","src_ip":"192.168.1.100","src_port":54860,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29638,"rrname":"volaqutodox.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.545004+0100","flow_id":2043126995698867,"pcap_cnt":751,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49165,"proto":"UDP","dns":{"type":"answer","id":21655,"rcode":"NXDOMAIN","rrname":"dixonesohed.eu"}}
{"timestamp":"2017-12-12T18:33:08.520661+0100","flow_id":1392527497386722,"pcap_cnt":1219,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51625,"proto":"UDP","dns":{"type":"answer","id":65226,"rcode":"NXDOMAIN","rrname":"galicasevor.eu"}}
{"timestamp":"2017-12-12T18:33:16.506606+0100","flow_id":825617584764116,"pcap_cnt":2039,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63177,"proto":"UDP","dns":{"type":"answer","id":31701,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.520661+0100","flow_id":1392527497386722,"pcap_cnt":1219,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51625,"proto":"UDP","dns":{"type":"answer","id":65226,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.545821+0100","flow_id":1708231215959020,"pcap_cnt":988,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59571,"proto":"UDP","dns":{"type":"answer","id":49278,"rcode":"NXDOMAIN","rrname":"divulewybek.eu"}}
{"timestamp":"2017-12-12T18:33:10.401049+0100","flow_id":194575219433113,"pcap_cnt":1354,"event_type":"dns","src_ip":"192.168.1.100","src_port":54011,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":20869,"rrname":"dikexosajif.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.466921+0100","flow_id":299477648370370,"pcap_cnt":1631,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52532,"proto":"UDP","dns":{"type":"answer","id":40449,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.453025+0100","flow_id":194575219433113,"pcap_cnt":1373,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54011,"proto":"UDP","dns":{"type":"answer","id":20869,"rcode":"NXDOMAIN","rrname":"dikexosajif.eu"}}
{"timestamp":"2017-12-12T18:33:10.567829+0100","flow_id":1087477445460812,"pcap_cnt":1445,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64493,"proto":"UDP","dns":{"type":"answer","id":7274,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.453025+0100","flow_id":194575219433113,"pcap_cnt":1373,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54011,"proto":"UDP","dns":{"type":"answer","id":20869,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.605360+0100","flow_id":1420859249165143,"pcap_cnt":1033,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59480,"proto":"UDP","dns":{"type":"answer","id":8277,"rcode":"NXDOMAIN","rrname":"jecoqedevod.eu"}}
{"timestamp":"2017-12-12T18:33:01.667325+0100","flow_id":1448538165572936,"pcap_cnt":622,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62812,"proto":"UDP","dns":{"type":"answer","id":7890,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.605360+0100","flow_id":1420859249165143,"pcap_cnt":1033,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59480,"proto":"UDP","dns":{"type":"answer","id":8277,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.640454+0100","flow_id":1097667255079517,"pcap_cnt":1054,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51216,"proto":"UDP","dns":{"type":"answer","id":31280,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.707705+0100","flow_id":1004266749152377,"pcap_cnt":1553,"event_type":"dns","src_ip":"192.168.1.100","src_port":62134,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36770,"rrname":"puzulugelyh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.701113+0100","flow_id":1745870162014905,"pcap_cnt":1292,"event_type":"dns","src_ip":"192.168.1.100","src_port":58816,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":52252,"rrname":"cihocytodoh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.654884+0100","flow_id":2100400385116890,"pcap_cnt":1529,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59268,"proto":"UDP","dns":{"type":"answer","id":38001,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.501926+0100","flow_id":2235754131466406,"pcap_cnt":721,"event_type":"dns","src_ip":"192.168.1.100","src_port":59290,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11035,"rrname":"vocebufazap.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.710690+0100","flow_id":1952337830074402,"pcap_cnt":1557,"event_type":"dns","src_ip":"192.168.1.100","src_port":55834,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48330,"rrname":"qetohiqyvoz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.703560+0100","flow_id":244613736021064,"pcap_cnt":1550,"event_type":"dns","src_ip":"192.168.1.100","src_port":56982,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":3072,"rrname":"vojopumuqot.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.731791+0100","flow_id":2231341053389217,"pcap_cnt":2131,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53636,"proto":"UDP","dns":{"type":"answer","id":32700,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:03.553318+0100","flow_id":2235754131466406,"pcap_cnt":758,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59290,"proto":"UDP","dns":{"type":"answer","id":11035,"rcode":"NXDOMAIN","rrname":"vocebufazap.eu"}}
{"timestamp":"2017-12-12T18:33:10.564348+0100","flow_id":1913996656938479,"pcap_cnt":1444,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60076,"proto":"UDP","dns":{"type":"answer","id":23112,"rcode":"NXDOMAIN","rrname":"qetevavahew.eu"}}
{"timestamp":"2017-12-12T18:33:03.553318+0100","flow_id":2235754131466406,"pcap_cnt":758,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59290,"proto":"UDP","dns":{"type":"answer","id":11035,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.498258+0100","flow_id":1749450017079985,"pcap_cnt":1210,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60040,"proto":"UDP","dns":{"type":"answer","id":52568,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.564348+0100","flow_id":1913996656938479,"pcap_cnt":1444,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60076,"proto":"UDP","dns":{"type":"answer","id":23112,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.482037+0100","flow_id":746564416723701,"pcap_cnt":2022,"event_type":"dns","src_ip":"192.168.1.100","src_port":60482,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40289,"rrname":"vofozymufok.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.494196+0100","flow_id":489111192111732,"pcap_cnt":2025,"event_type":"dns","src_ip":"192.168.1.100","src_port":61953,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25130,"rrname":"puzutuqeqij.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:09.559799+0100","flow_id":1303559397501170,"pcap_cnt":1338,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63121,"proto":"UDP","dns":{"type":"answer","id":21870,"rcode":"NXDOMAIN","rrname":"marimutitom.eu"}}
{"timestamp":"2017-12-12T18:33:11.715931+0100","flow_id":1760369971817627,"pcap_cnt":1563,"event_type":"dns","src_ip":"192.168.1.100","src_port":65169,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43109,"rrname":"cilihumecox.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:07.340546+0100","flow_id":1541199937810801,"pcap_cnt":1148,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56785,"proto":"UDP","dns":{"type":"answer","id":58100,"rcode":"NXDOMAIN","rrname":"tunyzylazuj.eu"}}
{"timestamp":"2017-12-12T18:33:06.854740+0100","flow_id":1117782734408404,"pcap_cnt":1117,"event_type":"dns","src_ip":"192.168.1.100","src_port":64029,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":32885,"rrname":"jefogixuqyn.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.759960+0100","flow_id":1004266749152377,"pcap_cnt":1585,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62134,"proto":"UDP","dns":{"type":"answer","id":36770,"rcode":"NXDOMAIN","rrname":"puzulugelyh.eu"}}
{"timestamp":"2017-12-12T18:33:13.571592+0100","flow_id":2061623273009531,"pcap_cnt":1680,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61360,"proto":"UDP","dns":{"type":"answer","id":50626,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.759960+0100","flow_id":1004266749152377,"pcap_cnt":1585,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62134,"proto":"UDP","dns":{"type":"answer","id":36770,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.661728+0100","flow_id":885839467911392,"pcap_cnt":869,"event_type":"dns","src_ip":"192.168.1.100","src_port":56422,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14609,"rrname":"norebituwez.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:14.586746+0100","flow_id":876830774719482,"pcap_cnt":1812,"event_type":"dns","src_ip":"192.168.1.100","src_port":61969,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1171,"rrname":"tunakupycut.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.766094+0100","flow_id":1952337830074402,"pcap_cnt":1590,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55834,"proto":"UDP","dns":{"type":"answer","id":48330,"rcode":"NXDOMAIN","rrname":"qetohiqyvoz.eu"}}
{"timestamp":"2017-12-12T18:33:04.714480+0100","flow_id":885839467911392,"pcap_cnt":913,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56422,"proto":"UDP","dns":{"type":"answer","id":14609,"rcode":"NXDOMAIN","rrname":"norebituwez.eu"}}
{"timestamp":"2017-12-12T18:33:07.381298+0100","flow_id":1778400244190013,"pcap_cnt":1153,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49826,"proto":"UDP","dns":{"type":"answer","id":10086,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.766094+0100","flow_id":1952337830074402,"pcap_cnt":1590,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55834,"proto":"UDP","dns":{"type":"answer","id":48330,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.771088+0100","flow_id":1622918133105680,"pcap_cnt":1091,"event_type":"dns","src_ip":"192.168.1.100","src_port":63862,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":20136,"rrname":"kevybunureh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.705749+0100","flow_id":341353579070677,"pcap_cnt":1071,"event_type":"dns","src_ip":"192.168.1.100","src_port":60274,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34450,"rrname":"norijyfohop.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:14.607232+0100","flow_id":1292446169973760,"pcap_cnt":1822,"event_type":"dns","src_ip":"192.168.1.100","src_port":55716,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4843,"rrname":"kefatenahic.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.443418+0100","flow_id":1493729811640243,"pcap_cnt":1201,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60556,"proto":"UDP","dns":{"type":"answer","id":6933,"rcode":"NXDOMAIN","rrname":"vofubimipeg.eu"}}
{"timestamp":"2017-12-12T18:33:07.356830+0100","flow_id":63269479018075,"pcap_cnt":1152,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52992,"proto":"UDP","dns":{"type":"answer","id":40787,"rcode":"NXDOMAIN","rrname":"fogavewogad.eu"}}
{"timestamp":"2017-12-12T18:33:03.545004+0100","flow_id":2043126995698867,"pcap_cnt":751,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49165,"proto":"UDP","dns":{"type":"answer","id":21655,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.783535+0100","flow_id":876871576468545,"pcap_cnt":1336,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53198,"proto":"UDP","dns":{"type":"answer","id":2079,"rcode":"NXDOMAIN","rrname":"qebolelofyc.eu"}}
{"timestamp":"2017-12-12T18:33:07.356830+0100","flow_id":63269479018075,"pcap_cnt":1152,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52992,"proto":"UDP","dns":{"type":"answer","id":40787,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.617537+0100","flow_id":2226350300556353,"pcap_cnt":792,"event_type":"dns","src_ip":"192.168.1.100","src_port":54064,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":22046,"rrname":"maxagamisyb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.783535+0100","flow_id":876871576468545,"pcap_cnt":1336,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53198,"proto":"UDP","dns":{"type":"answer","id":2079,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.595184+0100","flow_id":1161161904119199,"pcap_cnt":1020,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56215,"proto":"UDP","dns":{"type":"answer","id":40988,"rcode":"NXDOMAIN","rrname":"pupiwopexof.eu"}}
{"timestamp":"2017-12-12T18:33:04.468867+0100","flow_id":2226350300556353,"pcap_cnt":806,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54064,"proto":"UDP","dns":{"type":"answer","id":22046,"rcode":"NXDOMAIN","rrname":"maxagamisyb.eu"}}
{"timestamp":"2017-12-12T18:33:13.564682+0100","flow_id":1844635082792394,"pcap_cnt":1673,"event_type":"dns","src_ip":"192.168.1.100","src_port":59296,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":52768,"rrname":"tujydygelyp.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.468867+0100","flow_id":2226350300556353,"pcap_cnt":806,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54064,"proto":"UDP","dns":{"type":"answer","id":22046,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.595184+0100","flow_id":1161161904119199,"pcap_cnt":1020,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56215,"proto":"UDP","dns":{"type":"answer","id":40988,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:07.389887+0100","flow_id":2055601728448480,"pcap_cnt":1155,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54693,"proto":"UDP","dns":{"type":"answer","id":58727,"rcode":"NXDOMAIN","rrname":"xubukyrecax.eu"}}
{"timestamp":"2017-12-12T18:33:04.528356+0100","flow_id":1914999531376612,"pcap_cnt":814,"event_type":"dns","src_ip":"192.168.1.100","src_port":61253,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42217,"rrname":"nomocykyqiq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.562293+0100","flow_id":2012922638537845,"pcap_cnt":1226,"event_type":"dns","src_ip":"192.168.1.100","src_port":59150,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60984,"rrname":"fobirybakes.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.616614+0100","flow_id":1844635082792394,"pcap_cnt":1709,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59296,"proto":"UDP","dns":{"type":"answer","id":52768,"rcode":"NXDOMAIN","rrname":"tujydygelyp.eu"}}
{"timestamp":"2017-12-12T18:33:04.552353+0100","flow_id":10353334316449,"pcap_cnt":819,"event_type":"dns","src_ip":"192.168.1.100","src_port":64868,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63063,"rrname":"ryloqulebih.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.616614+0100","flow_id":1844635082792394,"pcap_cnt":1709,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59296,"proto":"UDP","dns":{"type":"answer","id":52768,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.564277+0100","flow_id":982388185537589,"pcap_cnt":1227,"event_type":"dns","src_ip":"192.168.1.100","src_port":57187,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25137,"rrname":"gacovybybec.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.457788+0100","flow_id":2236769891681366,"pcap_cnt":1470,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59823,"proto":"UDP","dns":{"type":"answer","id":49647,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.721309+0100","flow_id":1968263568569642,"pcap_cnt":1299,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61223,"proto":"UDP","dns":{"type":"answer","id":52464,"rcode":"NXDOMAIN","rrname":"fotasawezak.eu"}}
{"timestamp":"2017-12-12T18:32:58.850157+0100","flow_id":1266478796699885,"pcap_cnt":358,"event_type":"dns","src_ip":"192.168.1.100","src_port":64428,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42380,"rrname":"qexyqapevyb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.721309+0100","flow_id":1968263568569642,"pcap_cnt":1299,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61223,"proto":"UDP","dns":{"type":"answer","id":52464,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.709018+0100","flow_id":1467992220619162,"pcap_cnt":1555,"event_type":"dns","src_ip":"192.168.1.100","src_port":57074,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1695,"rrname":"masuximakot.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.574070+0100","flow_id":440103467598454,"pcap_cnt":1684,"event_type":"dns","src_ip":"192.168.1.100","src_port":52606,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25150,"rrname":"foqahabofoq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.891023+0100","flow_id":1554739821711240,"pcap_cnt":381,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49813,"proto":"UDP","dns":{"type":"answer","id":44830,"rcode":"NXDOMAIN","rrname":"vowucotyqyg.eu"}}
{"timestamp":"2017-12-12T18:33:08.600154+0100","flow_id":232398848796762,"pcap_cnt":1236,"event_type":"dns","src_ip":"192.168.1.100","src_port":49718,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":16729,"rrname":"nomawimecat.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.891023+0100","flow_id":1554739821711240,"pcap_cnt":381,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49813,"proto":"UDP","dns":{"type":"answer","id":44830,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:13.624491+0100","flow_id":440103467598454,"pcap_cnt":1714,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52606,"proto":"UDP","dns":{"type":"answer","id":25150,"rcode":"NXDOMAIN","rrname":"foqahabofoq.eu"}}
{"timestamp":"2017-12-12T18:33:10.582083+0100","flow_id":2212531243723306,"pcap_cnt":1453,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51479,"proto":"UDP","dns":{"type":"answer","id":17333,"rcode":"NXDOMAIN","rrname":"qegiqiqakof.eu"}}
{"timestamp":"2017-12-12T18:33:13.624491+0100","flow_id":440103467598454,"pcap_cnt":1714,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52606,"proto":"UDP","dns":{"type":"answer","id":25150,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.837487+0100","flow_id":1234084007036783,"pcap_cnt":2160,"event_type":"dns","src_ip":"192.168.1.100","src_port":54507,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35724,"rrname":"xuguxujytej.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:58.914661+0100","flow_id":657727312028372,"pcap_cnt":396,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49620,"proto":"UDP","dns":{"type":"answer","id":27408,"rcode":"NXDOMAIN","rrname":"mavasatokyf.eu"}}
{"timestamp":"2017-12-12T18:33:16.494549+0100","flow_id":489111192111732,"pcap_cnt":2027,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61953,"proto":"UDP","dns":{"type":"answer","id":25130,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"puzutuqeqij.eu","rrtype":"A","ttl":259,"rdata":"95.211.174.92"}}
{"timestamp":"2017-12-12T18:33:09.559799+0100","flow_id":1303559397501170,"pcap_cnt":1338,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63121,"proto":"UDP","dns":{"type":"answer","id":21870,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:58.914661+0100","flow_id":657727312028372,"pcap_cnt":396,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49620,"proto":"UDP","dns":{"type":"answer","id":27408,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.494549+0100","flow_id":489111192111732,"pcap_cnt":2027,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61953,"proto":"UDP","dns":{"type":"answer","id":25130,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"puzutuqeqij.eu","rrtype":"NS","ttl":7343,"rdata":"ns-2039.awsdns-62.co.uk"}}
{"timestamp":"2017-12-12T18:33:06.873294+0100","flow_id":289867658580814,"pcap_cnt":1132,"event_type":"dns","src_ip":"192.168.1.100","src_port":65157,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5686,"rrname":"foxyqosajol.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.494549+0100","flow_id":489111192111732,"pcap_cnt":2027,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61953,"proto":"UDP","dns":{"type":"answer","id":25130,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"puzutuqeqij.eu","rrtype":"NS","ttl":7343,"rdata":"ns-504.awsdns-63.com"}}
{"timestamp":"2017-12-12T18:33:13.581662+0100","flow_id":157458112307230,"pcap_cnt":1690,"event_type":"dns","src_ip":"192.168.1.100","src_port":52520,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59910,"rrname":"norygumekon.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.506112+0100","flow_id":2029335855898631,"pcap_cnt":1213,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50490,"proto":"UDP","dns":{"type":"answer","id":47963,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.714480+0100","flow_id":885839467911392,"pcap_cnt":913,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56422,"proto":"UDP","dns":{"type":"answer","id":14609,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:13.630503+0100","flow_id":157458112307230,"pcap_cnt":1719,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52520,"proto":"UDP","dns":{"type":"answer","id":59910,"rcode":"NXDOMAIN","rrname":"norygumekon.eu"}}
{"timestamp":"2017-12-12T18:33:08.513045+0100","flow_id":725400964709433,"pcap_cnt":1216,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51675,"proto":"UDP","dns":{"type":"answer","id":1604,"rcode":"NXDOMAIN","rrname":"nozubacezyb.eu"}}
{"timestamp":"2017-12-12T18:33:12.562175+0100","flow_id":1760369971817627,"pcap_cnt":1594,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65169,"proto":"UDP","dns":{"type":"answer","id":43109,"rcode":"NXDOMAIN","rrname":"cilihumecox.eu"}}
{"timestamp":"2017-12-12T18:33:13.630503+0100","flow_id":157458112307230,"pcap_cnt":1719,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52520,"proto":"UDP","dns":{"type":"answer","id":59910,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.513045+0100","flow_id":725400964709433,"pcap_cnt":1216,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51675,"proto":"UDP","dns":{"type":"answer","id":1604,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.554098+0100","flow_id":1935437134083286,"pcap_cnt":2062,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52599,"proto":"UDP","dns":{"type":"answer","id":39539,"rcode":"NXDOMAIN","rrname":"tuwiduqotug.eu"}}
{"timestamp":"2017-12-12T18:33:08.443418+0100","flow_id":1493729811640243,"pcap_cnt":1201,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60556,"proto":"UDP","dns":{"type":"answer","id":6933,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:14.554041+0100","flow_id":659110292517945,"pcap_cnt":1793,"event_type":"dns","src_ip":"192.168.1.100","src_port":56209,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30917,"rrname":"xubehuxunag.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.545821+0100","flow_id":1708231215959020,"pcap_cnt":988,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59571,"proto":"UDP","dns":{"type":"answer","id":49278,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.668959+0100","flow_id":1509457982158936,"pcap_cnt":1274,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64147,"proto":"UDP","dns":{"type":"answer","id":55814,"rcode":"NXDOMAIN","rrname":"novomyfexij.eu"}}
{"timestamp":"2017-12-12T18:33:14.604898+0100","flow_id":1395027168869090,"pcap_cnt":1820,"event_type":"dns","src_ip":"192.168.1.100","src_port":62359,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50098,"rrname":"galyzabunoc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.629583+0100","flow_id":2012922638537845,"pcap_cnt":1251,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59150,"proto":"UDP","dns":{"type":"answer","id":60984,"rcode":"NXDOMAIN","rrname":"fobirybakes.eu"}}
{"timestamp":"2017-12-12T18:33:10.585999+0100","flow_id":2078377940237629,"pcap_cnt":1456,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55981,"proto":"UDP","dns":{"type":"answer","id":50006,"rcode":"NXDOMAIN","rrname":"vonabakyvyk.eu"}}
{"timestamp":"2017-12-12T18:33:04.622342+0100","flow_id":2232195751116550,"pcap_cnt":842,"event_type":"dns","src_ip":"192.168.1.100","src_port":52694,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":55701,"rrname":"lyxemoxyquf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.629583+0100","flow_id":2012922638537845,"pcap_cnt":1251,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59150,"proto":"UDP","dns":{"type":"answer","id":60984,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.625448+0100","flow_id":1376621086036832,"pcap_cnt":1041,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59398,"proto":"UDP","dns":{"type":"answer","id":54668,"rcode":"NXDOMAIN","rrname":"lykujedofod.eu"}}
{"timestamp":"2017-12-12T18:33:04.594329+0100","flow_id":1914999531376612,"pcap_cnt":828,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61253,"proto":"UDP","dns":{"type":"answer","id":42217,"rcode":"NXDOMAIN","rrname":"nomocykyqiq.eu"}}
{"timestamp":"2017-12-12T18:33:04.636410+0100","flow_id":775583362495994,"pcap_cnt":847,"event_type":"dns","src_ip":"192.168.1.100","src_port":52103,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44285,"rrname":"nopymecurud.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:14.508034+0100","flow_id":1105333772271746,"pcap_cnt":1763,"event_type":"dns","src_ip":"192.168.1.100","src_port":51177,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":831,"rrname":"gadohyzyvah.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.668416+0100","flow_id":2051912351363840,"pcap_cnt":876,"event_type":"dns","src_ip":"192.168.1.100","src_port":55308,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23997,"rrname":"digofasexal.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.434412+0100","flow_id":876830774719482,"pcap_cnt":1856,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61969,"proto":"UDP","dns":{"type":"answer","id":1171,"rcode":"NXDOMAIN","rrname":"tunakupycut.eu"}}
{"timestamp":"2017-12-12T18:33:10.605234+0100","flow_id":597030834945074,"pcap_cnt":1460,"event_type":"dns","src_ip":"192.168.1.100","src_port":64181,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47573,"rrname":"kejamerecos.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.666583+0100","flow_id":232398848796762,"pcap_cnt":1272,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49718,"proto":"UDP","dns":{"type":"answer","id":16729,"rcode":"NXDOMAIN","rrname":"nomawimecat.eu"}}
{"timestamp":"2017-12-12T18:33:09.600264+0100","flow_id":1019301281956056,"pcap_cnt":1345,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63378,"proto":"UDP","dns":{"type":"answer","id":36856,"rcode":"NXDOMAIN","rrname":"jewobuxisyt.eu"}}
{"timestamp":"2017-12-12T18:33:15.434412+0100","flow_id":876830774719482,"pcap_cnt":1856,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61969,"proto":"UDP","dns":{"type":"answer","id":1171,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.725989+0100","flow_id":487275093234661,"pcap_cnt":1569,"event_type":"dns","src_ip":"192.168.1.100","src_port":64716,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38821,"rrname":"tunymoqofol.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.717682+0100","flow_id":309897238603074,"pcap_cnt":1564,"event_type":"dns","src_ip":"192.168.1.100","src_port":57841,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37766,"rrname":"lymewijosyf.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:32:58.919150+0100","flow_id":1266478796699885,"pcap_cnt":399,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64428,"proto":"UDP","dns":{"type":"answer","id":42380,"rcode":"NXDOMAIN","rrname":"qexyqapevyb.eu"}}
{"timestamp":"2017-12-12T18:33:16.837737+0100","flow_id":1234084007036783,"pcap_cnt":2161,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54507,"proto":"UDP","dns":{"type":"answer","id":35724,"rcode":"NXDOMAIN","rrname":"xuguxujytej.eu"}}
{"timestamp":"2017-12-12T18:33:16.494549+0100","flow_id":489111192111732,"pcap_cnt":2027,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61953,"proto":"UDP","dns":{"type":"answer","id":25130,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"puzutuqeqij.eu","rrtype":"NS","ttl":7343,"rdata":"ns-914.awsdns-50.net"}}
{"timestamp":"2017-12-12T18:33:11.755694+0100","flow_id":244613736021064,"pcap_cnt":1582,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56982,"proto":"UDP","dns":{"type":"answer","id":3072,"rcode":"NXDOMAIN","rrname":"vojopumuqot.eu"}}
{"timestamp":"2017-12-12T18:32:58.919150+0100","flow_id":1266478796699885,"pcap_cnt":399,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64428,"proto":"UDP","dns":{"type":"answer","id":42380,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.614150+0100","flow_id":1504329790757904,"pcap_cnt":599,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55412,"proto":"UDP","dns":{"type":"answer","id":58560,"rcode":"NXDOMAIN","rrname":"jecocinywut.eu"}}
{"timestamp":"2017-12-12T18:33:06.805436+0100","flow_id":270776528947772,"pcap_cnt":1100,"event_type":"dns","src_ip":"192.168.1.100","src_port":60625,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17969,"rrname":"nopolomojen.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.872476+0100","flow_id":913202704699420,"pcap_cnt":1131,"event_type":"dns","src_ip":"192.168.1.100","src_port":57343,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49820,"rrname":"divesosisor.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:01.614150+0100","flow_id":1504329790757904,"pcap_cnt":599,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55412,"proto":"UDP","dns":{"type":"answer","id":58560,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:59.593650+0100","flow_id":256439927597070,"pcap_cnt":413,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61548,"proto":"UDP","dns":{"type":"answer","id":62303,"rcode":"NXDOMAIN","rrname":"makiwemihiw.eu"}}
{"timestamp":"2017-12-12T18:33:08.459880+0100","flow_id":2151186225588224,"pcap_cnt":1205,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58226,"proto":"UDP","dns":{"type":"answer","id":22684,"rcode":"NXDOMAIN","rrname":"tucakaqalav.eu"}}
{"timestamp":"2017-12-12T18:33:07.606814+0100","flow_id":341353579070677,"pcap_cnt":1166,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60274,"proto":"UDP","dns":{"type":"answer","id":34450,"rcode":"NXDOMAIN","rrname":"norijyfohop.eu"}}
{"timestamp":"2017-12-12T18:33:01.647543+0100","flow_id":1509415032007840,"pcap_cnt":615,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57472,"proto":"UDP","dns":{"type":"answer","id":51262,"rcode":"NXDOMAIN","rrname":"mamomamymyl.eu"}}
{"timestamp":"2017-12-12T18:33:14.361948+0100","flow_id":1541453341379327,"pcap_cnt":1724,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50270,"proto":"UDP","dns":{"type":"answer","id":56286,"rcode":"NXDOMAIN","rrname":"fobifisoduf.eu"}}
{"timestamp":"2017-12-12T18:33:12.570536+0100","flow_id":487275093234661,"pcap_cnt":1599,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64716,"proto":"UDP","dns":{"type":"answer","id":38821,"rcode":"NXDOMAIN","rrname":"tunymoqofol.eu"}}
{"timestamp":"2017-12-12T18:33:01.647543+0100","flow_id":1509415032007840,"pcap_cnt":615,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57472,"proto":"UDP","dns":{"type":"answer","id":51262,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:14.610773+0100","flow_id":694655441850837,"pcap_cnt":1825,"event_type":"dns","src_ip":"192.168.1.100","src_port":53378,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49010,"rrname":"makujafiqyq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:12.570536+0100","flow_id":487275093234661,"pcap_cnt":1599,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64716,"proto":"UDP","dns":{"type":"answer","id":38821,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.721408+0100","flow_id":292807563674112,"pcap_cnt":1077,"event_type":"dns","src_ip":"192.168.1.100","src_port":55752,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19509,"rrname":"rycucugisix.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:03.581812+0100","flow_id":1581518943150260,"pcap_cnt":774,"event_type":"dns","src_ip":"192.168.1.100","src_port":52116,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40933,"rrname":"galuhubywum.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.625448+0100","flow_id":1376621086036832,"pcap_cnt":1041,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59398,"proto":"UDP","dns":{"type":"answer","id":54668,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.631330+0100","flow_id":982388185537589,"pcap_cnt":1252,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57187,"proto":"UDP","dns":{"type":"answer","id":25137,"rcode":"NXDOMAIN","rrname":"gacovybybec.eu"}}
{"timestamp":"2017-12-12T18:33:10.493287+0100","flow_id":455022036289255,"pcap_cnt":1393,"event_type":"dns","src_ip":"192.168.1.100","src_port":58270,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":56130,"rrname":"masawocipel.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.594329+0100","flow_id":1914999531376612,"pcap_cnt":828,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61253,"proto":"UDP","dns":{"type":"answer","id":42217,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.664668+0100","flow_id":204902467904604,"pcap_cnt":873,"event_type":"dns","src_ip":"192.168.1.100","src_port":58076,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26600,"rrname":"tulyboputal.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:10.559402+0100","flow_id":1662646580840746,"pcap_cnt":1439,"event_type":"dns","src_ip":"192.168.1.100","src_port":64980,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48691,"rrname":"rydacoqybob.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.749073+0100","flow_id":1839225571143185,"pcap_cnt":1320,"event_type":"dns","src_ip":"192.168.1.100","src_port":55197,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":46547,"rrname":"qeqaxupogog.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.601448+0100","flow_id":10353334316449,"pcap_cnt":832,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64868,"proto":"UDP","dns":{"type":"answer","id":63063,"rcode":"NXDOMAIN","rrname":"ryloqulebih.eu"}}
{"timestamp":"2017-12-12T18:33:10.582083+0100","flow_id":2212531243723306,"pcap_cnt":1453,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51479,"proto":"UDP","dns":{"type":"answer","id":17333,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.561885+0100","flow_id":455022036289255,"pcap_cnt":1441,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58270,"proto":"UDP","dns":{"type":"answer","id":56130,"rcode":"NXDOMAIN","rrname":"masawocipel.eu"}}
{"timestamp":"2017-12-12T18:33:04.601448+0100","flow_id":10353334316449,"pcap_cnt":832,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64868,"proto":"UDP","dns":{"type":"answer","id":63063,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.561885+0100","flow_id":455022036289255,"pcap_cnt":1441,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58270,"proto":"UDP","dns":{"type":"answer","id":56130,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.583330+0100","flow_id":1928822884020208,"pcap_cnt":1454,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54884,"proto":"UDP","dns":{"type":"answer","id":14191,"rcode":"NXDOMAIN","rrname":"ciqirokajyr.eu"}}
{"timestamp":"2017-12-12T18:33:06.650993+0100","flow_id":1828108048147192,"pcap_cnt":1057,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50029,"proto":"UDP","dns":{"type":"answer","id":25738,"rcode":"NXDOMAIN","rrname":"makymykakic.eu"}}
{"timestamp":"2017-12-12T18:33:04.612796+0100","flow_id":1460368652656234,"pcap_cnt":837,"event_type":"dns","src_ip":"192.168.1.100","src_port":57222,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50909,"rrname":"gaqecizupun.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:14.553838+0100","flow_id":1105333772271746,"pcap_cnt":1792,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51177,"proto":"UDP","dns":{"type":"answer","id":831,"rcode":"NXDOMAIN","rrname":"gadohyzyvah.eu"}}
{"timestamp":"2017-12-12T18:33:06.650993+0100","flow_id":1828108048147192,"pcap_cnt":1057,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50029,"proto":"UDP","dns":{"type":"answer","id":25738,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.649665+0100","flow_id":672813385509313,"pcap_cnt":1527,"event_type":"dns","src_ip":"192.168.1.100","src_port":50162,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5059,"rrname":"jenegodelur.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.455562+0100","flow_id":1292446169973760,"pcap_cnt":1860,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55716,"proto":"UDP","dns":{"type":"answer","id":4843,"rcode":"NXDOMAIN","rrname":"kefatenahic.eu"}}
{"timestamp":"2017-12-12T18:33:16.554098+0100","flow_id":1935437134083286,"pcap_cnt":2062,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52599,"proto":"UDP","dns":{"type":"answer","id":39539,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.455562+0100","flow_id":1292446169973760,"pcap_cnt":1860,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55716,"proto":"UDP","dns":{"type":"answer","id":4843,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:13.469102+0100","flow_id":1107691709212782,"pcap_cnt":1632,"event_type":"dns","src_ip":"192.168.1.100","src_port":61553,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50538,"rrname":"dimulisuqun.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.101529+0100","flow_id":1662646580840746,"pcap_cnt":1464,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64980,"proto":"UDP","dns":{"type":"answer","id":48691,"rcode":"NXDOMAIN","rrname":"rydacoqybob.eu"}}
{"timestamp":"2017-12-12T18:32:59.593650+0100","flow_id":256439927597070,"pcap_cnt":413,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61548,"proto":"UDP","dns":{"type":"answer","id":62303,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.101529+0100","flow_id":1662646580840746,"pcap_cnt":1464,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64980,"proto":"UDP","dns":{"type":"answer","id":48691,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.459880+0100","flow_id":2151186225588224,"pcap_cnt":1205,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58226,"proto":"UDP","dns":{"type":"answer","id":22684,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:13.568274+0100","flow_id":1538298687892434,"pcap_cnt":1677,"event_type":"dns","src_ip":"192.168.1.100","src_port":52562,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":267,"rrname":"pufuwygybyx.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:59.671149+0100","flow_id":2199946988830125,"pcap_cnt":441,"event_type":"dns","src_ip":"192.168.1.100","src_port":49252,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":3450,"rrname":"qeqotogemet.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.552260+0100","flow_id":703404290043204,"pcap_cnt":1482,"event_type":"dns","src_ip":"192.168.1.100","src_port":60563,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":54145,"rrname":"kezywuxyven.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.617838+0100","flow_id":1538298687892434,"pcap_cnt":1710,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52562,"proto":"UDP","dns":{"type":"answer","id":267,"rcode":"NXDOMAIN","rrname":"pufuwygybyx.eu"}}
{"timestamp":"2017-12-12T18:33:07.307417+0100","flow_id":753947464871343,"pcap_cnt":1143,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59246,"proto":"UDP","dns":{"type":"answer","id":16940,"rcode":"NXDOMAIN","rrname":"vojomekisuw.eu"}}
{"timestamp":"2017-12-12T18:32:59.717819+0100","flow_id":2199946988830125,"pcap_cnt":457,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49252,"proto":"UDP","dns":{"type":"answer","id":3450,"rcode":"NXDOMAIN","rrname":"qeqotogemet.eu"}}
{"timestamp":"2017-12-12T18:33:10.585999+0100","flow_id":2078377940237629,"pcap_cnt":1456,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55981,"proto":"UDP","dns":{"type":"answer","id":50006,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:32:59.717819+0100","flow_id":2199946988830125,"pcap_cnt":457,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49252,"proto":"UDP","dns":{"type":"answer","id":3450,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.668959+0100","flow_id":1509457982158936,"pcap_cnt":1274,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64147,"proto":"UDP","dns":{"type":"answer","id":55814,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:07.307417+0100","flow_id":753947464871343,"pcap_cnt":1143,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59246,"proto":"UDP","dns":{"type":"answer","id":16940,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.628069+0100","flow_id":1581518943150260,"pcap_cnt":796,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52116,"proto":"UDP","dns":{"type":"answer","id":40933,"rcode":"NXDOMAIN","rrname":"galuhubywum.eu"}}
{"timestamp":"2017-12-12T18:32:59.718548+0100","flow_id":1667439763650260,"pcap_cnt":458,"event_type":"dns","src_ip":"192.168.1.100","src_port":51126,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":471,"rrname":"lymunyjigak.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.631330+0100","flow_id":982388185537589,"pcap_cnt":1252,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57187,"proto":"UDP","dns":{"type":"answer","id":25137,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:03.628069+0100","flow_id":1581518943150260,"pcap_cnt":796,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52116,"proto":"UDP","dns":{"type":"answer","id":40933,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.482320+0100","flow_id":746564416723701,"pcap_cnt":2023,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60482,"proto":"UDP","dns":{"type":"answer","id":40289,"rcode":"NXDOMAIN","rrname":"vofozymufok.eu"}}
{"timestamp":"2017-12-12T18:32:59.764506+0100","flow_id":1667439763650260,"pcap_cnt":476,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51126,"proto":"UDP","dns":{"type":"answer","id":471,"rcode":"NXDOMAIN","rrname":"lymunyjigak.eu"}}
{"timestamp":"2017-12-12T18:33:04.489649+0100","flow_id":786932813559985,"pcap_cnt":808,"event_type":"dns","src_ip":"192.168.1.100","src_port":54381,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":756,"rrname":"lygivejynow.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:32:59.764506+0100","flow_id":1667439763650260,"pcap_cnt":476,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51126,"proto":"UDP","dns":{"type":"answer","id":471,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.669173+0100","flow_id":2232195751116550,"pcap_cnt":877,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52694,"proto":"UDP","dns":{"type":"answer","id":55701,"rcode":"NXDOMAIN","rrname":"lyxemoxyquf.eu"}}
{"timestamp":"2017-12-12T18:33:09.591915+0100","flow_id":1804133540848369,"pcap_cnt":1342,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60224,"proto":"UDP","dns":{"type":"answer","id":28457,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.501027+0100","flow_id":1813485831693603,"pcap_cnt":552,"event_type":"dns","src_ip":"192.168.1.100","src_port":54684,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9792,"rrname":"vocupotusyz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:14.493351+0100","flow_id":2016261974991228,"pcap_cnt":1756,"event_type":"dns","src_ip":"192.168.1.100","src_port":64764,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64944,"rrname":"dikymezosaj.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:07.389887+0100","flow_id":2055601728448480,"pcap_cnt":1155,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54693,"proto":"UDP","dns":{"type":"answer","id":58727,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:01.567389+0100","flow_id":1813485831693603,"pcap_cnt":573,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54684,"proto":"UDP","dns":{"type":"answer","id":9792,"rcode":"NXDOMAIN","rrname":"vocupotusyz.eu"}}
{"timestamp":"2017-12-12T18:33:11.504467+0100","flow_id":597030834945074,"pcap_cnt":1475,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64181,"proto":"UDP","dns":{"type":"answer","id":47573,"rcode":"NXDOMAIN","rrname":"kejamerecos.eu"}}
{"timestamp":"2017-12-12T18:33:01.567389+0100","flow_id":1813485831693603,"pcap_cnt":573,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54684,"proto":"UDP","dns":{"type":"answer","id":9792,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.510886+0100","flow_id":128086977989542,"pcap_cnt":975,"event_type":"dns","src_ip":"192.168.1.100","src_port":50452,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28587,"rrname":"ryhekoputag.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.504467+0100","flow_id":597030834945074,"pcap_cnt":1475,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64181,"proto":"UDP","dns":{"type":"answer","id":47573,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.494549+0100","flow_id":489111192111732,"pcap_cnt":2027,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61953,"proto":"UDP","dns":{"type":"answer","id":25130,"flags":"8180","qr":true,"rd":true,"ra":true,"rcode":"NOERROR","rrname":"puzutuqeqij.eu","rrtype":"NS","ttl":7343,"rdata":"ns-1206.awsdns-22.org"}}
{"timestamp":"2017-12-12T18:33:14.553838+0100","flow_id":1105333772271746,"pcap_cnt":1792,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51177,"proto":"UDP","dns":{"type":"answer","id":831,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.554886+0100","flow_id":64839289567110,"pcap_cnt":997,"event_type":"dns","src_ip":"192.168.1.100","src_port":50281,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":54545,"rrname":"ganudasajov.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:12.562175+0100","flow_id":1760369971817627,"pcap_cnt":1594,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65169,"proto":"UDP","dns":{"type":"answer","id":43109,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.606215+0100","flow_id":1522272017530887,"pcap_cnt":1899,"event_type":"dns","src_ip":"192.168.1.100","src_port":65046,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64529,"rrname":"norowetunuj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.510751+0100","flow_id":42692291347209,"pcap_cnt":2042,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51837,"proto":"UDP","dns":{"type":"answer","id":2599,"rcode":"NXDOMAIN","rrname":"ryqehegubes.eu"}}
{"timestamp":"2017-12-12T18:33:06.584619+0100","flow_id":795567845466229,"pcap_cnt":1011,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60418,"proto":"UDP","dns":{"type":"answer","id":7300,"rcode":"NXDOMAIN","rrname":"ciqivutevam.eu"}}
{"timestamp":"2017-12-12T18:33:16.859741+0100","flow_id":846164708302429,"pcap_cnt":2186,"event_type":"dns","src_ip":"192.168.1.100","src_port":59555,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13135,"rrname":"lyvitexemod.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.472704+0100","flow_id":1330065788450432,"pcap_cnt":1635,"event_type":"dns","src_ip":"192.168.1.100","src_port":62011,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17004,"rrname":"qegelupumum.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.666583+0100","flow_id":232398848796762,"pcap_cnt":1272,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49718,"proto":"UDP","dns":{"type":"answer","id":16729,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.670464+0100","flow_id":1090513987648256,"pcap_cnt":1944,"event_type":"dns","src_ip":"192.168.1.100","src_port":59798,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28685,"rrname":"jewucidafyb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:07.606814+0100","flow_id":341353579070677,"pcap_cnt":1166,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60274,"proto":"UDP","dns":{"type":"answer","id":34450,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:07.349492+0100","flow_id":270776528947772,"pcap_cnt":1149,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60625,"proto":"UDP","dns":{"type":"answer","id":17969,"rcode":"NXDOMAIN","rrname":"nopolomojen.eu"}}
{"timestamp":"2017-12-12T18:33:15.738403+0100","flow_id":1090513987648256,"pcap_cnt":1981,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59798,"proto":"UDP","dns":{"type":"answer","id":28685,"rcode":"NXDOMAIN","rrname":"jewucidafyb.eu"}}
{"timestamp":"2017-12-12T18:33:13.569180+0100","flow_id":1107691709212782,"pcap_cnt":1678,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61553,"proto":"UDP","dns":{"type":"answer","id":50538,"rcode":"NXDOMAIN","rrname":"dimulisuqun.eu"}}
{"timestamp":"2017-12-12T18:33:06.839498+0100","flow_id":3893703659338,"pcap_cnt":1109,"event_type":"dns","src_ip":"192.168.1.100","src_port":63599,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28354,"rrname":"jepuderymas.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.738403+0100","flow_id":1090513987648256,"pcap_cnt":1981,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59798,"proto":"UDP","dns":{"type":"answer","id":28685,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:13.617838+0100","flow_id":1538298687892434,"pcap_cnt":1710,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52562,"proto":"UDP","dns":{"type":"answer","id":267,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.555570+0100","flow_id":568198719568434,"pcap_cnt":1485,"event_type":"dns","src_ip":"192.168.1.100","src_port":63161,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":15319,"rrname":"cidediceleg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:14.361948+0100","flow_id":1541453341379327,"pcap_cnt":1724,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50270,"proto":"UDP","dns":{"type":"answer","id":56286,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:14.537489+0100","flow_id":1436009746805649,"pcap_cnt":1779,"event_type":"dns","src_ip":"192.168.1.100","src_port":55105,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17207,"rrname":"nojaxicyxon.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.555933+0100","flow_id":1951762304564125,"pcap_cnt":1665,"event_type":"dns","src_ip":"192.168.1.100","src_port":60672,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7857,"rrname":"nomedefajys.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.600658+0100","flow_id":703404290043204,"pcap_cnt":1500,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60563,"proto":"UDP","dns":{"type":"answer","id":54145,"rcode":"NXDOMAIN","rrname":"kezywuxyven.eu"}}
{"timestamp":"2017-12-12T18:33:05.512475+0100","flow_id":2051912351363840,"pcap_cnt":921,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55308,"proto":"UDP","dns":{"type":"answer","id":23997,"rcode":"NXDOMAIN","rrname":"digofasexal.eu"}}
{"timestamp":"2017-12-12T18:33:16.482320+0100","flow_id":746564416723701,"pcap_cnt":2023,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60482,"proto":"UDP","dns":{"type":"answer","id":40289,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":559}}
{"timestamp":"2017-12-12T18:33:13.564285+0100","flow_id":274680654699581,"pcap_cnt":1672,"event_type":"dns","src_ip":"192.168.1.100","src_port":52001,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19078,"rrname":"rylakegodyc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.081910+0100","flow_id":1436009746805649,"pcap_cnt":1829,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55105,"proto":"UDP","dns":{"type":"answer","id":17207,"rcode":"NXDOMAIN","rrname":"nojaxicyxon.eu"}}
{"timestamp":"2017-12-12T18:33:15.496189+0100","flow_id":1590914183648200,"pcap_cnt":1867,"event_type":"dns","src_ip":"192.168.1.100","src_port":64053,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41649,"rrname":"ciqofymosip.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:08.518975+0100","flow_id":913202704699420,"pcap_cnt":1218,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57343,"proto":"UDP","dns":{"type":"answer","id":49820,"rcode":"NXDOMAIN","rrname":"divesosisor.eu"}}
{"timestamp":"2017-12-12T18:33:04.555899+0100","flow_id":786932813559985,"pcap_cnt":820,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54381,"proto":"UDP","dns":{"type":"answer","id":756,"rcode":"NXDOMAIN","rrname":"lygivejynow.eu"}}
{"timestamp":"2017-12-12T18:33:08.518975+0100","flow_id":913202704699420,"pcap_cnt":1218,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57343,"proto":"UDP","dns":{"type":"answer","id":49820,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.555899+0100","flow_id":786932813559985,"pcap_cnt":820,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54381,"proto":"UDP","dns":{"type":"answer","id":756,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:14.551901+0100","flow_id":907649312517085,"pcap_cnt":1790,"event_type":"dns","src_ip":"192.168.1.100","src_port":56991,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":58592,"rrname":"masafytunux.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.721503+0100","flow_id":945365567406687,"pcap_cnt":1300,"event_type":"dns","src_ip":"192.168.1.100","src_port":64250,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":20307,"rrname":"ganenihynug.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.861858+0100","flow_id":1367406233659042,"pcap_cnt":1122,"event_type":"dns","src_ip":"192.168.1.100","src_port":61011,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":61868,"rrname":"lyrynixakyn.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:14.536670+0100","flow_id":1873840860462951,"pcap_cnt":1778,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64840,"proto":"UDP","dns":{"type":"answer","id":59631,"rcode":"NXDOMAIN","rrname":"puzapelumaq.eu"}}
{"timestamp":"2017-12-12T18:33:10.583330+0100","flow_id":1928822884020208,"pcap_cnt":1454,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54884,"proto":"UDP","dns":{"type":"answer","id":14191,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:07.395840+0100","flow_id":1472190550772027,"pcap_cnt":1157,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54860,"proto":"UDP","dns":{"type":"answer","id":29638,"rcode":"NXDOMAIN","rrname":"volaqutodox.eu"}}
{"timestamp":"2017-12-12T18:33:10.504343+0100","flow_id":654226914456087,"pcap_cnt":1403,"event_type":"dns","src_ip":"192.168.1.100","src_port":65101,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37798,"rrname":"fokikebyvaj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.635383+0100","flow_id":1405790356287991,"pcap_cnt":846,"event_type":"dns","src_ip":"192.168.1.100","src_port":52928,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19561,"rrname":"marixecoguv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.837737+0100","flow_id":1234084007036783,"pcap_cnt":2161,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54507,"proto":"UDP","dns":{"type":"answer","id":35724,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:04.658133+0100","flow_id":1460368652656234,"pcap_cnt":865,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57222,"proto":"UDP","dns":{"type":"answer","id":50909,"rcode":"NXDOMAIN","rrname":"gaqecizupun.eu"}}
{"timestamp":"2017-12-12T18:33:04.682068+0100","flow_id":1405790356287991,"pcap_cnt":891,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52928,"proto":"UDP","dns":{"type":"answer","id":19561,"rcode":"NXDOMAIN","rrname":"marixecoguv.eu"}}
{"timestamp":"2017-12-12T18:33:04.658133+0100","flow_id":1460368652656234,"pcap_cnt":865,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57222,"proto":"UDP","dns":{"type":"answer","id":50909,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.682068+0100","flow_id":1405790356287991,"pcap_cnt":891,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52928,"proto":"UDP","dns":{"type":"answer","id":19561,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.755694+0100","flow_id":244613736021064,"pcap_cnt":1582,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56982,"proto":"UDP","dns":{"type":"answer","id":3072,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.510751+0100","flow_id":42692291347209,"pcap_cnt":2042,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51837,"proto":"UDP","dns":{"type":"answer","id":2599,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.553044+0100","flow_id":654226914456087,"pcap_cnt":1434,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65101,"proto":"UDP","dns":{"type":"answer","id":37798,"rcode":"NXDOMAIN","rrname":"fokikebyvaj.eu"}}
{"timestamp":"2017-12-12T18:33:06.584619+0100","flow_id":795567845466229,"pcap_cnt":1011,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60418,"proto":"UDP","dns":{"type":"answer","id":7300,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.553044+0100","flow_id":654226914456087,"pcap_cnt":1434,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65101,"proto":"UDP","dns":{"type":"answer","id":37798,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:09.549421+0100","flow_id":2201611289281584,"pcap_cnt":1337,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51212,"proto":"UDP","dns":{"type":"answer","id":5277,"rcode":"NXDOMAIN","rrname":"nopuputyboh.eu"}}
{"timestamp":"2017-12-12T18:33:06.756397+0100","flow_id":2019508970752685,"pcap_cnt":1083,"event_type":"dns","src_ip":"192.168.1.100","src_port":63275,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5432,"rrname":"jewypojynil.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:09.549421+0100","flow_id":2201611289281584,"pcap_cnt":1337,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51212,"proto":"UDP","dns":{"type":"answer","id":5277,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:07.349492+0100","flow_id":270776528947772,"pcap_cnt":1149,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60625,"proto":"UDP","dns":{"type":"answer","id":17969,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.154531+0100","flow_id":694655441850837,"pcap_cnt":1845,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53378,"proto":"UDP","dns":{"type":"answer","id":49010,"rcode":"NXDOMAIN","rrname":"makujafiqyq.eu"}}
{"timestamp":"2017-12-12T18:33:15.154531+0100","flow_id":694655441850837,"pcap_cnt":1845,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53378,"proto":"UDP","dns":{"type":"answer","id":49010,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:07.656722+0100","flow_id":2019508970752685,"pcap_cnt":1172,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63275,"proto":"UDP","dns":{"type":"answer","id":5432,"rcode":"NXDOMAIN","rrname":"jewypojynil.eu"}}
{"timestamp":"2017-12-12T18:33:14.564224+0100","flow_id":2228145597638986,"pcap_cnt":1801,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55414,"proto":"UDP","dns":{"type":"answer","id":56638,"rcode":"NXDOMAIN","rrname":"jepepyxiwam.eu"}}
{"timestamp":"2017-12-12T18:33:08.417853+0100","flow_id":1622918133105680,"pcap_cnt":1198,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63862,"proto":"UDP","dns":{"type":"answer","id":20136,"rcode":"NXDOMAIN","rrname":"kevybunureh.eu"}}
{"timestamp":"2017-12-12T18:33:13.573112+0100","flow_id":1330065788450432,"pcap_cnt":1683,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62011,"proto":"UDP","dns":{"type":"answer","id":17004,"rcode":"NXDOMAIN","rrname":"qegelupumum.eu"}}
{"timestamp":"2017-12-12T18:33:14.564224+0100","flow_id":2228145597638986,"pcap_cnt":1801,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55414,"proto":"UDP","dns":{"type":"answer","id":56638,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:07.621721+0100","flow_id":292807563674112,"pcap_cnt":1169,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55752,"proto":"UDP","dns":{"type":"answer","id":19509,"rcode":"NXDOMAIN","rrname":"rycucugisix.eu"}}
{"timestamp":"2017-12-12T18:33:11.600658+0100","flow_id":703404290043204,"pcap_cnt":1500,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60563,"proto":"UDP","dns":{"type":"answer","id":54145,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:05.512475+0100","flow_id":2051912351363840,"pcap_cnt":921,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55308,"proto":"UDP","dns":{"type":"answer","id":23997,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:14.592407+0100","flow_id":2215123256740375,"pcap_cnt":1813,"event_type":"dns","src_ip":"192.168.1.100","src_port":60616,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":21204,"rrname":"puvedupuquz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.608492+0100","flow_id":1951762304564125,"pcap_cnt":1703,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60672,"proto":"UDP","dns":{"type":"answer","id":7857,"rcode":"NXDOMAIN","rrname":"nomedefajys.eu"}}
{"timestamp":"2017-12-12T18:33:16.564217+0100","flow_id":1456264812731385,"pcap_cnt":2069,"event_type":"dns","src_ip":"192.168.1.100","src_port":56232,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":10864,"rrname":"lymylorozig.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:09.600264+0100","flow_id":1019301281956056,"pcap_cnt":1345,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63378,"proto":"UDP","dns":{"type":"answer","id":36856,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.752360+0100","flow_id":1745870162014905,"pcap_cnt":1323,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58816,"proto":"UDP","dns":{"type":"answer","id":52252,"rcode":"NXDOMAIN","rrname":"cihocytodoh.eu"}}
{"timestamp":"2017-12-12T18:33:14.595585+0100","flow_id":955632687126145,"pcap_cnt":1815,"event_type":"dns","src_ip":"192.168.1.100","src_port":62535,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45455,"rrname":"gahekisybyr.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:07.420695+0100","flow_id":289867658580814,"pcap_cnt":1165,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65157,"proto":"UDP","dns":{"type":"answer","id":5686,"rcode":"NXDOMAIN","rrname":"foxyqosajol.eu"}}
{"timestamp":"2017-12-12T18:33:16.472202+0100","flow_id":1609586555237514,"pcap_cnt":2017,"event_type":"dns","src_ip":"192.168.1.100","src_port":59400,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":56073,"rrname":"nojudymiwuh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:07.420695+0100","flow_id":289867658580814,"pcap_cnt":1165,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65157,"proto":"UDP","dns":{"type":"answer","id":5686,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.547928+0100","flow_id":1590914183648200,"pcap_cnt":1881,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64053,"proto":"UDP","dns":{"type":"answer","id":41649,"rcode":"NXDOMAIN","rrname":"ciqofymosip.eu"}}
{"timestamp":"2017-12-12T18:33:04.669173+0100","flow_id":2232195751116550,"pcap_cnt":877,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52694,"proto":"UDP","dns":{"type":"answer","id":55701,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.606406+0100","flow_id":1100274300371142,"pcap_cnt":1238,"event_type":"dns","src_ip":"192.168.1.100","src_port":58267,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8703,"rrname":"mavyvomuqal.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.547928+0100","flow_id":1590914183648200,"pcap_cnt":1881,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64053,"proto":"UDP","dns":{"type":"answer","id":41649,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.766413+0100","flow_id":945365567406687,"pcap_cnt":1327,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64250,"proto":"UDP","dns":{"type":"answer","id":20307,"rcode":"NXDOMAIN","rrname":"ganenihynug.eu"}}
{"timestamp":"2017-12-12T18:33:10.392412+0100","flow_id":1854195679821020,"pcap_cnt":1352,"event_type":"dns","src_ip":"192.168.1.100","src_port":49399,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2084,"rrname":"puzomipipin.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.683242+0100","flow_id":775583362495994,"pcap_cnt":892,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52103,"proto":"UDP","dns":{"type":"answer","id":44285,"rcode":"NXDOMAIN","rrname":"nopymecurud.eu"}}
{"timestamp":"2017-12-12T18:33:06.579606+0100","flow_id":128086977989542,"pcap_cnt":1005,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50452,"proto":"UDP","dns":{"type":"answer","id":28587,"rcode":"NXDOMAIN","rrname":"ryhekoputag.eu"}}
{"timestamp":"2017-12-12T18:33:11.711116+0100","flow_id":1833603459176908,"pcap_cnt":1558,"event_type":"dns","src_ip":"192.168.1.100","src_port":51182,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19884,"rrname":"keradijumyn.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.579606+0100","flow_id":128086977989542,"pcap_cnt":1005,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50452,"proto":"UDP","dns":{"type":"answer","id":28587,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.761708+0100","flow_id":1028932745994092,"pcap_cnt":1086,"event_type":"dns","src_ip":"192.168.1.100","src_port":61007,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31203,"rrname":"lyvoxajohul.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.652132+0100","flow_id":1522272017530887,"pcap_cnt":1928,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65046,"proto":"UDP","dns":{"type":"answer","id":64529,"rcode":"NXDOMAIN","rrname":"norowetunuj.eu"}}
{"timestamp":"2017-12-12T18:33:06.720515+0100","flow_id":1548913699126915,"pcap_cnt":1076,"event_type":"dns","src_ip":"192.168.1.100","src_port":62841,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13538,"rrname":"qebequgyqip.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.652132+0100","flow_id":1522272017530887,"pcap_cnt":1928,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65046,"proto":"UDP","dns":{"type":"answer","id":64529,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.602737+0100","flow_id":64839289567110,"pcap_cnt":1029,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50281,"proto":"UDP","dns":{"type":"answer","id":54545,"rcode":"NXDOMAIN","rrname":"ganudasajov.eu"}}
{"timestamp":"2017-12-12T18:33:11.762435+0100","flow_id":1467992220619162,"pcap_cnt":1587,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57074,"proto":"UDP","dns":{"type":"answer","id":1695,"rcode":"NXDOMAIN","rrname":"masuximakot.eu"}}
{"timestamp":"2017-12-12T18:33:16.388927+0100","flow_id":2226887172353855,"pcap_cnt":1992,"event_type":"dns","src_ip":"192.168.1.100","src_port":53658,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30080,"rrname":"cilicofahev.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.648164+0100","flow_id":1652342954714084,"pcap_cnt":2098,"event_type":"dns","src_ip":"192.168.1.100","src_port":52487,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50457,"rrname":"galokusemus.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.762435+0100","flow_id":1467992220619162,"pcap_cnt":1587,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57074,"proto":"UDP","dns":{"type":"answer","id":1695,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.402720+0100","flow_id":659110292517945,"pcap_cnt":1851,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56209,"proto":"UDP","dns":{"type":"answer","id":30917,"rcode":"NXDOMAIN","rrname":"xubehuxunag.eu"}}
{"timestamp":"2017-12-12T18:33:10.437761+0100","flow_id":791277173386753,"pcap_cnt":1367,"event_type":"dns","src_ip":"192.168.1.100","src_port":49275,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42022,"rrname":"nojogefumuc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.529560+0100","flow_id":1873452165698712,"pcap_cnt":1479,"event_type":"dns","src_ip":"192.168.1.100","src_port":49336,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27934,"rrname":"foqyvyzuqeh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.402720+0100","flow_id":659110292517945,"pcap_cnt":1851,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56209,"proto":"UDP","dns":{"type":"answer","id":30917,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.096177+0100","flow_id":907649312517085,"pcap_cnt":1833,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56991,"proto":"UDP","dns":{"type":"answer","id":58592,"rcode":"NXDOMAIN","rrname":"masafytunux.eu"}}
{"timestamp":"2017-12-12T18:33:10.443870+0100","flow_id":1854195679821020,"pcap_cnt":1369,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49399,"proto":"UDP","dns":{"type":"answer","id":2084,"rcode":"NXDOMAIN","rrname":"puzomipipin.eu"}}
{"timestamp":"2017-12-12T18:33:08.501444+0100","flow_id":1117782734408404,"pcap_cnt":1211,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64029,"proto":"UDP","dns":{"type":"answer","id":32885,"rcode":"NXDOMAIN","rrname":"jefogixuqyn.eu"}}
{"timestamp":"2017-12-12T18:33:11.715613+0100","flow_id":672813385509313,"pcap_cnt":1562,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50162,"proto":"UDP","dns":{"type":"answer","id":5059,"rcode":"NXDOMAIN","rrname":"jenegodelur.eu"}}
{"timestamp":"2017-12-12T18:33:09.588963+0100","flow_id":1980454833247494,"pcap_cnt":1341,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62881,"proto":"UDP","dns":{"type":"answer","id":57752,"rcode":"NXDOMAIN","rrname":"fodyfuzexyp.eu"}}
{"timestamp":"2017-12-12T18:33:08.501444+0100","flow_id":1117782734408404,"pcap_cnt":1211,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64029,"proto":"UDP","dns":{"type":"answer","id":32885,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.443870+0100","flow_id":1854195679821020,"pcap_cnt":1369,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49399,"proto":"UDP","dns":{"type":"answer","id":2084,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:09.588963+0100","flow_id":1980454833247494,"pcap_cnt":1341,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62881,"proto":"UDP","dns":{"type":"answer","id":57752,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:13.608492+0100","flow_id":1951762304564125,"pcap_cnt":1703,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60672,"proto":"UDP","dns":{"type":"answer","id":7857,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.504216+0100","flow_id":791277173386753,"pcap_cnt":1402,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49275,"proto":"UDP","dns":{"type":"answer","id":42022,"rcode":"NXDOMAIN","rrname":"nojogefumuc.eu"}}
{"timestamp":"2017-12-12T18:33:10.610145+0100","flow_id":975509795524449,"pcap_cnt":1462,"event_type":"dns","src_ip":"192.168.1.100","src_port":56824,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":20963,"rrname":"xudiherodos.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.613167+0100","flow_id":274680654699581,"pcap_cnt":1707,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52001,"proto":"UDP","dns":{"type":"answer","id":19078,"rcode":"NXDOMAIN","rrname":"rylakegodyc.eu"}}
{"timestamp":"2017-12-12T18:33:16.564517+0100","flow_id":1456264812731385,"pcap_cnt":2070,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56232,"proto":"UDP","dns":{"type":"answer","id":10864,"rcode":"NXDOMAIN","rrname":"lymylorozig.eu"}}
{"timestamp":"2017-12-12T18:33:11.722546+0100","flow_id":269908945864306,"pcap_cnt":1567,"event_type":"dns","src_ip":"192.168.1.100","src_port":55673,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":52385,"rrname":"nofemumodoz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.509421+0100","flow_id":975509795524449,"pcap_cnt":1476,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56824,"proto":"UDP","dns":{"type":"answer","id":20963,"rcode":"NXDOMAIN","rrname":"xudiherodos.eu"}}
{"timestamp":"2017-12-12T18:33:15.081910+0100","flow_id":1436009746805649,"pcap_cnt":1829,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55105,"proto":"UDP","dns":{"type":"answer","id":17207,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.509421+0100","flow_id":975509795524449,"pcap_cnt":1476,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56824,"proto":"UDP","dns":{"type":"answer","id":20963,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.752360+0100","flow_id":1745870162014905,"pcap_cnt":1323,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58816,"proto":"UDP","dns":{"type":"answer","id":52252,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.865455+0100","flow_id":1029254868513967,"pcap_cnt":1125,"event_type":"dns","src_ip":"192.168.1.100","src_port":58142,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48560,"rrname":"qedosiputot.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.642498+0100","flow_id":1633120827366630,"pcap_cnt":1524,"event_type":"dns","src_ip":"192.168.1.100","src_port":54409,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":22867,"rrname":"disytisycil.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:14.536670+0100","flow_id":1873840860462951,"pcap_cnt":1778,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64840,"proto":"UDP","dns":{"type":"answer","id":59631,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:09.595862+0100","flow_id":1839225571143185,"pcap_cnt":1343,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55197,"proto":"UDP","dns":{"type":"answer","id":46547,"rcode":"NXDOMAIN","rrname":"qeqaxupogog.eu"}}
{"timestamp":"2017-12-12T18:33:07.407146+0100","flow_id":1367406233659042,"pcap_cnt":1160,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61011,"proto":"UDP","dns":{"type":"answer","id":61868,"rcode":"NXDOMAIN","rrname":"lyrynixakyn.eu"}}
{"timestamp":"2017-12-12T18:33:07.395840+0100","flow_id":1472190550772027,"pcap_cnt":1157,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54860,"proto":"UDP","dns":{"type":"answer","id":29638,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:09.595862+0100","flow_id":1839225571143185,"pcap_cnt":1343,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55197,"proto":"UDP","dns":{"type":"answer","id":46547,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.683242+0100","flow_id":775583362495994,"pcap_cnt":892,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52103,"proto":"UDP","dns":{"type":"answer","id":44285,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.763652+0100","flow_id":812655372838660,"pcap_cnt":1087,"event_type":"dns","src_ip":"192.168.1.100","src_port":53859,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18516,"rrname":"cilupakuquk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.859978+0100","flow_id":846164708302429,"pcap_cnt":2187,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59555,"proto":"UDP","dns":{"type":"answer","id":13135,"rcode":"NXDOMAIN","rrname":"lyvitexemod.eu"}}
{"timestamp":"2017-12-12T18:33:17.029386+0100","flow_id":1476749659304650,"pcap_cnt":2286,"event_type":"dns","src_ip":"192.168.1.100","src_port":50492,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59037,"rrname":"cinivamolil.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:05.510042+0100","flow_id":204902467904604,"pcap_cnt":919,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58076,"proto":"UDP","dns":{"type":"answer","id":26600,"rcode":"NXDOMAIN","rrname":"tulyboputal.eu"}}
{"timestamp":"2017-12-12T18:33:07.305578+0100","flow_id":1028932745994092,"pcap_cnt":1142,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61007,"proto":"UDP","dns":{"type":"answer","id":31203,"rcode":"NXDOMAIN","rrname":"lyvoxajohul.eu"}}
{"timestamp":"2017-12-12T18:33:05.510042+0100","flow_id":204902467904604,"pcap_cnt":919,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58076,"proto":"UDP","dns":{"type":"answer","id":26600,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.428972+0100","flow_id":579666282187692,"pcap_cnt":1361,"event_type":"dns","src_ip":"192.168.1.100","src_port":51563,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36169,"rrname":"lymigadybiv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.648437+0100","flow_id":1652342954714084,"pcap_cnt":2099,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52487,"proto":"UDP","dns":{"type":"answer","id":50457,"rcode":"NXDOMAIN","rrname":"galokusemus.eu"}}
{"timestamp":"2017-12-12T18:33:06.765791+0100","flow_id":1055168553725791,"pcap_cnt":1089,"event_type":"dns","src_ip":"192.168.1.100","src_port":49200,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51583,"rrname":"nofexekakuk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:07.656722+0100","flow_id":2019508970752685,"pcap_cnt":1172,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63275,"proto":"UDP","dns":{"type":"answer","id":5432,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.648437+0100","flow_id":1652342954714084,"pcap_cnt":2099,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52487,"proto":"UDP","dns":{"type":"answer","id":50457,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":559}}
{"timestamp":"2017-12-12T18:33:10.606192+0100","flow_id":746070495084528,"pcap_cnt":1461,"event_type":"dns","src_ip":"192.168.1.100","src_port":60472,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":22905,"rrname":"lygyxeruqoc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:07.666289+0100","flow_id":1055168553725791,"pcap_cnt":1175,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49200,"proto":"UDP","dns":{"type":"answer","id":51583,"rcode":"NXDOMAIN","rrname":"nofexekakuk.eu"}}
{"timestamp":"2017-12-12T18:33:13.569180+0100","flow_id":1107691709212782,"pcap_cnt":1678,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61553,"proto":"UDP","dns":{"type":"answer","id":50538,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:07.666289+0100","flow_id":1055168553725791,"pcap_cnt":1175,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49200,"proto":"UDP","dns":{"type":"answer","id":51583,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.456749+0100","flow_id":1395027168869090,"pcap_cnt":1861,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62359,"proto":"UDP","dns":{"type":"answer","id":50098,"rcode":"NXDOMAIN","rrname":"galyzabunoc.eu"}}
{"timestamp":"2017-12-12T18:33:08.673600+0100","flow_id":151670643509056,"pcap_cnt":1279,"event_type":"dns","src_ip":"192.168.1.100","src_port":56134,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59049,"rrname":"maxaxyfumim.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.586688+0100","flow_id":1462760950264768,"pcap_cnt":1232,"event_type":"dns","src_ip":"192.168.1.100","src_port":51215,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":22931,"rrname":"xudevunymex.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.417853+0100","flow_id":1622918133105680,"pcap_cnt":1198,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63862,"proto":"UDP","dns":{"type":"answer","id":20136,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:13.573112+0100","flow_id":1330065788450432,"pcap_cnt":1683,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62011,"proto":"UDP","dns":{"type":"answer","id":17004,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.725910+0100","flow_id":151670643509056,"pcap_cnt":1303,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56134,"proto":"UDP","dns":{"type":"answer","id":59049,"rcode":"NXDOMAIN","rrname":"maxaxyfumim.eu"}}
{"timestamp":"2017-12-12T18:33:08.591662+0100","flow_id":698916048996142,"pcap_cnt":1234,"event_type":"dns","src_ip":"192.168.1.100","src_port":63225,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49741,"rrname":"vowidimajaz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:14.443149+0100","flow_id":233322267198221,"pcap_cnt":1747,"event_type":"dns","src_ip":"192.168.1.100","src_port":59478,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":57094,"rrname":"rynucalagew.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.575988+0100","flow_id":491774071654900,"pcap_cnt":1687,"event_type":"dns","src_ip":"192.168.1.100","src_port":56028,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42030,"rrname":"xugutynyxoh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.725910+0100","flow_id":151670643509056,"pcap_cnt":1303,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56134,"proto":"UDP","dns":{"type":"answer","id":59049,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.577332+0100","flow_id":1146816713510708,"pcap_cnt":1230,"event_type":"dns","src_ip":"192.168.1.100","src_port":60951,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37746,"rrname":"jejajaduwok.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.513243+0100","flow_id":1914765455840475,"pcap_cnt":976,"event_type":"dns","src_ip":"192.168.1.100","src_port":60400,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43382,"rrname":"lyrosajupid.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:14.510484+0100","flow_id":233322267198221,"pcap_cnt":1765,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59478,"proto":"UDP","dns":{"type":"answer","id":57094,"rcode":"NXDOMAIN","rrname":"rynucalagew.eu"}}
{"timestamp":"2017-12-12T18:33:10.504216+0100","flow_id":791277173386753,"pcap_cnt":1402,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49275,"proto":"UDP","dns":{"type":"answer","id":42022,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.634098+0100","flow_id":999602414464242,"pcap_cnt":1253,"event_type":"dns","src_ip":"192.168.1.100","src_port":52791,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19255,"rrname":"pufucaqurak.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.564517+0100","flow_id":1456264812731385,"pcap_cnt":2070,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56232,"proto":"UDP","dns":{"type":"answer","id":10864,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":559}}
{"timestamp":"2017-12-12T18:33:11.767346+0100","flow_id":1833603459176908,"pcap_cnt":1591,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51182,"proto":"UDP","dns":{"type":"answer","id":19884,"rcode":"NXDOMAIN","rrname":"keradijumyn.eu"}}
{"timestamp":"2017-12-12T18:33:08.643919+0100","flow_id":1146816713510708,"pcap_cnt":1258,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60951,"proto":"UDP","dns":{"type":"answer","id":37746,"rcode":"NXDOMAIN","rrname":"jejajaduwok.eu"}}
{"timestamp":"2017-12-12T18:33:15.633514+0100","flow_id":616804864731818,"pcap_cnt":1913,"event_type":"dns","src_ip":"192.168.1.100","src_port":54316,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":61809,"rrname":"lygumujycen.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.643919+0100","flow_id":1146816713510708,"pcap_cnt":1258,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60951,"proto":"UDP","dns":{"type":"answer","id":37746,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.767346+0100","flow_id":1833603459176908,"pcap_cnt":1591,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51182,"proto":"UDP","dns":{"type":"answer","id":19884,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:04.661175+0100","flow_id":724125359281847,"pcap_cnt":868,"event_type":"dns","src_ip":"192.168.1.100","src_port":59506,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18869,"rrname":"voporitevet.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:07.407146+0100","flow_id":1367406233659042,"pcap_cnt":1160,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61011,"proto":"UDP","dns":{"type":"answer","id":61868,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:14.540094+0100","flow_id":2016261974991228,"pcap_cnt":1783,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64764,"proto":"UDP","dns":{"type":"answer","id":64944,"rcode":"NXDOMAIN","rrname":"dikymezosaj.eu"}}
{"timestamp":"2017-12-12T18:33:06.602737+0100","flow_id":64839289567110,"pcap_cnt":1029,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50281,"proto":"UDP","dns":{"type":"answer","id":54545,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.488720+0100","flow_id":2226887172353855,"pcap_cnt":2024,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53658,"proto":"UDP","dns":{"type":"answer","id":30080,"rcode":"NXDOMAIN","rrname":"cilicofahev.eu"}}
{"timestamp":"2017-12-12T18:33:14.540094+0100","flow_id":2016261974991228,"pcap_cnt":1783,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64764,"proto":"UDP","dns":{"type":"answer","id":64944,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.859978+0100","flow_id":846164708302429,"pcap_cnt":2187,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59555,"proto":"UDP","dns":{"type":"answer","id":13135,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:06.750734+0100","flow_id":1236918684775566,"pcap_cnt":1082,"event_type":"dns","src_ip":"192.168.1.100","src_port":53789,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14769,"rrname":"fodixohofiz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:12.563630+0100","flow_id":309897238603074,"pcap_cnt":1595,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57841,"proto":"UDP","dns":{"type":"answer","id":37766,"rcode":"NXDOMAIN","rrname":"lymewijosyf.eu"}}
{"timestamp":"2017-12-12T18:33:17.029624+0100","flow_id":1476749659304650,"pcap_cnt":2287,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50492,"proto":"UDP","dns":{"type":"answer","id":59037,"rcode":"NXDOMAIN","rrname":"cinivamolil.eu"}}
{"timestamp":"2017-12-12T18:33:07.305578+0100","flow_id":1028932745994092,"pcap_cnt":1142,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61007,"proto":"UDP","dns":{"type":"answer","id":31203,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:12.563630+0100","flow_id":309897238603074,"pcap_cnt":1595,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57841,"proto":"UDP","dns":{"type":"answer","id":37766,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.029624+0100","flow_id":1476749659304650,"pcap_cnt":2287,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50492,"proto":"UDP","dns":{"type":"answer","id":59037,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:06.810985+0100","flow_id":963896203698153,"pcap_cnt":1103,"event_type":"dns","src_ip":"192.168.1.100","src_port":64795,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4823,"rrname":"rynovaqidef.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.150214+0100","flow_id":746070495084528,"pcap_cnt":1469,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60472,"proto":"UDP","dns":{"type":"answer","id":22905,"rcode":"NXDOMAIN","rrname":"lygyxeruqoc.eu"}}
{"timestamp":"2017-12-12T18:33:08.511115+0100","flow_id":1029254868513967,"pcap_cnt":1215,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58142,"proto":"UDP","dns":{"type":"answer","id":48560,"rcode":"NXDOMAIN","rrname":"qedosiputot.eu"}}
{"timestamp":"2017-12-12T18:33:08.609718+0100","flow_id":1203533904104886,"pcap_cnt":1240,"event_type":"dns","src_ip":"192.168.1.100","src_port":57564,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":21399,"rrname":"xutoxedyniq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.150214+0100","flow_id":746070495084528,"pcap_cnt":1469,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60472,"proto":"UDP","dns":{"type":"answer","id":22905,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.556033+0100","flow_id":1474466883795969,"pcap_cnt":1486,"event_type":"dns","src_ip":"192.168.1.100","src_port":61752,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7489,"rrname":"lykuvuxureg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:07.621721+0100","flow_id":292807563674112,"pcap_cnt":1169,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55752,"proto":"UDP","dns":{"type":"answer","id":19509,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.648090+0100","flow_id":880311845315482,"pcap_cnt":1260,"event_type":"dns","src_ip":"192.168.1.100","src_port":52166,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":46666,"rrname":"qekyhugisih.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:07.664594+0100","flow_id":812655372838660,"pcap_cnt":1174,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53859,"proto":"UDP","dns":{"type":"answer","id":18516,"rcode":"NXDOMAIN","rrname":"cilupakuquk.eu"}}
{"timestamp":"2017-12-12T18:33:11.679785+0100","flow_id":802472005689193,"pcap_cnt":1538,"event_type":"dns","src_ip":"192.168.1.100","src_port":60977,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":21463,"rrname":"cihyfafexuw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.576795+0100","flow_id":1873452165698712,"pcap_cnt":1492,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49336,"proto":"UDP","dns":{"type":"answer","id":27934,"rcode":"NXDOMAIN","rrname":"foqyvyzuqeh.eu"}}
{"timestamp":"2017-12-12T18:33:08.672340+0100","flow_id":1100274300371142,"pcap_cnt":1278,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58267,"proto":"UDP","dns":{"type":"answer","id":8703,"rcode":"NXDOMAIN","rrname":"mavyvomuqal.eu"}}
{"timestamp":"2017-12-12T18:33:10.391038+0100","flow_id":1663056750245758,"pcap_cnt":1351,"event_type":"dns","src_ip":"192.168.1.100","src_port":58133,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30848,"rrname":"tucipipumig.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.746383+0100","flow_id":802472005689193,"pcap_cnt":1576,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60977,"proto":"UDP","dns":{"type":"answer","id":21463,"rcode":"NXDOMAIN","rrname":"cihyfafexuw.eu"}}
{"timestamp":"2017-12-12T18:33:07.340546+0100","flow_id":1541199937810801,"pcap_cnt":1148,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56785,"proto":"UDP","dns":{"type":"answer","id":58100,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.480166+0100","flow_id":921826999292838,"pcap_cnt":1390,"event_type":"dns","src_ip":"192.168.1.100","src_port":62991,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":20196,"rrname":"jejurijogut.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.761297+0100","flow_id":872198651944401,"pcap_cnt":1085,"event_type":"dns","src_ip":"192.168.1.100","src_port":50104,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38100,"rrname":"xuxehajexuw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.604058+0100","flow_id":568198719568434,"pcap_cnt":1501,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63161,"proto":"UDP","dns":{"type":"answer","id":15319,"rcode":"NXDOMAIN","rrname":"cidediceleg.eu"}}
{"timestamp":"2017-12-12T18:33:08.561876+0100","flow_id":181550731006676,"pcap_cnt":1225,"event_type":"dns","src_ip":"192.168.1.100","src_port":55579,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41996,"rrname":"dimyfebidec.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:10.549063+0100","flow_id":921826999292838,"pcap_cnt":1430,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62991,"proto":"UDP","dns":{"type":"answer","id":20196,"rcode":"NXDOMAIN","rrname":"jejurijogut.eu"}}
{"timestamp":"2017-12-12T18:33:16.541575+0100","flow_id":515280427828103,"pcap_cnt":2054,"event_type":"dns","src_ip":"192.168.1.100","src_port":58491,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2282,"rrname":"nofyjikoxex.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:10.549063+0100","flow_id":921826999292838,"pcap_cnt":1430,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62991,"proto":"UDP","dns":{"type":"answer","id":20196,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.766413+0100","flow_id":945365567406687,"pcap_cnt":1327,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64250,"proto":"UDP","dns":{"type":"answer","id":20307,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.438995+0100","flow_id":1663056750245758,"pcap_cnt":1368,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58133,"proto":"UDP","dns":{"type":"answer","id":30848,"rcode":"NXDOMAIN","rrname":"tucipipumig.eu"}}
{"timestamp":"2017-12-12T18:33:08.670571+0100","flow_id":996767736019819,"pcap_cnt":1276,"event_type":"dns","src_ip":"192.168.1.100","src_port":55531,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51323,"rrname":"foqotihalun.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.541821+0100","flow_id":515280427828103,"pcap_cnt":2055,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58491,"proto":"UDP","dns":{"type":"answer","id":2282,"rcode":"NXDOMAIN","rrname":"nofyjikoxex.eu"}}
{"timestamp":"2017-12-12T18:33:10.438995+0100","flow_id":1663056750245758,"pcap_cnt":1368,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58133,"proto":"UDP","dns":{"type":"answer","id":30848,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.661006+0100","flow_id":2086982907532814,"pcap_cnt":1939,"event_type":"dns","src_ip":"192.168.1.100","src_port":55503,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63561,"rrname":"qeqilivejor.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:12.566074+0100","flow_id":269908945864306,"pcap_cnt":1597,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55673,"proto":"UDP","dns":{"type":"answer","id":52385,"rcode":"NXDOMAIN","rrname":"nofemumodoz.eu"}}
{"timestamp":"2017-12-12T18:33:16.488720+0100","flow_id":2226887172353855,"pcap_cnt":2024,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53658,"proto":"UDP","dns":{"type":"answer","id":30080,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.554216+0100","flow_id":1426766976808168,"pcap_cnt":1224,"event_type":"dns","src_ip":"192.168.1.100","src_port":64995,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41074,"rrname":"puralevuqes.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.918729+0100","flow_id":1003291791852745,"pcap_cnt":2224,"event_type":"dns","src_ip":"192.168.1.100","src_port":58757,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6858,"rrname":"gaquviwyrup.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:12.566074+0100","flow_id":269908945864306,"pcap_cnt":1597,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55673,"proto":"UDP","dns":{"type":"answer","id":52385,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.456749+0100","flow_id":1395027168869090,"pcap_cnt":1861,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62359,"proto":"UDP","dns":{"type":"answer","id":50098,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.918970+0100","flow_id":1003291791852745,"pcap_cnt":2225,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58757,"proto":"UDP","dns":{"type":"answer","id":6858,"rcode":"NXDOMAIN","rrname":"gaquviwyrup.eu"}}
{"timestamp":"2017-12-12T18:33:11.715613+0100","flow_id":672813385509313,"pcap_cnt":1562,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50162,"proto":"UDP","dns":{"type":"answer","id":5059,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.859754+0100","flow_id":1753431451770474,"pcap_cnt":1120,"event_type":"dns","src_ip":"192.168.1.100","src_port":58206,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":20705,"rrname":"magijityboz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.682351+0100","flow_id":999602414464242,"pcap_cnt":1283,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52791,"proto":"UDP","dns":{"type":"answer","id":19255,"rcode":"NXDOMAIN","rrname":"pufucaqurak.eu"}}
{"timestamp":"2017-12-12T18:33:10.477154+0100","flow_id":579666282187692,"pcap_cnt":1388,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51563,"proto":"UDP","dns":{"type":"answer","id":36169,"rcode":"NXDOMAIN","rrname":"lymigadybiv.eu"}}
{"timestamp":"2017-12-12T18:33:07.292989+0100","flow_id":1236918684775566,"pcap_cnt":1140,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53789,"proto":"UDP","dns":{"type":"answer","id":14769,"rcode":"NXDOMAIN","rrname":"fodixohofiz.eu"}}
{"timestamp":"2017-12-12T18:33:15.641532+0100","flow_id":617887196498428,"pcap_cnt":1918,"event_type":"dns","src_ip":"192.168.1.100","src_port":53739,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":57298,"rrname":"mavaxokitad.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:10.477154+0100","flow_id":579666282187692,"pcap_cnt":1388,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51563,"proto":"UDP","dns":{"type":"answer","id":36169,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.734908+0100","flow_id":1534761781966524,"pcap_cnt":1312,"event_type":"dns","src_ip":"192.168.1.100","src_port":62331,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":46238,"rrname":"rycefelelys.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.475704+0100","flow_id":512602515522104,"pcap_cnt":1636,"event_type":"dns","src_ip":"192.168.1.100","src_port":65423,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45201,"rrname":"rydufupipug.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:07.664594+0100","flow_id":812655372838660,"pcap_cnt":1174,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53859,"proto":"UDP","dns":{"type":"answer","id":18516,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.485729+0100","flow_id":3893703659338,"pcap_cnt":1207,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63599,"proto":"UDP","dns":{"type":"answer","id":28354,"rcode":"NXDOMAIN","rrname":"jepuderymas.eu"}}
{"timestamp":"2017-12-12T18:33:08.653578+0100","flow_id":1462760950264768,"pcap_cnt":1265,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51215,"proto":"UDP","dns":{"type":"answer","id":22931,"rcode":"NXDOMAIN","rrname":"xudevunymex.eu"}}
{"timestamp":"2017-12-12T18:33:08.781062+0100","flow_id":1534761781966524,"pcap_cnt":1334,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62331,"proto":"UDP","dns":{"type":"answer","id":46238,"rcode":"NXDOMAIN","rrname":"rycefelelys.eu"}}
{"timestamp":"2017-12-12T18:33:13.628172+0100","flow_id":491774071654900,"pcap_cnt":1717,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56028,"proto":"UDP","dns":{"type":"answer","id":42030,"rcode":"NXDOMAIN","rrname":"xugutynyxoh.eu"}}
{"timestamp":"2017-12-12T18:33:11.576795+0100","flow_id":1873452165698712,"pcap_cnt":1492,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49336,"proto":"UDP","dns":{"type":"answer","id":27934,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.781062+0100","flow_id":1534761781966524,"pcap_cnt":1334,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62331,"proto":"UDP","dns":{"type":"answer","id":46238,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:13.628172+0100","flow_id":491774071654900,"pcap_cnt":1717,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56028,"proto":"UDP","dns":{"type":"answer","id":42030,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:13.495428+0100","flow_id":421214201417540,"pcap_cnt":1643,"event_type":"dns","src_ip":"192.168.1.100","src_port":58703,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33210,"rrname":"purebupycug.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:10.575048+0100","flow_id":1488513574291016,"pcap_cnt":1450,"event_type":"dns","src_ip":"192.168.1.100","src_port":63654,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":20450,"rrname":"tufukelityq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.607709+0100","flow_id":1474466883795969,"pcap_cnt":1504,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61752,"proto":"UDP","dns":{"type":"answer","id":7489,"rcode":"NXDOMAIN","rrname":"lykuvuxureg.eu"}}
{"timestamp":"2017-12-12T18:33:11.604058+0100","flow_id":568198719568434,"pcap_cnt":1501,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63161,"proto":"UDP","dns":{"type":"answer","id":15319,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.607709+0100","flow_id":1474466883795969,"pcap_cnt":1504,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61752,"proto":"UDP","dns":{"type":"answer","id":7489,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:07.262237+0100","flow_id":1548913699126915,"pcap_cnt":1137,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62841,"proto":"UDP","dns":{"type":"answer","id":13538,"rcode":"NXDOMAIN","rrname":"qebequgyqip.eu"}}
{"timestamp":"2017-12-12T18:33:10.514152+0100","flow_id":837198963726440,"pcap_cnt":1407,"event_type":"dns","src_ip":"192.168.1.100","src_port":61777,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34308,"rrname":"kefobojexyl.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.628194+0100","flow_id":181550731006676,"pcap_cnt":1250,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55579,"proto":"UDP","dns":{"type":"answer","id":41996,"rcode":"NXDOMAIN","rrname":"dimyfebidec.eu"}}
{"timestamp":"2017-12-12T18:33:11.630065+0100","flow_id":716576954752305,"pcap_cnt":1516,"event_type":"dns","src_ip":"192.168.1.100","src_port":51199,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":16949,"rrname":"nomuxytirix.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:04.676413+0100","flow_id":2028936423821885,"pcap_cnt":884,"event_type":"dns","src_ip":"192.168.1.100","src_port":53003,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6537,"rrname":"vojedufynoj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:10.560755+0100","flow_id":837198963726440,"pcap_cnt":1440,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61777,"proto":"UDP","dns":{"type":"answer","id":34308,"rcode":"NXDOMAIN","rrname":"kefobojexyl.eu"}}
{"timestamp":"2017-12-12T18:33:11.675963+0100","flow_id":716576954752305,"pcap_cnt":1536,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51199,"proto":"UDP","dns":{"type":"answer","id":16949,"rcode":"NXDOMAIN","rrname":"nomuxytirix.eu"}}
{"timestamp":"2017-12-12T18:33:10.560755+0100","flow_id":837198963726440,"pcap_cnt":1440,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61777,"proto":"UDP","dns":{"type":"answer","id":34308,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.675963+0100","flow_id":716576954752305,"pcap_cnt":1536,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51199,"proto":"UDP","dns":{"type":"answer","id":16949,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.674691+0100","flow_id":2178182243175299,"pcap_cnt":2108,"event_type":"dns","src_ip":"192.168.1.100","src_port":64558,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5678,"rrname":"tuwikypabud.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:10.601941+0100","flow_id":954417211125589,"pcap_cnt":1459,"event_type":"dns","src_ip":"192.168.1.100","src_port":56810,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19649,"rrname":"jeloperajov.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.330436+0100","flow_id":739114793278293,"pcap_cnt":2459,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61906,"proto":"UDP","dns":{"type":"answer","id":63942,"rcode":"NXDOMAIN","rrname":"qegynolyzow.eu"}}
{"timestamp":"2017-12-12T18:33:16.674961+0100","flow_id":2178182243175299,"pcap_cnt":2109,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64558,"proto":"UDP","dns":{"type":"answer","id":5678,"rcode":"NXDOMAIN","rrname":"tuwikypabud.eu"}}
{"timestamp":"2017-12-12T18:33:17.330436+0100","flow_id":739114793278293,"pcap_cnt":2459,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61906,"proto":"UDP","dns":{"type":"answer","id":63942,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.654313+0100","flow_id":191903750159337,"pcap_cnt":1930,"event_type":"dns","src_ip":"192.168.1.100","src_port":64929,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26348,"rrname":"cihuzucagot.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.731212+0100","flow_id":2086982907532814,"pcap_cnt":1977,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55503,"proto":"UDP","dns":{"type":"answer","id":63561,"rcode":"NXDOMAIN","rrname":"qeqilivejor.eu"}}
{"timestamp":"2017-12-12T18:33:17.407311+0100","flow_id":1789234299877135,"pcap_cnt":2500,"event_type":"dns","src_ip":"192.168.1.100","src_port":49578,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4704,"rrname":"qetaseqyquv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.724328+0100","flow_id":191903750159337,"pcap_cnt":1972,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64929,"proto":"UDP","dns":{"type":"answer","id":26348,"rcode":"NXDOMAIN","rrname":"cihuzucagot.eu"}}
{"timestamp":"2017-12-12T18:33:11.693654+0100","flow_id":1391866072765846,"pcap_cnt":1542,"event_type":"dns","src_ip":"192.168.1.100","src_port":58389,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27891,"rrname":"xukeladoguk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.708918+0100","flow_id":1633120827366630,"pcap_cnt":1554,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54409,"proto":"UDP","dns":{"type":"answer","id":22867,"rcode":"NXDOMAIN","rrname":"disytisycil.eu"}}
{"timestamp":"2017-12-12T18:33:17.407538+0100","flow_id":1789234299877135,"pcap_cnt":2501,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49578,"proto":"UDP","dns":{"type":"answer","id":4704,"rcode":"NXDOMAIN","rrname":"qetaseqyquv.eu"}}
{"timestamp":"2017-12-12T18:33:11.708918+0100","flow_id":1633120827366630,"pcap_cnt":1554,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54409,"proto":"UDP","dns":{"type":"answer","id":22867,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.647080+0100","flow_id":1875024124043176,"pcap_cnt":1923,"event_type":"dns","src_ip":"192.168.1.100","src_port":49846,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28317,"rrname":"gaqaneziwoc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:10.496606+0100","flow_id":275857475539934,"pcap_cnt":1395,"event_type":"dns","src_ip":"192.168.1.100","src_port":57907,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25215,"rrname":"ryqukavecek.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.570671+0100","flow_id":490223588128047,"pcap_cnt":1228,"event_type":"dns","src_ip":"192.168.1.100","src_port":58836,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28597,"rrname":"jelekynurep.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:14.412060+0100","flow_id":1619222314240412,"pcap_cnt":1737,"event_type":"dns","src_ip":"192.168.1.100","src_port":61877,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44930,"rrname":"qebonuqirin.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.485729+0100","flow_id":3893703659338,"pcap_cnt":1207,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63599,"proto":"UDP","dns":{"type":"answer","id":28354,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.653578+0100","flow_id":1462760950264768,"pcap_cnt":1265,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51215,"proto":"UDP","dns":{"type":"answer","id":22931,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.544143+0100","flow_id":275857475539934,"pcap_cnt":1426,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57907,"proto":"UDP","dns":{"type":"answer","id":25215,"rcode":"NXDOMAIN","rrname":"ryqukavecek.eu"}}
{"timestamp":"2017-12-12T18:33:14.510484+0100","flow_id":233322267198221,"pcap_cnt":1765,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59478,"proto":"UDP","dns":{"type":"answer","id":57094,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.544143+0100","flow_id":275857475539934,"pcap_cnt":1426,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57907,"proto":"UDP","dns":{"type":"answer","id":25215,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.746383+0100","flow_id":802472005689193,"pcap_cnt":1576,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60977,"proto":"UDP","dns":{"type":"answer","id":21463,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.652912+0100","flow_id":1824828841260656,"pcap_cnt":1929,"event_type":"dns","src_ip":"192.168.1.100","src_port":60061,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":22997,"rrname":"kevigyxelox.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:10.563816+0100","flow_id":853238519077480,"pcap_cnt":1443,"event_type":"dns","src_ip":"192.168.1.100","src_port":51402,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37250,"rrname":"dimomawezod.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.538856+0100","flow_id":2085791053986024,"pcap_cnt":1654,"event_type":"dns","src_ip":"192.168.1.100","src_port":64457,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27843,"rrname":"tufapovakak.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.494041+0100","flow_id":1209795966765529,"pcap_cnt":1642,"event_type":"dns","src_ip":"192.168.1.100","src_port":51045,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62586,"rrname":"tuporupajun.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.595037+0100","flow_id":421214201417540,"pcap_cnt":1695,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58703,"proto":"UDP","dns":{"type":"answer","id":33210,"rcode":"NXDOMAIN","rrname":"purebupycug.eu"}}
{"timestamp":"2017-12-12T18:33:15.723088+0100","flow_id":1824828841260656,"pcap_cnt":1971,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60061,"proto":"UDP","dns":{"type":"answer","id":22997,"rcode":"NXDOMAIN","rrname":"kevigyxelox.eu"}}
{"timestamp":"2017-12-12T18:33:11.118999+0100","flow_id":1488513574291016,"pcap_cnt":1466,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63654,"proto":"UDP","dns":{"type":"answer","id":20450,"rcode":"NXDOMAIN","rrname":"tufukelityq.eu"}}
{"timestamp":"2017-12-12T18:33:11.621816+0100","flow_id":1829972180216,"pcap_cnt":1515,"event_type":"dns","src_ip":"192.168.1.100","src_port":58400,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5952,"rrname":"lyvamynipox.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:07.262237+0100","flow_id":1548913699126915,"pcap_cnt":1137,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62841,"proto":"UDP","dns":{"type":"answer","id":13538,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.776136+0100","flow_id":984265086785480,"pcap_cnt":2146,"event_type":"dns","src_ip":"192.168.1.100","src_port":50194,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30868,"rrname":"tupazivenom.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.628194+0100","flow_id":181550731006676,"pcap_cnt":1250,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55579,"proto":"UDP","dns":{"type":"answer","id":41996,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.715096+0100","flow_id":1378865206782296,"pcap_cnt":1561,"event_type":"dns","src_ip":"192.168.1.100","src_port":58645,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49155,"rrname":"gadyvuhagyn.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:07.662113+0100","flow_id":872198651944401,"pcap_cnt":1173,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50104,"proto":"UDP","dns":{"type":"answer","id":38100,"rcode":"NXDOMAIN","rrname":"xuxehajexuw.eu"}}
{"timestamp":"2017-12-12T18:33:16.541821+0100","flow_id":515280427828103,"pcap_cnt":2055,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58491,"proto":"UDP","dns":{"type":"answer","id":2282,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":559}}
{"timestamp":"2017-12-12T18:33:04.712565+0100","flow_id":724125359281847,"pcap_cnt":912,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59506,"proto":"UDP","dns":{"type":"answer","id":18869,"rcode":"NXDOMAIN","rrname":"voporitevet.eu"}}
{"timestamp":"2017-12-12T18:33:08.611101+0100","flow_id":906440278823709,"pcap_cnt":1241,"event_type":"dns","src_ip":"192.168.1.100","src_port":61831,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":55954,"rrname":"vonupyfogiq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.918970+0100","flow_id":1003291791852745,"pcap_cnt":2225,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58757,"proto":"UDP","dns":{"type":"answer","id":6858,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:04.712565+0100","flow_id":724125359281847,"pcap_cnt":912,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59506,"proto":"UDP","dns":{"type":"answer","id":18869,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.143860+0100","flow_id":954417211125589,"pcap_cnt":1468,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56810,"proto":"UDP","dns":{"type":"answer","id":19649,"rcode":"NXDOMAIN","rrname":"jeloperajov.eu"}}
{"timestamp":"2017-12-12T18:33:08.511115+0100","flow_id":1029254868513967,"pcap_cnt":1215,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58142,"proto":"UDP","dns":{"type":"answer","id":48560,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.143860+0100","flow_id":954417211125589,"pcap_cnt":1468,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56810,"proto":"UDP","dns":{"type":"answer","id":19649,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.927293+0100","flow_id":132787820308029,"pcap_cnt":2236,"event_type":"dns","src_ip":"192.168.1.100","src_port":50598,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37354,"rrname":"nopiwatyqul.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.682351+0100","flow_id":999602414464242,"pcap_cnt":1283,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52791,"proto":"UDP","dns":{"type":"answer","id":19255,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.731212+0100","flow_id":2086982907532814,"pcap_cnt":1977,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55503,"proto":"UDP","dns":{"type":"answer","id":63561,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.751902+0100","flow_id":1862908020816158,"pcap_cnt":1322,"event_type":"dns","src_ip":"192.168.1.100","src_port":55521,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11256,"rrname":"gaturuzuqyx.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.432338+0100","flow_id":2179382686357714,"pcap_cnt":1618,"event_type":"dns","src_ip":"192.168.1.100","src_port":65497,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6613,"rrname":"rytydelitec.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:12.557976+0100","flow_id":1378865206782296,"pcap_cnt":1593,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58645,"proto":"UDP","dns":{"type":"answer","id":49155,"rcode":"NXDOMAIN","rrname":"gadyvuhagyn.eu"}}
{"timestamp":"2017-12-12T18:33:09.599322+0100","flow_id":1862908020816158,"pcap_cnt":1344,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55521,"proto":"UDP","dns":{"type":"answer","id":11256,"rcode":"NXDOMAIN","rrname":"gaturuzuqyx.eu"}}
{"timestamp":"2017-12-12T18:33:12.557976+0100","flow_id":1378865206782296,"pcap_cnt":1593,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58645,"proto":"UDP","dns":{"type":"answer","id":49155,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:09.599322+0100","flow_id":1862908020816158,"pcap_cnt":1344,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55521,"proto":"UDP","dns":{"type":"answer","id":11256,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.724328+0100","flow_id":191903750159337,"pcap_cnt":1972,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64929,"proto":"UDP","dns":{"type":"answer","id":26348,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:07.292989+0100","flow_id":1236918684775566,"pcap_cnt":1140,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53789,"proto":"UDP","dns":{"type":"answer","id":14769,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.407538+0100","flow_id":1789234299877135,"pcap_cnt":2501,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49578,"proto":"UDP","dns":{"type":"answer","id":4704,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:10.454841+0100","flow_id":1733955922882745,"pcap_cnt":1374,"event_type":"dns","src_ip":"192.168.1.100","src_port":62185,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2177,"rrname":"rytozygyvup.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.395539+0100","flow_id":943918163953939,"pcap_cnt":1994,"event_type":"dns","src_ip":"192.168.1.100","src_port":61274,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5814,"rrname":"dikolobeliw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.858653+0100","flow_id":1353432558279197,"pcap_cnt":2744,"event_type":"dns","src_ip":"192.168.1.100","src_port":57011,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":15147,"rrname":"xuqufyduras.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.683113+0100","flow_id":2074823854877801,"pcap_cnt":1539,"event_type":"dns","src_ip":"192.168.1.100","src_port":60763,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":65057,"rrname":"kevutodybuk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:10.521841+0100","flow_id":1733955922882745,"pcap_cnt":1411,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62185,"proto":"UDP","dns":{"type":"answer","id":2177,"rcode":"NXDOMAIN","rrname":"rytozygyvup.eu"}}
{"timestamp":"2017-12-12T18:33:08.636827+0100","flow_id":490223588128047,"pcap_cnt":1255,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58836,"proto":"UDP","dns":{"type":"answer","id":28597,"rcode":"NXDOMAIN","rrname":"jelekynurep.eu"}}
{"timestamp":"2017-12-12T18:33:14.478729+0100","flow_id":1619222314240412,"pcap_cnt":1750,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61877,"proto":"UDP","dns":{"type":"answer","id":44930,"rcode":"NXDOMAIN","rrname":"qebonuqirin.eu"}}
{"timestamp":"2017-12-12T18:33:13.613167+0100","flow_id":274680654699581,"pcap_cnt":1707,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52001,"proto":"UDP","dns":{"type":"answer","id":19078,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.858926+0100","flow_id":1353432558279197,"pcap_cnt":2745,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57011,"proto":"UDP","dns":{"type":"answer","id":15147,"rcode":"NXDOMAIN","rrname":"xuqufyduras.eu"}}
{"timestamp":"2017-12-12T18:33:14.478729+0100","flow_id":1619222314240412,"pcap_cnt":1750,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61877,"proto":"UDP","dns":{"type":"answer","id":44930,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:14.569748+0100","flow_id":260758518280596,"pcap_cnt":1806,"event_type":"dns","src_ip":"192.168.1.100","src_port":54504,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13188,"rrname":"pumugoviwod.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.582197+0100","flow_id":1793681737835061,"pcap_cnt":1008,"event_type":"dns","src_ip":"192.168.1.100","src_port":60383,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28757,"rrname":"rydohyluruc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.549689+0100","flow_id":1610140606030649,"pcap_cnt":2057,"event_type":"dns","src_ip":"192.168.1.100","src_port":58394,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":10502,"rrname":"jepororyrih.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.858926+0100","flow_id":1353432558279197,"pcap_cnt":2745,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57011,"proto":"UDP","dns":{"type":"answer","id":15147,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:11.464111+0100","flow_id":853238519077480,"pcap_cnt":1471,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51402,"proto":"UDP","dns":{"type":"answer","id":37250,"rcode":"NXDOMAIN","rrname":"dimomawezod.eu"}}
{"timestamp":"2017-12-12T18:33:13.595037+0100","flow_id":421214201417540,"pcap_cnt":1695,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58703,"proto":"UDP","dns":{"type":"answer","id":33210,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.723088+0100","flow_id":1824828841260656,"pcap_cnt":1971,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60061,"proto":"UDP","dns":{"type":"answer","id":22997,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:13.551838+0100","flow_id":1599005903121310,"pcap_cnt":1662,"event_type":"dns","src_ip":"192.168.1.100","src_port":50772,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":39937,"rrname":"lysisuxofaz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.691782+0100","flow_id":647990622326342,"pcap_cnt":2114,"event_type":"dns","src_ip":"192.168.1.100","src_port":50644,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1108,"rrname":"novacofebyz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.776399+0100","flow_id":984265086785480,"pcap_cnt":2147,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50194,"proto":"UDP","dns":{"type":"answer","id":30868,"rcode":"NXDOMAIN","rrname":"tupazivenom.eu"}}
{"timestamp":"2017-12-12T18:33:15.111697+0100","flow_id":260758518280596,"pcap_cnt":1837,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54504,"proto":"UDP","dns":{"type":"answer","id":13188,"rcode":"NXDOMAIN","rrname":"pumugoviwod.eu"}}
{"timestamp":"2017-12-12T18:33:14.516606+0100","flow_id":2238466404049406,"pcap_cnt":1769,"event_type":"dns","src_ip":"192.168.1.100","src_port":54442,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59550,"rrname":"fodylowahif.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:07.662113+0100","flow_id":872198651944401,"pcap_cnt":1173,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50104,"proto":"UDP","dns":{"type":"answer","id":38100,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.111697+0100","flow_id":260758518280596,"pcap_cnt":1837,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54504,"proto":"UDP","dns":{"type":"answer","id":13188,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.674961+0100","flow_id":2178182243175299,"pcap_cnt":2109,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64558,"proto":"UDP","dns":{"type":"answer","id":5678,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":559}}
{"timestamp":"2017-12-12T18:33:11.559023+0100","flow_id":233464000907183,"pcap_cnt":1488,"event_type":"dns","src_ip":"192.168.1.100","src_port":51460,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13986,"rrname":"norococitef.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:14.563270+0100","flow_id":2238466404049406,"pcap_cnt":1800,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54442,"proto":"UDP","dns":{"type":"answer","id":59550,"rcode":"NXDOMAIN","rrname":"fodylowahif.eu"}}
{"timestamp":"2017-12-12T18:33:15.501688+0100","flow_id":1722524867733432,"pcap_cnt":1869,"event_type":"dns","src_ip":"192.168.1.100","src_port":59229,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29764,"rrname":"maxilumiriz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.685197+0100","flow_id":20734270432814,"pcap_cnt":2112,"event_type":"dns","src_ip":"192.168.1.100","src_port":64235,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":54958,"rrname":"ciqydofudyx.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:14.563270+0100","flow_id":2238466404049406,"pcap_cnt":1800,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54442,"proto":"UDP","dns":{"type":"answer","id":59550,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:13.440697+0100","flow_id":1671133436426617,"pcap_cnt":1620,"event_type":"dns","src_ip":"192.168.1.100","src_port":49743,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":46083,"rrname":"vocygytirij.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.417397+0100","flow_id":649560432860789,"pcap_cnt":2002,"event_type":"dns","src_ip":"192.168.1.100","src_port":51478,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":22770,"rrname":"keralanyxiq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.685446+0100","flow_id":20734270432814,"pcap_cnt":2113,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64235,"proto":"UDP","dns":{"type":"answer","id":54958,"rcode":"NXDOMAIN","rrname":"ciqydofudyx.eu"}}
{"timestamp":"2017-12-12T18:33:13.561269+0100","flow_id":673182752804981,"pcap_cnt":1671,"event_type":"dns","src_ip":"192.168.1.100","src_port":59602,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":911,"rrname":"ryhohovosar.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.614115+0100","flow_id":1016159513370339,"pcap_cnt":1244,"event_type":"dns","src_ip":"192.168.1.100","src_port":62640,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63605,"rrname":"ciqehefitij.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.443081+0100","flow_id":1085929110160073,"pcap_cnt":2007,"event_type":"dns","src_ip":"192.168.1.100","src_port":51645,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23481,"rrname":"gahipyhopax.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.571428+0100","flow_id":1456722226559012,"pcap_cnt":1679,"event_type":"dns","src_ip":"192.168.1.100","src_port":52104,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62400,"rrname":"jecumenunoq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.927565+0100","flow_id":132787820308029,"pcap_cnt":2237,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50598,"proto":"UDP","dns":{"type":"answer","id":37354,"rcode":"NXDOMAIN","rrname":"nopiwatyqul.eu"}}
{"timestamp":"2017-12-12T18:33:08.672340+0100","flow_id":1100274300371142,"pcap_cnt":1278,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58267,"proto":"UDP","dns":{"type":"answer","id":8703,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:13.575332+0100","flow_id":512602515522104,"pcap_cnt":1686,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65423,"proto":"UDP","dns":{"type":"answer","id":45201,"rcode":"NXDOMAIN","rrname":"rydufupipug.eu"}}
{"timestamp":"2017-12-12T18:33:07.403709+0100","flow_id":1753431451770474,"pcap_cnt":1159,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58206,"proto":"UDP","dns":{"type":"answer","id":20705,"rcode":"NXDOMAIN","rrname":"magijityboz.eu"}}
{"timestamp":"2017-12-12T18:33:08.546714+0100","flow_id":1930066276931482,"pcap_cnt":1222,"event_type":"dns","src_ip":"192.168.1.100","src_port":64013,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38676,"rrname":"rydurevohed.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.575332+0100","flow_id":512602515522104,"pcap_cnt":1686,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65423,"proto":"UDP","dns":{"type":"answer","id":45201,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.713498+0100","flow_id":487706737500954,"pcap_cnt":1560,"event_type":"dns","src_ip":"192.168.1.100","src_port":55382,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59844,"rrname":"jepikijexyg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.748845+0100","flow_id":2074823854877801,"pcap_cnt":1577,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60763,"proto":"UDP","dns":{"type":"answer","id":65057,"rcode":"NXDOMAIN","rrname":"kevutodybuk.eu"}}
{"timestamp":"2017-12-12T18:33:08.693837+0100","flow_id":247383989720653,"pcap_cnt":1287,"event_type":"dns","src_ip":"192.168.1.100","src_port":63874,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4917,"rrname":"lyxesyrecoj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.748845+0100","flow_id":2074823854877801,"pcap_cnt":1577,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60763,"proto":"UDP","dns":{"type":"answer","id":65057,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.636827+0100","flow_id":490223588128047,"pcap_cnt":1255,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58836,"proto":"UDP","dns":{"type":"answer","id":28597,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:13.580056+0100","flow_id":312622395808216,"pcap_cnt":1689,"event_type":"dns","src_ip":"192.168.1.100","src_port":51280,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59495,"rrname":"vopazumosoh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.494012+0100","flow_id":1474009470044604,"pcap_cnt":1866,"event_type":"dns","src_ip":"192.168.1.100","src_port":56078,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":52889,"rrname":"vonerymekix.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:14.585011+0100","flow_id":193237336909695,"pcap_cnt":1811,"event_type":"dns","src_ip":"192.168.1.100","src_port":63391,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":526,"rrname":"xuqykodumyw.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:14.549051+0100","flow_id":1456752291373243,"pcap_cnt":1788,"event_type":"dns","src_ip":"192.168.1.100","src_port":50016,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25663,"rrname":"qetyrypopup.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.546733+0100","flow_id":1474009470044604,"pcap_cnt":1880,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56078,"proto":"UDP","dns":{"type":"answer","id":52889,"rcode":"NXDOMAIN","rrname":"vonerymekix.eu"}}
{"timestamp":"2017-12-12T18:33:06.582304+0100","flow_id":1914765455840475,"pcap_cnt":1009,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60400,"proto":"UDP","dns":{"type":"answer","id":43382,"rcode":"NXDOMAIN","rrname":"lyrosajupid.eu"}}
{"timestamp":"2017-12-12T18:33:16.549962+0100","flow_id":1610140606030649,"pcap_cnt":2058,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58394,"proto":"UDP","dns":{"type":"answer","id":10502,"rcode":"NXDOMAIN","rrname":"jepororyrih.eu"}}
{"timestamp":"2017-12-12T18:33:11.464111+0100","flow_id":853238519077480,"pcap_cnt":1471,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51402,"proto":"UDP","dns":{"type":"answer","id":37250,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.118999+0100","flow_id":1488513574291016,"pcap_cnt":1466,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63654,"proto":"UDP","dns":{"type":"answer","id":20450,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.436703+0100","flow_id":23214614686175,"pcap_cnt":2003,"event_type":"dns","src_ip":"192.168.1.100","src_port":50758,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48205,"rrname":"tunupegirec.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.582304+0100","flow_id":1914765455840475,"pcap_cnt":1009,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60400,"proto":"UDP","dns":{"type":"answer","id":43382,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.614171+0100","flow_id":1520313512189723,"pcap_cnt":1510,"event_type":"dns","src_ip":"192.168.1.100","src_port":50534,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":61716,"rrname":"fodoqebirac.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.776399+0100","flow_id":984265086785480,"pcap_cnt":2147,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50194,"proto":"UDP","dns":{"type":"answer","id":30868,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":560}}
{"timestamp":"2017-12-12T18:33:16.692033+0100","flow_id":647990622326342,"pcap_cnt":2115,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50644,"proto":"UDP","dns":{"type":"answer","id":1108,"rcode":"NXDOMAIN","rrname":"novacofebyz.eu"}}
{"timestamp":"2017-12-12T18:33:11.659210+0100","flow_id":1520313512189723,"pcap_cnt":1531,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50534,"proto":"UDP","dns":{"type":"answer","id":61716,"rcode":"NXDOMAIN","rrname":"fodoqebirac.eu"}}
{"timestamp":"2017-12-12T18:33:16.550503+0100","flow_id":1128017642153575,"pcap_cnt":2059,"event_type":"dns","src_ip":"192.168.1.100","src_port":54948,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2627,"rrname":"masisokemep.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.093411+0100","flow_id":1456752291373243,"pcap_cnt":1832,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50016,"proto":"UDP","dns":{"type":"answer","id":25663,"rcode":"NXDOMAIN","rrname":"qetyrypopup.eu"}}
{"timestamp":"2017-12-12T18:33:13.406893+0100","flow_id":1722769680708973,"pcap_cnt":1611,"event_type":"dns","src_ip":"192.168.1.100","src_port":65360,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53186,"rrname":"jefozaryciw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.093411+0100","flow_id":1456752291373243,"pcap_cnt":1832,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50016,"proto":"UDP","dns":{"type":"answer","id":25663,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.730068+0100","flow_id":1074652673156052,"pcap_cnt":1574,"event_type":"dns","src_ip":"192.168.1.100","src_port":64827,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17212,"rrname":"fogaruhityg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.592151+0100","flow_id":2618098649367,"pcap_cnt":1498,"event_type":"dns","src_ip":"192.168.1.100","src_port":51239,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64541,"rrname":"pujejavakav.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.413184+0100","flow_id":1932587423059456,"pcap_cnt":1612,"event_type":"dns","src_ip":"192.168.1.100","src_port":52935,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5520,"rrname":"kepegaruqik.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.553180+0100","flow_id":1722524867733432,"pcap_cnt":1884,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59229,"proto":"UDP","dns":{"type":"answer","id":29764,"rcode":"NXDOMAIN","rrname":"maxilumiriz.eu"}}
{"timestamp":"2017-12-12T18:33:15.541369+0100","flow_id":1829808855794361,"pcap_cnt":1878,"event_type":"dns","src_ip":"192.168.1.100","src_port":52860,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":54203,"rrname":"ganovowuqur.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.553180+0100","flow_id":1722524867733432,"pcap_cnt":1884,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59229,"proto":"UDP","dns":{"type":"answer","id":29764,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:13.478710+0100","flow_id":2179382686357714,"pcap_cnt":1639,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65497,"proto":"UDP","dns":{"type":"answer","id":6613,"rcode":"NXDOMAIN","rrname":"rytydelitec.eu"}}
{"timestamp":"2017-12-12T18:33:16.685446+0100","flow_id":20734270432814,"pcap_cnt":2113,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64235,"proto":"UDP","dns":{"type":"answer","id":54958,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":559}}
{"timestamp":"2017-12-12T18:33:13.478710+0100","flow_id":2179382686357714,"pcap_cnt":1639,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65497,"proto":"UDP","dns":{"type":"answer","id":6613,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.585866+0100","flow_id":1829808855794361,"pcap_cnt":1895,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52860,"proto":"UDP","dns":{"type":"answer","id":54203,"rcode":"NXDOMAIN","rrname":"ganovowuqur.eu"}}
{"timestamp":"2017-12-12T18:33:17.128795+0100","flow_id":312388320360219,"pcap_cnt":2340,"event_type":"dns","src_ip":"192.168.1.100","src_port":53899,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30541,"rrname":"citeqotacyn.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.862278+0100","flow_id":900274853783622,"pcap_cnt":2188,"event_type":"dns","src_ip":"192.168.1.100","src_port":54928,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":61458,"rrname":"xuxanexusov.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.927565+0100","flow_id":132787820308029,"pcap_cnt":2237,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50598,"proto":"UDP","dns":{"type":"answer","id":37354,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:10.521841+0100","flow_id":1733955922882745,"pcap_cnt":1411,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62185,"proto":"UDP","dns":{"type":"answer","id":2177,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.585866+0100","flow_id":1829808855794361,"pcap_cnt":1895,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52860,"proto":"UDP","dns":{"type":"answer","id":54203,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.862548+0100","flow_id":900274853783622,"pcap_cnt":2189,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54928,"proto":"UDP","dns":{"type":"answer","id":61458,"rcode":"NXDOMAIN","rrname":"xuxanexusov.eu"}}
{"timestamp":"2017-12-12T18:33:13.452580+0100","flow_id":1722769680708973,"pcap_cnt":1625,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65360,"proto":"UDP","dns":{"type":"answer","id":53186,"rcode":"NXDOMAIN","rrname":"jefozaryciw.eu"}}
{"timestamp":"2017-12-12T18:33:11.727456+0100","flow_id":1525598469429664,"pcap_cnt":1570,"event_type":"dns","src_ip":"192.168.1.100","src_port":49933,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29330,"rrname":"dixagowunol.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.862548+0100","flow_id":900274853783622,"pcap_cnt":2189,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54928,"proto":"UDP","dns":{"type":"answer","id":61458,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:08.698220+0100","flow_id":1819874593831294,"pcap_cnt":1290,"event_type":"dns","src_ip":"192.168.1.100","src_port":62268,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34119,"rrname":"xukuqyruwoq.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:12.571747+0100","flow_id":1525598469429664,"pcap_cnt":1600,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49933,"proto":"UDP","dns":{"type":"answer","id":29330,"rcode":"NXDOMAIN","rrname":"dixagowunol.eu"}}
{"timestamp":"2017-12-12T18:33:08.652533+0100","flow_id":588191792166133,"pcap_cnt":1264,"event_type":"dns","src_ip":"192.168.1.100","src_port":55712,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":52160,"rrname":"dirugihofug.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.920873+0100","flow_id":2025642184674601,"pcap_cnt":2230,"event_type":"dns","src_ip":"192.168.1.100","src_port":60988,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5086,"rrname":"voworemoziv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.128415+0100","flow_id":193237336909695,"pcap_cnt":1838,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63391,"proto":"UDP","dns":{"type":"answer","id":526,"rcode":"NXDOMAIN","rrname":"xuqykodumyw.eu"}}
{"timestamp":"2017-12-12T18:33:15.546733+0100","flow_id":1474009470044604,"pcap_cnt":1880,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56078,"proto":"UDP","dns":{"type":"answer","id":52889,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.408377+0100","flow_id":222153204841273,"pcap_cnt":1998,"event_type":"dns","src_ip":"192.168.1.100","src_port":64525,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31806,"rrname":"qetoxagekec.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.128415+0100","flow_id":193237336909695,"pcap_cnt":1838,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63391,"proto":"UDP","dns":{"type":"answer","id":526,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.549962+0100","flow_id":1610140606030649,"pcap_cnt":2058,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58394,"proto":"UDP","dns":{"type":"answer","id":10502,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":559}}
{"timestamp":"2017-12-12T18:33:15.642809+0100","flow_id":25231101775609,"pcap_cnt":1919,"event_type":"dns","src_ip":"192.168.1.100","src_port":64248,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25930,"rrname":"nomimokubab.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.692033+0100","flow_id":647990622326342,"pcap_cnt":2115,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50644,"proto":"UDP","dns":{"type":"answer","id":1108,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:17.048052+0100","flow_id":1445763617766324,"pcap_cnt":2296,"event_type":"dns","src_ip":"192.168.1.100","src_port":59864,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51604,"rrname":"nozydemutik.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.594002+0100","flow_id":1209795966765529,"pcap_cnt":1694,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51045,"proto":"UDP","dns":{"type":"answer","id":62586,"rcode":"NXDOMAIN","rrname":"tuporupajun.eu"}}
{"timestamp":"2017-12-12T18:33:16.912859+0100","flow_id":865882903211483,"pcap_cnt":2216,"event_type":"dns","src_ip":"192.168.1.100","src_port":57885,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59265,"rrname":"pufiluqudic.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.375895+0100","flow_id":2028936423821885,"pcap_cnt":935,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53003,"proto":"UDP","dns":{"type":"answer","id":6537,"rcode":"NXDOMAIN","rrname":"vojedufynoj.eu"}}
{"timestamp":"2017-12-12T18:33:13.594002+0100","flow_id":1209795966765529,"pcap_cnt":1694,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51045,"proto":"UDP","dns":{"type":"answer","id":62586,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.659210+0100","flow_id":1520313512189723,"pcap_cnt":1531,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50534,"proto":"UDP","dns":{"type":"answer","id":61716,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.913102+0100","flow_id":865882903211483,"pcap_cnt":2217,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57885,"proto":"UDP","dns":{"type":"answer","id":59265,"rcode":"NXDOMAIN","rrname":"pufiluqudic.eu"}}
{"timestamp":"2017-12-12T18:33:13.631649+0100","flow_id":312622395808216,"pcap_cnt":1720,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51280,"proto":"UDP","dns":{"type":"answer","id":59495,"rcode":"NXDOMAIN","rrname":"vopazumosoh.eu"}}
{"timestamp":"2017-12-12T18:33:13.601092+0100","flow_id":1599005903121310,"pcap_cnt":1699,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50772,"proto":"UDP","dns":{"type":"answer","id":39937,"rcode":"NXDOMAIN","rrname":"lysisuxofaz.eu"}}
{"timestamp":"2017-12-12T18:33:16.444716+0100","flow_id":746396913027372,"pcap_cnt":2008,"event_type":"dns","src_ip":"192.168.1.100","src_port":54679,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":46020,"rrname":"kepyxujycaz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.375895+0100","flow_id":2028936423821885,"pcap_cnt":935,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53003,"proto":"UDP","dns":{"type":"answer","id":6537,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.676627+0100","flow_id":1576197478961939,"pcap_cnt":1281,"event_type":"dns","src_ip":"192.168.1.100","src_port":53851,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28504,"rrname":"gaqyqewymow.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.668060+0100","flow_id":1829972180216,"pcap_cnt":1535,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58400,"proto":"UDP","dns":{"type":"answer","id":5952,"rcode":"NXDOMAIN","rrname":"lyvamynipox.eu"}}
{"timestamp":"2017-12-12T18:33:08.737308+0100","flow_id":110374532956188,"pcap_cnt":1314,"event_type":"dns","src_ip":"192.168.1.100","src_port":63818,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43197,"rrname":"pujibylityp.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.602835+0100","flow_id":2043126995698867,"pcap_cnt":1030,"event_type":"dns","src_ip":"192.168.1.100","src_port":49165,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7324,"rrname":"xudutoxakur.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:16.550769+0100","flow_id":1128017642153575,"pcap_cnt":2060,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54948,"proto":"UDP","dns":{"type":"answer","id":2627,"rcode":"NXDOMAIN","rrname":"masisokemep.eu"}}
{"timestamp":"2017-12-12T18:33:08.728377+0100","flow_id":1576197478961939,"pcap_cnt":1305,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53851,"proto":"UDP","dns":{"type":"answer","id":28504,"rcode":"NXDOMAIN","rrname":"gaqyqewymow.eu"}}
{"timestamp":"2017-12-12T18:33:15.608502+0100","flow_id":2198441603844342,"pcap_cnt":1901,"event_type":"dns","src_ip":"192.168.1.100","src_port":50727,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1954,"rrname":"qebukypahyh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.610207+0100","flow_id":33013581893535,"pcap_cnt":1038,"event_type":"dns","src_ip":"192.168.1.100","src_port":60323,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35303,"rrname":"qeguxylevus.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.658068+0100","flow_id":1377312576375444,"pcap_cnt":2102,"event_type":"dns","src_ip":"192.168.1.100","src_port":49460,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6923,"rrname":"kepymexihak.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:06.653666+0100","flow_id":2043126995698867,"pcap_cnt":1059,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49165,"proto":"UDP","dns":{"type":"answer","id":7324,"rcode":"NXDOMAIN","rrname":"xudutoxakur.eu"}}
{"timestamp":"2017-12-12T18:33:07.403709+0100","flow_id":1753431451770474,"pcap_cnt":1159,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58206,"proto":"UDP","dns":{"type":"answer","id":20705,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.587336+0100","flow_id":1860792749585992,"pcap_cnt":1457,"event_type":"dns","src_ip":"192.168.1.100","src_port":50880,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6216,"rrname":"fobexawumov.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.658162+0100","flow_id":1203533904104886,"pcap_cnt":1267,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57564,"proto":"UDP","dns":{"type":"answer","id":21399,"rcode":"NXDOMAIN","rrname":"xutoxedyniq.eu"}}
{"timestamp":"2017-12-12T18:33:11.128258+0100","flow_id":1860792749585992,"pcap_cnt":1467,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50880,"proto":"UDP","dns":{"type":"answer","id":6216,"rcode":"NXDOMAIN","rrname":"fobexawumov.eu"}}
{"timestamp":"2017-12-12T18:33:17.568919+0100","flow_id":1858917996801623,"pcap_cnt":2598,"event_type":"dns","src_ip":"192.168.1.100","src_port":51902,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":22991,"rrname":"mavinifenam.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.128258+0100","flow_id":1860792749585992,"pcap_cnt":1467,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50880,"proto":"UDP","dns":{"type":"answer","id":6216,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.658162+0100","flow_id":1203533904104886,"pcap_cnt":1267,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57564,"proto":"UDP","dns":{"type":"answer","id":21399,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.613476+0100","flow_id":1930066276931482,"pcap_cnt":1243,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64013,"proto":"UDP","dns":{"type":"answer","id":38676,"rcode":"NXDOMAIN","rrname":"rydurevohed.eu"}}
{"timestamp":"2017-12-12T18:33:17.129053+0100","flow_id":312388320360219,"pcap_cnt":2341,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53899,"proto":"UDP","dns":{"type":"answer","id":30541,"rcode":"NXDOMAIN","rrname":"citeqotacyn.eu"}}
{"timestamp":"2017-12-12T18:33:08.694602+0100","flow_id":880311845315482,"pcap_cnt":1288,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52166,"proto":"UDP","dns":{"type":"answer","id":46666,"rcode":"NXDOMAIN","rrname":"qekyhugisih.eu"}}
{"timestamp":"2017-12-12T18:33:17.018669+0100","flow_id":404704347375853,"pcap_cnt":2280,"event_type":"dns","src_ip":"192.168.1.100","src_port":61014,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":58912,"rrname":"jefubonokiz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.694602+0100","flow_id":880311845315482,"pcap_cnt":1288,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52166,"proto":"UDP","dns":{"type":"answer","id":46666,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:12.571747+0100","flow_id":1525598469429664,"pcap_cnt":1600,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49933,"proto":"UDP","dns":{"type":"answer","id":29330,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.730183+0100","flow_id":1310628913620039,"pcap_cnt":1307,"event_type":"dns","src_ip":"192.168.1.100","src_port":60745,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13545,"rrname":"kezigojohuf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.956717+0100","flow_id":384848713718061,"pcap_cnt":2948,"event_type":"dns","src_ip":"192.168.1.100","src_port":59367,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23249,"rrname":"xuqeqejohiv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:14.489986+0100","flow_id":2191627638176258,"pcap_cnt":1754,"event_type":"dns","src_ip":"192.168.1.100","src_port":52353,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41598,"rrname":"tucijalexaj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.096177+0100","flow_id":907649312517085,"pcap_cnt":1833,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56991,"proto":"UDP","dns":{"type":"answer","id":58592,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.659395+0100","flow_id":698916048996142,"pcap_cnt":1268,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63225,"proto":"UDP","dns":{"type":"answer","id":49741,"rcode":"NXDOMAIN","rrname":"vowidimajaz.eu"}}
{"timestamp":"2017-12-12T18:33:14.535439+0100","flow_id":2191627638176258,"pcap_cnt":1776,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52353,"proto":"UDP","dns":{"type":"answer","id":41598,"rcode":"NXDOMAIN","rrname":"tucijalexaj.eu"}}
{"timestamp":"2017-12-12T18:33:06.629833+0100","flow_id":1793681737835061,"pcap_cnt":1045,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60383,"proto":"UDP","dns":{"type":"answer","id":28757,"rcode":"NXDOMAIN","rrname":"rydohyluruc.eu"}}
{"timestamp":"2017-12-12T18:33:14.535439+0100","flow_id":2191627638176258,"pcap_cnt":1776,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52353,"proto":"UDP","dns":{"type":"answer","id":41598,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.629833+0100","flow_id":1793681737835061,"pcap_cnt":1045,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60383,"proto":"UDP","dns":{"type":"answer","id":28757,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.691300+0100","flow_id":25231101775609,"pcap_cnt":1963,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64248,"proto":"UDP","dns":{"type":"answer","id":25930,"rcode":"NXDOMAIN","rrname":"nomimokubab.eu"}}
{"timestamp":"2017-12-12T18:33:16.913102+0100","flow_id":865882903211483,"pcap_cnt":2217,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57885,"proto":"UDP","dns":{"type":"answer","id":59265,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:15.691300+0100","flow_id":25231101775609,"pcap_cnt":1963,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64248,"proto":"UDP","dns":{"type":"answer","id":25930,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.722531+0100","flow_id":996767736019819,"pcap_cnt":1301,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55531,"proto":"UDP","dns":{"type":"answer","id":51323,"rcode":"NXDOMAIN","rrname":"foqotihalun.eu"}}
{"timestamp":"2017-12-12T18:33:13.631649+0100","flow_id":312622395808216,"pcap_cnt":1720,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51280,"proto":"UDP","dns":{"type":"answer","id":59495,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.511269+0100","flow_id":1450198171438373,"pcap_cnt":2043,"event_type":"dns","src_ip":"192.168.1.100","src_port":54971,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":16030,"rrname":"divyviwyxuf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.930930+0100","flow_id":1879495185020018,"pcap_cnt":2238,"event_type":"dns","src_ip":"192.168.1.100","src_port":65175,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":52209,"rrname":"lygananavof.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.709450+0100","flow_id":1899816822146602,"pcap_cnt":1556,"event_type":"dns","src_ip":"192.168.1.100","src_port":56915,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64639,"rrname":"dikofuhybym.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:11.668060+0100","flow_id":1829972180216,"pcap_cnt":1535,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58400,"proto":"UDP","dns":{"type":"answer","id":5952,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.134402+0100","flow_id":2215123256740375,"pcap_cnt":1839,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60616,"proto":"UDP","dns":{"type":"answer","id":21204,"rcode":"NXDOMAIN","rrname":"puvedupuquz.eu"}}
{"timestamp":"2017-12-12T18:33:16.495762+0100","flow_id":943918163953939,"pcap_cnt":2029,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61274,"proto":"UDP","dns":{"type":"answer","id":5814,"rcode":"NXDOMAIN","rrname":"dikolobeliw.eu"}}
{"timestamp":"2017-12-12T18:33:11.763647+0100","flow_id":1899816822146602,"pcap_cnt":1588,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56915,"proto":"UDP","dns":{"type":"answer","id":64639,"rcode":"NXDOMAIN","rrname":"dikofuhybym.eu"}}
{"timestamp":"2017-12-12T18:33:15.134402+0100","flow_id":2215123256740375,"pcap_cnt":1839,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60616,"proto":"UDP","dns":{"type":"answer","id":21204,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.495762+0100","flow_id":943918163953939,"pcap_cnt":2029,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61274,"proto":"UDP","dns":{"type":"answer","id":5814,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.763647+0100","flow_id":1899816822146602,"pcap_cnt":1588,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56915,"proto":"UDP","dns":{"type":"answer","id":64639,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.550769+0100","flow_id":1128017642153575,"pcap_cnt":2060,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54948,"proto":"UDP","dns":{"type":"answer","id":2627,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":559}}
{"timestamp":"2017-12-12T18:33:15.138309+0100","flow_id":955632687126145,"pcap_cnt":1840,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62535,"proto":"UDP","dns":{"type":"answer","id":45455,"rcode":"NXDOMAIN","rrname":"gahekisybyr.eu"}}
{"timestamp":"2017-12-12T18:33:15.658059+0100","flow_id":294493338929803,"pcap_cnt":1935,"event_type":"dns","src_ip":"192.168.1.100","src_port":49981,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40364,"rrname":"rylupalyxad.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.588102+0100","flow_id":743514989984070,"pcap_cnt":2078,"event_type":"dns","src_ip":"192.168.1.100","src_port":58647,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":32717,"rrname":"volebatijub.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.655925+0100","flow_id":2198441603844342,"pcap_cnt":1933,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50727,"proto":"UDP","dns":{"type":"answer","id":1954,"rcode":"NXDOMAIN","rrname":"qebukypahyh.eu"}}
{"timestamp":"2017-12-12T18:33:13.486337+0100","flow_id":1671133436426617,"pcap_cnt":1641,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49743,"proto":"UDP","dns":{"type":"answer","id":46083,"rcode":"NXDOMAIN","rrname":"vocygytirij.eu"}}
{"timestamp":"2017-12-12T18:33:06.653666+0100","flow_id":2043126995698867,"pcap_cnt":1059,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49165,"proto":"UDP","dns":{"type":"answer","id":7324,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.658325+0100","flow_id":1377312576375444,"pcap_cnt":2103,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49460,"proto":"UDP","dns":{"type":"answer","id":6923,"rcode":"NXDOMAIN","rrname":"kepymexihak.eu"}}
{"timestamp":"2017-12-12T18:33:13.486337+0100","flow_id":1671133436426617,"pcap_cnt":1641,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49743,"proto":"UDP","dns":{"type":"answer","id":46083,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.456893+0100","flow_id":963896203698153,"pcap_cnt":1204,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64795,"proto":"UDP","dns":{"type":"answer","id":4823,"rcode":"NXDOMAIN","rrname":"rynovaqidef.eu"}}
{"timestamp":"2017-12-12T18:33:08.620424+0100","flow_id":1426766976808168,"pcap_cnt":1246,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64995,"proto":"UDP","dns":{"type":"answer","id":41074,"rcode":"NXDOMAIN","rrname":"puralevuqes.eu"}}
{"timestamp":"2017-12-12T18:33:16.658325+0100","flow_id":1377312576375444,"pcap_cnt":2103,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49460,"proto":"UDP","dns":{"type":"answer","id":6923,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":559}}
{"timestamp":"2017-12-12T18:33:13.578757+0100","flow_id":435557244720325,"pcap_cnt":1688,"event_type":"dns","src_ip":"192.168.1.100","src_port":57817,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7875,"rrname":"cidinymuqom.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.613476+0100","flow_id":1930066276931482,"pcap_cnt":1243,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64013,"proto":"UDP","dns":{"type":"answer","id":38676,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:13.452580+0100","flow_id":1722769680708973,"pcap_cnt":1625,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65360,"proto":"UDP","dns":{"type":"answer","id":53186,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.858382+0100","flow_id":1013546026277134,"pcap_cnt":2184,"event_type":"dns","src_ip":"192.168.1.100","src_port":64367,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42710,"rrname":"kemygexaxab.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.018929+0100","flow_id":404704347375853,"pcap_cnt":2281,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61014,"proto":"UDP","dns":{"type":"answer","id":58912,"rcode":"NXDOMAIN","rrname":"jefubonokiz.eu"}}
{"timestamp":"2017-12-12T18:33:08.703930+0100","flow_id":429357459094970,"pcap_cnt":1294,"event_type":"dns","src_ip":"192.168.1.100","src_port":59961,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":15188,"rrname":"vofejutalom.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.018929+0100","flow_id":404704347375853,"pcap_cnt":2281,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61014,"proto":"UDP","dns":{"type":"answer","id":58912,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:19.956933+0100","flow_id":384848713718061,"pcap_cnt":2949,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59367,"proto":"UDP","dns":{"type":"answer","id":23249,"rcode":"NXDOMAIN","rrname":"xuqeqejohiv.eu"}}
{"timestamp":"2017-12-12T18:33:08.746495+0100","flow_id":247383989720653,"pcap_cnt":1319,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63874,"proto":"UDP","dns":{"type":"answer","id":4917,"rcode":"NXDOMAIN","rrname":"lyxesyrecoj.eu"}}
{"timestamp":"2017-12-12T18:33:16.864653+0100","flow_id":1041061734265229,"pcap_cnt":2192,"event_type":"dns","src_ip":"192.168.1.100","src_port":50556,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17690,"rrname":"cilyzycojod.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.746495+0100","flow_id":247383989720653,"pcap_cnt":1319,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63874,"proto":"UDP","dns":{"type":"answer","id":4917,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.048306+0100","flow_id":1445763617766324,"pcap_cnt":2297,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59864,"proto":"UDP","dns":{"type":"answer","id":51604,"rcode":"NXDOMAIN","rrname":"nozydemutik.eu"}}
{"timestamp":"2017-12-12T18:33:08.659395+0100","flow_id":698916048996142,"pcap_cnt":1268,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63225,"proto":"UDP","dns":{"type":"answer","id":49741,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.722531+0100","flow_id":996767736019819,"pcap_cnt":1301,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55531,"proto":"UDP","dns":{"type":"answer","id":51323,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.869413+0100","flow_id":2105736881652773,"pcap_cnt":1129,"event_type":"dns","src_ip":"192.168.1.100","src_port":59406,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45018,"rrname":"tuwucopexot.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:14.547318+0100","flow_id":72336155498998,"pcap_cnt":1787,"event_type":"dns","src_ip":"192.168.1.100","src_port":56077,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38346,"rrname":"gatifowyciv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.527640+0100","flow_id":1367715471625496,"pcap_cnt":1478,"event_type":"dns","src_ip":"192.168.1.100","src_port":58405,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":58753,"rrname":"direwyzexem.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.864897+0100","flow_id":1041061734265229,"pcap_cnt":2193,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50556,"proto":"UDP","dns":{"type":"answer","id":17690,"rcode":"NXDOMAIN","rrname":"cilyzycojod.eu"}}
{"timestamp":"2017-12-12T18:33:08.662073+0100","flow_id":1016159513370339,"pcap_cnt":1270,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62640,"proto":"UDP","dns":{"type":"answer","id":63605,"rcode":"NXDOMAIN","rrname":"ciqehefitij.eu"}}
{"timestamp":"2017-12-12T18:33:16.864897+0100","flow_id":1041061734265229,"pcap_cnt":2193,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50556,"proto":"UDP","dns":{"type":"answer","id":17690,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:08.662073+0100","flow_id":1016159513370339,"pcap_cnt":1270,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62640,"proto":"UDP","dns":{"type":"answer","id":63605,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.931185+0100","flow_id":1879495185020018,"pcap_cnt":2239,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65175,"proto":"UDP","dns":{"type":"answer","id":52209,"rcode":"NXDOMAIN","rrname":"lygananavof.eu"}}
{"timestamp":"2017-12-12T18:33:14.593781+0100","flow_id":388222410166133,"pcap_cnt":1814,"event_type":"dns","src_ip":"192.168.1.100","src_port":52451,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9890,"rrname":"fokovisekyz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.543823+0100","flow_id":1006165124795471,"pcap_cnt":1658,"event_type":"dns","src_ip":"192.168.1.100","src_port":54899,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28971,"rrname":"dirixabirok.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.931185+0100","flow_id":1879495185020018,"pcap_cnt":2239,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65175,"proto":"UDP","dns":{"type":"answer","id":52209,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:15.396452+0100","flow_id":72336155498998,"pcap_cnt":1849,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56077,"proto":"UDP","dns":{"type":"answer","id":38346,"rcode":"NXDOMAIN","rrname":"gatifowyciv.eu"}}
{"timestamp":"2017-12-12T18:33:13.380379+0100","flow_id":1074652673156052,"pcap_cnt":1607,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64827,"proto":"UDP","dns":{"type":"answer","id":17212,"rcode":"NXDOMAIN","rrname":"fogaruhityg.eu"}}
{"timestamp":"2017-12-12T18:33:15.396452+0100","flow_id":72336155498998,"pcap_cnt":1849,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56077,"proto":"UDP","dns":{"type":"answer","id":38346,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.739402+0100","flow_id":62288079112266,"pcap_cnt":1316,"event_type":"dns","src_ip":"192.168.1.100","src_port":52506,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36189,"rrname":"digalyzohyx.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.380379+0100","flow_id":1074652673156052,"pcap_cnt":1607,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64827,"proto":"UDP","dns":{"type":"answer","id":17212,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.728377+0100","flow_id":1576197478961939,"pcap_cnt":1305,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53851,"proto":"UDP","dns":{"type":"answer","id":28504,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.444531+0100","flow_id":388222410166133,"pcap_cnt":1857,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52451,"proto":"UDP","dns":{"type":"answer","id":9890,"rcode":"NXDOMAIN","rrname":"fokovisekyz.eu"}}
{"timestamp":"2017-12-12T18:33:16.872044+0100","flow_id":937338274074220,"pcap_cnt":2198,"event_type":"dns","src_ip":"192.168.1.100","src_port":49677,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":12813,"rrname":"nofotycywos.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.535127+0100","flow_id":1550346071124567,"pcap_cnt":1651,"event_type":"dns","src_ip":"192.168.1.100","src_port":60462,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45884,"rrname":"qekuxovuqal.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.508933+0100","flow_id":222153204841273,"pcap_cnt":2040,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64525,"proto":"UDP","dns":{"type":"answer","id":31806,"rcode":"NXDOMAIN","rrname":"qetoxagekec.eu"}}
{"timestamp":"2017-12-12T18:33:15.655925+0100","flow_id":2198441603844342,"pcap_cnt":1933,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50727,"proto":"UDP","dns":{"type":"answer","id":1954,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.679485+0100","flow_id":616804864731818,"pcap_cnt":1954,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54316,"proto":"UDP","dns":{"type":"answer","id":61809,"rcode":"NXDOMAIN","rrname":"lygumujycen.eu"}}
{"timestamp":"2017-12-12T18:33:16.508933+0100","flow_id":222153204841273,"pcap_cnt":2040,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64525,"proto":"UDP","dns":{"type":"answer","id":31806,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.679485+0100","flow_id":616804864731818,"pcap_cnt":1954,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54316,"proto":"UDP","dns":{"type":"answer","id":61809,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:06.660082+0100","flow_id":33013581893535,"pcap_cnt":1062,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60323,"proto":"UDP","dns":{"type":"answer","id":35303,"rcode":"NXDOMAIN","rrname":"qeguxylevus.eu"}}
{"timestamp":"2017-12-12T18:33:13.402737+0100","flow_id":1705022875837745,"pcap_cnt":1610,"event_type":"dns","src_ip":"192.168.1.100","src_port":62945,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60620,"rrname":"nojuwakofed.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.620166+0100","flow_id":1090595592107654,"pcap_cnt":2086,"event_type":"dns","src_ip":"192.168.1.100","src_port":61043,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":65340,"rrname":"rytuvepokuv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.456893+0100","flow_id":963896203698153,"pcap_cnt":1204,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64795,"proto":"UDP","dns":{"type":"answer","id":4823,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.620424+0100","flow_id":1426766976808168,"pcap_cnt":1246,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64995,"proto":"UDP","dns":{"type":"answer","id":41074,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:13.629180+0100","flow_id":435557244720325,"pcap_cnt":1718,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57817,"proto":"UDP","dns":{"type":"answer","id":7875,"rcode":"NXDOMAIN","rrname":"cidinymuqom.eu"}}
{"timestamp":"2017-12-12T18:33:17.129053+0100","flow_id":312388320360219,"pcap_cnt":2341,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53899,"proto":"UDP","dns":{"type":"answer","id":30541,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:16.620428+0100","flow_id":1090595592107654,"pcap_cnt":2087,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61043,"proto":"UDP","dns":{"type":"answer","id":65340,"rcode":"NXDOMAIN","rrname":"rytuvepokuv.eu"}}
{"timestamp":"2017-12-12T18:33:13.459068+0100","flow_id":1932587423059456,"pcap_cnt":1628,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52935,"proto":"UDP","dns":{"type":"answer","id":5520,"rcode":"NXDOMAIN","rrname":"kepegaruqik.eu"}}
{"timestamp":"2017-12-12T18:33:08.660610+0100","flow_id":906440278823709,"pcap_cnt":1269,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61831,"proto":"UDP","dns":{"type":"answer","id":55954,"rcode":"NXDOMAIN","rrname":"vonupyfogiq.eu"}}
{"timestamp":"2017-12-12T18:33:16.921111+0100","flow_id":2025642184674601,"pcap_cnt":2231,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60988,"proto":"UDP","dns":{"type":"answer","id":5086,"rcode":"NXDOMAIN","rrname":"voworemoziv.eu"}}
{"timestamp":"2017-12-12T18:33:08.756990+0100","flow_id":429357459094970,"pcap_cnt":1326,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59961,"proto":"UDP","dns":{"type":"answer","id":15188,"rcode":"NXDOMAIN","rrname":"vofejutalom.eu"}}
{"timestamp":"2017-12-12T18:33:19.956933+0100","flow_id":384848713718061,"pcap_cnt":2949,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59367,"proto":"UDP","dns":{"type":"answer","id":23249,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:08.756990+0100","flow_id":429357459094970,"pcap_cnt":1326,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59961,"proto":"UDP","dns":{"type":"answer","id":15188,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.559494+0100","flow_id":1450198171438373,"pcap_cnt":2067,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54971,"proto":"UDP","dns":{"type":"answer","id":16030,"rcode":"NXDOMAIN","rrname":"divyviwyxuf.eu"}}
{"timestamp":"2017-12-12T18:33:20.117241+0100","flow_id":468566216329721,"pcap_cnt":3038,"event_type":"dns","src_ip":"192.168.1.100","src_port":51052,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9444,"rrname":"cidaqyfynos.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.553438+0100","flow_id":6571616072158,"pcap_cnt":1483,"event_type":"dns","src_ip":"192.168.1.100","src_port":53454,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11268,"rrname":"citapytakic.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:10.436493+0100","flow_id":439046905440525,"pcap_cnt":1366,"event_type":"dns","src_ip":"192.168.1.100","src_port":59747,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47052,"rrname":"voluzefexus.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.514531+0100","flow_id":2105736881652773,"pcap_cnt":1217,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59406,"proto":"UDP","dns":{"type":"answer","id":45018,"rcode":"NXDOMAIN","rrname":"tuwucopexot.eu"}}
{"timestamp":"2017-12-12T18:33:11.610175+0100","flow_id":233464000907183,"pcap_cnt":1507,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51460,"proto":"UDP","dns":{"type":"answer","id":13986,"rcode":"NXDOMAIN","rrname":"norococitef.eu"}}
{"timestamp":"2017-12-12T18:33:08.514531+0100","flow_id":2105736881652773,"pcap_cnt":1217,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59406,"proto":"UDP","dns":{"type":"answer","id":45018,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.503107+0100","flow_id":439046905440525,"pcap_cnt":1401,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59747,"proto":"UDP","dns":{"type":"answer","id":47052,"rcode":"NXDOMAIN","rrname":"voluzefexus.eu"}}
{"timestamp":"2017-12-12T18:33:17.087345+0100","flow_id":1135931119457585,"pcap_cnt":2310,"event_type":"dns","src_ip":"192.168.1.100","src_port":53002,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31142,"rrname":"rydekyqyquw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:10.503107+0100","flow_id":439046905440525,"pcap_cnt":1401,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59747,"proto":"UDP","dns":{"type":"answer","id":47052,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:14.387990+0100","flow_id":2085791053986024,"pcap_cnt":1733,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64457,"proto":"UDP","dns":{"type":"answer","id":27843,"rcode":"NXDOMAIN","rrname":"tufapovakak.eu"}}
{"timestamp":"2017-12-12T18:33:08.686034+0100","flow_id":21891764221906,"pcap_cnt":1284,"event_type":"dns","src_ip":"192.168.1.100","src_port":60229,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18478,"rrname":"kevajerajoq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.087558+0100","flow_id":1135931119457585,"pcap_cnt":2311,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53002,"proto":"UDP","dns":{"type":"answer","id":31142,"rcode":"NXDOMAIN","rrname":"rydekyqyquw.eu"}}
{"timestamp":"2017-12-12T18:33:13.592820+0100","flow_id":1006165124795471,"pcap_cnt":1693,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54899,"proto":"UDP","dns":{"type":"answer","id":28971,"rcode":"NXDOMAIN","rrname":"dirixabirok.eu"}}
{"timestamp":"2017-12-12T18:33:16.987569+0100","flow_id":312433417392561,"pcap_cnt":2268,"event_type":"dns","src_ip":"192.168.1.100","src_port":61803,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2858,"rrname":"tunarivutop.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.592820+0100","flow_id":1006165124795471,"pcap_cnt":1693,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54899,"proto":"UDP","dns":{"type":"answer","id":28971,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:13.556350+0100","flow_id":865897935371582,"pcap_cnt":1666,"event_type":"dns","src_ip":"192.168.1.100","src_port":59521,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62240,"rrname":"vowokafopyv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.987821+0100","flow_id":312433417392561,"pcap_cnt":2269,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61803,"proto":"UDP","dns":{"type":"answer","id":2858,"rcode":"NXDOMAIN","rrname":"tunarivutop.eu"}}
{"timestamp":"2017-12-12T18:33:14.599962+0100","flow_id":320516545718170,"pcap_cnt":1818,"event_type":"dns","src_ip":"192.168.1.100","src_port":61513,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":58500,"rrname":"lyravodezyl.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.138309+0100","flow_id":955632687126145,"pcap_cnt":1840,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62535,"proto":"UDP","dns":{"type":"answer","id":45455,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:13.567510+0100","flow_id":197274606610646,"pcap_cnt":1676,"event_type":"dns","src_ip":"192.168.1.100","src_port":54303,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43585,"rrname":"ganepebeloj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:10.450619+0100","flow_id":704851693985851,"pcap_cnt":1372,"event_type":"dns","src_ip":"192.168.1.100","src_port":54917,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17288,"rrname":"qedunygajux.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.451889+0100","flow_id":320516545718170,"pcap_cnt":1859,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61513,"proto":"UDP","dns":{"type":"answer","id":58500,"rcode":"NXDOMAIN","rrname":"lyravodezyl.eu"}}
{"timestamp":"2017-12-12T18:33:15.629864+0100","flow_id":1806551607909480,"pcap_cnt":1911,"event_type":"dns","src_ip":"192.168.1.100","src_port":62693,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27922,"rrname":"jelojujopen.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.451889+0100","flow_id":320516545718170,"pcap_cnt":1859,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61513,"proto":"UDP","dns":{"type":"answer","id":58500,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.588365+0100","flow_id":743514989984070,"pcap_cnt":2079,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58647,"proto":"UDP","dns":{"type":"answer","id":32717,"rcode":"NXDOMAIN","rrname":"volebatijub.eu"}}
{"timestamp":"2017-12-12T18:33:13.552313+0100","flow_id":117356002635129,"pcap_cnt":1663,"event_type":"dns","src_ip":"192.168.1.100","src_port":62293,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59897,"rrname":"cituvafumyd.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.658459+0100","flow_id":1646881903676443,"pcap_cnt":1937,"event_type":"dns","src_ip":"192.168.1.100","src_port":51484,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":46818,"rrname":"vofogucyxoz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.761178+0100","flow_id":1391866072765846,"pcap_cnt":1586,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58389,"proto":"UDP","dns":{"type":"answer","id":27891,"rcode":"NXDOMAIN","rrname":"xukeladoguk.eu"}}
{"timestamp":"2017-12-12T18:33:15.497073+0100","flow_id":819093529400753,"pcap_cnt":1868,"event_type":"dns","src_ip":"192.168.1.100","src_port":49302,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5184,"rrname":"novubymyvip.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.393761+0100","flow_id":2209866216899105,"pcap_cnt":1993,"event_type":"dns","src_ip":"192.168.1.100","src_port":49303,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36599,"rrname":"vojajofyced.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.665836+0100","flow_id":1557495044319468,"pcap_cnt":1943,"event_type":"dns","src_ip":"192.168.1.100","src_port":52160,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":548,"rrname":"digijusekyg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.569171+0100","flow_id":1858917996801623,"pcap_cnt":2599,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51902,"proto":"UDP","dns":{"type":"answer","id":22991,"rcode":"NXDOMAIN","rrname":"mavinifenam.eu"}}
{"timestamp":"2017-12-12T18:33:15.549133+0100","flow_id":819093529400753,"pcap_cnt":1882,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49302,"proto":"UDP","dns":{"type":"answer","id":5184,"rcode":"NXDOMAIN","rrname":"novubymyvip.eu"}}
{"timestamp":"2017-12-12T18:33:15.690086+0100","flow_id":617887196498428,"pcap_cnt":1962,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53739,"proto":"UDP","dns":{"type":"answer","id":57298,"rcode":"NXDOMAIN","rrname":"mavaxokitad.eu"}}
{"timestamp":"2017-12-12T18:33:13.442921+0100","flow_id":1093608511488553,"pcap_cnt":1621,"event_type":"dns","src_ip":"192.168.1.100","src_port":49708,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18168,"rrname":"qedakalyned.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.677653+0100","flow_id":1806551607909480,"pcap_cnt":1952,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62693,"proto":"UDP","dns":{"type":"answer","id":27922,"rcode":"NXDOMAIN","rrname":"jelojujopen.eu"}}
{"timestamp":"2017-12-12T18:33:10.515093+0100","flow_id":120278727711765,"pcap_cnt":1408,"event_type":"dns","src_ip":"192.168.1.100","src_port":62478,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":24903,"rrname":"lyselojumyr.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.629180+0100","flow_id":435557244720325,"pcap_cnt":1718,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57817,"proto":"UDP","dns":{"type":"answer","id":7875,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.677653+0100","flow_id":1806551607909480,"pcap_cnt":1952,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62693,"proto":"UDP","dns":{"type":"answer","id":27922,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.620428+0100","flow_id":1090595592107654,"pcap_cnt":2087,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61043,"proto":"UDP","dns":{"type":"answer","id":65340,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":559}}
{"timestamp":"2017-12-12T18:33:10.563141+0100","flow_id":120278727711765,"pcap_cnt":1442,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62478,"proto":"UDP","dns":{"type":"answer","id":24903,"rcode":"NXDOMAIN","rrname":"lyselojumyr.eu"}}
{"timestamp":"2017-12-12T18:33:14.436327+0100","flow_id":739881447499879,"pcap_cnt":1742,"event_type":"dns","src_ip":"192.168.1.100","src_port":62582,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2114,"rrname":"cihaqokiwel.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.459068+0100","flow_id":1932587423059456,"pcap_cnt":1628,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52935,"proto":"UDP","dns":{"type":"answer","id":5520,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.563141+0100","flow_id":120278727711765,"pcap_cnt":1442,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62478,"proto":"UDP","dns":{"type":"answer","id":24903,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.921111+0100","flow_id":2025642184674601,"pcap_cnt":2231,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60988,"proto":"UDP","dns":{"type":"answer","id":5086,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:14.503168+0100","flow_id":739881447499879,"pcap_cnt":1759,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62582,"proto":"UDP","dns":{"type":"answer","id":2114,"rcode":"NXDOMAIN","rrname":"cihaqokiwel.eu"}}
{"timestamp":"2017-12-12T18:33:08.750613+0100","flow_id":1819874593831294,"pcap_cnt":1321,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62268,"proto":"UDP","dns":{"type":"answer","id":34119,"rcode":"NXDOMAIN","rrname":"xukuqyruwoq.eu"}}
{"timestamp":"2017-12-12T18:33:14.503168+0100","flow_id":739881447499879,"pcap_cnt":1759,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62582,"proto":"UDP","dns":{"type":"answer","id":2114,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.750613+0100","flow_id":1819874593831294,"pcap_cnt":1321,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62268,"proto":"UDP","dns":{"type":"answer","id":34119,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.610175+0100","flow_id":233464000907183,"pcap_cnt":1507,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51460,"proto":"UDP","dns":{"type":"answer","id":13986,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.471770+0100","flow_id":517264702714586,"pcap_cnt":2016,"event_type":"dns","src_ip":"192.168.1.100","src_port":51275,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":15356,"rrname":"cicavemejih.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.596515+0100","flow_id":1524730885839395,"pcap_cnt":1235,"event_type":"dns","src_ip":"192.168.1.100","src_port":51493,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43609,"rrname":"kefypadofiw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.296410+0100","flow_id":1303896552951076,"pcap_cnt":2418,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62882,"proto":"UDP","dns":{"type":"answer","id":39847,"rcode":"NXDOMAIN","rrname":"jefamyjejat.eu"}}
{"timestamp":"2017-12-12T18:33:11.634593+0100","flow_id":2063188788489953,"pcap_cnt":1521,"event_type":"dns","src_ip":"192.168.1.100","src_port":55177,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":39262,"rrname":"tujizipipiz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.623109+0100","flow_id":446848713392645,"pcap_cnt":1248,"event_type":"dns","src_ip":"192.168.1.100","src_port":57872,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41878,"rrname":"qexukoqodar.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.773917+0100","flow_id":1310628913620039,"pcap_cnt":1330,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60745,"proto":"UDP","dns":{"type":"answer","id":13545,"rcode":"NXDOMAIN","rrname":"kezigojohuf.eu"}}
{"timestamp":"2017-12-12T18:33:16.498865+0100","flow_id":1163262143798449,"pcap_cnt":2034,"event_type":"dns","src_ip":"192.168.1.100","src_port":59539,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25861,"rrname":"dikoniwudim.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.773917+0100","flow_id":1310628913620039,"pcap_cnt":1330,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60745,"proto":"UDP","dns":{"type":"answer","id":13545,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.705062+0100","flow_id":588191792166133,"pcap_cnt":1295,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55712,"proto":"UDP","dns":{"type":"answer","id":52160,"rcode":"NXDOMAIN","rrname":"dirugihofug.eu"}}
{"timestamp":"2017-12-12T18:33:10.468091+0100","flow_id":74537325962363,"pcap_cnt":1380,"event_type":"dns","src_ip":"192.168.1.100","src_port":60427,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35112,"rrname":"tuwaguguwux.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.499134+0100","flow_id":1163262143798449,"pcap_cnt":2035,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59539,"proto":"UDP","dns":{"type":"answer","id":25861,"rcode":"NXDOMAIN","rrname":"dikoniwudim.eu"}}
{"timestamp":"2017-12-12T18:33:10.578762+0100","flow_id":324783595508938,"pcap_cnt":1451,"event_type":"dns","src_ip":"192.168.1.100","src_port":55822,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":52067,"rrname":"purupoqogob.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:10.534590+0100","flow_id":74537325962363,"pcap_cnt":1417,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60427,"proto":"UDP","dns":{"type":"answer","id":35112,"rcode":"NXDOMAIN","rrname":"tuwaguguwux.eu"}}
{"timestamp":"2017-12-12T18:33:15.444531+0100","flow_id":388222410166133,"pcap_cnt":1857,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52451,"proto":"UDP","dns":{"type":"answer","id":9890,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:13.609664+0100","flow_id":865897935371582,"pcap_cnt":1704,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59521,"proto":"UDP","dns":{"type":"answer","id":62240,"rcode":"NXDOMAIN","rrname":"vowokafopyv.eu"}}
{"timestamp":"2017-12-12T18:33:10.534590+0100","flow_id":74537325962363,"pcap_cnt":1417,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60427,"proto":"UDP","dns":{"type":"answer","id":35112,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.475638+0100","flow_id":1693810863522294,"pcap_cnt":1386,"event_type":"dns","src_ip":"192.168.1.100","src_port":54827,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":3605,"rrname":"foxalihynut.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.872319+0100","flow_id":937338274074220,"pcap_cnt":2199,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49677,"proto":"UDP","dns":{"type":"answer","id":12813,"rcode":"NXDOMAIN","rrname":"nofotycywos.eu"}}
{"timestamp":"2017-12-12T18:33:16.588365+0100","flow_id":743514989984070,"pcap_cnt":2079,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58647,"proto":"UDP","dns":{"type":"answer","id":32717,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":559}}
{"timestamp":"2017-12-12T18:33:10.573300+0100","flow_id":462682110476148,"pcap_cnt":1449,"event_type":"dns","src_ip":"192.168.1.100","src_port":54243,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13124,"rrname":"maxifakofyk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.872319+0100","flow_id":937338274074220,"pcap_cnt":2199,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49677,"proto":"UDP","dns":{"type":"answer","id":12813,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:06.660082+0100","flow_id":33013581893535,"pcap_cnt":1062,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60323,"proto":"UDP","dns":{"type":"answer","id":35303,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.517086+0100","flow_id":704851693985851,"pcap_cnt":1409,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54917,"proto":"UDP","dns":{"type":"answer","id":17288,"rcode":"NXDOMAIN","rrname":"qedunygajux.eu"}}
{"timestamp":"2017-12-12T18:33:16.660289+0100","flow_id":324223102620481,"pcap_cnt":2104,"event_type":"dns","src_ip":"192.168.1.100","src_port":52002,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18818,"rrname":"jejedudupuc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:10.385726+0100","flow_id":2058348360295102,"pcap_cnt":1350,"event_type":"dns","src_ip":"192.168.1.100","src_port":63483,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":16526,"rrname":"lyvufixyvet.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.690086+0100","flow_id":617887196498428,"pcap_cnt":1962,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53739,"proto":"UDP","dns":{"type":"answer","id":57298,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.588312+0100","flow_id":18376333523480,"pcap_cnt":1233,"event_type":"dns","src_ip":"192.168.1.100","src_port":57333,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4069,"rrname":"citykimipat.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.448373+0100","flow_id":1705022875837745,"pcap_cnt":1624,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62945,"proto":"UDP","dns":{"type":"answer","id":60620,"rcode":"NXDOMAIN","rrname":"nojuwakofed.eu"}}
{"timestamp":"2017-12-12T18:33:16.660497+0100","flow_id":324223102620481,"pcap_cnt":2105,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52002,"proto":"UDP","dns":{"type":"answer","id":18818,"rcode":"NXDOMAIN","rrname":"jejedudupuc.eu"}}
{"timestamp":"2017-12-12T18:33:08.654932+0100","flow_id":18376333523480,"pcap_cnt":1266,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57333,"proto":"UDP","dns":{"type":"answer","id":4069,"rcode":"NXDOMAIN","rrname":"citykimipat.eu"}}
{"timestamp":"2017-12-12T18:33:16.660497+0100","flow_id":324223102620481,"pcap_cnt":2105,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52002,"proto":"UDP","dns":{"type":"answer","id":18818,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":560}}
{"timestamp":"2017-12-12T18:33:08.654932+0100","flow_id":18376333523480,"pcap_cnt":1266,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57333,"proto":"UDP","dns":{"type":"answer","id":4069,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.048306+0100","flow_id":1445763617766324,"pcap_cnt":2297,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59864,"proto":"UDP","dns":{"type":"answer","id":51604,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:16.494286+0100","flow_id":2209866216899105,"pcap_cnt":2026,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49303,"proto":"UDP","dns":{"type":"answer","id":36599,"rcode":"NXDOMAIN","rrname":"vojajofyced.eu"}}
{"timestamp":"2017-12-12T18:33:16.559494+0100","flow_id":1450198171438373,"pcap_cnt":2067,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54971,"proto":"UDP","dns":{"type":"answer","id":16030,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.494286+0100","flow_id":2209866216899105,"pcap_cnt":2026,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49303,"proto":"UDP","dns":{"type":"answer","id":36599,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.705302+0100","flow_id":12784286286614,"pcap_cnt":1552,"event_type":"dns","src_ip":"192.168.1.100","src_port":58827,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34901,"rrname":"tucebygodym.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.578421+0100","flow_id":1367715471625496,"pcap_cnt":1493,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58405,"proto":"UDP","dns":{"type":"answer","id":58753,"rcode":"NXDOMAIN","rrname":"direwyzexem.eu"}}
{"timestamp":"2017-12-12T18:33:16.842544+0100","flow_id":566396981140272,"pcap_cnt":2164,"event_type":"dns","src_ip":"192.168.1.100","src_port":57619,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59396,"rrname":"vopepukaxej.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.723942+0100","flow_id":2142435230354406,"pcap_cnt":2126,"event_type":"dns","src_ip":"192.168.1.100","src_port":62318,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":303,"rrname":"vocumucokaj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.135904+0100","flow_id":597404497548000,"pcap_cnt":2344,"event_type":"dns","src_ip":"192.168.1.100","src_port":53628,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":3699,"rrname":"nomojatudyn.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.533613+0100","flow_id":994051169526893,"pcap_cnt":1650,"event_type":"dns","src_ip":"192.168.1.100","src_port":63627,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27046,"rrname":"ciqycicunaz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.212728+0100","flow_id":2237126374407928,"pcap_cnt":2386,"event_type":"dns","src_ip":"192.168.1.100","src_port":54163,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":58020,"rrname":"lykolexusol.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:14.387990+0100","flow_id":2085791053986024,"pcap_cnt":1733,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64457,"proto":"UDP","dns":{"type":"answer","id":27843,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.296410+0100","flow_id":1303896552951076,"pcap_cnt":2418,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62882,"proto":"UDP","dns":{"type":"answer","id":39847,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.731198+0100","flow_id":2093962228934718,"pcap_cnt":1308,"event_type":"dns","src_ip":"192.168.1.100","src_port":62363,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37361,"rrname":"cidizakisuv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.087558+0100","flow_id":1135931119457585,"pcap_cnt":2311,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53002,"proto":"UDP","dns":{"type":"answer","id":31142,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:17.550514+0100","flow_id":1860438415206002,"pcap_cnt":2566,"event_type":"dns","src_ip":"192.168.1.100","src_port":57925,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":12013,"rrname":"nozomotokyt.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.638104+0100","flow_id":2618098649367,"pcap_cnt":1523,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51239,"proto":"UDP","dns":{"type":"answer","id":64541,"rcode":"NXDOMAIN","rrname":"pujejavakav.eu"}}
{"timestamp":"2017-12-12T18:33:16.724238+0100","flow_id":2142435230354406,"pcap_cnt":2127,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62318,"proto":"UDP","dns":{"type":"answer","id":303,"rcode":"NXDOMAIN","rrname":"vocumucokaj.eu"}}
{"timestamp":"2017-12-12T18:33:08.663382+0100","flow_id":1524730885839395,"pcap_cnt":1271,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51493,"proto":"UDP","dns":{"type":"answer","id":43609,"rcode":"NXDOMAIN","rrname":"kefypadofiw.eu"}}
{"timestamp":"2017-12-12T18:33:13.541516+0100","flow_id":2113938122163020,"pcap_cnt":1656,"event_type":"dns","src_ip":"192.168.1.100","src_port":57101,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64188,"rrname":"pupymavyvow.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.663382+0100","flow_id":1524730885839395,"pcap_cnt":1271,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51493,"proto":"UDP","dns":{"type":"answer","id":43609,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.987821+0100","flow_id":312433417392561,"pcap_cnt":2269,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61803,"proto":"UDP","dns":{"type":"answer","id":2858,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:16.499134+0100","flow_id":1163262143798449,"pcap_cnt":2035,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59539,"proto":"UDP","dns":{"type":"answer","id":25861,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":559}}
{"timestamp":"2017-12-12T18:33:13.601092+0100","flow_id":1599005903121310,"pcap_cnt":1699,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50772,"proto":"UDP","dns":{"type":"answer","id":39937,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.478897+0100","flow_id":324783595508938,"pcap_cnt":1473,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55822,"proto":"UDP","dns":{"type":"answer","id":52067,"rcode":"NXDOMAIN","rrname":"purupoqogob.eu"}}
{"timestamp":"2017-12-12T18:33:15.673930+0100","flow_id":4870809274506,"pcap_cnt":1948,"event_type":"dns","src_ip":"192.168.1.100","src_port":65500,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36448,"rrname":"lyvesiduneb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.478897+0100","flow_id":324783595508938,"pcap_cnt":1473,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55822,"proto":"UDP","dns":{"type":"answer","id":52067,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.761178+0100","flow_id":1391866072765846,"pcap_cnt":1586,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58389,"proto":"UDP","dns":{"type":"answer","id":27891,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.675248+0100","flow_id":446848713392645,"pcap_cnt":1280,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57872,"proto":"UDP","dns":{"type":"answer","id":41878,"rcode":"NXDOMAIN","rrname":"qexukoqodar.eu"}}
{"timestamp":"2017-12-12T18:33:13.604354+0100","flow_id":117356002635129,"pcap_cnt":1700,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62293,"proto":"UDP","dns":{"type":"answer","id":59897,"rcode":"NXDOMAIN","rrname":"cituvafumyd.eu"}}
{"timestamp":"2017-12-12T18:33:08.675248+0100","flow_id":446848713392645,"pcap_cnt":1280,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57872,"proto":"UDP","dns":{"type":"answer","id":41878,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:13.604354+0100","flow_id":117356002635129,"pcap_cnt":1700,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62293,"proto":"UDP","dns":{"type":"answer","id":59897,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:14.381171+0100","flow_id":994051169526893,"pcap_cnt":1729,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63627,"proto":"UDP","dns":{"type":"answer","id":27046,"rcode":"NXDOMAIN","rrname":"ciqycicunaz.eu"}}
{"timestamp":"2017-12-12T18:33:12.556167+0100","flow_id":487706737500954,"pcap_cnt":1592,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55382,"proto":"UDP","dns":{"type":"answer","id":59844,"rcode":"NXDOMAIN","rrname":"jepikijexyg.eu"}}
{"timestamp":"2017-12-12T18:33:14.381171+0100","flow_id":994051169526893,"pcap_cnt":1729,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63627,"proto":"UDP","dns":{"type":"answer","id":27046,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.517086+0100","flow_id":704851693985851,"pcap_cnt":1409,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54917,"proto":"UDP","dns":{"type":"answer","id":17288,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.430468+0100","flow_id":273555373068676,"pcap_cnt":1363,"event_type":"dns","src_ip":"192.168.1.100","src_port":53510,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19400,"rrname":"xubateditid.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.474211+0100","flow_id":462682110476148,"pcap_cnt":1472,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54243,"proto":"UDP","dns":{"type":"answer","id":13124,"rcode":"NXDOMAIN","rrname":"maxifakofyk.eu"}}
{"timestamp":"2017-12-12T18:33:10.542965+0100","flow_id":1693810863522294,"pcap_cnt":1425,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54827,"proto":"UDP","dns":{"type":"answer","id":3605,"rcode":"NXDOMAIN","rrname":"foxalihynut.eu"}}
{"timestamp":"2017-12-12T18:33:15.729714+0100","flow_id":1646881903676443,"pcap_cnt":1976,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51484,"proto":"UDP","dns":{"type":"answer","id":46818,"rcode":"NXDOMAIN","rrname":"vofogucyxoz.eu"}}
{"timestamp":"2017-12-12T18:33:11.474211+0100","flow_id":462682110476148,"pcap_cnt":1472,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54243,"proto":"UDP","dns":{"type":"answer","id":13124,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.729714+0100","flow_id":1646881903676443,"pcap_cnt":1976,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51484,"proto":"UDP","dns":{"type":"answer","id":46818,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.660610+0100","flow_id":906440278823709,"pcap_cnt":1269,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61831,"proto":"UDP","dns":{"type":"answer","id":55954,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.634973+0100","flow_id":816009742954589,"pcap_cnt":2092,"event_type":"dns","src_ip":"192.168.1.100","src_port":55354,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23411,"rrname":"divywysigud.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.117558+0100","flow_id":468566216329721,"pcap_cnt":3039,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51052,"proto":"UDP","dns":{"type":"answer","id":9444,"rcode":"NXDOMAIN","rrname":"cidaqyfynos.eu"}}
{"timestamp":"2017-12-12T18:33:10.462350+0100","flow_id":1401065892613646,"pcap_cnt":1377,"event_type":"dns","src_ip":"192.168.1.100","src_port":49646,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14279,"rrname":"gahadyburaq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.868433+0100","flow_id":571596039012433,"pcap_cnt":2194,"event_type":"dns","src_ip":"192.168.1.100","src_port":53272,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":52051,"rrname":"vojugycavov.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.578421+0100","flow_id":1367715471625496,"pcap_cnt":1493,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58405,"proto":"UDP","dns":{"type":"answer","id":58753,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.523372+0100","flow_id":221461714762860,"pcap_cnt":1412,"event_type":"dns","src_ip":"192.168.1.100","src_port":54290,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34620,"rrname":"nozejimuqag.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.735636+0100","flow_id":1557495044319468,"pcap_cnt":1980,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52160,"proto":"UDP","dns":{"type":"answer","id":548,"rcode":"NXDOMAIN","rrname":"digijusekyg.eu"}}
{"timestamp":"2017-12-12T18:33:11.535580+0100","flow_id":94311355460636,"pcap_cnt":1480,"event_type":"dns","src_ip":"192.168.1.100","src_port":55084,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63409,"rrname":"jecaduxakeh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.868682+0100","flow_id":571596039012433,"pcap_cnt":2195,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53272,"proto":"UDP","dns":{"type":"answer","id":52051,"rcode":"NXDOMAIN","rrname":"vojugycavov.eu"}}
{"timestamp":"2017-12-12T18:33:11.605262+0100","flow_id":6571616072158,"pcap_cnt":1502,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53454,"proto":"UDP","dns":{"type":"answer","id":11268,"rcode":"NXDOMAIN","rrname":"citapytakic.eu"}}
{"timestamp":"2017-12-12T18:33:16.868682+0100","flow_id":571596039012433,"pcap_cnt":2195,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53272,"proto":"UDP","dns":{"type":"answer","id":52051,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:11.587152+0100","flow_id":94311355460636,"pcap_cnt":1496,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55084,"proto":"UDP","dns":{"type":"answer","id":63409,"rcode":"NXDOMAIN","rrname":"jecaduxakeh.eu"}}
{"timestamp":"2017-12-12T18:33:11.605262+0100","flow_id":6571616072158,"pcap_cnt":1502,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53454,"proto":"UDP","dns":{"type":"answer","id":11268,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.775656+0100","flow_id":2093962228934718,"pcap_cnt":1331,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62363,"proto":"UDP","dns":{"type":"answer","id":37361,"rcode":"NXDOMAIN","rrname":"cidizakisuv.eu"}}
{"timestamp":"2017-12-12T18:33:11.587152+0100","flow_id":94311355460636,"pcap_cnt":1496,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55084,"proto":"UDP","dns":{"type":"answer","id":63409,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:08.775656+0100","flow_id":2093962228934718,"pcap_cnt":1331,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62363,"proto":"UDP","dns":{"type":"answer","id":37361,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.550774+0100","flow_id":1860438415206002,"pcap_cnt":2567,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57925,"proto":"UDP","dns":{"type":"answer","id":12013,"rcode":"NXDOMAIN","rrname":"nozomotokyt.eu"}}
{"timestamp":"2017-12-12T18:33:11.619875+0100","flow_id":1520566915265891,"pcap_cnt":1514,"event_type":"dns","src_ip":"192.168.1.100","src_port":49675,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45443,"rrname":"kemipynunap.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.550774+0100","flow_id":1860438415206002,"pcap_cnt":2567,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57925,"proto":"UDP","dns":{"type":"answer","id":12013,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:16.724238+0100","flow_id":2142435230354406,"pcap_cnt":2127,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62318,"proto":"UDP","dns":{"type":"answer","id":303,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":559}}
{"timestamp":"2017-12-12T18:33:11.665390+0100","flow_id":1520566915265891,"pcap_cnt":1533,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49675,"proto":"UDP","dns":{"type":"answer","id":45443,"rcode":"NXDOMAIN","rrname":"kemipynunap.eu"}}
{"timestamp":"2017-12-12T18:33:13.609664+0100","flow_id":865897935371582,"pcap_cnt":1704,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59521,"proto":"UDP","dns":{"type":"answer","id":62240,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.665390+0100","flow_id":1520566915265891,"pcap_cnt":1533,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49675,"proto":"UDP","dns":{"type":"answer","id":45443,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.023125+0100","flow_id":1294245761473109,"pcap_cnt":2284,"event_type":"dns","src_ip":"192.168.1.100","src_port":64276,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38945,"rrname":"xuquranifir.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.077596+0100","flow_id":336352090337052,"pcap_cnt":2302,"event_type":"dns","src_ip":"192.168.1.100","src_port":53667,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62595,"rrname":"nojepofyren.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.569171+0100","flow_id":1858917996801623,"pcap_cnt":2599,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51902,"proto":"UDP","dns":{"type":"answer","id":22991,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:14.559390+0100","flow_id":1447071435098398,"pcap_cnt":1796,"event_type":"dns","src_ip":"192.168.1.100","src_port":55342,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28561,"rrname":"rytonovejof.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.588724+0100","flow_id":1509558914120628,"pcap_cnt":1497,"event_type":"dns","src_ip":"192.168.1.100","src_port":59011,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44727,"rrname":"ryciqavuqav.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.077853+0100","flow_id":336352090337052,"pcap_cnt":2303,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53667,"proto":"UDP","dns":{"type":"answer","id":62595,"rcode":"NXDOMAIN","rrname":"nojepofyren.eu"}}
{"timestamp":"2017-12-12T18:33:14.606228+0100","flow_id":870411946049556,"pcap_cnt":1821,"event_type":"dns","src_ip":"192.168.1.100","src_port":55911,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":12241,"rrname":"jejigenitos.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.002718+0100","flow_id":1406039465396894,"pcap_cnt":2972,"event_type":"dns","src_ip":"192.168.1.100","src_port":57745,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25617,"rrname":"galerywogej.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.077853+0100","flow_id":336352090337052,"pcap_cnt":2303,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53667,"proto":"UDP","dns":{"type":"answer","id":62595,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:17.079722+0100","flow_id":668249983104874,"pcap_cnt":2304,"event_type":"dns","src_ip":"192.168.1.100","src_port":63901,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":24457,"rrname":"qegovyqaxuk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.858647+0100","flow_id":1013546026277134,"pcap_cnt":2185,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64367,"proto":"UDP","dns":{"type":"answer","id":42710,"rcode":"NXDOMAIN","rrname":"kemygexaxab.eu"}}
{"timestamp":"2017-12-12T18:33:17.091143+0100","flow_id":438434873041927,"pcap_cnt":2316,"event_type":"dns","src_ip":"192.168.1.100","src_port":55398,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2037,"rrname":"dimevuwevuj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.858647+0100","flow_id":1013546026277134,"pcap_cnt":2185,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64367,"proto":"UDP","dns":{"type":"answer","id":42710,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:15.148785+0100","flow_id":870411946049556,"pcap_cnt":1843,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55911,"proto":"UDP","dns":{"type":"answer","id":12241,"rcode":"NXDOMAIN","rrname":"jejigenitos.eu"}}
{"timestamp":"2017-12-12T18:33:20.002985+0100","flow_id":1406039465396894,"pcap_cnt":2973,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57745,"proto":"UDP","dns":{"type":"answer","id":25617,"rcode":"NXDOMAIN","rrname":"galerywogej.eu"}}
{"timestamp":"2017-12-12T18:33:14.390464+0100","flow_id":2113938122163020,"pcap_cnt":1735,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57101,"proto":"UDP","dns":{"type":"answer","id":64188,"rcode":"NXDOMAIN","rrname":"pupymavyvow.eu"}}
{"timestamp":"2017-12-12T18:33:17.150725+0100","flow_id":1036743144339256,"pcap_cnt":2352,"event_type":"dns","src_ip":"192.168.1.100","src_port":49168,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42732,"rrname":"xutityjigac.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:20.002985+0100","flow_id":1406039465396894,"pcap_cnt":2973,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57745,"proto":"UDP","dns":{"type":"answer","id":25617,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:14.390464+0100","flow_id":2113938122163020,"pcap_cnt":1735,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57101,"proto":"UDP","dns":{"type":"answer","id":64188,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:13.448373+0100","flow_id":1705022875837745,"pcap_cnt":1624,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62945,"proto":"UDP","dns":{"type":"answer","id":60620,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.696970+0100","flow_id":1875024124043176,"pcap_cnt":1967,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49846,"proto":"UDP","dns":{"type":"answer","id":28317,"rcode":"NXDOMAIN","rrname":"gaqaneziwoc.eu"}}
{"timestamp":"2017-12-12T18:33:17.150963+0100","flow_id":1036743144339256,"pcap_cnt":2353,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49168,"proto":"UDP","dns":{"type":"answer","id":42732,"rcode":"NXDOMAIN","rrname":"xutityjigac.eu"}}
{"timestamp":"2017-12-12T18:33:16.635226+0100","flow_id":816009742954589,"pcap_cnt":2093,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55354,"proto":"UDP","dns":{"type":"answer","id":23411,"rcode":"NXDOMAIN","rrname":"divywysigud.eu"}}
{"timestamp":"2017-12-12T18:33:14.566734+0100","flow_id":1016453719041486,"pcap_cnt":1803,"event_type":"dns","src_ip":"192.168.1.100","src_port":57041,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38430,"rrname":"tuwezovyvov.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.013031+0100","flow_id":1548202882904807,"pcap_cnt":2976,"event_type":"dns","src_ip":"192.168.1.100","src_port":58232,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":15305,"rrname":"purumulazux.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:10.482403+0100","flow_id":1384577513184355,"pcap_cnt":1391,"event_type":"dns","src_ip":"192.168.1.100","src_port":64739,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44856,"rrname":"xuqesunipam.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:14.441521+0100","flow_id":952967658785402,"pcap_cnt":1746,"event_type":"dns","src_ip":"192.168.1.100","src_port":49321,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49489,"rrname":"qeqeqalitek.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:17.136149+0100","flow_id":597404497548000,"pcap_cnt":2345,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53628,"proto":"UDP","dns":{"type":"answer","id":3699,"rcode":"NXDOMAIN","rrname":"nomojatudyn.eu"}}
{"timestamp":"2017-12-12T18:33:10.529162+0100","flow_id":1401065892613646,"pcap_cnt":1414,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49646,"proto":"UDP","dns":{"type":"answer","id":14279,"rcode":"NXDOMAIN","rrname":"gahadyburaq.eu"}}
{"timestamp":"2017-12-12T18:33:17.136149+0100","flow_id":597404497548000,"pcap_cnt":2345,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53628,"proto":"UDP","dns":{"type":"answer","id":3699,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:17.213005+0100","flow_id":2237126374407928,"pcap_cnt":2387,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54163,"proto":"UDP","dns":{"type":"answer","id":58020,"rcode":"NXDOMAIN","rrname":"lykolexusol.eu"}}
{"timestamp":"2017-12-12T18:33:15.550145+0100","flow_id":1302953807537409,"pcap_cnt":1883,"event_type":"dns","src_ip":"192.168.1.100","src_port":60372,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44720,"rrname":"jecekorosuk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:09.583618+0100","flow_id":110374532956188,"pcap_cnt":1339,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63818,"proto":"UDP","dns":{"type":"answer","id":43197,"rcode":"NXDOMAIN","rrname":"pujibylityp.eu"}}
{"timestamp":"2017-12-12T18:33:17.213005+0100","flow_id":2237126374407928,"pcap_cnt":2387,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54163,"proto":"UDP","dns":{"type":"answer","id":58020,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:11.638104+0100","flow_id":2618098649367,"pcap_cnt":1523,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51239,"proto":"UDP","dns":{"type":"answer","id":64541,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.230252+0100","flow_id":679049678390124,"pcap_cnt":2390,"event_type":"dns","src_ip":"192.168.1.100","src_port":55179,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48537,"rrname":"tujajepifyv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.705062+0100","flow_id":588191792166133,"pcap_cnt":1295,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55712,"proto":"UDP","dns":{"type":"answer","id":52160,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.621066+0100","flow_id":245839949560330,"pcap_cnt":2612,"event_type":"dns","src_ip":"192.168.1.100","src_port":62351,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49802,"rrname":"pupucuvymup.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.618002+0100","flow_id":1732358195080722,"pcap_cnt":1513,"event_type":"dns","src_ip":"192.168.1.100","src_port":59887,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29171,"rrname":"gatecebofas.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.592550+0100","flow_id":1302953807537409,"pcap_cnt":1896,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60372,"proto":"UDP","dns":{"type":"answer","id":44720,"rcode":"NXDOMAIN","rrname":"jecekorosuk.eu"}}
{"timestamp":"2017-12-12T18:33:08.738375+0100","flow_id":21891764221906,"pcap_cnt":1315,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60229,"proto":"UDP","dns":{"type":"answer","id":18478,"rcode":"NXDOMAIN","rrname":"kevajerajoq.eu"}}
{"timestamp":"2017-12-12T18:33:15.549133+0100","flow_id":819093529400753,"pcap_cnt":1882,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49302,"proto":"UDP","dns":{"type":"answer","id":5184,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.557006+0100","flow_id":907728769548238,"pcap_cnt":2063,"event_type":"dns","src_ip":"192.168.1.100","src_port":59258,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27766,"rrname":"keraborigin.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.142654+0100","flow_id":1206121622482238,"pcap_cnt":2350,"event_type":"dns","src_ip":"192.168.1.100","src_port":62825,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49416,"rrname":"mavasatokyf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.460578+0100","flow_id":2141898359506722,"pcap_cnt":2522,"event_type":"dns","src_ip":"192.168.1.100","src_port":61581,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":57726,"rrname":"tuwobiloloh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:14.384106+0100","flow_id":1550346071124567,"pcap_cnt":1730,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60462,"proto":"UDP","dns":{"type":"answer","id":45884,"rcode":"NXDOMAIN","rrname":"qekuxovuqal.eu"}}
{"timestamp":"2017-12-12T18:33:16.837002+0100","flow_id":807387596113290,"pcap_cnt":2158,"event_type":"dns","src_ip":"192.168.1.100","src_port":56281,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50523,"rrname":"qetuluvolos.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.557276+0100","flow_id":907728769548238,"pcap_cnt":2065,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59258,"proto":"UDP","dns":{"type":"answer","id":27766,"rcode":"NXDOMAIN","rrname":"keraborigin.eu"}}
{"timestamp":"2017-12-12T18:33:10.472678+0100","flow_id":630563792107110,"pcap_cnt":1384,"event_type":"dns","src_ip":"192.168.1.100","src_port":55492,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36660,"rrname":"divinuheluz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.460856+0100","flow_id":2141898359506722,"pcap_cnt":2523,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61581,"proto":"UDP","dns":{"type":"answer","id":57726,"rcode":"NXDOMAIN","rrname":"tuwobiloloh.eu"}}
{"timestamp":"2017-12-12T18:33:17.091416+0100","flow_id":438434873041927,"pcap_cnt":2317,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55398,"proto":"UDP","dns":{"type":"answer","id":2037,"rcode":"NXDOMAIN","rrname":"dimevuwevuj.eu"}}
{"timestamp":"2017-12-12T18:33:17.084250+0100","flow_id":678658836351258,"pcap_cnt":2306,"event_type":"dns","src_ip":"192.168.1.100","src_port":51880,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5816,"rrname":"magymofigeg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.460856+0100","flow_id":2141898359506722,"pcap_cnt":2523,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61581,"proto":"UDP","dns":{"type":"answer","id":57726,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:16.837264+0100","flow_id":807387596113290,"pcap_cnt":2159,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56281,"proto":"UDP","dns":{"type":"answer","id":50523,"rcode":"NXDOMAIN","rrname":"qetuluvolos.eu"}}
{"timestamp":"2017-12-12T18:33:15.148785+0100","flow_id":870411946049556,"pcap_cnt":1843,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55911,"proto":"UDP","dns":{"type":"answer","id":12241,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.542965+0100","flow_id":1693810863522294,"pcap_cnt":1425,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54827,"proto":"UDP","dns":{"type":"answer","id":3605,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:20.117558+0100","flow_id":468566216329721,"pcap_cnt":3039,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51052,"proto":"UDP","dns":{"type":"answer","id":9444,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:15.696970+0100","flow_id":1875024124043176,"pcap_cnt":1967,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49846,"proto":"UDP","dns":{"type":"answer","id":28317,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.615928+0100","flow_id":1862210089215480,"pcap_cnt":2608,"event_type":"dns","src_ip":"192.168.1.100","src_port":60989,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27939,"rrname":"tujurogacag.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.635226+0100","flow_id":816009742954589,"pcap_cnt":2093,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55354,"proto":"UDP","dns":{"type":"answer","id":23411,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":559}}
{"timestamp":"2017-12-12T18:33:11.691999+0100","flow_id":402275542994719,"pcap_cnt":1541,"event_type":"dns","src_ip":"192.168.1.100","src_port":50241,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30218,"rrname":"lyxonadituw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.540252+0100","flow_id":1983989591653980,"pcap_cnt":1655,"event_type":"dns","src_ip":"192.168.1.100","src_port":64188,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31457,"rrname":"novopicahal.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.092092+0100","flow_id":1345991527458748,"pcap_cnt":2318,"event_type":"dns","src_ip":"192.168.1.100","src_port":53347,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51266,"rrname":"fobykuwyruq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.735636+0100","flow_id":1557495044319468,"pcap_cnt":1980,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52160,"proto":"UDP","dns":{"type":"answer","id":548,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.728263+0100","flow_id":294493338929803,"pcap_cnt":1975,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49981,"proto":"UDP","dns":{"type":"answer","id":40364,"rcode":"NXDOMAIN","rrname":"rylupalyxad.eu"}}
{"timestamp":"2017-12-12T18:33:20.013300+0100","flow_id":1548202882904807,"pcap_cnt":2977,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58232,"proto":"UDP","dns":{"type":"answer","id":15305,"rcode":"NXDOMAIN","rrname":"purumulazux.eu"}}
{"timestamp":"2017-12-12T18:33:15.728263+0100","flow_id":294493338929803,"pcap_cnt":1975,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49981,"proto":"UDP","dns":{"type":"answer","id":40364,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.509958+0100","flow_id":1099926408579078,"pcap_cnt":2041,"event_type":"dns","src_ip":"192.168.1.100","src_port":53497,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9559,"rrname":"pumawuqahun.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.013300+0100","flow_id":1548202882904807,"pcap_cnt":2977,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58232,"proto":"UDP","dns":{"type":"answer","id":15305,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:10.529162+0100","flow_id":1401065892613646,"pcap_cnt":1414,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49646,"proto":"UDP","dns":{"type":"answer","id":14279,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.558386+0100","flow_id":1099926408579078,"pcap_cnt":2066,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53497,"proto":"UDP","dns":{"type":"answer","id":9559,"rcode":"NXDOMAIN","rrname":"pumawuqahun.eu"}}
{"timestamp":"2017-12-12T18:33:20.040636+0100","flow_id":1712304993377980,"pcap_cnt":2984,"event_type":"dns","src_ip":"192.168.1.100","src_port":60374,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9042,"rrname":"fobahizipux.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.411306+0100","flow_id":1447071435098398,"pcap_cnt":1852,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55342,"proto":"UDP","dns":{"type":"answer","id":28561,"rcode":"NXDOMAIN","rrname":"rytonovejof.eu"}}
{"timestamp":"2017-12-12T18:33:09.583618+0100","flow_id":110374532956188,"pcap_cnt":1339,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63818,"proto":"UDP","dns":{"type":"answer","id":43197,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.741817+0100","flow_id":4870809274506,"pcap_cnt":1983,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65500,"proto":"UDP","dns":{"type":"answer","id":36448,"rcode":"NXDOMAIN","rrname":"lyvesiduneb.eu"}}
{"timestamp":"2017-12-12T18:33:20.040915+0100","flow_id":1712304993377980,"pcap_cnt":2985,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60374,"proto":"UDP","dns":{"type":"answer","id":9042,"rcode":"NXDOMAIN","rrname":"fobahizipux.eu"}}
{"timestamp":"2017-12-12T18:33:17.230542+0100","flow_id":679049678390124,"pcap_cnt":2391,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55179,"proto":"UDP","dns":{"type":"answer","id":48537,"rcode":"NXDOMAIN","rrname":"tujajepifyv.eu"}}
{"timestamp":"2017-12-12T18:33:15.741817+0100","flow_id":4870809274506,"pcap_cnt":1983,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65500,"proto":"UDP","dns":{"type":"answer","id":36448,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:09.585251+0100","flow_id":62288079112266,"pcap_cnt":1340,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52506,"proto":"UDP","dns":{"type":"answer","id":36189,"rcode":"NXDOMAIN","rrname":"digalyzohyx.eu"}}
{"timestamp":"2017-12-12T18:33:15.592550+0100","flow_id":1302953807537409,"pcap_cnt":1896,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60372,"proto":"UDP","dns":{"type":"answer","id":44720,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.934397+0100","flow_id":782208350306813,"pcap_cnt":2240,"event_type":"dns","src_ip":"192.168.1.100","src_port":59716,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29183,"rrname":"puregivytoh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:08.738375+0100","flow_id":21891764221906,"pcap_cnt":1315,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60229,"proto":"UDP","dns":{"type":"answer","id":18478,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.934681+0100","flow_id":782208350306813,"pcap_cnt":2241,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59716,"proto":"UDP","dns":{"type":"answer","id":29183,"rcode":"NXDOMAIN","rrname":"puregivytoh.eu"}}
{"timestamp":"2017-12-12T18:33:11.666887+0100","flow_id":1732358195080722,"pcap_cnt":1534,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59887,"proto":"UDP","dns":{"type":"answer","id":29171,"rcode":"NXDOMAIN","rrname":"gatecebofas.eu"}}
{"timestamp":"2017-12-12T18:33:10.471841+0100","flow_id":832936208642849,"pcap_cnt":1383,"event_type":"dns","src_ip":"192.168.1.100","src_port":65511,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5470,"rrname":"pumytugofup.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.696980+0100","flow_id":177786192700052,"pcap_cnt":2116,"event_type":"dns","src_ip":"192.168.1.100","src_port":62632,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29383,"rrname":"voniqofolyt.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.619332+0100","flow_id":197274606610646,"pcap_cnt":1711,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54303,"proto":"UDP","dns":{"type":"answer","id":43585,"rcode":"NXDOMAIN","rrname":"ganepebeloj.eu"}}
{"timestamp":"2017-12-12T18:33:14.384106+0100","flow_id":1550346071124567,"pcap_cnt":1730,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60462,"proto":"UDP","dns":{"type":"answer","id":45884,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:13.619332+0100","flow_id":197274606610646,"pcap_cnt":1711,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54303,"proto":"UDP","dns":{"type":"answer","id":43585,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.697227+0100","flow_id":177786192700052,"pcap_cnt":2117,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62632,"proto":"UDP","dns":{"type":"answer","id":29383,"rcode":"NXDOMAIN","rrname":"voniqofolyt.eu"}}
{"timestamp":"2017-12-12T18:33:17.079984+0100","flow_id":668249983104874,"pcap_cnt":2305,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63901,"proto":"UDP","dns":{"type":"answer","id":24457,"rcode":"NXDOMAIN","rrname":"qegovyqaxuk.eu"}}
{"timestamp":"2017-12-12T18:33:16.697227+0100","flow_id":177786192700052,"pcap_cnt":2117,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62632,"proto":"UDP","dns":{"type":"answer","id":29383,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":559}}
{"timestamp":"2017-12-12T18:33:17.079984+0100","flow_id":668249983104874,"pcap_cnt":2305,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63901,"proto":"UDP","dns":{"type":"answer","id":24457,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:17.091416+0100","flow_id":438434873041927,"pcap_cnt":2317,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55398,"proto":"UDP","dns":{"type":"answer","id":2037,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:17.095655+0100","flow_id":1507108635637159,"pcap_cnt":2322,"event_type":"dns","src_ip":"192.168.1.100","src_port":61742,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34668,"rrname":"gaciduwifuh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.611971+0100","flow_id":673182752804981,"pcap_cnt":1706,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59602,"proto":"UDP","dns":{"type":"answer","id":911,"rcode":"NXDOMAIN","rrname":"ryhohovosar.eu"}}
{"timestamp":"2017-12-12T18:33:17.095921+0100","flow_id":1507108635637159,"pcap_cnt":2323,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61742,"proto":"UDP","dns":{"type":"answer","id":34668,"rcode":"NXDOMAIN","rrname":"gaciduwifuh.eu"}}
{"timestamp":"2017-12-12T18:33:13.611971+0100","flow_id":673182752804981,"pcap_cnt":1706,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59602,"proto":"UDP","dns":{"type":"answer","id":911,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.837264+0100","flow_id":807387596113290,"pcap_cnt":2159,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56281,"proto":"UDP","dns":{"type":"answer","id":50523,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:17.150963+0100","flow_id":1036743144339256,"pcap_cnt":2353,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49168,"proto":"UDP","dns":{"type":"answer","id":42732,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:13.622047+0100","flow_id":1456722226559012,"pcap_cnt":1712,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52104,"proto":"UDP","dns":{"type":"answer","id":62400,"rcode":"NXDOMAIN","rrname":"jecumenunoq.eu"}}
{"timestamp":"2017-12-12T18:33:11.757187+0100","flow_id":12784286286614,"pcap_cnt":1583,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58827,"proto":"UDP","dns":{"type":"answer","id":34901,"rcode":"NXDOMAIN","rrname":"tucebygodym.eu"}}
{"timestamp":"2017-12-12T18:33:11.729287+0100","flow_id":1275682912411847,"pcap_cnt":1572,"event_type":"dns","src_ip":"192.168.1.100","src_port":53650,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50527,"rrname":"xubuvojajyb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.449393+0100","flow_id":1068074931379057,"pcap_cnt":3184,"event_type":"dns","src_ip":"192.168.1.100","src_port":64256,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31625,"rrname":"rydurevohed.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.616208+0100","flow_id":1862210089215480,"pcap_cnt":2609,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60989,"proto":"UDP","dns":{"type":"answer","id":27939,"rcode":"NXDOMAIN","rrname":"tujurogacag.eu"}}
{"timestamp":"2017-12-12T18:33:11.758487+0100","flow_id":402275542994719,"pcap_cnt":1584,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50241,"proto":"UDP","dns":{"type":"answer","id":30218,"rcode":"NXDOMAIN","rrname":"lyxonadituw.eu"}}
{"timestamp":"2017-12-12T18:33:20.449709+0100","flow_id":1068074931379057,"pcap_cnt":3185,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64256,"proto":"UDP","dns":{"type":"answer","id":31625,"rcode":"NXDOMAIN","rrname":"rydurevohed.eu"}}
{"timestamp":"2017-12-12T18:33:11.758487+0100","flow_id":402275542994719,"pcap_cnt":1584,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50241,"proto":"UDP","dns":{"type":"answer","id":30218,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:20.449709+0100","flow_id":1068074931379057,"pcap_cnt":3185,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64256,"proto":"UDP","dns":{"type":"answer","id":31625,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:13.543577+0100","flow_id":1093608511488553,"pcap_cnt":1657,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49708,"proto":"UDP","dns":{"type":"answer","id":18168,"rcode":"NXDOMAIN","rrname":"qedakalyned.eu"}}
{"timestamp":"2017-12-12T18:33:20.782844+0100","flow_id":844341495001596,"pcap_cnt":3330,"event_type":"dns","src_ip":"192.168.1.100","src_port":63097,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":57261,"rrname":"keryxadalid.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.543577+0100","flow_id":1093608511488553,"pcap_cnt":1657,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49708,"proto":"UDP","dns":{"type":"answer","id":18168,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.752837+0100","flow_id":341600540327109,"pcap_cnt":2138,"event_type":"dns","src_ip":"192.168.1.100","src_port":61227,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64567,"rrname":"foqaqehacew.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.783136+0100","flow_id":844341495001596,"pcap_cnt":3331,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63097,"proto":"UDP","dns":{"type":"answer","id":57261,"rcode":"NXDOMAIN","rrname":"keryxadalid.eu"}}
{"timestamp":"2017-12-12T18:33:16.558386+0100","flow_id":1099926408579078,"pcap_cnt":2066,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53497,"proto":"UDP","dns":{"type":"answer","id":9559,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:20.783136+0100","flow_id":844341495001596,"pcap_cnt":3331,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63097,"proto":"UDP","dns":{"type":"answer","id":57261,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:13.546796+0100","flow_id":1623882353694700,"pcap_cnt":1660,"event_type":"dns","src_ip":"192.168.1.100","src_port":65506,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19595,"rrname":"lygofodagud.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.788642+0100","flow_id":2198355704809634,"pcap_cnt":3332,"event_type":"dns","src_ip":"192.168.1.100","src_port":56257,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62100,"rrname":"lymigadybiv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.753069+0100","flow_id":341600540327109,"pcap_cnt":2139,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61227,"proto":"UDP","dns":{"type":"answer","id":64567,"rcode":"NXDOMAIN","rrname":"foqaqehacew.eu"}}
{"timestamp":"2017-12-12T18:33:20.788963+0100","flow_id":2198355704809634,"pcap_cnt":3333,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56257,"proto":"UDP","dns":{"type":"answer","id":62100,"rcode":"NXDOMAIN","rrname":"lymigadybiv.eu"}}
{"timestamp":"2017-12-12T18:33:16.842804+0100","flow_id":566396981140272,"pcap_cnt":2165,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57619,"proto":"UDP","dns":{"type":"answer","id":59396,"rcode":"NXDOMAIN","rrname":"vopepukaxej.eu"}}
{"timestamp":"2017-12-12T18:33:13.597393+0100","flow_id":1623882353694700,"pcap_cnt":1697,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65506,"proto":"UDP","dns":{"type":"answer","id":19595,"rcode":"NXDOMAIN","rrname":"lygofodagud.eu"}}
{"timestamp":"2017-12-12T18:33:15.411306+0100","flow_id":1447071435098398,"pcap_cnt":1852,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55342,"proto":"UDP","dns":{"type":"answer","id":28561,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.701960+0100","flow_id":2063188788489953,"pcap_cnt":1548,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55177,"proto":"UDP","dns":{"type":"answer","id":39262,"rcode":"NXDOMAIN","rrname":"tujizipipiz.eu"}}
{"timestamp":"2017-12-12T18:33:20.040915+0100","flow_id":1712304993377980,"pcap_cnt":2985,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60374,"proto":"UDP","dns":{"type":"answer","id":9042,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:17.023380+0100","flow_id":1294245761473109,"pcap_cnt":2285,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64276,"proto":"UDP","dns":{"type":"answer","id":38945,"rcode":"NXDOMAIN","rrname":"xuquranifir.eu"}}
{"timestamp":"2017-12-12T18:33:17.230542+0100","flow_id":679049678390124,"pcap_cnt":2391,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55179,"proto":"UDP","dns":{"type":"answer","id":48537,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:17.621311+0100","flow_id":245839949560330,"pcap_cnt":2613,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62351,"proto":"UDP","dns":{"type":"answer","id":49802,"rcode":"NXDOMAIN","rrname":"pupucuvymup.eu"}}
{"timestamp":"2017-12-12T18:33:17.023380+0100","flow_id":1294245761473109,"pcap_cnt":2285,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64276,"proto":"UDP","dns":{"type":"answer","id":38945,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:20.208065+0100","flow_id":1159267824446657,"pcap_cnt":3070,"event_type":"dns","src_ip":"192.168.1.100","src_port":63381,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":56094,"rrname":"fodixohofiz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.621311+0100","flow_id":245839949560330,"pcap_cnt":2613,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62351,"proto":"UDP","dns":{"type":"answer","id":49802,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:16.934681+0100","flow_id":782208350306813,"pcap_cnt":2241,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59716,"proto":"UDP","dns":{"type":"answer","id":29183,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":560}}
{"timestamp":"2017-12-12T18:33:17.624550+0100","flow_id":1179308141676454,"pcap_cnt":2620,"event_type":"dns","src_ip":"192.168.1.100","src_port":49428,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47757,"rrname":"lykysonalut.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:12.556167+0100","flow_id":487706737500954,"pcap_cnt":1592,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55382,"proto":"UDP","dns":{"type":"answer","id":59844,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.096150+0100","flow_id":129115622122009,"pcap_cnt":2324,"event_type":"dns","src_ip":"192.168.1.100","src_port":52689,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4985,"rrname":"kejycirenuh.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:10.538578+0100","flow_id":832936208642849,"pcap_cnt":1421,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65511,"proto":"UDP","dns":{"type":"answer","id":5470,"rcode":"NXDOMAIN","rrname":"pumytugofup.eu"}}
{"timestamp":"2017-12-12T18:33:17.624773+0100","flow_id":1179308141676454,"pcap_cnt":2621,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49428,"proto":"UDP","dns":{"type":"answer","id":47757,"rcode":"NXDOMAIN","rrname":"lykysonalut.eu"}}
{"timestamp":"2017-12-12T18:33:14.597562+0100","flow_id":1797014632930874,"pcap_cnt":1816,"event_type":"dns","src_ip":"192.168.1.100","src_port":50512,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":393,"rrname":"jefudidiryl.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:14.569245+0100","flow_id":1372686896508829,"pcap_cnt":1805,"event_type":"dns","src_ip":"192.168.1.100","src_port":63287,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59634,"rrname":"foxanabelod.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:10.538578+0100","flow_id":832936208642849,"pcap_cnt":1421,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65511,"proto":"UDP","dns":{"type":"answer","id":5470,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.713755+0100","flow_id":711650627609627,"pcap_cnt":2120,"event_type":"dns","src_ip":"192.168.1.100","src_port":59953,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5817,"rrname":"maxyjofytyt.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:10.540226+0100","flow_id":630563792107110,"pcap_cnt":1423,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55492,"proto":"UDP","dns":{"type":"answer","id":36660,"rcode":"NXDOMAIN","rrname":"divinuheluz.eu"}}
{"timestamp":"2017-12-12T18:33:14.608415+0100","flow_id":659069490317471,"pcap_cnt":1823,"event_type":"dns","src_ip":"192.168.1.100","src_port":63602,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7346,"rrname":"vocoqafajyw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.084507+0100","flow_id":678658836351258,"pcap_cnt":2307,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51880,"proto":"UDP","dns":{"type":"answer","id":5816,"rcode":"NXDOMAIN","rrname":"magymofigeg.eu"}}
{"timestamp":"2017-12-12T18:33:16.714006+0100","flow_id":711650627609627,"pcap_cnt":2121,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59953,"proto":"UDP","dns":{"type":"answer","id":5817,"rcode":"NXDOMAIN","rrname":"maxyjofytyt.eu"}}
{"timestamp":"2017-12-12T18:33:17.095921+0100","flow_id":1507108635637159,"pcap_cnt":2323,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61742,"proto":"UDP","dns":{"type":"answer","id":34668,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:16.714006+0100","flow_id":711650627609627,"pcap_cnt":2121,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59953,"proto":"UDP","dns":{"type":"answer","id":5817,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:17.263122+0100","flow_id":262996196393938,"pcap_cnt":2404,"event_type":"dns","src_ip":"192.168.1.100","src_port":59129,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":15112,"rrname":"cidyrecavok.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.279710+0100","flow_id":1306636742116510,"pcap_cnt":2407,"event_type":"dns","src_ip":"192.168.1.100","src_port":56580,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60862,"rrname":"kevimudyqec.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.843819+0100","flow_id":1233935830671403,"pcap_cnt":2166,"event_type":"dns","src_ip":"192.168.1.100","src_port":64158,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":21640,"rrname":"norumikemem.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.109887+0100","flow_id":1016453719041486,"pcap_cnt":1836,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57041,"proto":"UDP","dns":{"type":"answer","id":38430,"rcode":"NXDOMAIN","rrname":"tuwezovyvov.eu"}}
{"timestamp":"2017-12-12T18:33:17.616208+0100","flow_id":1862210089215480,"pcap_cnt":2609,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60989,"proto":"UDP","dns":{"type":"answer","id":27939,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:15.109887+0100","flow_id":1016453719041486,"pcap_cnt":1836,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57041,"proto":"UDP","dns":{"type":"answer","id":38430,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.279993+0100","flow_id":1306636742116510,"pcap_cnt":2408,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56580,"proto":"UDP","dns":{"type":"answer","id":60862,"rcode":"NXDOMAIN","rrname":"kevimudyqec.eu"}}
{"timestamp":"2017-12-12T18:33:14.510511+0100","flow_id":952967658785402,"pcap_cnt":1766,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49321,"proto":"UDP","dns":{"type":"answer","id":49489,"rcode":"NXDOMAIN","rrname":"qeqeqalitek.eu"}}
{"timestamp":"2017-12-12T18:33:17.092350+0100","flow_id":1345991527458748,"pcap_cnt":2319,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53347,"proto":"UDP","dns":{"type":"answer","id":51266,"rcode":"NXDOMAIN","rrname":"fobykuwyruq.eu"}}
{"timestamp":"2017-12-12T18:33:17.279993+0100","flow_id":1306636742116510,"pcap_cnt":2408,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56580,"proto":"UDP","dns":{"type":"answer","id":60862,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:10.496961+0100","flow_id":273555373068676,"pcap_cnt":1396,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53510,"proto":"UDP","dns":{"type":"answer","id":19400,"rcode":"NXDOMAIN","rrname":"xubateditid.eu"}}
{"timestamp":"2017-12-12T18:33:14.510511+0100","flow_id":952967658785402,"pcap_cnt":1766,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49321,"proto":"UDP","dns":{"type":"answer","id":49489,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.569495+0100","flow_id":221461714762860,"pcap_cnt":1447,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54290,"proto":"UDP","dns":{"type":"answer","id":34620,"rcode":"NXDOMAIN","rrname":"nozejimuqag.eu"}}
{"timestamp":"2017-12-12T18:33:13.458473+0100","flow_id":143052792004329,"pcap_cnt":1627,"event_type":"dns","src_ip":"192.168.1.100","src_port":54779,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48288,"rrname":"foxusyzosex.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.730031+0100","flow_id":2002728534156207,"pcap_cnt":2128,"event_type":"dns","src_ip":"192.168.1.100","src_port":51692,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27162,"rrname":"ryhoqagoxyr.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:10.569495+0100","flow_id":221461714762860,"pcap_cnt":1447,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54290,"proto":"UDP","dns":{"type":"answer","id":34620,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.643285+0100","flow_id":1066303257039061,"pcap_cnt":1920,"event_type":"dns","src_ip":"192.168.1.100","src_port":54616,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18045,"rrname":"disugezejac.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.842804+0100","flow_id":566396981140272,"pcap_cnt":2165,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57619,"proto":"UDP","dns":{"type":"answer","id":59396,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:16.730248+0100","flow_id":2002728534156207,"pcap_cnt":2129,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51692,"proto":"UDP","dns":{"type":"answer","id":27162,"rcode":"NXDOMAIN","rrname":"ryhoqagoxyr.eu"}}
{"timestamp":"2017-12-12T18:33:13.597393+0100","flow_id":1623882353694700,"pcap_cnt":1697,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65506,"proto":"UDP","dns":{"type":"answer","id":19595,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.692548+0100","flow_id":1066303257039061,"pcap_cnt":1964,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54616,"proto":"UDP","dns":{"type":"answer","id":18045,"rcode":"NXDOMAIN","rrname":"disugezejac.eu"}}
{"timestamp":"2017-12-12T18:33:15.510668+0100","flow_id":840072297171660,"pcap_cnt":1871,"event_type":"dns","src_ip":"192.168.1.100","src_port":55028,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59243,"rrname":"ryhyruqeliz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.087832+0100","flow_id":2190358475527960,"pcap_cnt":2312,"event_type":"dns","src_ip":"192.168.1.100","src_port":62623,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35242,"rrname":"tupudyqusuj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.650846+0100","flow_id":1258732824292958,"pcap_cnt":1925,"event_type":"dns","src_ip":"192.168.1.100","src_port":49926,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":3042,"rrname":"lyxotyxubop.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.564030+0100","flow_id":840072297171660,"pcap_cnt":1887,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55028,"proto":"UDP","dns":{"type":"answer","id":59243,"rcode":"NXDOMAIN","rrname":"ryhyruqeliz.eu"}}
{"timestamp":"2017-12-12T18:33:17.406471+0100","flow_id":1280534078370759,"pcap_cnt":2498,"event_type":"dns","src_ip":"192.168.1.100","src_port":56114,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40603,"rrname":"masijemaxud.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.088129+0100","flow_id":2190358475527960,"pcap_cnt":2313,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62623,"proto":"UDP","dns":{"type":"answer","id":35242,"rcode":"NXDOMAIN","rrname":"tupudyqusuj.eu"}}
{"timestamp":"2017-12-12T18:33:20.208424+0100","flow_id":1159267824446657,"pcap_cnt":3071,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63381,"proto":"UDP","dns":{"type":"answer","id":56094,"rcode":"NXDOMAIN","rrname":"fodixohofiz.eu"}}
{"timestamp":"2017-12-12T18:33:11.666887+0100","flow_id":1732358195080722,"pcap_cnt":1534,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59887,"proto":"UDP","dns":{"type":"answer","id":29171,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.088129+0100","flow_id":2190358475527960,"pcap_cnt":2313,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62623,"proto":"UDP","dns":{"type":"answer","id":35242,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:20.208424+0100","flow_id":1159267824446657,"pcap_cnt":3071,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63381,"proto":"UDP","dns":{"type":"answer","id":56094,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:17.139279+0100","flow_id":1845592859679936,"pcap_cnt":2346,"event_type":"dns","src_ip":"192.168.1.100","src_port":52354,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63755,"rrname":"galupehudev.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:11.702181+0100","flow_id":2145912006096613,"pcap_cnt":1549,"event_type":"dns","src_ip":"192.168.1.100","src_port":58695,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2950,"rrname":"qequfygycuq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.139532+0100","flow_id":1845592859679936,"pcap_cnt":2347,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52354,"proto":"UDP","dns":{"type":"answer","id":63755,"rcode":"NXDOMAIN","rrname":"galupehudev.eu"}}
{"timestamp":"2017-12-12T18:33:17.624773+0100","flow_id":1179308141676454,"pcap_cnt":2621,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49428,"proto":"UDP","dns":{"type":"answer","id":47757,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:15.447409+0100","flow_id":1797014632930874,"pcap_cnt":1858,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50512,"proto":"UDP","dns":{"type":"answer","id":393,"rcode":"NXDOMAIN","rrname":"jefudidiryl.eu"}}
{"timestamp":"2017-12-12T18:33:13.535608+0100","flow_id":346763090799672,"pcap_cnt":1652,"event_type":"dns","src_ip":"192.168.1.100","src_port":56745,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5807,"rrname":"vonujicitat.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.322328+0100","flow_id":1609586555237514,"pcap_cnt":2449,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59400,"proto":"UDP","dns":{"type":"answer","id":56073,"rcode":"NXDOMAIN","rrname":"nojudymiwuh.eu"}}
{"timestamp":"2017-12-12T18:33:17.887758+0100","flow_id":1410772519193550,"pcap_cnt":2762,"event_type":"dns","src_ip":"192.168.1.100","src_port":59599,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9646,"rrname":"nozulufynax.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.322328+0100","flow_id":1609586555237514,"pcap_cnt":2449,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59400,"proto":"UDP","dns":{"type":"answer","id":56073,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:14.386818+0100","flow_id":346763090799672,"pcap_cnt":1732,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56745,"proto":"UDP","dns":{"type":"answer","id":5807,"rcode":"NXDOMAIN","rrname":"vonujicitat.eu"}}
{"timestamp":"2017-12-12T18:33:17.084507+0100","flow_id":678658836351258,"pcap_cnt":2307,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51880,"proto":"UDP","dns":{"type":"answer","id":5816,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:17.888031+0100","flow_id":1410772519193550,"pcap_cnt":2763,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59599,"proto":"UDP","dns":{"type":"answer","id":9646,"rcode":"NXDOMAIN","rrname":"nozulufynax.eu"}}
{"timestamp":"2017-12-12T18:33:10.434675+0100","flow_id":2058348360295102,"pcap_cnt":1365,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63483,"proto":"UDP","dns":{"type":"answer","id":16526,"rcode":"NXDOMAIN","rrname":"lyvufixyvet.eu"}}
{"timestamp":"2017-12-12T18:33:17.888031+0100","flow_id":1410772519193550,"pcap_cnt":2763,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59599,"proto":"UDP","dns":{"type":"answer","id":9646,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:16.845884+0100","flow_id":173914279700540,"pcap_cnt":2170,"event_type":"dns","src_ip":"192.168.1.100","src_port":55846,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":65434,"rrname":"qebahilojam.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:10.434675+0100","flow_id":2058348360295102,"pcap_cnt":1365,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63483,"proto":"UDP","dns":{"type":"answer","id":16526,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:19.718583+0100","flow_id":2761980638967,"pcap_cnt":2840,"event_type":"dns","src_ip":"192.168.1.100","src_port":54051,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28502,"rrname":"voporitevet.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.263393+0100","flow_id":262996196393938,"pcap_cnt":2405,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59129,"proto":"UDP","dns":{"type":"answer","id":15112,"rcode":"NXDOMAIN","rrname":"cidyrecavok.eu"}}
{"timestamp":"2017-12-12T18:33:10.510899+0100","flow_id":888330548919931,"pcap_cnt":1405,"event_type":"dns","src_ip":"192.168.1.100","src_port":59811,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62096,"rrname":"cinuqumahag.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:16.846141+0100","flow_id":173914279700540,"pcap_cnt":2171,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55846,"proto":"UDP","dns":{"type":"answer","id":65434,"rcode":"NXDOMAIN","rrname":"qebahilojam.eu"}}
{"timestamp":"2017-12-12T18:33:17.769674+0100","flow_id":1065253137661578,"pcap_cnt":2698,"event_type":"dns","src_ip":"192.168.1.100","src_port":61263,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49183,"rrname":"gadedozymiz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:10.556931+0100","flow_id":888330548919931,"pcap_cnt":1436,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59811,"proto":"UDP","dns":{"type":"answer","id":62096,"rcode":"NXDOMAIN","rrname":"cinuqumahag.eu"}}
{"timestamp":"2017-12-12T18:33:15.483694+0100","flow_id":1530698743374190,"pcap_cnt":1864,"event_type":"dns","src_ip":"192.168.1.100","src_port":50676,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":46642,"rrname":"lysenenyxis.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:10.556931+0100","flow_id":888330548919931,"pcap_cnt":1436,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59811,"proto":"UDP","dns":{"type":"answer","id":62096,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.496961+0100","flow_id":273555373068676,"pcap_cnt":1396,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53510,"proto":"UDP","dns":{"type":"answer","id":19400,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.769934+0100","flow_id":1065253137661578,"pcap_cnt":2699,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61263,"proto":"UDP","dns":{"type":"answer","id":49183,"rcode":"NXDOMAIN","rrname":"gadedozymiz.eu"}}
{"timestamp":"2017-12-12T18:33:17.286880+0100","flow_id":23214614686175,"pcap_cnt":2409,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50758,"proto":"UDP","dns":{"type":"answer","id":48205,"rcode":"NXDOMAIN","rrname":"tunupegirec.eu"}}
{"timestamp":"2017-12-12T18:33:11.558071+0100","flow_id":1800444164146167,"pcap_cnt":1487,"event_type":"dns","src_ip":"192.168.1.100","src_port":55131,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":61012,"rrname":"vopuqicyneb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.788963+0100","flow_id":2198355704809634,"pcap_cnt":3333,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56257,"proto":"UDP","dns":{"type":"answer","id":62100,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:10.534323+0100","flow_id":2013979200595763,"pcap_cnt":1416,"event_type":"dns","src_ip":"192.168.1.100","src_port":53299,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":32512,"rrname":"makysimodan.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.558681+0100","flow_id":143052792004329,"pcap_cnt":1668,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54779,"proto":"UDP","dns":{"type":"answer","id":48288,"rcode":"NXDOMAIN","rrname":"foxusyzosex.eu"}}
{"timestamp":"2017-12-12T18:33:11.701960+0100","flow_id":2063188788489953,"pcap_cnt":1548,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55177,"proto":"UDP","dns":{"type":"answer","id":39262,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.563596+0100","flow_id":1775103857105292,"pcap_cnt":1489,"event_type":"dns","src_ip":"192.168.1.100","src_port":56822,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":351,"rrname":"mamajocahab.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.558681+0100","flow_id":143052792004329,"pcap_cnt":1668,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54779,"proto":"UDP","dns":{"type":"answer","id":48288,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:09.585251+0100","flow_id":62288079112266,"pcap_cnt":1340,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52506,"proto":"UDP","dns":{"type":"answer","id":36189,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:14.428274+0100","flow_id":923596526094578,"pcap_cnt":1741,"event_type":"dns","src_ip":"192.168.1.100","src_port":62224,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14440,"rrname":"xukisijycer.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:14.612274+0100","flow_id":1183654648371122,"pcap_cnt":1827,"event_type":"dns","src_ip":"192.168.1.100","src_port":65242,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28130,"rrname":"rydeqegekeq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:10.537716+0100","flow_id":1904073134978164,"pcap_cnt":1420,"event_type":"dns","src_ip":"192.168.1.100","src_port":49280,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":20308,"rrname":"tupyjoqirof.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:14.495690+0100","flow_id":923596526094578,"pcap_cnt":1757,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62224,"proto":"UDP","dns":{"type":"answer","id":14440,"rcode":"NXDOMAIN","rrname":"xukisijycer.eu"}}
{"timestamp":"2017-12-12T18:33:15.564030+0100","flow_id":840072297171660,"pcap_cnt":1887,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55028,"proto":"UDP","dns":{"type":"answer","id":59243,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:14.495690+0100","flow_id":923596526094578,"pcap_cnt":1757,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62224,"proto":"UDP","dns":{"type":"answer","id":14440,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.584781+0100","flow_id":1904073134978164,"pcap_cnt":1455,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49280,"proto":"UDP","dns":{"type":"answer","id":20308,"rcode":"NXDOMAIN","rrname":"tupyjoqirof.eu"}}
{"timestamp":"2017-12-12T18:33:17.142886+0100","flow_id":1206121622482238,"pcap_cnt":2351,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62825,"proto":"UDP","dns":{"type":"answer","id":49416,"rcode":"NXDOMAIN","rrname":"mavasatokyf.eu"}}
{"timestamp":"2017-12-12T18:33:14.440143+0100","flow_id":1686930326206287,"pcap_cnt":1745,"event_type":"dns","src_ip":"192.168.1.100","src_port":56375,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48138,"rrname":"marosokubew.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.625399+0100","flow_id":687154281548535,"pcap_cnt":1909,"event_type":"dns","src_ip":"192.168.1.100","src_port":56776,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":15332,"rrname":"fobyqyhezem.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.096383+0100","flow_id":129115622122009,"pcap_cnt":2325,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52689,"proto":"UDP","dns":{"type":"answer","id":4985,"rcode":"NXDOMAIN","rrname":"kejycirenuh.eu"}}
{"timestamp":"2017-12-12T18:33:14.508078+0100","flow_id":1686930326206287,"pcap_cnt":1764,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56375,"proto":"UDP","dns":{"type":"answer","id":48138,"rcode":"NXDOMAIN","rrname":"marosokubew.eu"}}
{"timestamp":"2017-12-12T18:33:15.672143+0100","flow_id":687154281548535,"pcap_cnt":1946,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56776,"proto":"UDP","dns":{"type":"answer","id":15332,"rcode":"NXDOMAIN","rrname":"fobyqyhezem.eu"}}
{"timestamp":"2017-12-12T18:33:14.508078+0100","flow_id":1686930326206287,"pcap_cnt":1764,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56375,"proto":"UDP","dns":{"type":"answer","id":48138,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:10.540226+0100","flow_id":630563792107110,"pcap_cnt":1423,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55492,"proto":"UDP","dns":{"type":"answer","id":36660,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.447409+0100","flow_id":1797014632930874,"pcap_cnt":1858,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50512,"proto":"UDP","dns":{"type":"answer","id":393,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:14.535878+0100","flow_id":913715953806662,"pcap_cnt":1777,"event_type":"dns","src_ip":"192.168.1.100","src_port":52850,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":3598,"rrname":"xuxoferyvuc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.633075+0100","flow_id":338952692672755,"pcap_cnt":1519,"event_type":"dns","src_ip":"192.168.1.100","src_port":50637,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":21932,"rrname":"qexetupezix.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.622047+0100","flow_id":1456722226559012,"pcap_cnt":1712,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52104,"proto":"UDP","dns":{"type":"answer","id":62400,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.696473+0100","flow_id":2123717762588825,"pcap_cnt":1543,"event_type":"dns","src_ip":"192.168.1.100","src_port":59814,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":24533,"rrname":"vofirefumuj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.513051+0100","flow_id":2155661582128155,"pcap_cnt":1872,"event_type":"dns","src_ip":"192.168.1.100","src_port":50127,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62208,"rrname":"tufibiqunit.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.336933+0100","flow_id":1478057476826149,"pcap_cnt":2460,"event_type":"dns","src_ip":"192.168.1.100","src_port":49859,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":46007,"rrname":"jepogejebak.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.204872+0100","flow_id":1703644191596616,"pcap_cnt":2384,"event_type":"dns","src_ip":"192.168.1.100","src_port":62032,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5858,"rrname":"jeceraxaxol.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:14.414372+0100","flow_id":1909566398419620,"pcap_cnt":1738,"event_type":"dns","src_ip":"192.168.1.100","src_port":63808,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1229,"rrname":"kevacijopet.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.757187+0100","flow_id":12784286286614,"pcap_cnt":1583,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58827,"proto":"UDP","dns":{"type":"answer","id":34901,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.263393+0100","flow_id":262996196393938,"pcap_cnt":2405,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59129,"proto":"UDP","dns":{"type":"answer","id":15112,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:15.565213+0100","flow_id":2155661582128155,"pcap_cnt":1889,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50127,"proto":"UDP","dns":{"type":"answer","id":62208,"rcode":"NXDOMAIN","rrname":"tufibiqunit.eu"}}
{"timestamp":"2017-12-12T18:33:17.205127+0100","flow_id":1703644191596616,"pcap_cnt":2385,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62032,"proto":"UDP","dns":{"type":"answer","id":5858,"rcode":"NXDOMAIN","rrname":"jeceraxaxol.eu"}}
{"timestamp":"2017-12-12T18:33:17.337224+0100","flow_id":1478057476826149,"pcap_cnt":2461,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49859,"proto":"UDP","dns":{"type":"answer","id":46007,"rcode":"NXDOMAIN","rrname":"jepogejebak.eu"}}
{"timestamp":"2017-12-12T18:33:15.565213+0100","flow_id":2155661582128155,"pcap_cnt":1889,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50127,"proto":"UDP","dns":{"type":"answer","id":62208,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.536198+0100","flow_id":1530698743374190,"pcap_cnt":1876,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50676,"proto":"UDP","dns":{"type":"answer","id":46642,"rcode":"NXDOMAIN","rrname":"lysenenyxis.eu"}}
{"timestamp":"2017-12-12T18:33:17.337224+0100","flow_id":1478057476826149,"pcap_cnt":2461,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49859,"proto":"UDP","dns":{"type":"answer","id":46007,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:17.286880+0100","flow_id":23214614686175,"pcap_cnt":2409,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50758,"proto":"UDP","dns":{"type":"answer","id":48205,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.536198+0100","flow_id":1530698743374190,"pcap_cnt":1876,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50676,"proto":"UDP","dns":{"type":"answer","id":46642,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.602692+0100","flow_id":722104577897028,"pcap_cnt":1897,"event_type":"dns","src_ip":"192.168.1.100","src_port":64545,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":55131,"rrname":"vopudetezuq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.569140+0100","flow_id":1536323002806068,"pcap_cnt":1490,"event_type":"dns","src_ip":"192.168.1.100","src_port":58395,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4197,"rrname":"qebysovexaf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:10.551836+0100","flow_id":1384577513184355,"pcap_cnt":1433,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64739,"proto":"UDP","dns":{"type":"answer","id":44856,"rcode":"NXDOMAIN","rrname":"xuqesunipam.eu"}}
{"timestamp":"2017-12-12T18:33:15.661873+0100","flow_id":433351779096945,"pcap_cnt":1940,"event_type":"dns","src_ip":"192.168.1.100","src_port":56935,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":55243,"rrname":"tujomalumav.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.730248+0100","flow_id":2002728534156207,"pcap_cnt":2129,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51692,"proto":"UDP","dns":{"type":"answer","id":27162,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:15.692548+0100","flow_id":1066303257039061,"pcap_cnt":1964,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54616,"proto":"UDP","dns":{"type":"answer","id":18045,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.732434+0100","flow_id":433351779096945,"pcap_cnt":1978,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56935,"proto":"UDP","dns":{"type":"answer","id":55243,"rcode":"NXDOMAIN","rrname":"tujomalumav.eu"}}
{"timestamp":"2017-12-12T18:33:11.634530+0100","flow_id":1509558914120628,"pcap_cnt":1520,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59011,"proto":"UDP","dns":{"type":"answer","id":44727,"rcode":"NXDOMAIN","rrname":"ryciqavuqav.eu"}}
{"timestamp":"2017-12-12T18:33:15.732434+0100","flow_id":433351779096945,"pcap_cnt":1978,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56935,"proto":"UDP","dns":{"type":"answer","id":55243,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.815625+0100","flow_id":2001629022548489,"pcap_cnt":2152,"event_type":"dns","src_ip":"192.168.1.100","src_port":49379,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":54424,"rrname":"kezapyjolek.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:14.389208+0100","flow_id":1983989591653980,"pcap_cnt":1734,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64188,"proto":"UDP","dns":{"type":"answer","id":31457,"rcode":"NXDOMAIN","rrname":"novopicahal.eu"}}
{"timestamp":"2017-12-12T18:33:15.156494+0100","flow_id":1183654648371122,"pcap_cnt":1846,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65242,"proto":"UDP","dns":{"type":"answer","id":28130,"rcode":"NXDOMAIN","rrname":"rydeqegekeq.eu"}}
{"timestamp":"2017-12-12T18:33:16.440808+0100","flow_id":2092274307348968,"pcap_cnt":2005,"event_type":"dns","src_ip":"192.168.1.100","src_port":58584,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9512,"rrname":"dixexehyzex.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.406702+0100","flow_id":1280534078370759,"pcap_cnt":2499,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56114,"proto":"UDP","dns":{"type":"answer","id":40603,"rcode":"NXDOMAIN","rrname":"masijemaxud.eu"}}
{"timestamp":"2017-12-12T18:33:15.156494+0100","flow_id":1183654648371122,"pcap_cnt":1846,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65242,"proto":"UDP","dns":{"type":"answer","id":28130,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.557276+0100","flow_id":907728769548238,"pcap_cnt":2065,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59258,"proto":"UDP","dns":{"type":"answer","id":27766,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":559}}
{"timestamp":"2017-12-12T18:33:14.495981+0100","flow_id":1031812522086765,"pcap_cnt":1758,"event_type":"dns","src_ip":"192.168.1.100","src_port":60099,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29468,"rrname":"pujotiqunif.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.142886+0100","flow_id":1206121622482238,"pcap_cnt":2351,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62825,"proto":"UDP","dns":{"type":"answer","id":49416,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:15.537808+0100","flow_id":337975587845328,"pcap_cnt":1877,"event_type":"dns","src_ip":"192.168.1.100","src_port":55204,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14424,"rrname":"foqurowyxul.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.735050+0100","flow_id":1761980584834890,"pcap_cnt":2132,"event_type":"dns","src_ip":"192.168.1.100","src_port":62417,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":58960,"rrname":"nozoxucavaq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.560640+0100","flow_id":1318310463114752,"pcap_cnt":1885,"event_type":"dns","src_ip":"192.168.1.100","src_port":60306,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11230,"rrname":"kezydorekuw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.139532+0100","flow_id":1845592859679936,"pcap_cnt":2347,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52354,"proto":"UDP","dns":{"type":"answer","id":63755,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:14.541276+0100","flow_id":1031812522086765,"pcap_cnt":1784,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60099,"proto":"UDP","dns":{"type":"answer","id":29468,"rcode":"NXDOMAIN","rrname":"pujotiqunif.eu"}}
{"timestamp":"2017-12-12T18:33:15.152789+0100","flow_id":659069490317471,"pcap_cnt":1844,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63602,"proto":"UDP","dns":{"type":"answer","id":7346,"rcode":"NXDOMAIN","rrname":"vocoqafajyw.eu"}}
{"timestamp":"2017-12-12T18:33:16.735294+0100","flow_id":1761980584834890,"pcap_cnt":2133,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62417,"proto":"UDP","dns":{"type":"answer","id":58960,"rcode":"NXDOMAIN","rrname":"nozoxucavaq.eu"}}
{"timestamp":"2017-12-12T18:33:14.541276+0100","flow_id":1031812522086765,"pcap_cnt":1784,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60099,"proto":"UDP","dns":{"type":"answer","id":29468,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.522095+0100","flow_id":539424586594159,"pcap_cnt":2558,"event_type":"dns","src_ip":"192.168.1.100","src_port":51671,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14638,"rrname":"vonodecidid.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.844065+0100","flow_id":1233935830671403,"pcap_cnt":2167,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64158,"proto":"UDP","dns":{"type":"answer","id":21640,"rcode":"NXDOMAIN","rrname":"norumikemem.eu"}}
{"timestamp":"2017-12-12T18:33:14.560714+0100","flow_id":524765862989386,"pcap_cnt":1798,"event_type":"dns","src_ip":"192.168.1.100","src_port":50777,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":61632,"rrname":"lymoxuxelam.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.377061+0100","flow_id":1275682912411847,"pcap_cnt":1605,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53650,"proto":"UDP","dns":{"type":"answer","id":50527,"rcode":"NXDOMAIN","rrname":"xubuvojajyb.eu"}}
{"timestamp":"2017-12-12T18:33:15.412433+0100","flow_id":524765862989386,"pcap_cnt":1853,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50777,"proto":"UDP","dns":{"type":"answer","id":61632,"rcode":"NXDOMAIN","rrname":"lymoxuxelam.eu"}}
{"timestamp":"2017-12-12T18:33:16.846141+0100","flow_id":173914279700540,"pcap_cnt":2171,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55846,"proto":"UDP","dns":{"type":"answer","id":65434,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:14.437807+0100","flow_id":1845103234297391,"pcap_cnt":1743,"event_type":"dns","src_ip":"192.168.1.100","src_port":60345,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30181,"rrname":"vofecokoder.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.031213+0100","flow_id":1546328129501677,"pcap_cnt":2288,"event_type":"dns","src_ip":"192.168.1.100","src_port":57833,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23970,"rrname":"cicucifokym.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.092350+0100","flow_id":1345991527458748,"pcap_cnt":2319,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53347,"proto":"UDP","dns":{"type":"answer","id":51266,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:17.265225+0100","flow_id":649560432860789,"pcap_cnt":2406,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51478,"proto":"UDP","dns":{"type":"answer","id":22770,"rcode":"NXDOMAIN","rrname":"keralanyxiq.eu"}}
{"timestamp":"2017-12-12T18:33:17.205127+0100","flow_id":1703644191596616,"pcap_cnt":2385,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62032,"proto":"UDP","dns":{"type":"answer","id":5858,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:17.769934+0100","flow_id":1065253137661578,"pcap_cnt":2699,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61263,"proto":"UDP","dns":{"type":"answer","id":49183,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:17.341185+0100","flow_id":1822855303869633,"pcap_cnt":2464,"event_type":"dns","src_ip":"192.168.1.100","src_port":60074,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":10550,"rrname":"kemawonywig.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.045092+0100","flow_id":314325350854692,"pcap_cnt":3452,"event_type":"dns","src_ip":"192.168.1.100","src_port":52643,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14368,"rrname":"xugokixofen.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.341448+0100","flow_id":1822855303869633,"pcap_cnt":2465,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60074,"proto":"UDP","dns":{"type":"answer","id":10550,"rcode":"NXDOMAIN","rrname":"kemawonywig.eu"}}
{"timestamp":"2017-12-12T18:33:17.525159+0100","flow_id":637085700391783,"pcap_cnt":2560,"event_type":"dns","src_ip":"192.168.1.100","src_port":57858,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49613,"rrname":"maxyvycebid.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.649610+0100","flow_id":1767637056743818,"pcap_cnt":1924,"event_type":"dns","src_ip":"192.168.1.100","src_port":57742,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":32251,"rrname":"jenyzexodop.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.341448+0100","flow_id":1822855303869633,"pcap_cnt":2465,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60074,"proto":"UDP","dns":{"type":"answer","id":10550,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:10.551836+0100","flow_id":1384577513184355,"pcap_cnt":1433,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64739,"proto":"UDP","dns":{"type":"answer","id":44856,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.525399+0100","flow_id":637085700391783,"pcap_cnt":2561,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57858,"proto":"UDP","dns":{"type":"answer","id":49613,"rcode":"NXDOMAIN","rrname":"maxyvycebid.eu"}}
{"timestamp":"2017-12-12T18:33:15.650928+0100","flow_id":722104577897028,"pcap_cnt":1926,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64545,"proto":"UDP","dns":{"type":"answer","id":55131,"rcode":"NXDOMAIN","rrname":"vopudetezuq.eu"}}
{"timestamp":"2017-12-12T18:33:17.525399+0100","flow_id":637085700391783,"pcap_cnt":2561,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57858,"proto":"UDP","dns":{"type":"answer","id":49613,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:10.580671+0100","flow_id":2013979200595763,"pcap_cnt":1452,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53299,"proto":"UDP","dns":{"type":"answer","id":32512,"rcode":"NXDOMAIN","rrname":"makysimodan.eu"}}
{"timestamp":"2017-12-12T18:33:15.650928+0100","flow_id":722104577897028,"pcap_cnt":1926,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64545,"proto":"UDP","dns":{"type":"answer","id":55131,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.035873+0100","flow_id":1586973552512033,"pcap_cnt":2292,"event_type":"dns","src_ip":"192.168.1.100","src_port":61868,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8375,"rrname":"kepolonavit.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:10.580671+0100","flow_id":2013979200595763,"pcap_cnt":1452,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53299,"proto":"UDP","dns":{"type":"answer","id":32512,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.717744+0100","flow_id":1767637056743818,"pcap_cnt":1968,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57742,"proto":"UDP","dns":{"type":"answer","id":32251,"rcode":"NXDOMAIN","rrname":"jenyzexodop.eu"}}
{"timestamp":"2017-12-12T18:33:16.815879+0100","flow_id":2001629022548489,"pcap_cnt":2153,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49379,"proto":"UDP","dns":{"type":"answer","id":54424,"rcode":"NXDOMAIN","rrname":"kezapyjolek.eu"}}
{"timestamp":"2017-12-12T18:33:14.389208+0100","flow_id":1983989591653980,"pcap_cnt":1734,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64188,"proto":"UDP","dns":{"type":"answer","id":31457,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.406702+0100","flow_id":1280534078370759,"pcap_cnt":2499,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56114,"proto":"UDP","dns":{"type":"answer","id":40603,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:16.498018+0100","flow_id":2149466091854178,"pcap_cnt":2031,"event_type":"dns","src_ip":"192.168.1.100","src_port":64614,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":16464,"rrname":"fogeliwokih.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.096383+0100","flow_id":129115622122009,"pcap_cnt":2325,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52689,"proto":"UDP","dns":{"type":"answer","id":4985,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:17.552827+0100","flow_id":1519815296380795,"pcap_cnt":2570,"event_type":"dns","src_ip":"192.168.1.100","src_port":62002,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6550,"rrname":"qeguhapyrer.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.230518+0100","flow_id":1665764727751798,"pcap_cnt":3082,"event_type":"dns","src_ip":"192.168.1.100","src_port":52401,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31315,"rrname":"vofubimipeg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.729711+0100","flow_id":808630988324877,"pcap_cnt":1573,"event_type":"dns","src_ip":"192.168.1.100","src_port":57438,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36693,"rrname":"voledokuwev.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:17.553082+0100","flow_id":1519815296380795,"pcap_cnt":2571,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62002,"proto":"UDP","dns":{"type":"answer","id":6550,"rcode":"NXDOMAIN","rrname":"qeguhapyrer.eu"}}
{"timestamp":"2017-12-12T18:33:17.200513+0100","flow_id":524218254823233,"pcap_cnt":2380,"event_type":"dns","src_ip":"192.168.1.100","src_port":53264,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":3735,"rrname":"ganofazigor.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.230765+0100","flow_id":1665764727751798,"pcap_cnt":3083,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52401,"proto":"UDP","dns":{"type":"answer","id":31315,"rcode":"NXDOMAIN","rrname":"vofubimipeg.eu"}}
{"timestamp":"2017-12-12T18:33:14.386818+0100","flow_id":346763090799672,"pcap_cnt":1732,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56745,"proto":"UDP","dns":{"type":"answer","id":5807,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.582492+0100","flow_id":337975587845328,"pcap_cnt":1894,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55204,"proto":"UDP","dns":{"type":"answer","id":14424,"rcode":"NXDOMAIN","rrname":"foqurowyxul.eu"}}
{"timestamp":"2017-12-12T18:33:17.200781+0100","flow_id":524218254823233,"pcap_cnt":2381,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53264,"proto":"UDP","dns":{"type":"answer","id":3735,"rcode":"NXDOMAIN","rrname":"ganofazigor.eu"}}
{"timestamp":"2017-12-12T18:33:14.719130+0100","flow_id":913715953806662,"pcap_cnt":1828,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52850,"proto":"UDP","dns":{"type":"answer","id":3598,"rcode":"NXDOMAIN","rrname":"xuxoferyvuc.eu"}}
{"timestamp":"2017-12-12T18:33:17.200781+0100","flow_id":524218254823233,"pcap_cnt":2381,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53264,"proto":"UDP","dns":{"type":"answer","id":3735,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:16.735294+0100","flow_id":1761980584834890,"pcap_cnt":2133,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62417,"proto":"UDP","dns":{"type":"answer","id":58960,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":559}}
{"timestamp":"2017-12-12T18:33:14.539210+0100","flow_id":505402002913866,"pcap_cnt":1782,"event_type":"dns","src_ip":"192.168.1.100","src_port":64351,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35404,"rrname":"volimucagog.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.844065+0100","flow_id":1233935830671403,"pcap_cnt":2167,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64158,"proto":"UDP","dns":{"type":"answer","id":21640,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:14.438660+0100","flow_id":1624930325803396,"pcap_cnt":1744,"event_type":"dns","src_ip":"192.168.1.100","src_port":52821,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31687,"rrname":"nopujokelek.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.003905+0100","flow_id":1071384203431745,"pcap_cnt":2274,"event_type":"dns","src_ip":"192.168.1.100","src_port":64923,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19628,"rrname":"lymosudyqym.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.922314+0100","flow_id":1314251719054026,"pcap_cnt":2232,"event_type":"dns","src_ip":"192.168.1.100","src_port":55877,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42191,"rrname":"lyxuworenuz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.412433+0100","flow_id":524765862989386,"pcap_cnt":1853,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50777,"proto":"UDP","dns":{"type":"answer","id":61632,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.031457+0100","flow_id":1546328129501677,"pcap_cnt":2289,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57833,"proto":"UDP","dns":{"type":"answer","id":23970,"rcode":"NXDOMAIN","rrname":"cicucifokym.eu"}}
{"timestamp":"2017-12-12T18:33:14.504779+0100","flow_id":1845103234297391,"pcap_cnt":1760,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60345,"proto":"UDP","dns":{"type":"answer","id":30181,"rcode":"NXDOMAIN","rrname":"vofecokoder.eu"}}
{"timestamp":"2017-12-12T18:33:17.265225+0100","flow_id":649560432860789,"pcap_cnt":2406,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51478,"proto":"UDP","dns":{"type":"answer","id":22770,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.031457+0100","flow_id":1546328129501677,"pcap_cnt":2289,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57833,"proto":"UDP","dns":{"type":"answer","id":23970,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:15.640283+0100","flow_id":233464000907183,"pcap_cnt":1917,"event_type":"dns","src_ip":"192.168.1.100","src_port":51460,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":10950,"rrname":"vowypikelaf.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:17.842655+0100","flow_id":499812103216031,"pcap_cnt":2736,"event_type":"dns","src_ip":"192.168.1.100","src_port":55556,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50264,"rrname":"lyrelydevac.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.045386+0100","flow_id":314325350854692,"pcap_cnt":3453,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52643,"proto":"UDP","dns":{"type":"answer","id":14368,"rcode":"NXDOMAIN","rrname":"xugokixofen.eu"}}
{"timestamp":"2017-12-12T18:33:15.688899+0100","flow_id":233464000907183,"pcap_cnt":1961,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51460,"proto":"UDP","dns":{"type":"answer","id":10950,"rcode":"NXDOMAIN","rrname":"vowypikelaf.eu"}}
{"timestamp":"2017-12-12T18:33:11.617544+0100","flow_id":1536323002806068,"pcap_cnt":1512,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58395,"proto":"UDP","dns":{"type":"answer","id":4197,"rcode":"NXDOMAIN","rrname":"qebysovexaf.eu"}}
{"timestamp":"2017-12-12T18:33:15.688899+0100","flow_id":233464000907183,"pcap_cnt":1961,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51460,"proto":"UDP","dns":{"type":"answer","id":10950,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.842912+0100","flow_id":499812103216031,"pcap_cnt":2737,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55556,"proto":"UDP","dns":{"type":"answer","id":50264,"rcode":"NXDOMAIN","rrname":"lyrelydevac.eu"}}
{"timestamp":"2017-12-12T18:33:11.617544+0100","flow_id":1536323002806068,"pcap_cnt":1512,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58395,"proto":"UDP","dns":{"type":"answer","id":4197,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.593721+0100","flow_id":459183859961657,"pcap_cnt":2080,"event_type":"dns","src_ip":"192.168.1.100","src_port":55149,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":20590,"rrname":"nojuletacuf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.842912+0100","flow_id":499812103216031,"pcap_cnt":2737,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55556,"proto":"UDP","dns":{"type":"answer","id":50264,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:15.719633+0100","flow_id":1258732824292958,"pcap_cnt":1969,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49926,"proto":"UDP","dns":{"type":"answer","id":3042,"rcode":"NXDOMAIN","rrname":"lyxotyxubop.eu"}}
{"timestamp":"2017-12-12T18:33:15.717744+0100","flow_id":1767637056743818,"pcap_cnt":1968,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57742,"proto":"UDP","dns":{"type":"answer","id":32251,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.719633+0100","flow_id":1258732824292958,"pcap_cnt":1969,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49926,"proto":"UDP","dns":{"type":"answer","id":3042,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.036121+0100","flow_id":1586973552512033,"pcap_cnt":2293,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61868,"proto":"UDP","dns":{"type":"answer","id":8375,"rcode":"NXDOMAIN","rrname":"kepolonavit.eu"}}
{"timestamp":"2017-12-12T18:33:16.857037+0100","flow_id":114229266617293,"pcap_cnt":2182,"event_type":"dns","src_ip":"192.168.1.100","src_port":58272,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":39410,"rrname":"jewezexigaf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.728290+0100","flow_id":1832302084037858,"pcap_cnt":1571,"event_type":"dns","src_ip":"192.168.1.100","src_port":58541,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":21100,"rrname":"cicokokyvyf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:14.546886+0100","flow_id":1026263424325702,"pcap_cnt":1786,"event_type":"dns","src_ip":"192.168.1.100","src_port":57259,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7282,"rrname":"ryqivypahux.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.498321+0100","flow_id":2149466091854178,"pcap_cnt":2032,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64614,"proto":"UDP","dns":{"type":"answer","id":16464,"rcode":"NXDOMAIN","rrname":"fogeliwokih.eu"}}
{"timestamp":"2017-12-12T18:33:17.303002+0100","flow_id":296361649872794,"pcap_cnt":2426,"event_type":"dns","src_ip":"192.168.1.100","src_port":57688,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":22458,"rrname":"cihipifebep.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.498321+0100","flow_id":2149466091854178,"pcap_cnt":2032,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64614,"proto":"UDP","dns":{"type":"answer","id":16464,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":559}}
{"timestamp":"2017-12-12T18:33:17.553082+0100","flow_id":1519815296380795,"pcap_cnt":2571,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62002,"proto":"UDP","dns":{"type":"answer","id":6550,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:11.754716+0100","flow_id":2145912006096613,"pcap_cnt":1581,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58695,"proto":"UDP","dns":{"type":"answer","id":2950,"rcode":"NXDOMAIN","rrname":"qequfygycuq.eu"}}
{"timestamp":"2017-12-12T18:33:16.519098+0100","flow_id":2223202090412986,"pcap_cnt":2048,"event_type":"dns","src_ip":"192.168.1.100","src_port":59773,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13236,"rrname":"jejeqorekuv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.230765+0100","flow_id":1665764727751798,"pcap_cnt":3083,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52401,"proto":"UDP","dns":{"type":"answer","id":31315,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":589}}
{"timestamp":"2017-12-12T18:33:17.741719+0100","flow_id":207891766006103,"pcap_cnt":2678,"event_type":"dns","src_ip":"192.168.1.100","src_port":52390,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":55949,"rrname":"cilynitiseg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.539996+0100","flow_id":1112420468407644,"pcap_cnt":2052,"event_type":"dns","src_ip":"192.168.1.100","src_port":55925,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38748,"rrname":"vojacikigep.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.152789+0100","flow_id":659069490317471,"pcap_cnt":1844,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63602,"proto":"UDP","dns":{"type":"answer","id":7346,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:20.380012+0100","flow_id":654265569823852,"pcap_cnt":3154,"event_type":"dns","src_ip":"192.168.1.100","src_port":58651,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":24072,"rrname":"magijityboz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.582492+0100","flow_id":337975587845328,"pcap_cnt":1894,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55204,"proto":"UDP","dns":{"type":"answer","id":14424,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.741964+0100","flow_id":207891766006103,"pcap_cnt":2679,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52390,"proto":"UDP","dns":{"type":"answer","id":55949,"rcode":"NXDOMAIN","rrname":"cilynitiseg.eu"}}
{"timestamp":"2017-12-12T18:33:20.380265+0100","flow_id":654265569823852,"pcap_cnt":3155,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58651,"proto":"UDP","dns":{"type":"answer","id":24072,"rcode":"NXDOMAIN","rrname":"magijityboz.eu"}}
{"timestamp":"2017-12-12T18:33:15.420140+0100","flow_id":1372686896508829,"pcap_cnt":1854,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63287,"proto":"UDP","dns":{"type":"answer","id":59634,"rcode":"NXDOMAIN","rrname":"foxanabelod.eu"}}
{"timestamp":"2017-12-12T18:33:20.380265+0100","flow_id":654265569823852,"pcap_cnt":3155,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58651,"proto":"UDP","dns":{"type":"answer","id":24072,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:17.522333+0100","flow_id":539424586594159,"pcap_cnt":2559,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51671,"proto":"UDP","dns":{"type":"answer","id":14638,"rcode":"NXDOMAIN","rrname":"vonodecidid.eu"}}
{"timestamp":"2017-12-12T18:33:15.084353+0100","flow_id":505402002913866,"pcap_cnt":1830,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64351,"proto":"UDP","dns":{"type":"answer","id":35404,"rcode":"NXDOMAIN","rrname":"volimucagog.eu"}}
{"timestamp":"2017-12-12T18:33:17.522333+0100","flow_id":539424586594159,"pcap_cnt":2559,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51671,"proto":"UDP","dns":{"type":"answer","id":14638,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:13.377061+0100","flow_id":1275682912411847,"pcap_cnt":1605,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53650,"proto":"UDP","dns":{"type":"answer","id":50527,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.004173+0100","flow_id":1071384203431745,"pcap_cnt":2275,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64923,"proto":"UDP","dns":{"type":"answer","id":19628,"rcode":"NXDOMAIN","rrname":"lymosudyqym.eu"}}
{"timestamp":"2017-12-12T18:33:17.554193+0100","flow_id":565005411775697,"pcap_cnt":2572,"event_type":"dns","src_ip":"192.168.1.100","src_port":60054,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36859,"rrname":"rydopapifel.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.004173+0100","flow_id":1071384203431745,"pcap_cnt":2275,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64923,"proto":"UDP","dns":{"type":"answer","id":19628,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:13.396448+0100","flow_id":851133985262752,"pcap_cnt":1608,"event_type":"dns","src_ip":"192.168.1.100","src_port":65045,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29510,"rrname":"gahunawahik.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.112352+0100","flow_id":1810311851914976,"pcap_cnt":2334,"event_type":"dns","src_ip":"192.168.1.100","src_port":53138,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34070,"rrname":"divoxehaceb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.012417+0100","flow_id":2181203752726657,"pcap_cnt":2278,"event_type":"dns","src_ip":"192.168.1.100","src_port":54134,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11200,"rrname":"gaherobusit.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.753069+0100","flow_id":341600540327109,"pcap_cnt":2139,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61227,"proto":"UDP","dns":{"type":"answer","id":64567,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:17.554470+0100","flow_id":565005411775697,"pcap_cnt":2573,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60054,"proto":"UDP","dns":{"type":"answer","id":36859,"rcode":"NXDOMAIN","rrname":"rydopapifel.eu"}}
{"timestamp":"2017-12-12T18:33:17.112587+0100","flow_id":1810311851914976,"pcap_cnt":2335,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53138,"proto":"UDP","dns":{"type":"answer","id":34070,"rcode":"NXDOMAIN","rrname":"divoxehaceb.eu"}}
{"timestamp":"2017-12-12T18:33:16.850202+0100","flow_id":1865850073970970,"pcap_cnt":2174,"event_type":"dns","src_ip":"192.168.1.100","src_port":50990,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":15378,"rrname":"pujoxolufag.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.608932+0100","flow_id":1800444164146167,"pcap_cnt":1505,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55131,"proto":"UDP","dns":{"type":"answer","id":61012,"rcode":"NXDOMAIN","rrname":"vopuqicyneb.eu"}}
{"timestamp":"2017-12-12T18:33:21.045386+0100","flow_id":314325350854692,"pcap_cnt":3453,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52643,"proto":"UDP","dns":{"type":"answer","id":14368,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:16.850442+0100","flow_id":1865850073970970,"pcap_cnt":2175,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50990,"proto":"UDP","dns":{"type":"answer","id":15378,"rcode":"NXDOMAIN","rrname":"pujoxolufag.eu"}}
{"timestamp":"2017-12-12T18:33:17.520067+0100","flow_id":225230549020547,"pcap_cnt":2554,"event_type":"dns","src_ip":"192.168.1.100","src_port":61840,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45336,"rrname":"vocupotusyz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.850442+0100","flow_id":1865850073970970,"pcap_cnt":2175,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50990,"proto":"UDP","dns":{"type":"answer","id":15378,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:16.463710+0100","flow_id":1655854090425182,"pcap_cnt":2014,"event_type":"dns","src_ip":"192.168.1.100","src_port":61120,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50491,"rrname":"xubirenosiq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.651747+0100","flow_id":1790988794065379,"pcap_cnt":2630,"event_type":"dns","src_ip":"192.168.1.100","src_port":64794,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60709,"rrname":"xugiqonenuz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.637520+0100","flow_id":1963002233862736,"pcap_cnt":1522,"event_type":"dns","src_ip":"192.168.1.100","src_port":62840,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":56808,"rrname":"pufagipajit.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.894209+0100","flow_id":693051271783681,"pcap_cnt":2764,"event_type":"dns","src_ip":"192.168.1.100","src_port":49203,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2018,"rrname":"xutohonutyn.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:10.584781+0100","flow_id":1904073134978164,"pcap_cnt":1455,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49280,"proto":"UDP","dns":{"type":"answer","id":20308,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.622139+0100","flow_id":105439616073275,"pcap_cnt":2088,"event_type":"dns","src_ip":"192.168.1.100","src_port":55865,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18349,"rrname":"tunujolavez.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.815879+0100","flow_id":2001629022548489,"pcap_cnt":2153,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49379,"proto":"UDP","dns":{"type":"answer","id":54424,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:11.686142+0100","flow_id":1353065338206270,"pcap_cnt":1540,"event_type":"dns","src_ip":"192.168.1.100","src_port":56529,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33948,"rrname":"ryqepiqiror.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.653395+0100","flow_id":1744025473775699,"pcap_cnt":1528,"event_type":"dns","src_ip":"192.168.1.100","src_port":52433,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":21672,"rrname":"mavogutogip.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.857287+0100","flow_id":114229266617293,"pcap_cnt":2183,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58272,"proto":"UDP","dns":{"type":"answer","id":39410,"rcode":"NXDOMAIN","rrname":"jewezexigaf.eu"}}
{"timestamp":"2017-12-12T18:33:12.573948+0100","flow_id":1832302084037858,"pcap_cnt":1601,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58541,"proto":"UDP","dns":{"type":"answer","id":21100,"rcode":"NXDOMAIN","rrname":"cicokokyvyf.eu"}}
{"timestamp":"2017-12-12T18:33:16.857287+0100","flow_id":114229266617293,"pcap_cnt":2183,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58272,"proto":"UDP","dns":{"type":"answer","id":39410,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:15.672143+0100","flow_id":687154281548535,"pcap_cnt":1946,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56776,"proto":"UDP","dns":{"type":"answer","id":15332,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.303264+0100","flow_id":296361649872794,"pcap_cnt":2427,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57688,"proto":"UDP","dns":{"type":"answer","id":22458,"rcode":"NXDOMAIN","rrname":"cihipifebep.eu"}}
{"timestamp":"2017-12-12T18:33:11.754716+0100","flow_id":2145912006096613,"pcap_cnt":1581,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58695,"proto":"UDP","dns":{"type":"answer","id":2950,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.303264+0100","flow_id":296361649872794,"pcap_cnt":2427,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57688,"proto":"UDP","dns":{"type":"answer","id":22458,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:16.452015+0100","flow_id":1426593031185839,"pcap_cnt":2013,"event_type":"dns","src_ip":"192.168.1.100","src_port":53843,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":3747,"rrname":"vocuzikubal.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.718850+0100","flow_id":2761980638967,"pcap_cnt":2841,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54051,"proto":"UDP","dns":{"type":"answer","id":28502,"rcode":"NXDOMAIN","rrname":"voporitevet.eu"}}
{"timestamp":"2017-12-12T18:33:16.540269+0100","flow_id":1112420468407644,"pcap_cnt":2053,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55925,"proto":"UDP","dns":{"type":"answer","id":38748,"rcode":"NXDOMAIN","rrname":"vojacikigep.eu"}}
{"timestamp":"2017-12-12T18:33:17.307417+0100","flow_id":1267539654848729,"pcap_cnt":2432,"event_type":"dns","src_ip":"192.168.1.100","src_port":60845,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7648,"rrname":"marugofazez.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.478622+0100","flow_id":1863545823972766,"pcap_cnt":2019,"event_type":"dns","src_ip":"192.168.1.100","src_port":58818,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26733,"rrname":"lymyfenumij.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.741964+0100","flow_id":207891766006103,"pcap_cnt":2679,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52390,"proto":"UDP","dns":{"type":"answer","id":55949,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:16.862737+0100","flow_id":840072297171660,"pcap_cnt":2190,"event_type":"dns","src_ip":"192.168.1.100","src_port":55028,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":56513,"rrname":"qexofyqihid.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:15.420140+0100","flow_id":1372686896508829,"pcap_cnt":1854,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63287,"proto":"UDP","dns":{"type":"answer","id":59634,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:20.521888+0100","flow_id":758238138136224,"pcap_cnt":3220,"event_type":"dns","src_ip":"192.168.1.100","src_port":52112,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27246,"rrname":"qekyhugisih.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.084353+0100","flow_id":505402002913866,"pcap_cnt":1830,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64351,"proto":"UDP","dns":{"type":"answer","id":35404,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:14.481639+0100","flow_id":1909566398419620,"pcap_cnt":1751,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63808,"proto":"UDP","dns":{"type":"answer","id":1229,"rcode":"NXDOMAIN","rrname":"kevacijopet.eu"}}
{"timestamp":"2017-12-12T18:33:16.922565+0100","flow_id":1314251719054026,"pcap_cnt":2233,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55877,"proto":"UDP","dns":{"type":"answer","id":42191,"rcode":"NXDOMAIN","rrname":"lyxuworenuz.eu"}}
{"timestamp":"2017-12-12T18:33:15.618569+0100","flow_id":1692438621810761,"pcap_cnt":1907,"event_type":"dns","src_ip":"192.168.1.100","src_port":51992,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1894,"rrname":"pujycupodyn.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.522243+0100","flow_id":758238138136224,"pcap_cnt":3221,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52112,"proto":"UDP","dns":{"type":"answer","id":27246,"rcode":"NXDOMAIN","rrname":"qekyhugisih.eu"}}
{"timestamp":"2017-12-12T18:33:15.574338+0100","flow_id":2034513439605634,"pcap_cnt":1891,"event_type":"dns","src_ip":"192.168.1.100","src_port":62951,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60462,"rrname":"cidykatafuj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.522243+0100","flow_id":758238138136224,"pcap_cnt":3221,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52112,"proto":"UDP","dns":{"type":"answer","id":27246,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:17.012683+0100","flow_id":2181203752726657,"pcap_cnt":2279,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54134,"proto":"UDP","dns":{"type":"answer","id":11200,"rcode":"NXDOMAIN","rrname":"gaherobusit.eu"}}
{"timestamp":"2017-12-12T18:33:17.554470+0100","flow_id":565005411775697,"pcap_cnt":2573,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60054,"proto":"UDP","dns":{"type":"answer","id":36859,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:20.537796+0100","flow_id":1870239530759364,"pcap_cnt":3234,"event_type":"dns","src_ip":"192.168.1.100","src_port":53824,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42300,"rrname":"foqotihalun.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.608932+0100","flow_id":1800444164146167,"pcap_cnt":1505,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55131,"proto":"UDP","dns":{"type":"answer","id":61012,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.747823+0100","flow_id":1047897174796591,"pcap_cnt":2682,"event_type":"dns","src_ip":"192.168.1.100","src_port":54729,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44436,"rrname":"puzewilurip.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.216259+0100","flow_id":1059725513993342,"pcap_cnt":3536,"event_type":"dns","src_ip":"192.168.1.100","src_port":65001,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":24337,"rrname":"qetohiqyvoz.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:11.611590+0100","flow_id":1775103857105292,"pcap_cnt":1509,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56822,"proto":"UDP","dns":{"type":"answer","id":351,"rcode":"NXDOMAIN","rrname":"mamajocahab.eu"}}
{"timestamp":"2017-12-12T18:33:16.906073+0100","flow_id":1625108567085913,"pcap_cnt":2206,"event_type":"dns","src_ip":"192.168.1.100","src_port":51394,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":16215,"rrname":"dimutobihom.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.748109+0100","flow_id":1047897174796591,"pcap_cnt":2683,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54729,"proto":"UDP","dns":{"type":"answer","id":44436,"rcode":"NXDOMAIN","rrname":"puzewilurip.eu"}}
{"timestamp":"2017-12-12T18:33:21.216552+0100","flow_id":1059725513993342,"pcap_cnt":3537,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65001,"proto":"UDP","dns":{"type":"answer","id":24337,"rcode":"NXDOMAIN","rrname":"qetohiqyvoz.eu"}}
{"timestamp":"2017-12-12T18:33:17.748109+0100","flow_id":1047897174796591,"pcap_cnt":2683,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54729,"proto":"UDP","dns":{"type":"answer","id":44436,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:16.906371+0100","flow_id":1625108567085913,"pcap_cnt":2207,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51394,"proto":"UDP","dns":{"type":"answer","id":16215,"rcode":"NXDOMAIN","rrname":"dimutobihom.eu"}}
{"timestamp":"2017-12-12T18:33:17.894469+0100","flow_id":693051271783681,"pcap_cnt":2765,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49203,"proto":"UDP","dns":{"type":"answer","id":2018,"rcode":"NXDOMAIN","rrname":"xutohonutyn.eu"}}
{"timestamp":"2017-12-12T18:33:17.036121+0100","flow_id":1586973552512033,"pcap_cnt":2293,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61868,"proto":"UDP","dns":{"type":"answer","id":8375,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:17.748497+0100","flow_id":1414687381875665,"pcap_cnt":2684,"event_type":"dns","src_ip":"192.168.1.100","src_port":59844,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38191,"rrname":"vojizitoken.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.089477+0100","flow_id":1026263424325702,"pcap_cnt":1831,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57259,"proto":"UDP","dns":{"type":"answer","id":7282,"rcode":"NXDOMAIN","rrname":"ryqivypahux.eu"}}
{"timestamp":"2017-12-12T18:33:17.062985+0100","flow_id":1402891254232585,"pcap_cnt":2300,"event_type":"dns","src_ip":"192.168.1.100","src_port":59947,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37305,"rrname":"volojifebeh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.704216+0100","flow_id":1963002233862736,"pcap_cnt":1551,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62840,"proto":"UDP","dns":{"type":"answer","id":56808,"rcode":"NXDOMAIN","rrname":"pufagipajit.eu"}}
{"timestamp":"2017-12-12T18:33:17.063257+0100","flow_id":1402891254232585,"pcap_cnt":2301,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59947,"proto":"UDP","dns":{"type":"answer","id":37305,"rcode":"NXDOMAIN","rrname":"volojifebeh.eu"}}
{"timestamp":"2017-12-12T18:33:11.704216+0100","flow_id":1963002233862736,"pcap_cnt":1551,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62840,"proto":"UDP","dns":{"type":"answer","id":56808,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.063257+0100","flow_id":1402891254232585,"pcap_cnt":2301,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59947,"proto":"UDP","dns":{"type":"answer","id":37305,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:11.699904+0100","flow_id":338952692672755,"pcap_cnt":1546,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50637,"proto":"UDP","dns":{"type":"answer","id":21932,"rcode":"NXDOMAIN","rrname":"qexetupezix.eu"}}
{"timestamp":"2017-12-12T18:33:11.752238+0100","flow_id":1353065338206270,"pcap_cnt":1579,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56529,"proto":"UDP","dns":{"type":"answer","id":33948,"rcode":"NXDOMAIN","rrname":"ryqepiqiror.eu"}}
{"timestamp":"2017-12-12T18:33:17.103462+0100","flow_id":540324382217254,"pcap_cnt":2330,"event_type":"dns","src_ip":"192.168.1.100","src_port":54202,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63793,"rrname":"tuwypagupeb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.379234+0100","flow_id":808630988324877,"pcap_cnt":1606,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57438,"proto":"UDP","dns":{"type":"answer","id":36693,"rcode":"NXDOMAIN","rrname":"voledokuwev.eu"}}
{"timestamp":"2017-12-12T18:33:17.103710+0100","flow_id":540324382217254,"pcap_cnt":2331,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54202,"proto":"UDP","dns":{"type":"answer","id":63793,"rcode":"NXDOMAIN","rrname":"tuwypagupeb.eu"}}
{"timestamp":"2017-12-12T18:33:13.379234+0100","flow_id":808630988324877,"pcap_cnt":1606,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57438,"proto":"UDP","dns":{"type":"answer","id":36693,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.643505+0100","flow_id":116711757828529,"pcap_cnt":2628,"event_type":"dns","src_ip":"192.168.1.100","src_port":51223,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31887,"rrname":"gaqirahebof.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.604424+0100","flow_id":1318310463114752,"pcap_cnt":1898,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60306,"proto":"UDP","dns":{"type":"answer","id":11230,"rcode":"NXDOMAIN","rrname":"kezydorekuw.eu"}}
{"timestamp":"2017-12-12T18:33:16.540269+0100","flow_id":1112420468407644,"pcap_cnt":2053,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55925,"proto":"UDP","dns":{"type":"answer","id":38748,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":559}}
{"timestamp":"2017-12-12T18:33:13.522486+0100","flow_id":729655130323190,"pcap_cnt":1649,"event_type":"dns","src_ip":"192.168.1.100","src_port":61995,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":61830,"rrname":"jelybodybuf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.862964+0100","flow_id":840072297171660,"pcap_cnt":2191,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55028,"proto":"UDP","dns":{"type":"answer","id":56513,"rcode":"NXDOMAIN","rrname":"qexofyqihid.eu"}}
{"timestamp":"2017-12-12T18:33:17.872846+0100","flow_id":170405291446670,"pcap_cnt":2756,"event_type":"dns","src_ip":"192.168.1.100","src_port":61199,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13556,"rrname":"galuhubywum.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.503582+0100","flow_id":1303664624774942,"pcap_cnt":2542,"event_type":"dns","src_ip":"192.168.1.100","src_port":54005,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":24146,"rrname":"novewecoliv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.443188+0100","flow_id":851133985262752,"pcap_cnt":1622,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65045,"proto":"UDP","dns":{"type":"answer","id":29510,"rcode":"NXDOMAIN","rrname":"gahunawahik.eu"}}
{"timestamp":"2017-12-12T18:33:14.504779+0100","flow_id":1845103234297391,"pcap_cnt":1760,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60345,"proto":"UDP","dns":{"type":"answer","id":30181,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:14.481639+0100","flow_id":1909566398419620,"pcap_cnt":1751,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63808,"proto":"UDP","dns":{"type":"answer","id":1229,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.873089+0100","flow_id":170405291446670,"pcap_cnt":2757,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61199,"proto":"UDP","dns":{"type":"answer","id":13556,"rcode":"NXDOMAIN","rrname":"galuhubywum.eu"}}
{"timestamp":"2017-12-12T18:33:17.806744+0100","flow_id":352705178324824,"pcap_cnt":2718,"event_type":"dns","src_ip":"192.168.1.100","src_port":63794,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42740,"rrname":"puvutaputeb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.503840+0100","flow_id":1303664624774942,"pcap_cnt":2543,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54005,"proto":"UDP","dns":{"type":"answer","id":24146,"rcode":"NXDOMAIN","rrname":"novewecoliv.eu"}}
{"timestamp":"2017-12-12T18:33:15.663988+0100","flow_id":1692438621810761,"pcap_cnt":1942,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51992,"proto":"UDP","dns":{"type":"answer","id":1894,"rcode":"NXDOMAIN","rrname":"pujycupodyn.eu"}}
{"timestamp":"2017-12-12T18:33:14.520318+0100","flow_id":303347414003838,"pcap_cnt":1771,"event_type":"dns","src_ip":"192.168.1.100","src_port":57789,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":56664,"rrname":"kerumyxofah.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:14.506769+0100","flow_id":1624930325803396,"pcap_cnt":1762,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52821,"proto":"UDP","dns":{"type":"answer","id":31687,"rcode":"NXDOMAIN","rrname":"nopujokelek.eu"}}
{"timestamp":"2017-12-12T18:33:15.663988+0100","flow_id":1692438621810761,"pcap_cnt":1942,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51992,"proto":"UDP","dns":{"type":"answer","id":1894,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:14.506769+0100","flow_id":1624930325803396,"pcap_cnt":1762,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52821,"proto":"UDP","dns":{"type":"answer","id":31687,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:14.529257+0100","flow_id":586763715875689,"pcap_cnt":1773,"event_type":"dns","src_ip":"192.168.1.100","src_port":62128,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60191,"rrname":"kemybarodiv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.520288+0100","flow_id":225230549020547,"pcap_cnt":2555,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61840,"proto":"UDP","dns":{"type":"answer","id":45336,"rcode":"NXDOMAIN","rrname":"vocupotusyz.eu"}}
{"timestamp":"2017-12-12T18:33:11.611590+0100","flow_id":1775103857105292,"pcap_cnt":1509,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56822,"proto":"UDP","dns":{"type":"answer","id":351,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.438331+0100","flow_id":379570198720571,"pcap_cnt":2004,"event_type":"dns","src_ip":"192.168.1.100","src_port":63977,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36363,"rrname":"puvomegagep.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:14.566695+0100","flow_id":303347414003838,"pcap_cnt":1802,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57789,"proto":"UDP","dns":{"type":"answer","id":56664,"rcode":"NXDOMAIN","rrname":"kerumyxofah.eu"}}
{"timestamp":"2017-12-12T18:33:17.652020+0100","flow_id":1790988794065379,"pcap_cnt":2631,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64794,"proto":"UDP","dns":{"type":"answer","id":60709,"rcode":"NXDOMAIN","rrname":"xugiqonenuz.eu"}}
{"timestamp":"2017-12-12T18:33:14.566695+0100","flow_id":303347414003838,"pcap_cnt":1802,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57789,"proto":"UDP","dns":{"type":"answer","id":56664,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:21.216552+0100","flow_id":1059725513993342,"pcap_cnt":3537,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65001,"proto":"UDP","dns":{"type":"answer","id":24337,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:16.523593+0100","flow_id":2166534291914057,"pcap_cnt":2049,"event_type":"dns","src_ip":"192.168.1.100","src_port":56448,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13001,"rrname":"kefucoruvyd.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.622385+0100","flow_id":105439616073275,"pcap_cnt":2089,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55865,"proto":"UDP","dns":{"type":"answer","id":18349,"rcode":"NXDOMAIN","rrname":"tunujolavez.eu"}}
{"timestamp":"2017-12-12T18:33:17.894469+0100","flow_id":693051271783681,"pcap_cnt":2765,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49203,"proto":"UDP","dns":{"type":"answer","id":2018,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:17.101766+0100","flow_id":239970876755334,"pcap_cnt":2328,"event_type":"dns","src_ip":"192.168.1.100","src_port":60824,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9224,"rrname":"rytahagemeg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.575337+0100","flow_id":2166534291914057,"pcap_cnt":2075,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56448,"proto":"UDP","dns":{"type":"answer","id":13001,"rcode":"NXDOMAIN","rrname":"kefucoruvyd.eu"}}
{"timestamp":"2017-12-12T18:33:19.788040+0100","flow_id":484487659980360,"pcap_cnt":2872,"event_type":"dns","src_ip":"192.168.1.100","src_port":63218,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40793,"rrname":"vofapacebuv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.748758+0100","flow_id":1414687381875665,"pcap_cnt":2685,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59844,"proto":"UDP","dns":{"type":"answer","id":38191,"rcode":"NXDOMAIN","rrname":"vojizitoken.eu"}}
{"timestamp":"2017-12-12T18:33:19.788316+0100","flow_id":484487659980360,"pcap_cnt":2873,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63218,"proto":"UDP","dns":{"type":"answer","id":40793,"rcode":"NXDOMAIN","rrname":"vofapacebuv.eu"}}
{"timestamp":"2017-12-12T18:33:17.102026+0100","flow_id":239970876755334,"pcap_cnt":2329,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60824,"proto":"UDP","dns":{"type":"answer","id":9224,"rcode":"NXDOMAIN","rrname":"rytahagemeg.eu"}}
{"timestamp":"2017-12-12T18:33:16.911110+0100","flow_id":413622846940934,"pcap_cnt":2214,"event_type":"dns","src_ip":"192.168.1.100","src_port":63163,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50287,"rrname":"citifemifif.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:14.719130+0100","flow_id":913715953806662,"pcap_cnt":1828,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52850,"proto":"UDP","dns":{"type":"answer","id":3598,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.699904+0100","flow_id":338952692672755,"pcap_cnt":1546,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50637,"proto":"UDP","dns":{"type":"answer","id":21932,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.752238+0100","flow_id":1353065338206270,"pcap_cnt":1579,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56529,"proto":"UDP","dns":{"type":"answer","id":33948,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.103710+0100","flow_id":540324382217254,"pcap_cnt":2331,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54202,"proto":"UDP","dns":{"type":"answer","id":63793,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:17.307663+0100","flow_id":1267539654848729,"pcap_cnt":2433,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60845,"proto":"UDP","dns":{"type":"answer","id":7648,"rcode":"NXDOMAIN","rrname":"marugofazez.eu"}}
{"timestamp":"2017-12-12T18:33:11.764877+0100","flow_id":2123717762588825,"pcap_cnt":1589,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59814,"proto":"UDP","dns":{"type":"answer","id":24533,"rcode":"NXDOMAIN","rrname":"vofirefumuj.eu"}}
{"timestamp":"2017-12-12T18:33:17.202697+0100","flow_id":538194078406601,"pcap_cnt":2382,"event_type":"dns","src_ip":"192.168.1.100","src_port":53881,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34478,"rrname":"foqilozutoz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.764877+0100","flow_id":2123717762588825,"pcap_cnt":1589,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59814,"proto":"UDP","dns":{"type":"answer","id":24533,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.567181+0100","flow_id":2223202090412986,"pcap_cnt":2071,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59773,"proto":"UDP","dns":{"type":"answer","id":13236,"rcode":"NXDOMAIN","rrname":"jejeqorekuv.eu"}}
{"timestamp":"2017-12-12T18:33:17.202950+0100","flow_id":538194078406601,"pcap_cnt":2383,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53881,"proto":"UDP","dns":{"type":"answer","id":34478,"rcode":"NXDOMAIN","rrname":"foqilozutoz.eu"}}
{"timestamp":"2017-12-12T18:33:13.456965+0100","flow_id":2035069637753093,"pcap_cnt":1626,"event_type":"dns","src_ip":"192.168.1.100","src_port":49724,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":10603,"rrname":"divejezumes.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.567181+0100","flow_id":2223202090412986,"pcap_cnt":2071,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59773,"proto":"UDP","dns":{"type":"answer","id":13236,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:13.443188+0100","flow_id":851133985262752,"pcap_cnt":1622,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65045,"proto":"UDP","dns":{"type":"answer","id":29510,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.922565+0100","flow_id":1314251719054026,"pcap_cnt":2233,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55877,"proto":"UDP","dns":{"type":"answer","id":42191,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:16.706382+0100","flow_id":1377694828513102,"pcap_cnt":2118,"event_type":"dns","src_ip":"192.168.1.100","src_port":52776,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2468,"rrname":"puvopalywet.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.566262+0100","flow_id":2051852222440438,"pcap_cnt":1675,"event_type":"dns","src_ip":"192.168.1.100","src_port":53130,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44552,"rrname":"disovyhityp.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.112587+0100","flow_id":1810311851914976,"pcap_cnt":2335,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53138,"proto":"UDP","dns":{"type":"answer","id":34070,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:13.582065+0100","flow_id":1071740684904805,"pcap_cnt":1691,"event_type":"dns","src_ip":"192.168.1.100","src_port":61757,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47232,"rrname":"gaquduhexet.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:17.110916+0100","flow_id":481474740334916,"pcap_cnt":2332,"event_type":"dns","src_ip":"192.168.1.100","src_port":58609,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1934,"rrname":"pumumagojef.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.012683+0100","flow_id":2181203752726657,"pcap_cnt":2279,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54134,"proto":"UDP","dns":{"type":"answer","id":11200,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:17.503840+0100","flow_id":1303664624774942,"pcap_cnt":2543,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54005,"proto":"UDP","dns":{"type":"answer","id":24146,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:17.111168+0100","flow_id":481474740334916,"pcap_cnt":2333,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58609,"proto":"UDP","dns":{"type":"answer","id":1934,"rcode":"NXDOMAIN","rrname":"pumumagojef.eu"}}
{"timestamp":"2017-12-12T18:33:11.634530+0100","flow_id":1509558914120628,"pcap_cnt":1520,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59011,"proto":"UDP","dns":{"type":"answer","id":44727,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.807011+0100","flow_id":352705178324824,"pcap_cnt":2719,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63794,"proto":"UDP","dns":{"type":"answer","id":42740,"rcode":"NXDOMAIN","rrname":"puvutaputeb.eu"}}
{"timestamp":"2017-12-12T18:33:20.538057+0100","flow_id":1870239530759364,"pcap_cnt":3235,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53824,"proto":"UDP","dns":{"type":"answer","id":42300,"rcode":"NXDOMAIN","rrname":"foqotihalun.eu"}}
{"timestamp":"2017-12-12T18:33:17.807011+0100","flow_id":352705178324824,"pcap_cnt":2719,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63794,"proto":"UDP","dns":{"type":"answer","id":42740,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:15.675293+0100","flow_id":1477638717394397,"pcap_cnt":1949,"event_type":"dns","src_ip":"192.168.1.100","src_port":57502,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23845,"rrname":"xuxuqodopef.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.823533+0100","flow_id":715578375246061,"pcap_cnt":2726,"event_type":"dns","src_ip":"192.168.1.100","src_port":52230,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44334,"rrname":"qedoqyvoguq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:14.521725+0100","flow_id":71440654857725,"pcap_cnt":1772,"event_type":"dns","src_ip":"192.168.1.100","src_port":61183,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33313,"rrname":"jewararuqid.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.686316+0100","flow_id":1628409249364204,"pcap_cnt":1959,"event_type":"dns","src_ip":"192.168.1.100","src_port":49687,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48388,"rrname":"puzubovafik.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.823774+0100","flow_id":715578375246061,"pcap_cnt":2727,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52230,"proto":"UDP","dns":{"type":"answer","id":44334,"rcode":"NXDOMAIN","rrname":"qedoqyvoguq.eu"}}
{"timestamp":"2017-12-12T18:33:13.514847+0100","flow_id":769909711297311,"pcap_cnt":1646,"event_type":"dns","src_ip":"192.168.1.100","src_port":62136,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30745,"rrname":"galoqyzajep.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.906371+0100","flow_id":1625108567085913,"pcap_cnt":2207,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51394,"proto":"UDP","dns":{"type":"answer","id":16215,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":560}}
{"timestamp":"2017-12-12T18:33:17.652020+0100","flow_id":1790988794065379,"pcap_cnt":2631,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64794,"proto":"UDP","dns":{"type":"answer","id":60709,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:16.622385+0100","flow_id":105439616073275,"pcap_cnt":2089,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55865,"proto":"UDP","dns":{"type":"answer","id":18349,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":559}}
{"timestamp":"2017-12-12T18:33:16.937246+0100","flow_id":458354930137229,"pcap_cnt":2242,"event_type":"dns","src_ip":"192.168.1.100","src_port":49496,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6597,"rrname":"mavulymupiv.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:17.742498+0100","flow_id":680585129186402,"pcap_cnt":2680,"event_type":"dns","src_ip":"192.168.1.100","src_port":57065,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53285,"rrname":"tucadilebix.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.332269+0100","flow_id":820478656713197,"pcap_cnt":3588,"event_type":"dns","src_ip":"192.168.1.100","src_port":51541,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14383,"rrname":"magivakelev.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.639903+0100","flow_id":1606444786697119,"pcap_cnt":2094,"event_type":"dns","src_ip":"192.168.1.100","src_port":51691,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64756,"rrname":"dixemazufel.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.089477+0100","flow_id":1026263424325702,"pcap_cnt":1831,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57259,"proto":"UDP","dns":{"type":"answer","id":7282,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.742726+0100","flow_id":680585129186402,"pcap_cnt":2681,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57065,"proto":"UDP","dns":{"type":"answer","id":53285,"rcode":"NXDOMAIN","rrname":"tucadilebix.eu"}}
{"timestamp":"2017-12-12T18:33:12.573948+0100","flow_id":1832302084037858,"pcap_cnt":1601,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58541,"proto":"UDP","dns":{"type":"answer","id":21100,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:21.332617+0100","flow_id":820478656713197,"pcap_cnt":3589,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51541,"proto":"UDP","dns":{"type":"answer","id":14383,"rcode":"NXDOMAIN","rrname":"magivakelev.eu"}}
{"timestamp":"2017-12-12T18:33:17.748758+0100","flow_id":1414687381875665,"pcap_cnt":2685,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59844,"proto":"UDP","dns":{"type":"answer","id":38191,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:19.788316+0100","flow_id":484487659980360,"pcap_cnt":2873,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63218,"proto":"UDP","dns":{"type":"answer","id":40793,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:17.102026+0100","flow_id":239970876755334,"pcap_cnt":2329,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60824,"proto":"UDP","dns":{"type":"answer","id":9224,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:17.871831+0100","flow_id":271229648719255,"pcap_cnt":2754,"event_type":"dns","src_ip":"192.168.1.100","src_port":60515,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14629,"rrname":"foxyxubecuh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.942498+0100","flow_id":1522272017530887,"pcap_cnt":2942,"event_type":"dns","src_ip":"192.168.1.100","src_port":65046,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":54578,"rrname":"kepujajynib.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:15.574756+0100","flow_id":1486372533421348,"pcap_cnt":1892,"event_type":"dns","src_ip":"192.168.1.100","src_port":59689,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23866,"rrname":"purijygirem.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.510300+0100","flow_id":1248508654504284,"pcap_cnt":1644,"event_type":"dns","src_ip":"192.168.1.100","src_port":53017,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34904,"rrname":"gacarisekub.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.872067+0100","flow_id":271229648719255,"pcap_cnt":2755,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60515,"proto":"UDP","dns":{"type":"answer","id":14629,"rcode":"NXDOMAIN","rrname":"foxyxubecuh.eu"}}
{"timestamp":"2017-12-12T18:33:15.619146+0100","flow_id":1486372533421348,"pcap_cnt":1908,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59689,"proto":"UDP","dns":{"type":"answer","id":23866,"rcode":"NXDOMAIN","rrname":"purijygirem.eu"}}
{"timestamp":"2017-12-12T18:33:13.547968+0100","flow_id":1183328230792320,"pcap_cnt":1661,"event_type":"dns","src_ip":"192.168.1.100","src_port":53108,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":15952,"rrname":"xuderadezuv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.643778+0100","flow_id":116711757828529,"pcap_cnt":2629,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51223,"proto":"UDP","dns":{"type":"answer","id":31887,"rcode":"NXDOMAIN","rrname":"gaqirahebof.eu"}}
{"timestamp":"2017-12-12T18:33:15.619146+0100","flow_id":1486372533421348,"pcap_cnt":1908,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59689,"proto":"UDP","dns":{"type":"answer","id":23866,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:14.372545+0100","flow_id":729655130323190,"pcap_cnt":1728,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61995,"proto":"UDP","dns":{"type":"answer","id":61830,"rcode":"NXDOMAIN","rrname":"jelybodybuf.eu"}}
{"timestamp":"2017-12-12T18:33:17.643778+0100","flow_id":116711757828529,"pcap_cnt":2629,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51223,"proto":"UDP","dns":{"type":"answer","id":31887,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:13.557656+0100","flow_id":2035069637753093,"pcap_cnt":1667,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49724,"proto":"UDP","dns":{"type":"answer","id":10603,"rcode":"NXDOMAIN","rrname":"divejezumes.eu"}}
{"timestamp":"2017-12-12T18:33:15.636785+0100","flow_id":402872543721329,"pcap_cnt":1914,"event_type":"dns","src_ip":"192.168.1.100","src_port":57722,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13986,"rrname":"dimasyhageh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.873089+0100","flow_id":170405291446670,"pcap_cnt":2757,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61199,"proto":"UDP","dns":{"type":"answer","id":13556,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:13.557656+0100","flow_id":2035069637753093,"pcap_cnt":1667,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49724,"proto":"UDP","dns":{"type":"answer","id":10603,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.617925+0100","flow_id":2034513439605634,"pcap_cnt":1906,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62951,"proto":"UDP","dns":{"type":"answer","id":60462,"rcode":"NXDOMAIN","rrname":"cidykatafuj.eu"}}
{"timestamp":"2017-12-12T18:33:19.754119+0100","flow_id":1813591059562951,"pcap_cnt":2858,"event_type":"dns","src_ip":"192.168.1.100","src_port":57468,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33842,"rrname":"pujulapohar.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.583540+0100","flow_id":184694647416692,"pcap_cnt":1692,"event_type":"dns","src_ip":"192.168.1.100","src_port":53487,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7800,"rrname":"mamitumyvig.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.617925+0100","flow_id":2034513439605634,"pcap_cnt":1906,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62951,"proto":"UDP","dns":{"type":"answer","id":60462,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.242749+0100","flow_id":15715601855549,"pcap_cnt":2394,"event_type":"dns","src_ip":"192.168.1.100","src_port":50307,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59613,"rrname":"disumesenyv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.521182+0100","flow_id":2110551540757470,"pcap_cnt":2556,"event_type":"dns","src_ip":"192.168.1.100","src_port":57229,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31426,"rrname":"ciqukecywiv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.754385+0100","flow_id":1813591059562951,"pcap_cnt":2859,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57468,"proto":"UDP","dns":{"type":"answer","id":33842,"rcode":"NXDOMAIN","rrname":"pujulapohar.eu"}}
{"timestamp":"2017-12-12T18:33:15.652124+0100","flow_id":614975208682332,"pcap_cnt":1927,"event_type":"dns","src_ip":"192.168.1.100","src_port":50625,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60797,"rrname":"xukenyxitox.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.676857+0100","flow_id":822243887633401,"pcap_cnt":1537,"event_type":"dns","src_ip":"192.168.1.100","src_port":63406,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":54798,"rrname":"xuxyxynahop.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.243027+0100","flow_id":15715601855549,"pcap_cnt":2395,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50307,"proto":"UDP","dns":{"type":"answer","id":59613,"rcode":"NXDOMAIN","rrname":"disumesenyv.eu"}}
{"timestamp":"2017-12-12T18:33:20.538057+0100","flow_id":1870239530759364,"pcap_cnt":3235,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53824,"proto":"UDP","dns":{"type":"answer","id":42300,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:17.520288+0100","flow_id":225230549020547,"pcap_cnt":2555,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61840,"proto":"UDP","dns":{"type":"answer","id":45336,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:17.823774+0100","flow_id":715578375246061,"pcap_cnt":2727,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52230,"proto":"UDP","dns":{"type":"answer","id":44334,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:20.646388+0100","flow_id":103856920911092,"pcap_cnt":3280,"event_type":"dns","src_ip":"192.168.1.100","src_port":61257,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64850,"rrname":"vopogakakud.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:14.575286+0100","flow_id":586763715875689,"pcap_cnt":1808,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62128,"proto":"UDP","dns":{"type":"answer","id":60191,"rcode":"NXDOMAIN","rrname":"kemybarodiv.eu"}}
{"timestamp":"2017-12-12T18:33:17.601439+0100","flow_id":2083800336903519,"pcap_cnt":2602,"event_type":"dns","src_ip":"192.168.1.100","src_port":57428,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":58434,"rrname":"rylefogohan.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:11.719744+0100","flow_id":1744025473775699,"pcap_cnt":1566,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52433,"proto":"UDP","dns":{"type":"answer","id":21672,"rcode":"NXDOMAIN","rrname":"mavogutogip.eu"}}
{"timestamp":"2017-12-12T18:33:16.937533+0100","flow_id":458354930137229,"pcap_cnt":2243,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49496,"proto":"UDP","dns":{"type":"answer","id":6597,"rcode":"NXDOMAIN","rrname":"mavulymupiv.eu"}}
{"timestamp":"2017-12-12T18:33:17.601713+0100","flow_id":2083800336903519,"pcap_cnt":2603,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57428,"proto":"UDP","dns":{"type":"answer","id":58434,"rcode":"NXDOMAIN","rrname":"rylefogohan.eu"}}
{"timestamp":"2017-12-12T18:33:16.575337+0100","flow_id":2166534291914057,"pcap_cnt":2075,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56448,"proto":"UDP","dns":{"type":"answer","id":13001,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.742726+0100","flow_id":680585129186402,"pcap_cnt":2681,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57065,"proto":"UDP","dns":{"type":"answer","id":53285,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:16.495688+0100","flow_id":1797639550832712,"pcap_cnt":2028,"event_type":"dns","src_ip":"192.168.1.100","src_port":63065,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44519,"rrname":"magowymafum.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.771073+0100","flow_id":2074244034642945,"pcap_cnt":2140,"event_type":"dns","src_ip":"192.168.1.100","src_port":57541,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":57949,"rrname":"qegytuvufoq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.332617+0100","flow_id":820478656713197,"pcap_cnt":3589,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51541,"proto":"UDP","dns":{"type":"answer","id":14383,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:17.768050+0100","flow_id":1826722921953330,"pcap_cnt":2696,"event_type":"dns","src_ip":"192.168.1.100","src_port":63204,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2383,"rrname":"fogokozazit.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.544583+0100","flow_id":1797639550832712,"pcap_cnt":2056,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63065,"proto":"UDP","dns":{"type":"answer","id":44519,"rcode":"NXDOMAIN","rrname":"magowymafum.eu"}}
{"timestamp":"2017-12-12T18:33:16.771361+0100","flow_id":2074244034642945,"pcap_cnt":2141,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57541,"proto":"UDP","dns":{"type":"answer","id":57949,"rcode":"NXDOMAIN","rrname":"qegytuvufoq.eu"}}
{"timestamp":"2017-12-12T18:33:17.768293+0100","flow_id":1826722921953330,"pcap_cnt":2697,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63204,"proto":"UDP","dns":{"type":"answer","id":2383,"rcode":"NXDOMAIN","rrname":"fogokozazit.eu"}}
{"timestamp":"2017-12-12T18:33:16.911327+0100","flow_id":413622846940934,"pcap_cnt":2215,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63163,"proto":"UDP","dns":{"type":"answer","id":50287,"rcode":"NXDOMAIN","rrname":"citifemifif.eu"}}
{"timestamp":"2017-12-12T18:33:16.771361+0100","flow_id":2074244034642945,"pcap_cnt":2141,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57541,"proto":"UDP","dns":{"type":"answer","id":57949,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":560}}
{"timestamp":"2017-12-12T18:33:17.768293+0100","flow_id":1826722921953330,"pcap_cnt":2697,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63204,"proto":"UDP","dns":{"type":"answer","id":2383,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:16.911327+0100","flow_id":413622846940934,"pcap_cnt":2215,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63163,"proto":"UDP","dns":{"type":"answer","id":50287,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:17.307663+0100","flow_id":1267539654848729,"pcap_cnt":2433,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60845,"proto":"UDP","dns":{"type":"answer","id":7648,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:17.156445+0100","flow_id":1060425594397469,"pcap_cnt":2356,"event_type":"dns","src_ip":"192.168.1.100","src_port":54247,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30238,"rrname":"ciqanukaxas.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.940481+0100","flow_id":1646037942688193,"pcap_cnt":2246,"event_type":"dns","src_ip":"192.168.1.100","src_port":63324,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53281,"rrname":"qeqekepokul.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.156696+0100","flow_id":1060425594397469,"pcap_cnt":2357,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54247,"proto":"UDP","dns":{"type":"answer","id":30238,"rcode":"NXDOMAIN","rrname":"ciqanukaxas.eu"}}
{"timestamp":"2017-12-12T18:33:14.372545+0100","flow_id":729655130323190,"pcap_cnt":1728,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61995,"proto":"UDP","dns":{"type":"answer","id":61830,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.156696+0100","flow_id":1060425594397469,"pcap_cnt":2357,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54247,"proto":"UDP","dns":{"type":"answer","id":30238,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:17.291986+0100","flow_id":1085929110160073,"pcap_cnt":2413,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51645,"proto":"UDP","dns":{"type":"answer","id":23481,"rcode":"NXDOMAIN","rrname":"gahipyhopax.eu"}}
{"timestamp":"2017-12-12T18:33:16.706633+0100","flow_id":1377694828513102,"pcap_cnt":2119,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52776,"proto":"UDP","dns":{"type":"answer","id":2468,"rcode":"NXDOMAIN","rrname":"puvopalywet.eu"}}
{"timestamp":"2017-12-12T18:33:17.291986+0100","flow_id":1085929110160073,"pcap_cnt":2413,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51645,"proto":"UDP","dns":{"type":"answer","id":23481,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.683280+0100","flow_id":402872543721329,"pcap_cnt":1956,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57722,"proto":"UDP","dns":{"type":"answer","id":13986,"rcode":"NXDOMAIN","rrname":"dimasyhageh.eu"}}
{"timestamp":"2017-12-12T18:33:17.165767+0100","flow_id":1104253588178823,"pcap_cnt":2364,"event_type":"dns","src_ip":"192.168.1.100","src_port":61516,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":65266,"rrname":"kefaxyjebav.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.111168+0100","flow_id":481474740334916,"pcap_cnt":2333,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58609,"proto":"UDP","dns":{"type":"answer","id":1934,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:13.634108+0100","flow_id":184694647416692,"pcap_cnt":1722,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53487,"proto":"UDP","dns":{"type":"answer","id":7800,"rcode":"NXDOMAIN","rrname":"mamitumyvig.eu"}}
{"timestamp":"2017-12-12T18:33:17.166028+0100","flow_id":1104253588178823,"pcap_cnt":2365,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61516,"proto":"UDP","dns":{"type":"answer","id":65266,"rcode":"NXDOMAIN","rrname":"kefaxyjebav.eu"}}
{"timestamp":"2017-12-12T18:33:17.304536+0100","flow_id":81527385728408,"pcap_cnt":2428,"event_type":"dns","src_ip":"192.168.1.100","src_port":50088,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49611,"rrname":"vofomifyrex.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.634108+0100","flow_id":184694647416692,"pcap_cnt":1722,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53487,"proto":"UDP","dns":{"type":"answer","id":7800,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.593988+0100","flow_id":459183859961657,"pcap_cnt":2081,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55149,"proto":"UDP","dns":{"type":"answer","id":20590,"rcode":"NXDOMAIN","rrname":"nojuletacuf.eu"}}
{"timestamp":"2017-12-12T18:33:17.521421+0100","flow_id":2110551540757470,"pcap_cnt":2557,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57229,"proto":"UDP","dns":{"type":"answer","id":31426,"rcode":"NXDOMAIN","rrname":"ciqukecywiv.eu"}}
{"timestamp":"2017-12-12T18:33:17.243027+0100","flow_id":15715601855549,"pcap_cnt":2395,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50307,"proto":"UDP","dns":{"type":"answer","id":59613,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:15.721847+0100","flow_id":614975208682332,"pcap_cnt":1970,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50625,"proto":"UDP","dns":{"type":"answer","id":60797,"rcode":"NXDOMAIN","rrname":"xukenyxitox.eu"}}
{"timestamp":"2017-12-12T18:33:14.533671+0100","flow_id":170654399341735,"pcap_cnt":1775,"event_type":"dns","src_ip":"192.168.1.100","src_port":55242,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62667,"rrname":"cicypucitan.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.721847+0100","flow_id":614975208682332,"pcap_cnt":1970,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50625,"proto":"UDP","dns":{"type":"answer","id":60797,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.743065+0100","flow_id":1477638717394397,"pcap_cnt":1984,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57502,"proto":"UDP","dns":{"type":"answer","id":23845,"rcode":"NXDOMAIN","rrname":"xuxuqodopef.eu"}}
{"timestamp":"2017-12-12T18:33:17.319847+0100","flow_id":517264702714586,"pcap_cnt":2446,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51275,"proto":"UDP","dns":{"type":"answer","id":15356,"rcode":"NXDOMAIN","rrname":"cicavemejih.eu"}}
{"timestamp":"2017-12-12T18:33:14.557777+0100","flow_id":64723325692884,"pcap_cnt":1795,"event_type":"dns","src_ip":"192.168.1.100","src_port":53464,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9657,"rrname":"qedutivosob.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:15.743065+0100","flow_id":1477638717394397,"pcap_cnt":1984,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57502,"proto":"UDP","dns":{"type":"answer","id":23845,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.319847+0100","flow_id":517264702714586,"pcap_cnt":2446,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51275,"proto":"UDP","dns":{"type":"answer","id":15356,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:14.575286+0100","flow_id":586763715875689,"pcap_cnt":1808,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62128,"proto":"UDP","dns":{"type":"answer","id":60191,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:11.719744+0100","flow_id":1744025473775699,"pcap_cnt":1566,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52433,"proto":"UDP","dns":{"type":"answer","id":21672,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:14.568344+0100","flow_id":71440654857725,"pcap_cnt":1804,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61183,"proto":"UDP","dns":{"type":"answer","id":33313,"rcode":"NXDOMAIN","rrname":"jewararuqid.eu"}}
{"timestamp":"2017-12-12T18:33:17.396748+0100","flow_id":155542556089290,"pcap_cnt":2490,"event_type":"dns","src_ip":"192.168.1.100","src_port":56366,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35085,"rrname":"keretejuraw.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:15.754661+0100","flow_id":1628409249364204,"pcap_cnt":1989,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49687,"proto":"UDP","dns":{"type":"answer","id":48388,"rcode":"NXDOMAIN","rrname":"puzubovafik.eu"}}
{"timestamp":"2017-12-12T18:33:13.572663+0100","flow_id":111858444516599,"pcap_cnt":1682,"event_type":"dns","src_ip":"192.168.1.100","src_port":51701,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31432,"rrname":"kezoxenitoj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.544583+0100","flow_id":1797639550832712,"pcap_cnt":2056,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63065,"proto":"UDP","dns":{"type":"answer","id":44519,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:19.718850+0100","flow_id":2761980638967,"pcap_cnt":2841,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54051,"proto":"UDP","dns":{"type":"answer","id":28502,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:13.625706+0100","flow_id":111858444516599,"pcap_cnt":1715,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51701,"proto":"UDP","dns":{"type":"answer","id":31432,"rcode":"NXDOMAIN","rrname":"kezoxenitoj.eu"}}
{"timestamp":"2017-12-12T18:33:21.435235+0100","flow_id":1516194639225891,"pcap_cnt":3640,"event_type":"dns","src_ip":"192.168.1.100","src_port":53470,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37758,"rrname":"ryhohovosar.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.625706+0100","flow_id":111858444516599,"pcap_cnt":1715,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51701,"proto":"UDP","dns":{"type":"answer","id":31432,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:19.942723+0100","flow_id":1522272017530887,"pcap_cnt":2943,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65046,"proto":"UDP","dns":{"type":"answer","id":54578,"rcode":"NXDOMAIN","rrname":"kepujajynib.eu"}}
{"timestamp":"2017-12-12T18:33:19.745290+0100","flow_id":1179308141676454,"pcap_cnt":2852,"event_type":"dns","src_ip":"192.168.1.100","src_port":49428,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62942,"rrname":"qebifopalaz.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:19.942723+0100","flow_id":1522272017530887,"pcap_cnt":2943,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65046,"proto":"UDP","dns":{"type":"answer","id":54578,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:21.435503+0100","flow_id":1516194639225891,"pcap_cnt":3641,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53470,"proto":"UDP","dns":{"type":"answer","id":37758,"rcode":"NXDOMAIN","rrname":"ryhohovosar.eu"}}
{"timestamp":"2017-12-12T18:33:16.862964+0100","flow_id":840072297171660,"pcap_cnt":2191,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55028,"proto":"UDP","dns":{"type":"answer","id":56513,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:19.745501+0100","flow_id":1179308141676454,"pcap_cnt":2853,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49428,"proto":"UDP","dns":{"type":"answer","id":62942,"rcode":"NXDOMAIN","rrname":"qebifopalaz.eu"}}
{"timestamp":"2017-12-12T18:33:19.965232+0100","flow_id":2014921946544752,"pcap_cnt":2952,"event_type":"dns","src_ip":"192.168.1.100","src_port":59005,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62592,"rrname":"pumebeqalew.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.202950+0100","flow_id":538194078406601,"pcap_cnt":2383,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53881,"proto":"UDP","dns":{"type":"answer","id":34478,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:19.745501+0100","flow_id":1179308141676454,"pcap_cnt":2853,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49428,"proto":"UDP","dns":{"type":"answer","id":62942,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:16.916886+0100","flow_id":134082753002902,"pcap_cnt":2220,"event_type":"dns","src_ip":"192.168.1.100","src_port":65349,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50849,"rrname":"disafuwokis.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.965524+0100","flow_id":2014921946544752,"pcap_cnt":2953,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59005,"proto":"UDP","dns":{"type":"answer","id":62592,"rcode":"NXDOMAIN","rrname":"pumebeqalew.eu"}}
{"timestamp":"2017-12-12T18:33:16.940743+0100","flow_id":1646037942688193,"pcap_cnt":2247,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63324,"proto":"UDP","dns":{"type":"answer","id":53281,"rcode":"NXDOMAIN","rrname":"qeqekepokul.eu"}}
{"timestamp":"2017-12-12T18:33:13.615394+0100","flow_id":2051852222440438,"pcap_cnt":1708,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53130,"proto":"UDP","dns":{"type":"answer","id":44552,"rcode":"NXDOMAIN","rrname":"disovyhityp.eu"}}
{"timestamp":"2017-12-12T18:33:16.917151+0100","flow_id":134082753002902,"pcap_cnt":2221,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65349,"proto":"UDP","dns":{"type":"answer","id":50849,"rcode":"NXDOMAIN","rrname":"disafuwokis.eu"}}
{"timestamp":"2017-12-12T18:33:13.615394+0100","flow_id":2051852222440438,"pcap_cnt":1708,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53130,"proto":"UDP","dns":{"type":"answer","id":44552,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.706633+0100","flow_id":1377694828513102,"pcap_cnt":2119,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52776,"proto":"UDP","dns":{"type":"answer","id":2468,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":559}}
{"timestamp":"2017-12-12T18:33:15.683280+0100","flow_id":402872543721329,"pcap_cnt":1956,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57722,"proto":"UDP","dns":{"type":"answer","id":13986,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.772922+0100","flow_id":145022034692922,"pcap_cnt":2144,"event_type":"dns","src_ip":"192.168.1.100","src_port":64387,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60073,"rrname":"rydinivoloh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.480123+0100","flow_id":1534564214068091,"pcap_cnt":2532,"event_type":"dns","src_ip":"192.168.1.100","src_port":63051,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62996,"rrname":"gahocuwalyc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.754385+0100","flow_id":1813591059562951,"pcap_cnt":2859,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57468,"proto":"UDP","dns":{"type":"answer","id":33842,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:16.773170+0100","flow_id":145022034692922,"pcap_cnt":2145,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64387,"proto":"UDP","dns":{"type":"answer","id":60073,"rcode":"NXDOMAIN","rrname":"rydinivoloh.eu"}}
{"timestamp":"2017-12-12T18:33:17.166028+0100","flow_id":1104253588178823,"pcap_cnt":2365,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61516,"proto":"UDP","dns":{"type":"answer","id":65266,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:17.480374+0100","flow_id":1534564214068091,"pcap_cnt":2533,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63051,"proto":"UDP","dns":{"type":"answer","id":62996,"rcode":"NXDOMAIN","rrname":"gahocuwalyc.eu"}}
{"timestamp":"2017-12-12T18:33:17.304757+0100","flow_id":81527385728408,"pcap_cnt":2429,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50088,"proto":"UDP","dns":{"type":"answer","id":49611,"rcode":"NXDOMAIN","rrname":"vofomifyrex.eu"}}
{"timestamp":"2017-12-12T18:33:17.168690+0100","flow_id":1242895132496626,"pcap_cnt":2366,"event_type":"dns","src_ip":"192.168.1.100","src_port":56963,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43132,"rrname":"novugukupap.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.521421+0100","flow_id":2110551540757470,"pcap_cnt":2557,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57229,"proto":"UDP","dns":{"type":"answer","id":31426,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:17.168944+0100","flow_id":1242895132496626,"pcap_cnt":2367,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56963,"proto":"UDP","dns":{"type":"answer","id":43132,"rcode":"NXDOMAIN","rrname":"novugukupap.eu"}}
{"timestamp":"2017-12-12T18:33:16.593988+0100","flow_id":459183859961657,"pcap_cnt":2081,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55149,"proto":"UDP","dns":{"type":"answer","id":20590,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":559}}
{"timestamp":"2017-12-12T18:33:11.743335+0100","flow_id":822243887633401,"pcap_cnt":1575,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63406,"proto":"UDP","dns":{"type":"answer","id":54798,"rcode":"NXDOMAIN","rrname":"xuxyxynahop.eu"}}
{"timestamp":"2017-12-12T18:33:19.811399+0100","flow_id":514316207874439,"pcap_cnt":2890,"event_type":"dns","src_ip":"192.168.1.100","src_port":64817,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6313,"rrname":"nofuwufutom.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.572103+0100","flow_id":1799258753317575,"pcap_cnt":1681,"event_type":"dns","src_ip":"192.168.1.100","src_port":64586,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59709,"rrname":"fotekuhagyx.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.414050+0100","flow_id":827473010643298,"pcap_cnt":2001,"event_type":"dns","src_ip":"192.168.1.100","src_port":51632,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62036,"rrname":"jepobanagij.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.811675+0100","flow_id":514316207874439,"pcap_cnt":2891,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64817,"proto":"UDP","dns":{"type":"answer","id":6313,"rcode":"NXDOMAIN","rrname":"nofuwufutom.eu"}}
{"timestamp":"2017-12-12T18:33:13.623269+0100","flow_id":1799258753317575,"pcap_cnt":1713,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64586,"proto":"UDP","dns":{"type":"answer","id":59709,"rcode":"NXDOMAIN","rrname":"fotekuhagyx.eu"}}
{"timestamp":"2017-12-12T18:33:16.448216+0100","flow_id":588999246534360,"pcap_cnt":2011,"event_type":"dns","src_ip":"192.168.1.100","src_port":63091,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8359,"rrname":"xuqotujodaz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.601713+0100","flow_id":2083800336903519,"pcap_cnt":2603,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57428,"proto":"UDP","dns":{"type":"answer","id":58434,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:16.640149+0100","flow_id":1606444786697119,"pcap_cnt":2095,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51691,"proto":"UDP","dns":{"type":"answer","id":64756,"rcode":"NXDOMAIN","rrname":"dixemazufel.eu"}}
{"timestamp":"2017-12-12T18:33:16.480400+0100","flow_id":2231323873531024,"pcap_cnt":2020,"event_type":"dns","src_ip":"192.168.1.100","src_port":54416,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":65221,"rrname":"makatokagal.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:14.568344+0100","flow_id":71440654857725,"pcap_cnt":1804,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61183,"proto":"UDP","dns":{"type":"answer","id":33313,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.771553+0100","flow_id":1909888521127393,"pcap_cnt":2142,"event_type":"dns","src_ip":"192.168.1.100","src_port":56741,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4749,"rrname":"makagucyraj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.418884+0100","flow_id":1076553196332100,"pcap_cnt":1613,"event_type":"dns","src_ip":"192.168.1.100","src_port":61211,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64921,"rrname":"magivakelev.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.771816+0100","flow_id":1909888521127393,"pcap_cnt":2143,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56741,"proto":"UDP","dns":{"type":"answer","id":4749,"rcode":"NXDOMAIN","rrname":"makagucyraj.eu"}}
{"timestamp":"2017-12-12T18:33:13.430248+0100","flow_id":128619553933419,"pcap_cnt":1617,"event_type":"dns","src_ip":"192.168.1.100","src_port":58090,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":24014,"rrname":"cinazetybiq.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:16.771816+0100","flow_id":1909888521127393,"pcap_cnt":2143,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56741,"proto":"UDP","dns":{"type":"answer","id":4749,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":559}}
{"timestamp":"2017-12-12T18:33:17.356096+0100","flow_id":2013861089472256,"pcap_cnt":2478,"event_type":"dns","src_ip":"192.168.1.100","src_port":51100,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30180,"rrname":"rycovuvutiq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.993923+0100","flow_id":1358792677403267,"pcap_cnt":2270,"event_type":"dns","src_ip":"192.168.1.100","src_port":60960,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35227,"rrname":"puvybivihox.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.398230+0100","flow_id":1282535533122454,"pcap_cnt":2492,"event_type":"dns","src_ip":"192.168.1.100","src_port":58754,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25171,"rrname":"cicafykemaj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:14.408261+0100","flow_id":77636145134277,"pcap_cnt":1736,"event_type":"dns","src_ip":"192.168.1.100","src_port":52416,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25667,"rrname":"jenoqujumez.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.604424+0100","flow_id":1318310463114752,"pcap_cnt":1898,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60306,"proto":"UDP","dns":{"type":"answer","id":11230,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.356336+0100","flow_id":2013861089472256,"pcap_cnt":2479,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51100,"proto":"UDP","dns":{"type":"answer","id":30180,"rcode":"NXDOMAIN","rrname":"rycovuvutiq.eu"}}
{"timestamp":"2017-12-12T18:33:17.398463+0100","flow_id":1282535533122454,"pcap_cnt":2493,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58754,"proto":"UDP","dns":{"type":"answer","id":25171,"rcode":"NXDOMAIN","rrname":"cicafykemaj.eu"}}
{"timestamp":"2017-12-12T18:33:17.911368+0100","flow_id":58776943978504,"pcap_cnt":2780,"event_type":"dns","src_ip":"192.168.1.100","src_port":62342,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45307,"rrname":"purodogidot.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.392569+0100","flow_id":1933345485094265,"pcap_cnt":2488,"event_type":"dns","src_ip":"192.168.1.100","src_port":56203,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5140,"rrname":"xubolyjazaq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.554117+0100","flow_id":1584993572320389,"pcap_cnt":1664,"event_type":"dns","src_ip":"192.168.1.100","src_port":55943,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45091,"rrname":"xutaquxelat.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.911662+0100","flow_id":58776943978504,"pcap_cnt":2781,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62342,"proto":"UDP","dns":{"type":"answer","id":45307,"rcode":"NXDOMAIN","rrname":"purodogidot.eu"}}
{"timestamp":"2017-12-12T18:33:17.730103+0100","flow_id":832820244980727,"pcap_cnt":2674,"event_type":"dns","src_ip":"192.168.1.100","src_port":61684,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1687,"rrname":"kemuxurohym.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.392824+0100","flow_id":1933345485094265,"pcap_cnt":2489,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56203,"proto":"UDP","dns":{"type":"answer","id":5140,"rcode":"NXDOMAIN","rrname":"xubolyjazaq.eu"}}
{"timestamp":"2017-12-12T18:33:19.773333+0100","flow_id":132555892313301,"pcap_cnt":2862,"event_type":"dns","src_ip":"192.168.1.100","src_port":49202,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40747,"rrname":"foderasyqaw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.598648+0100","flow_id":1183328230792320,"pcap_cnt":1698,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53108,"proto":"UDP","dns":{"type":"answer","id":15952,"rcode":"NXDOMAIN","rrname":"xuderadezuv.eu"}}
{"timestamp":"2017-12-12T18:33:19.965524+0100","flow_id":2014921946544752,"pcap_cnt":2953,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59005,"proto":"UDP","dns":{"type":"answer","id":62592,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:16.940743+0100","flow_id":1646037942688193,"pcap_cnt":2247,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63324,"proto":"UDP","dns":{"type":"answer","id":53281,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:17.195323+0100","flow_id":1410929285528315,"pcap_cnt":2378,"event_type":"dns","src_ip":"192.168.1.100","src_port":61933,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7540,"rrname":"dirynozebot.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.773627+0100","flow_id":132555892313301,"pcap_cnt":2863,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49202,"proto":"UDP","dns":{"type":"answer","id":40747,"rcode":"NXDOMAIN","rrname":"foderasyqaw.eu"}}
{"timestamp":"2017-12-12T18:33:16.917151+0100","flow_id":134082753002902,"pcap_cnt":2221,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65349,"proto":"UDP","dns":{"type":"answer","id":50849,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:13.632893+0100","flow_id":1071740684904805,"pcap_cnt":1721,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61757,"proto":"UDP","dns":{"type":"answer","id":47232,"rcode":"NXDOMAIN","rrname":"gaquduhexet.eu"}}
{"timestamp":"2017-12-12T18:33:17.195578+0100","flow_id":1410929285528315,"pcap_cnt":2379,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61933,"proto":"UDP","dns":{"type":"answer","id":7540,"rcode":"NXDOMAIN","rrname":"dirynozebot.eu"}}
{"timestamp":"2017-12-12T18:33:16.503324+0100","flow_id":441905206570524,"pcap_cnt":2036,"event_type":"dns","src_ip":"192.168.1.100","src_port":65182,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48851,"rrname":"qedevuqelug.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.141168+0100","flow_id":2005984119433072,"pcap_cnt":2348,"event_type":"dns","src_ip":"192.168.1.100","src_port":59836,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47608,"rrname":"jejomejoled.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.773170+0100","flow_id":145022034692922,"pcap_cnt":2145,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64387,"proto":"UDP","dns":{"type":"answer","id":60073,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":560}}
{"timestamp":"2017-12-12T18:33:14.511998+0100","flow_id":801675289481214,"pcap_cnt":1767,"event_type":"dns","src_ip":"192.168.1.100","src_port":62090,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50339,"rrname":"digenowipib.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.959926+0100","flow_id":1735783432037814,"pcap_cnt":2950,"event_type":"dns","src_ip":"192.168.1.100","src_port":51996,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60477,"rrname":"tuwaraqidek.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.480374+0100","flow_id":1534564214068091,"pcap_cnt":2533,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63051,"proto":"UDP","dns":{"type":"answer","id":62996,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:17.141382+0100","flow_id":2005984119433072,"pcap_cnt":2349,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59836,"proto":"UDP","dns":{"type":"answer","id":47608,"rcode":"NXDOMAIN","rrname":"jejomejoled.eu"}}
{"timestamp":"2017-12-12T18:33:16.835661+0100","flow_id":491711794823245,"pcap_cnt":2156,"event_type":"dns","src_ip":"192.168.1.100","src_port":50402,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18994,"rrname":"masenucifoc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.664797+0100","flow_id":40978599453917,"pcap_cnt":2642,"event_type":"dns","src_ip":"192.168.1.100","src_port":64736,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4788,"rrname":"vofukykojos.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.141382+0100","flow_id":2005984119433072,"pcap_cnt":2349,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59836,"proto":"UDP","dns":{"type":"answer","id":47608,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:11.743335+0100","flow_id":822243887633401,"pcap_cnt":1575,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63406,"proto":"UDP","dns":{"type":"answer","id":54798,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.835920+0100","flow_id":491711794823245,"pcap_cnt":2157,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50402,"proto":"UDP","dns":{"type":"answer","id":18994,"rcode":"NXDOMAIN","rrname":"masenucifoc.eu"}}
{"timestamp":"2017-12-12T18:33:16.937533+0100","flow_id":458354930137229,"pcap_cnt":2243,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49496,"proto":"UDP","dns":{"type":"answer","id":6597,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:14.471352+0100","flow_id":1128784293671224,"pcap_cnt":1748,"event_type":"dns","src_ip":"192.168.1.100","src_port":51725,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25586,"rrname":"tulugiqezib.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.514032+0100","flow_id":827473010643298,"pcap_cnt":2046,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51632,"proto":"UDP","dns":{"type":"answer","id":62036,"rcode":"NXDOMAIN","rrname":"jepobanagij.eu"}}
{"timestamp":"2017-12-12T18:33:16.951936+0100","flow_id":1602345240397440,"pcap_cnt":2252,"event_type":"dns","src_ip":"192.168.1.100","src_port":60465,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19565,"rrname":"tucoqepyryk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:14.538890+0100","flow_id":1128784293671224,"pcap_cnt":1781,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51725,"proto":"UDP","dns":{"type":"answer","id":25586,"rcode":"NXDOMAIN","rrname":"tulugiqezib.eu"}}
{"timestamp":"2017-12-12T18:33:16.514032+0100","flow_id":827473010643298,"pcap_cnt":2046,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51632,"proto":"UDP","dns":{"type":"answer","id":62036,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:14.579448+0100","flow_id":170654399341735,"pcap_cnt":1810,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55242,"proto":"UDP","dns":{"type":"answer","id":62667,"rcode":"NXDOMAIN","rrname":"cicypucitan.eu"}}
{"timestamp":"2017-12-12T18:33:14.538890+0100","flow_id":1128784293671224,"pcap_cnt":1781,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51725,"proto":"UDP","dns":{"type":"answer","id":25586,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.754661+0100","flow_id":1628409249364204,"pcap_cnt":1989,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49687,"proto":"UDP","dns":{"type":"answer","id":48388,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:14.579448+0100","flow_id":170654399341735,"pcap_cnt":1810,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55242,"proto":"UDP","dns":{"type":"answer","id":62667,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:13.464400+0100","flow_id":1076553196332100,"pcap_cnt":1629,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61211,"proto":"UDP","dns":{"type":"answer","id":64921,"rcode":"NXDOMAIN","rrname":"magivakelev.eu"}}
{"timestamp":"2017-12-12T18:33:14.549483+0100","flow_id":649122346066539,"pcap_cnt":1789,"event_type":"dns","src_ip":"192.168.1.100","src_port":60891,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":54602,"rrname":"vojubetafuc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.872067+0100","flow_id":271229648719255,"pcap_cnt":2755,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60515,"proto":"UDP","dns":{"type":"answer","id":14629,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:14.597953+0100","flow_id":1312866590991183,"pcap_cnt":1817,"event_type":"dns","src_ip":"192.168.1.100","src_port":59349,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4532,"rrname":"kepiwodagyr.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:21.435503+0100","flow_id":1516194639225891,"pcap_cnt":3641,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53470,"proto":"UDP","dns":{"type":"answer","id":37758,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:15.676549+0100","flow_id":2165329553478341,"pcap_cnt":1950,"event_type":"dns","src_ip":"192.168.1.100","src_port":63214,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4126,"rrname":"gatequsiryg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.398463+0100","flow_id":1282535533122454,"pcap_cnt":2493,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58754,"proto":"UDP","dns":{"type":"answer","id":25171,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:14.475832+0100","flow_id":77636145134277,"pcap_cnt":1749,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52416,"proto":"UDP","dns":{"type":"answer","id":25667,"rcode":"NXDOMAIN","rrname":"jenoqujumez.eu"}}
{"timestamp":"2017-12-12T18:33:17.356336+0100","flow_id":2013861089472256,"pcap_cnt":2479,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51100,"proto":"UDP","dns":{"type":"answer","id":30180,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:17.911662+0100","flow_id":58776943978504,"pcap_cnt":2781,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62342,"proto":"UDP","dns":{"type":"answer","id":45307,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:14.475832+0100","flow_id":77636145134277,"pcap_cnt":1749,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52416,"proto":"UDP","dns":{"type":"answer","id":25667,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.392824+0100","flow_id":1933345485094265,"pcap_cnt":2489,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56203,"proto":"UDP","dns":{"type":"answer","id":5140,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:17.730349+0100","flow_id":832820244980727,"pcap_cnt":2675,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61684,"proto":"UDP","dns":{"type":"answer","id":1687,"rcode":"NXDOMAIN","rrname":"kemuxurohym.eu"}}
{"timestamp":"2017-12-12T18:33:14.538342+0100","flow_id":1779963612772070,"pcap_cnt":1780,"event_type":"dns","src_ip":"192.168.1.100","src_port":56550,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62769,"rrname":"magygicumof.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.730349+0100","flow_id":832820244980727,"pcap_cnt":2675,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61684,"proto":"UDP","dns":{"type":"answer","id":1687,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:19.773627+0100","flow_id":132555892313301,"pcap_cnt":2863,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49202,"proto":"UDP","dns":{"type":"answer","id":40747,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:15.385992+0100","flow_id":1779963612772070,"pcap_cnt":1847,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56550,"proto":"UDP","dns":{"type":"answer","id":62769,"rcode":"NXDOMAIN","rrname":"magygicumof.eu"}}
{"timestamp":"2017-12-12T18:33:17.151163+0100","flow_id":1356196369747579,"pcap_cnt":2354,"event_type":"dns","src_ip":"192.168.1.100","src_port":63094,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63177,"rrname":"qexyqapevyb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.852410+0100","flow_id":1204970571235770,"pcap_cnt":2742,"event_type":"dns","src_ip":"192.168.1.100","src_port":62710,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48077,"rrname":"divamubojum.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.195578+0100","flow_id":1410929285528315,"pcap_cnt":2379,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61933,"proto":"UDP","dns":{"type":"answer","id":7540,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:20.048096+0100","flow_id":1400808195275744,"pcap_cnt":2990,"event_type":"dns","src_ip":"192.168.1.100","src_port":58292,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27651,"rrname":"vonokutuwah.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.552883+0100","flow_id":441905206570524,"pcap_cnt":2061,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65182,"proto":"UDP","dns":{"type":"answer","id":48851,"rcode":"NXDOMAIN","rrname":"qedevuqelug.eu"}}
{"timestamp":"2017-12-12T18:33:17.151402+0100","flow_id":1356196369747579,"pcap_cnt":2355,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63094,"proto":"UDP","dns":{"type":"answer","id":63177,"rcode":"NXDOMAIN","rrname":"qexyqapevyb.eu"}}
{"timestamp":"2017-12-12T18:33:17.168944+0100","flow_id":1242895132496626,"pcap_cnt":2367,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56963,"proto":"UDP","dns":{"type":"answer","id":43132,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:17.151402+0100","flow_id":1356196369747579,"pcap_cnt":2355,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63094,"proto":"UDP","dns":{"type":"answer","id":63177,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:16.552883+0100","flow_id":441905206570524,"pcap_cnt":2061,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65182,"proto":"UDP","dns":{"type":"answer","id":48851,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.604249+0100","flow_id":265566734268505,"pcap_cnt":2082,"event_type":"dns","src_ip":"192.168.1.100","src_port":61064,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7626,"rrname":"magofetequb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.960241+0100","flow_id":1735783432037814,"pcap_cnt":2951,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51996,"proto":"UDP","dns":{"type":"answer","id":60477,"rcode":"NXDOMAIN","rrname":"tuwaraqidek.eu"}}
{"timestamp":"2017-12-12T18:33:16.958189+0100","flow_id":872037591326445,"pcap_cnt":2256,"event_type":"dns","src_ip":"192.168.1.100","src_port":56403,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29961,"rrname":"dikujysozyk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.960241+0100","flow_id":1735783432037814,"pcap_cnt":2951,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51996,"proto":"UDP","dns":{"type":"answer","id":60477,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:17.175183+0100","flow_id":436465630555215,"pcap_cnt":2370,"event_type":"dns","src_ip":"192.168.1.100","src_port":54752,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38193,"rrname":"qekenilacap.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.835920+0100","flow_id":491711794823245,"pcap_cnt":2157,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50402,"proto":"UDP","dns":{"type":"answer","id":18994,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:20.119329+0100","flow_id":1880420750774817,"pcap_cnt":3042,"event_type":"dns","src_ip":"192.168.1.100","src_port":65406,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17021,"rrname":"qexanevymyk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.623269+0100","flow_id":1799258753317575,"pcap_cnt":1713,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64586,"proto":"UDP","dns":{"type":"answer","id":59709,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.655857+0100","flow_id":1052922286506481,"pcap_cnt":2632,"event_type":"dns","src_ip":"192.168.1.100","src_port":60022,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30681,"rrname":"jenabejurov.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.640149+0100","flow_id":1606444786697119,"pcap_cnt":2095,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51691,"proto":"UDP","dns":{"type":"answer","id":64756,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":559}}
{"timestamp":"2017-12-12T18:33:20.119592+0100","flow_id":1880420750774817,"pcap_cnt":3043,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65406,"proto":"UDP","dns":{"type":"answer","id":17021,"rcode":"NXDOMAIN","rrname":"qexanevymyk.eu"}}
{"timestamp":"2017-12-12T18:33:17.396989+0100","flow_id":155542556089290,"pcap_cnt":2491,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56366,"proto":"UDP","dns":{"type":"answer","id":35085,"rcode":"NXDOMAIN","rrname":"keretejuraw.eu"}}
{"timestamp":"2017-12-12T18:33:17.656114+0100","flow_id":1052922286506481,"pcap_cnt":2633,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60022,"proto":"UDP","dns":{"type":"answer","id":30681,"rcode":"NXDOMAIN","rrname":"jenabejurov.eu"}}
{"timestamp":"2017-12-12T18:33:16.527265+0100","flow_id":1662500552313761,"pcap_cnt":2050,"event_type":"dns","src_ip":"192.168.1.100","src_port":62967,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":22100,"rrname":"digivehusyd.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.450550+0100","flow_id":1258543845793782,"pcap_cnt":2012,"event_type":"dns","src_ip":"192.168.1.100","src_port":56763,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":21095,"rrname":"cinenikekar.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.098401+0100","flow_id":64723325692884,"pcap_cnt":1834,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53464,"proto":"UDP","dns":{"type":"answer","id":9657,"rcode":"NXDOMAIN","rrname":"qedutivosob.eu"}}
{"timestamp":"2017-12-12T18:33:16.527523+0100","flow_id":1662500552313761,"pcap_cnt":2051,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62967,"proto":"UDP","dns":{"type":"answer","id":22100,"rcode":"NXDOMAIN","rrname":"digivehusyd.eu"}}
{"timestamp":"2017-12-12T18:33:15.098401+0100","flow_id":64723325692884,"pcap_cnt":1834,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53464,"proto":"UDP","dns":{"type":"answer","id":9657,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.139716+0100","flow_id":1312866590991183,"pcap_cnt":1841,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59349,"proto":"UDP","dns":{"type":"answer","id":4532,"rcode":"NXDOMAIN","rrname":"kepiwodagyr.eu"}}
{"timestamp":"2017-12-12T18:33:16.527523+0100","flow_id":1662500552313761,"pcap_cnt":2051,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62967,"proto":"UDP","dns":{"type":"answer","id":22100,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":559}}
{"timestamp":"2017-12-12T18:33:17.922980+0100","flow_id":24939044083044,"pcap_cnt":2786,"event_type":"dns","src_ip":"192.168.1.100","src_port":64470,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36073,"rrname":"fobuvohevor.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.493567+0100","flow_id":232416029149183,"pcap_cnt":1865,"event_type":"dns","src_ip":"192.168.1.100","src_port":65254,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26222,"rrname":"xutulenuqix.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.494579+0100","flow_id":771103712709619,"pcap_cnt":3668,"event_type":"dns","src_ip":"192.168.1.100","src_port":52844,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42489,"rrname":"fotekuhagyx.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.613381+0100","flow_id":2133864623135749,"pcap_cnt":2084,"event_type":"dns","src_ip":"192.168.1.100","src_port":59192,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":15374,"rrname":"qetoqolusex.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.556156+0100","flow_id":1434560195558524,"pcap_cnt":2576,"event_type":"dns","src_ip":"192.168.1.100","src_port":57209,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26661,"rrname":"puryxepenek.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.598648+0100","flow_id":1183328230792320,"pcap_cnt":1698,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53108,"proto":"UDP","dns":{"type":"answer","id":15952,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.545515+0100","flow_id":232416029149183,"pcap_cnt":1879,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65254,"proto":"UDP","dns":{"type":"answer","id":26222,"rcode":"NXDOMAIN","rrname":"xutulenuqix.eu"}}
{"timestamp":"2017-12-12T18:33:21.494952+0100","flow_id":771103712709619,"pcap_cnt":3669,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52844,"proto":"UDP","dns":{"type":"answer","id":42489,"rcode":"NXDOMAIN","rrname":"fotekuhagyx.eu"}}
{"timestamp":"2017-12-12T18:33:14.560288+0100","flow_id":1085510350703776,"pcap_cnt":1797,"event_type":"dns","src_ip":"192.168.1.100","src_port":56522,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62468,"rrname":"dixuwusodut.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.556388+0100","flow_id":1434560195558524,"pcap_cnt":2577,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57209,"proto":"UDP","dns":{"type":"answer","id":26661,"rcode":"NXDOMAIN","rrname":"puryxepenek.eu"}}
{"timestamp":"2017-12-12T18:33:15.385992+0100","flow_id":1779963612772070,"pcap_cnt":1847,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56550,"proto":"UDP","dns":{"type":"answer","id":62769,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:13.632893+0100","flow_id":1071740684904805,"pcap_cnt":1721,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61757,"proto":"UDP","dns":{"type":"answer","id":47232,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.304757+0100","flow_id":81527385728408,"pcap_cnt":2429,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50088,"proto":"UDP","dns":{"type":"answer","id":49611,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:15.611657+0100","flow_id":1673826381026633,"pcap_cnt":1903,"event_type":"dns","src_ip":"192.168.1.100","src_port":62548,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13085,"rrname":"rycodypycym.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.852663+0100","flow_id":1204970571235770,"pcap_cnt":2743,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62710,"proto":"UDP","dns":{"type":"answer","id":48077,"rcode":"NXDOMAIN","rrname":"divamubojum.eu"}}
{"timestamp":"2017-12-12T18:33:17.441449+0100","flow_id":937376928873577,"pcap_cnt":2516,"event_type":"dns","src_ip":"192.168.1.100","src_port":63053,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":46863,"rrname":"ryturilidom.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.656616+0100","flow_id":1524550497666280,"pcap_cnt":1934,"event_type":"dns","src_ip":"192.168.1.100","src_port":64109,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23016,"rrname":"marynicosol.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.048411+0100","flow_id":1400808195275744,"pcap_cnt":2991,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58292,"proto":"UDP","dns":{"type":"answer","id":27651,"rcode":"NXDOMAIN","rrname":"vonokutuwah.eu"}}
{"timestamp":"2017-12-12T18:33:15.658149+0100","flow_id":1673826381026633,"pcap_cnt":1936,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62548,"proto":"UDP","dns":{"type":"answer","id":13085,"rcode":"NXDOMAIN","rrname":"rycodypycym.eu"}}
{"timestamp":"2017-12-12T18:33:17.665527+0100","flow_id":1406144691906487,"pcap_cnt":2644,"event_type":"dns","src_ip":"192.168.1.100","src_port":49747,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":398,"rrname":"qebexequsyw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.048411+0100","flow_id":1400808195275744,"pcap_cnt":2991,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58292,"proto":"UDP","dns":{"type":"answer","id":27651,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:19.811675+0100","flow_id":514316207874439,"pcap_cnt":2891,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64817,"proto":"UDP","dns":{"type":"answer","id":6313,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:17.293953+0100","flow_id":746396913027372,"pcap_cnt":2414,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54679,"proto":"UDP","dns":{"type":"answer","id":46020,"rcode":"NXDOMAIN","rrname":"kepyxujycaz.eu"}}
{"timestamp":"2017-12-12T18:33:20.106031+0100","flow_id":629593130180143,"pcap_cnt":3024,"event_type":"dns","src_ip":"192.168.1.100","src_port":56934,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":52145,"rrname":"xudutoxakur.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.646730+0100","flow_id":103856920911092,"pcap_cnt":3281,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61257,"proto":"UDP","dns":{"type":"answer","id":64850,"rcode":"NXDOMAIN","rrname":"vopogakakud.eu"}}
{"timestamp":"2017-12-12T18:33:17.293953+0100","flow_id":746396913027372,"pcap_cnt":2414,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54679,"proto":"UDP","dns":{"type":"answer","id":46020,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.665058+0100","flow_id":40978599453917,"pcap_cnt":2643,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64736,"proto":"UDP","dns":{"type":"answer","id":4788,"rcode":"NXDOMAIN","rrname":"vofukykojos.eu"}}
{"timestamp":"2017-12-12T18:33:20.646730+0100","flow_id":103856920911092,"pcap_cnt":3281,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61257,"proto":"UDP","dns":{"type":"answer","id":64850,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:16.958453+0100","flow_id":872037591326445,"pcap_cnt":2257,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56403,"proto":"UDP","dns":{"type":"answer","id":29961,"rcode":"NXDOMAIN","rrname":"dikujysozyk.eu"}}
{"timestamp":"2017-12-12T18:33:16.952176+0100","flow_id":1602345240397440,"pcap_cnt":2253,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60465,"proto":"UDP","dns":{"type":"answer","id":19565,"rcode":"NXDOMAIN","rrname":"tucoqepyryk.eu"}}
{"timestamp":"2017-12-12T18:33:20.747050+0100","flow_id":540569195537962,"pcap_cnt":3314,"event_type":"dns","src_ip":"192.168.1.100","src_port":62325,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35259,"rrname":"foguhosecib.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:14.362994+0100","flow_id":769909711297311,"pcap_cnt":1725,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62136,"proto":"UDP","dns":{"type":"answer","id":30745,"rcode":"NXDOMAIN","rrname":"galoqyzajep.eu"}}
{"timestamp":"2017-12-12T18:33:16.952176+0100","flow_id":1602345240397440,"pcap_cnt":2253,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60465,"proto":"UDP","dns":{"type":"answer","id":19565,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:20.119592+0100","flow_id":1880420750774817,"pcap_cnt":3043,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65406,"proto":"UDP","dns":{"type":"answer","id":17021,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:14.362994+0100","flow_id":769909711297311,"pcap_cnt":1725,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62136,"proto":"UDP","dns":{"type":"answer","id":30745,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.518504+0100","flow_id":2140470282938728,"pcap_cnt":2552,"event_type":"dns","src_ip":"192.168.1.100","src_port":54905,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":57246,"rrname":"xutevexecif.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:14.545220+0100","flow_id":52237856035268,"pcap_cnt":1785,"event_type":"dns","src_ip":"192.168.1.100","src_port":60518,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64683,"rrname":"nofoletezup.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.656114+0100","flow_id":1052922286506481,"pcap_cnt":2633,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60022,"proto":"UDP","dns":{"type":"answer","id":30681,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:17.518757+0100","flow_id":2140470282938728,"pcap_cnt":2553,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54905,"proto":"UDP","dns":{"type":"answer","id":57246,"rcode":"NXDOMAIN","rrname":"xutevexecif.eu"}}
{"timestamp":"2017-12-12T18:33:15.395014+0100","flow_id":52237856035268,"pcap_cnt":1848,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60518,"proto":"UDP","dns":{"type":"answer","id":64683,"rcode":"NXDOMAIN","rrname":"nofoletezup.eu"}}
{"timestamp":"2017-12-12T18:33:16.841073+0100","flow_id":350673658075162,"pcap_cnt":2162,"event_type":"dns","src_ip":"192.168.1.100","src_port":58474,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30697,"rrname":"cidohukigeq.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:17.725491+0100","flow_id":271616195760627,"pcap_cnt":2672,"event_type":"dns","src_ip":"192.168.1.100","src_port":57662,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":3788,"rrname":"qeqyvulidox.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.139716+0100","flow_id":1312866590991183,"pcap_cnt":1841,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59349,"proto":"UDP","dns":{"type":"answer","id":4532,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.684808+0100","flow_id":256439927597070,"pcap_cnt":1957,"event_type":"dns","src_ip":"192.168.1.100","src_port":61548,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44293,"rrname":"tucyroviwir.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:17.725703+0100","flow_id":271616195760627,"pcap_cnt":2673,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57662,"proto":"UDP","dns":{"type":"answer","id":3788,"rcode":"NXDOMAIN","rrname":"qeqyvulidox.eu"}}
{"timestamp":"2017-12-12T18:33:17.355269+0100","flow_id":442485027204037,"pcap_cnt":2476,"event_type":"dns","src_ip":"192.168.1.100","src_port":55933,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":54552,"rrname":"jewidonevin.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.725703+0100","flow_id":271616195760627,"pcap_cnt":2673,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57662,"proto":"UDP","dns":{"type":"answer","id":3788,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:17.404401+0100","flow_id":864733999475633,"pcap_cnt":2494,"event_type":"dns","src_ip":"192.168.1.100","src_port":50865,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41750,"rrname":"vojeqamutuf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.744272+0100","flow_id":2165329553478341,"pcap_cnt":1985,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63214,"proto":"UDP","dns":{"type":"answer","id":4126,"rcode":"NXDOMAIN","rrname":"gatequsiryg.eu"}}
{"timestamp":"2017-12-12T18:33:17.355513+0100","flow_id":442485027204037,"pcap_cnt":2477,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55933,"proto":"UDP","dns":{"type":"answer","id":54552,"rcode":"NXDOMAIN","rrname":"jewidonevin.eu"}}
{"timestamp":"2017-12-12T18:33:15.744272+0100","flow_id":2165329553478341,"pcap_cnt":1985,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63214,"proto":"UDP","dns":{"type":"answer","id":4126,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.404659+0100","flow_id":864733999475633,"pcap_cnt":2495,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50865,"proto":"UDP","dns":{"type":"answer","id":41750,"rcode":"NXDOMAIN","rrname":"vojeqamutuf.eu"}}
{"timestamp":"2017-12-12T18:33:17.355513+0100","flow_id":442485027204037,"pcap_cnt":2477,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55933,"proto":"UDP","dns":{"type":"answer","id":54552,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:17.404659+0100","flow_id":864733999475633,"pcap_cnt":2495,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50865,"proto":"UDP","dns":{"type":"answer","id":41750,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:17.675562+0100","flow_id":456924707245802,"pcap_cnt":2648,"event_type":"dns","src_ip":"192.168.1.100","src_port":49804,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":61085,"rrname":"cidacomutur.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.435452+0100","flow_id":1327589740291324,"pcap_cnt":3178,"event_type":"dns","src_ip":"192.168.1.100","src_port":60199,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50881,"rrname":"qegefavipev.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.563806+0100","flow_id":1886143794485854,"pcap_cnt":2590,"event_type":"dns","src_ip":"192.168.1.100","src_port":60947,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35895,"rrname":"lygetudokej.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.606048+0100","flow_id":1584993572320389,"pcap_cnt":1701,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55943,"proto":"UDP","dns":{"type":"answer","id":45091,"rcode":"NXDOMAIN","rrname":"xutaquxelat.eu"}}
{"timestamp":"2017-12-12T18:33:17.675825+0100","flow_id":456924707245802,"pcap_cnt":2649,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49804,"proto":"UDP","dns":{"type":"answer","id":61085,"rcode":"NXDOMAIN","rrname":"cidacomutur.eu"}}
{"timestamp":"2017-12-12T18:33:17.564055+0100","flow_id":1886143794485854,"pcap_cnt":2591,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60947,"proto":"UDP","dns":{"type":"answer","id":35895,"rcode":"NXDOMAIN","rrname":"lygetudokej.eu"}}
{"timestamp":"2017-12-12T18:33:21.494952+0100","flow_id":771103712709619,"pcap_cnt":3669,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52844,"proto":"UDP","dns":{"type":"answer","id":42489,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:15.101800+0100","flow_id":1085510350703776,"pcap_cnt":1835,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56522,"proto":"UDP","dns":{"type":"answer","id":62468,"rcode":"NXDOMAIN","rrname":"dixuwusodut.eu"}}
{"timestamp":"2017-12-12T18:33:17.556388+0100","flow_id":1434560195558524,"pcap_cnt":2577,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57209,"proto":"UDP","dns":{"type":"answer","id":26661,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:15.101800+0100","flow_id":1085510350703776,"pcap_cnt":1835,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56522,"proto":"UDP","dns":{"type":"answer","id":62468,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.215761+0100","flow_id":1669383237487313,"pcap_cnt":2388,"event_type":"dns","src_ip":"192.168.1.100","src_port":52313,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59779,"rrname":"kezubaxemor.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.852663+0100","flow_id":1204970571235770,"pcap_cnt":2743,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62710,"proto":"UDP","dns":{"type":"answer","id":48077,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:15.638518+0100","flow_id":703017743269430,"pcap_cnt":1915,"event_type":"dns","src_ip":"192.168.1.100","src_port":50996,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41966,"rrname":"xudoxijiwef.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.441737+0100","flow_id":937376928873577,"pcap_cnt":2517,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63053,"proto":"UDP","dns":{"type":"answer","id":46863,"rcode":"NXDOMAIN","rrname":"ryturilidom.eu"}}
{"timestamp":"2017-12-12T18:33:17.216039+0100","flow_id":1669383237487313,"pcap_cnt":2389,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52313,"proto":"UDP","dns":{"type":"answer","id":59779,"rcode":"NXDOMAIN","rrname":"kezubaxemor.eu"}}
{"timestamp":"2017-12-12T18:33:19.653458+0100","flow_id":1660838400227474,"pcap_cnt":2810,"event_type":"dns","src_ip":"192.168.1.100","src_port":53062,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40157,"rrname":"nomocykyqiq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.658149+0100","flow_id":1673826381026633,"pcap_cnt":1936,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62548,"proto":"UDP","dns":{"type":"answer","id":13085,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.190120+0100","flow_id":620640270673576,"pcap_cnt":2376,"event_type":"dns","src_ip":"192.168.1.100","src_port":50872,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63872,"rrname":"pupatololoz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.665758+0100","flow_id":1406144691906487,"pcap_cnt":2645,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49747,"proto":"UDP","dns":{"type":"answer","id":398,"rcode":"NXDOMAIN","rrname":"qebexequsyw.eu"}}
{"timestamp":"2017-12-12T18:33:16.604513+0100","flow_id":265566734268505,"pcap_cnt":2083,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61064,"proto":"UDP","dns":{"type":"answer","id":7626,"rcode":"NXDOMAIN","rrname":"magofetequb.eu"}}
{"timestamp":"2017-12-12T18:33:20.106326+0100","flow_id":629593130180143,"pcap_cnt":3025,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56934,"proto":"UDP","dns":{"type":"answer","id":52145,"rcode":"NXDOMAIN","rrname":"xudutoxakur.eu"}}
{"timestamp":"2017-12-12T18:33:17.665758+0100","flow_id":1406144691906487,"pcap_cnt":2645,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49747,"proto":"UDP","dns":{"type":"answer","id":398,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:17.665058+0100","flow_id":40978599453917,"pcap_cnt":2643,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64736,"proto":"UDP","dns":{"type":"answer","id":4788,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:16.943701+0100","flow_id":811704038221397,"pcap_cnt":2250,"event_type":"dns","src_ip":"192.168.1.100","src_port":51641,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":3714,"rrname":"rynudepebur.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.958453+0100","flow_id":872037591326445,"pcap_cnt":2257,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56403,"proto":"UDP","dns":{"type":"answer","id":29961,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:17.719476+0100","flow_id":179053208140404,"pcap_cnt":2668,"event_type":"dns","src_ip":"192.168.1.100","src_port":63337,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":20054,"rrname":"jewemurutyj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.747369+0100","flow_id":540569195537962,"pcap_cnt":3315,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62325,"proto":"UDP","dns":{"type":"answer","id":35259,"rcode":"NXDOMAIN","rrname":"foguhosecib.eu"}}
{"timestamp":"2017-12-12T18:33:16.994184+0100","flow_id":1358792677403267,"pcap_cnt":2271,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60960,"proto":"UDP","dns":{"type":"answer","id":35227,"rcode":"NXDOMAIN","rrname":"puvybivihox.eu"}}
{"timestamp":"2017-12-12T18:33:17.396989+0100","flow_id":155542556089290,"pcap_cnt":2491,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56366,"proto":"UDP","dns":{"type":"answer","id":35085,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:17.020427+0100","flow_id":354494032203723,"pcap_cnt":2282,"event_type":"dns","src_ip":"192.168.1.100","src_port":59928,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":39881,"rrname":"xubeqidudyh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.800467+0100","flow_id":2207740208101075,"pcap_cnt":2148,"event_type":"dns","src_ip":"192.168.1.100","src_port":62288,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31736,"rrname":"ganycyhywek.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.464400+0100","flow_id":1076553196332100,"pcap_cnt":1629,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61211,"proto":"UDP","dns":{"type":"answer","id":64921,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.409030+0100","flow_id":19581072391622,"pcap_cnt":2504,"event_type":"dns","src_ip":"192.168.1.100","src_port":50666,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":678,"rrname":"tunicyqokuv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.841322+0100","flow_id":350673658075162,"pcap_cnt":2163,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58474,"proto":"UDP","dns":{"type":"answer","id":30697,"rcode":"NXDOMAIN","rrname":"cidohukigeq.eu"}}
{"timestamp":"2017-12-12T18:33:16.800730+0100","flow_id":2207740208101075,"pcap_cnt":2149,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62288,"proto":"UDP","dns":{"type":"answer","id":31736,"rcode":"NXDOMAIN","rrname":"ganycyhywek.eu"}}
{"timestamp":"2017-12-12T18:33:15.399749+0100","flow_id":649122346066539,"pcap_cnt":1850,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60891,"proto":"UDP","dns":{"type":"answer","id":54602,"rcode":"NXDOMAIN","rrname":"vojubetafuc.eu"}}
{"timestamp":"2017-12-12T18:33:17.923227+0100","flow_id":24939044083044,"pcap_cnt":2787,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64470,"proto":"UDP","dns":{"type":"answer","id":36073,"rcode":"NXDOMAIN","rrname":"fobuvohevor.eu"}}
{"timestamp":"2017-12-12T18:33:16.800730+0100","flow_id":2207740208101075,"pcap_cnt":2149,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62288,"proto":"UDP","dns":{"type":"answer","id":31736,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:19.714720+0100","flow_id":1262482331002848,"pcap_cnt":2834,"event_type":"dns","src_ip":"192.168.1.100","src_port":55655,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64786,"rrname":"lykonurymex.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.545515+0100","flow_id":232416029149183,"pcap_cnt":1879,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65254,"proto":"UDP","dns":{"type":"answer","id":26222,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.753144+0100","flow_id":256439927597070,"pcap_cnt":1988,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61548,"proto":"UDP","dns":{"type":"answer","id":44293,"rcode":"NXDOMAIN","rrname":"tucyroviwir.eu"}}
{"timestamp":"2017-12-12T18:33:19.715001+0100","flow_id":1262482331002848,"pcap_cnt":2835,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55655,"proto":"UDP","dns":{"type":"answer","id":64786,"rcode":"NXDOMAIN","rrname":"lykonurymex.eu"}}
{"timestamp":"2017-12-12T18:33:15.753144+0100","flow_id":256439927597070,"pcap_cnt":1988,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61548,"proto":"UDP","dns":{"type":"answer","id":44293,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.564468+0100","flow_id":626333249674484,"pcap_cnt":1888,"event_type":"dns","src_ip":"192.168.1.100","src_port":57947,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63585,"rrname":"lykiwaryvuk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.398346+0100","flow_id":873265951937546,"pcap_cnt":1996,"event_type":"dns","src_ip":"192.168.1.100","src_port":49565,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":57901,"rrname":"fogefobunik.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.675825+0100","flow_id":456924707245802,"pcap_cnt":2649,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49804,"proto":"UDP","dns":{"type":"answer","id":61085,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:13.606048+0100","flow_id":1584993572320389,"pcap_cnt":1701,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55943,"proto":"UDP","dns":{"type":"answer","id":45091,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:14.557582+0100","flow_id":801675289481214,"pcap_cnt":1794,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62090,"proto":"UDP","dns":{"type":"answer","id":50339,"rcode":"NXDOMAIN","rrname":"digenowipib.eu"}}
{"timestamp":"2017-12-12T18:33:16.498792+0100","flow_id":873265951937546,"pcap_cnt":2033,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49565,"proto":"UDP","dns":{"type":"answer","id":57901,"rcode":"NXDOMAIN","rrname":"fogefobunik.eu"}}
{"timestamp":"2017-12-12T18:33:15.645153+0100","flow_id":1487149922506785,"pcap_cnt":1922,"event_type":"dns","src_ip":"192.168.1.100","src_port":53836,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36485,"rrname":"fotitezycas.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.498792+0100","flow_id":873265951937546,"pcap_cnt":2033,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49565,"proto":"UDP","dns":{"type":"answer","id":57901,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:14.557582+0100","flow_id":801675289481214,"pcap_cnt":1794,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62090,"proto":"UDP","dns":{"type":"answer","id":50339,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.684958+0100","flow_id":703017743269430,"pcap_cnt":1958,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50996,"proto":"UDP","dns":{"type":"answer","id":41966,"rcode":"NXDOMAIN","rrname":"xudoxijiwef.eu"}}
{"timestamp":"2017-12-12T18:33:17.441737+0100","flow_id":937376928873577,"pcap_cnt":2517,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63053,"proto":"UDP","dns":{"type":"answer","id":46863,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:16.573621+0100","flow_id":1427969568194741,"pcap_cnt":2073,"event_type":"dns","src_ip":"192.168.1.100","src_port":53230,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53387,"rrname":"xubifaremin.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.684958+0100","flow_id":703017743269430,"pcap_cnt":1958,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50996,"proto":"UDP","dns":{"type":"answer","id":41966,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.695775+0100","flow_id":1487149922506785,"pcap_cnt":1966,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53836,"proto":"UDP","dns":{"type":"answer","id":36485,"rcode":"NXDOMAIN","rrname":"fotitezycas.eu"}}
{"timestamp":"2017-12-12T18:33:15.726812+0100","flow_id":1524550497666280,"pcap_cnt":1974,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64109,"proto":"UDP","dns":{"type":"answer","id":23016,"rcode":"NXDOMAIN","rrname":"marynicosol.eu"}}
{"timestamp":"2017-12-12T18:33:16.475174+0100","flow_id":938021173870630,"pcap_cnt":2018,"event_type":"dns","src_ip":"192.168.1.100","src_port":63103,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":56016,"rrname":"nozogikirar.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.604513+0100","flow_id":265566734268505,"pcap_cnt":2083,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61064,"proto":"UDP","dns":{"type":"answer","id":7626,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":559}}
{"timestamp":"2017-12-12T18:33:17.190393+0100","flow_id":620640270673576,"pcap_cnt":2377,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50872,"proto":"UDP","dns":{"type":"answer","id":63872,"rcode":"NXDOMAIN","rrname":"pupatololoz.eu"}}
{"timestamp":"2017-12-12T18:33:16.654974+0100","flow_id":1835016503754366,"pcap_cnt":2100,"event_type":"dns","src_ip":"192.168.1.100","src_port":60360,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":55421,"rrname":"qederepuduf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.405107+0100","flow_id":1844551331163763,"pcap_cnt":2496,"event_type":"dns","src_ip":"192.168.1.100","src_port":61589,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23756,"rrname":"nofucemihub.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.671793+0100","flow_id":1164194151678001,"pcap_cnt":2106,"event_type":"dns","src_ip":"192.168.1.100","src_port":50468,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31619,"rrname":"lysovidacyx.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.655231+0100","flow_id":1835016503754366,"pcap_cnt":2101,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60360,"proto":"UDP","dns":{"type":"answer","id":55421,"rcode":"NXDOMAIN","rrname":"qederepuduf.eu"}}
{"timestamp":"2017-12-12T18:33:16.943945+0100","flow_id":811704038221397,"pcap_cnt":2251,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51641,"proto":"UDP","dns":{"type":"answer","id":3714,"rcode":"NXDOMAIN","rrname":"rynudepebur.eu"}}
{"timestamp":"2017-12-12T18:33:17.719740+0100","flow_id":179053208140404,"pcap_cnt":2669,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63337,"proto":"UDP","dns":{"type":"answer","id":20054,"rcode":"NXDOMAIN","rrname":"jewemurutyj.eu"}}
{"timestamp":"2017-12-12T18:33:20.217417+0100","flow_id":64869355245897,"pcap_cnt":3076,"event_type":"dns","src_ip":"192.168.1.100","src_port":59884,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":58431,"rrname":"kevybunureh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.943945+0100","flow_id":811704038221397,"pcap_cnt":2251,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51641,"proto":"UDP","dns":{"type":"answer","id":3714,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:16.994184+0100","flow_id":1358792677403267,"pcap_cnt":2271,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60960,"proto":"UDP","dns":{"type":"answer","id":35227,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:17.518757+0100","flow_id":2140470282938728,"pcap_cnt":2553,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54905,"proto":"UDP","dns":{"type":"answer","id":57246,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:15.395014+0100","flow_id":52237856035268,"pcap_cnt":1848,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60518,"proto":"UDP","dns":{"type":"answer","id":64683,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:13.477396+0100","flow_id":128619553933419,"pcap_cnt":1638,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58090,"proto":"UDP","dns":{"type":"answer","id":24014,"rcode":"NXDOMAIN","rrname":"cinazetybiq.eu"}}
{"timestamp":"2017-12-12T18:33:20.217701+0100","flow_id":64869355245897,"pcap_cnt":3077,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59884,"proto":"UDP","dns":{"type":"answer","id":58431,"rcode":"NXDOMAIN","rrname":"kevybunureh.eu"}}
{"timestamp":"2017-12-12T18:33:15.655655+0100","flow_id":1272472424612135,"pcap_cnt":1932,"event_type":"dns","src_ip":"192.168.1.100","src_port":53592,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51193,"rrname":"nopetucumot.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:13.477396+0100","flow_id":128619553933419,"pcap_cnt":1638,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58090,"proto":"UDP","dns":{"type":"answer","id":24014,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.725545+0100","flow_id":1272472424612135,"pcap_cnt":1973,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53592,"proto":"UDP","dns":{"type":"answer","id":51193,"rcode":"NXDOMAIN","rrname":"nopetucumot.eu"}}
{"timestamp":"2017-12-12T18:33:15.399749+0100","flow_id":649122346066539,"pcap_cnt":1850,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60891,"proto":"UDP","dns":{"type":"answer","id":54602,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.923227+0100","flow_id":24939044083044,"pcap_cnt":2787,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64470,"proto":"UDP","dns":{"type":"answer","id":36073,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:16.613617+0100","flow_id":2133864623135749,"pcap_cnt":2085,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59192,"proto":"UDP","dns":{"type":"answer","id":15374,"rcode":"NXDOMAIN","rrname":"qetoqolusex.eu"}}
{"timestamp":"2017-12-12T18:33:16.513050+0100","flow_id":939462135436314,"pcap_cnt":2045,"event_type":"dns","src_ip":"192.168.1.100","src_port":56884,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23969,"rrname":"foxikiwiqub.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.792726+0100","flow_id":922759004895224,"pcap_cnt":2878,"event_type":"dns","src_ip":"192.168.1.100","src_port":64084,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11380,"rrname":"lyvywyduroq.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:17.421215+0100","flow_id":907649312517085,"pcap_cnt":2510,"event_type":"dns","src_ip":"192.168.1.100","src_port":56991,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4250,"rrname":"nojibukojoj.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:19.793003+0100","flow_id":922759004895224,"pcap_cnt":2879,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64084,"proto":"UDP","dns":{"type":"answer","id":11380,"rcode":"NXDOMAIN","rrname":"lyvywyduroq.eu"}}
{"timestamp":"2017-12-12T18:33:20.435729+0100","flow_id":1327589740291324,"pcap_cnt":3179,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60199,"proto":"UDP","dns":{"type":"answer","id":50881,"rcode":"NXDOMAIN","rrname":"qegefavipev.eu"}}
{"timestamp":"2017-12-12T18:33:19.715001+0100","flow_id":1262482331002848,"pcap_cnt":2835,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55655,"proto":"UDP","dns":{"type":"answer","id":64786,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:17.421468+0100","flow_id":907649312517085,"pcap_cnt":2511,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56991,"proto":"UDP","dns":{"type":"answer","id":4250,"rcode":"NXDOMAIN","rrname":"nojibukojoj.eu"}}
{"timestamp":"2017-12-12T18:33:20.435729+0100","flow_id":1327589740291324,"pcap_cnt":3179,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60199,"proto":"UDP","dns":{"type":"answer","id":50881,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:17.564055+0100","flow_id":1886143794485854,"pcap_cnt":2591,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60947,"proto":"UDP","dns":{"type":"answer","id":35895,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:19.903462+0100","flow_id":901653538523430,"pcap_cnt":2922,"event_type":"dns","src_ip":"192.168.1.100","src_port":57635,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19388,"rrname":"puvacigakog.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.928707+0100","flow_id":1795288056277955,"pcap_cnt":2790,"event_type":"dns","src_ip":"192.168.1.100","src_port":60512,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14329,"rrname":"jeledajifor.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.564588+0100","flow_id":1442920349408620,"pcap_cnt":2592,"event_type":"dns","src_ip":"192.168.1.100","src_port":53722,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":32951,"rrname":"vowagufifam.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:14.360825+0100","flow_id":1248508654504284,"pcap_cnt":1723,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53017,"proto":"UDP","dns":{"type":"answer","id":34904,"rcode":"NXDOMAIN","rrname":"gacarisekub.eu"}}
{"timestamp":"2017-12-12T18:33:17.900639+0100","flow_id":611214964932127,"pcap_cnt":2774,"event_type":"dns","src_ip":"192.168.1.100","src_port":63075,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2022,"rrname":"qeketaqojyf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:14.360825+0100","flow_id":1248508654504284,"pcap_cnt":1723,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53017,"proto":"UDP","dns":{"type":"answer","id":34904,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.216039+0100","flow_id":1669383237487313,"pcap_cnt":2389,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52313,"proto":"UDP","dns":{"type":"answer","id":59779,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:14.601228+0100","flow_id":96458839305356,"pcap_cnt":1819,"event_type":"dns","src_ip":"192.168.1.100","src_port":60669,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60449,"rrname":"cinidofopyk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.900880+0100","flow_id":611214964932127,"pcap_cnt":2775,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63075,"proto":"UDP","dns":{"type":"answer","id":2022,"rcode":"NXDOMAIN","rrname":"qeketaqojyf.eu"}}
{"timestamp":"2017-12-12T18:33:19.653778+0100","flow_id":1660838400227474,"pcap_cnt":2811,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53062,"proto":"UDP","dns":{"type":"answer","id":40157,"rcode":"NXDOMAIN","rrname":"nomocykyqiq.eu"}}
{"timestamp":"2017-12-12T18:33:15.695775+0100","flow_id":1487149922506785,"pcap_cnt":1966,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53836,"proto":"UDP","dns":{"type":"answer","id":36485,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:15.143002+0100","flow_id":96458839305356,"pcap_cnt":1842,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60669,"proto":"UDP","dns":{"type":"answer","id":60449,"rcode":"NXDOMAIN","rrname":"cinidofopyk.eu"}}
{"timestamp":"2017-12-12T18:33:17.175400+0100","flow_id":436465630555215,"pcap_cnt":2371,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54752,"proto":"UDP","dns":{"type":"answer","id":38193,"rcode":"NXDOMAIN","rrname":"qekenilacap.eu"}}
{"timestamp":"2017-12-12T18:33:15.143002+0100","flow_id":96458839305356,"pcap_cnt":1842,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60669,"proto":"UDP","dns":{"type":"answer","id":60449,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.190393+0100","flow_id":620640270673576,"pcap_cnt":2377,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50872,"proto":"UDP","dns":{"type":"answer","id":63872,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:15.510261+0100","flow_id":2180411331168565,"pcap_cnt":1870,"event_type":"dns","src_ip":"192.168.1.100","src_port":50889,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":300,"rrname":"qekafuqafit.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.106326+0100","flow_id":629593130180143,"pcap_cnt":3025,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56934,"proto":"UDP","dns":{"type":"answer","id":52145,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:15.530497+0100","flow_id":1008744252774465,"pcap_cnt":1874,"event_type":"dns","src_ip":"192.168.1.100","src_port":55854,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":16454,"rrname":"pupoliqotul.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.329994+0100","flow_id":93166747060490,"pcap_cnt":2457,"event_type":"dns","src_ip":"192.168.1.100","src_port":55815,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38155,"rrname":"pujuduvaxim.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.655231+0100","flow_id":1835016503754366,"pcap_cnt":2101,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60360,"proto":"UDP","dns":{"type":"answer","id":55421,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":559}}
{"timestamp":"2017-12-12T18:33:20.477851+0100","flow_id":1320619008346779,"pcap_cnt":3198,"event_type":"dns","src_ip":"192.168.1.100","src_port":61667,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48827,"rrname":"kejudunogex.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.563109+0100","flow_id":2180411331168565,"pcap_cnt":1886,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50889,"proto":"UDP","dns":{"type":"answer","id":300,"rcode":"NXDOMAIN","rrname":"qekafuqafit.eu"}}
{"timestamp":"2017-12-12T18:33:16.819389+0100","flow_id":1650710865918279,"pcap_cnt":2154,"event_type":"dns","src_ip":"192.168.1.100","src_port":59313,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":55432,"rrname":"lykemujebeq.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:20.478128+0100","flow_id":1320619008346779,"pcap_cnt":3199,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61667,"proto":"UDP","dns":{"type":"answer","id":48827,"rcode":"NXDOMAIN","rrname":"kejudunogex.eu"}}
{"timestamp":"2017-12-12T18:33:20.747369+0100","flow_id":540569195537962,"pcap_cnt":3315,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62325,"proto":"UDP","dns":{"type":"answer","id":35259,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:20.478128+0100","flow_id":1320619008346779,"pcap_cnt":3199,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61667,"proto":"UDP","dns":{"type":"answer","id":48827,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:17.020678+0100","flow_id":354494032203723,"pcap_cnt":2283,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59928,"proto":"UDP","dns":{"type":"answer","id":39881,"rcode":"NXDOMAIN","rrname":"xubeqidudyh.eu"}}
{"timestamp":"2017-12-12T18:33:17.288054+0100","flow_id":2092274307348968,"pcap_cnt":2410,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58584,"proto":"UDP","dns":{"type":"answer","id":9512,"rcode":"NXDOMAIN","rrname":"dixexehyzex.eu"}}
{"timestamp":"2017-12-12T18:33:17.551282+0100","flow_id":1670463421770098,"pcap_cnt":2568,"event_type":"dns","src_ip":"192.168.1.100","src_port":58990,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":15711,"rrname":"makexotevyl.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.288054+0100","flow_id":2092274307348968,"pcap_cnt":2410,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58584,"proto":"UDP","dns":{"type":"answer","id":9512,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.033628+0100","flow_id":1198659116827484,"pcap_cnt":2290,"event_type":"dns","src_ip":"192.168.1.100","src_port":51939,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36386,"rrname":"vocakemenir.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.841322+0100","flow_id":350673658075162,"pcap_cnt":2163,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58474,"proto":"UDP","dns":{"type":"answer","id":30697,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:17.033889+0100","flow_id":1198659116827484,"pcap_cnt":2291,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51939,"proto":"UDP","dns":{"type":"answer","id":36386,"rcode":"NXDOMAIN","rrname":"vocakemenir.eu"}}
{"timestamp":"2017-12-12T18:33:20.217701+0100","flow_id":64869355245897,"pcap_cnt":3077,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59884,"proto":"UDP","dns":{"type":"answer","id":58431,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":589}}
{"timestamp":"2017-12-12T18:33:19.835789+0100","flow_id":571596039012433,"pcap_cnt":2900,"event_type":"dns","src_ip":"192.168.1.100","src_port":53272,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53057,"rrname":"puzoxyvojyc.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:15.725545+0100","flow_id":1272472424612135,"pcap_cnt":1973,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53592,"proto":"UDP","dns":{"type":"answer","id":51193,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:14.418658+0100","flow_id":580295495148386,"pcap_cnt":1739,"event_type":"dns","src_ip":"192.168.1.100","src_port":63578,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":3442,"rrname":"lyxyjijajel.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.844320+0100","flow_id":1234517798740512,"pcap_cnt":2168,"event_type":"dns","src_ip":"192.168.1.100","src_port":63837,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60808,"rrname":"rycypolavag.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.389526+0100","flow_id":391029171745174,"pcap_cnt":3162,"event_type":"dns","src_ip":"192.168.1.100","src_port":62595,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":10748,"rrname":"qedosiputot.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.613617+0100","flow_id":2133864623135749,"pcap_cnt":2085,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59192,"proto":"UDP","dns":{"type":"answer","id":15374,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":559}}
{"timestamp":"2017-12-12T18:33:16.678938+0100","flow_id":580037797239834,"pcap_cnt":2110,"event_type":"dns","src_ip":"192.168.1.100","src_port":64414,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42389,"rrname":"xutekidywyp.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.389815+0100","flow_id":391029171745174,"pcap_cnt":3163,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62595,"proto":"UDP","dns":{"type":"answer","id":10748,"rcode":"NXDOMAIN","rrname":"qedosiputot.eu"}}
{"timestamp":"2017-12-12T18:33:17.421468+0100","flow_id":907649312517085,"pcap_cnt":2511,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56991,"proto":"UDP","dns":{"type":"answer","id":4250,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:20.389815+0100","flow_id":391029171745174,"pcap_cnt":3163,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62595,"proto":"UDP","dns":{"type":"answer","id":10748,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:26.019335+0100","flow_id":35307095739271,"pcap_cnt":4534,"event_type":"dns","src_ip":"192.168.1.100","src_port":63487,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":22385,"rrname":"lygetudokej.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.679206+0100","flow_id":580037797239834,"pcap_cnt":2111,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64414,"proto":"UDP","dns":{"type":"answer","id":42389,"rcode":"NXDOMAIN","rrname":"xutekidywyp.eu"}}
{"timestamp":"2017-12-12T18:33:20.600433+0100","flow_id":101376577251697,"pcap_cnt":3258,"event_type":"dns","src_ip":"192.168.1.100","src_port":52801,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35302,"rrname":"lykatojexub.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.428357+0100","flow_id":1474069599717701,"pcap_cnt":2512,"event_type":"dns","src_ip":"192.168.1.100","src_port":64285,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19936,"rrname":"magalukacom.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.019584+0100","flow_id":35307095739271,"pcap_cnt":4535,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63487,"proto":"UDP","dns":{"type":"answer","id":22385,"rcode":"NXDOMAIN","rrname":"lygetudokej.eu"}}
{"timestamp":"2017-12-12T18:33:20.600734+0100","flow_id":101376577251697,"pcap_cnt":3259,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52801,"proto":"UDP","dns":{"type":"answer","id":35302,"rcode":"NXDOMAIN","rrname":"lykatojexub.eu"}}
{"timestamp":"2017-12-12T18:33:26.019584+0100","flow_id":35307095739271,"pcap_cnt":4535,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63487,"proto":"UDP","dns":{"type":"answer","id":22385,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":577}}
{"timestamp":"2017-12-12T18:33:20.600734+0100","flow_id":101376577251697,"pcap_cnt":3259,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52801,"proto":"UDP","dns":{"type":"answer","id":35302,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:17.289317+0100","flow_id":379570198720571,"pcap_cnt":2411,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63977,"proto":"UDP","dns":{"type":"answer","id":36363,"rcode":"NXDOMAIN","rrname":"puvomegagep.eu"}}
{"timestamp":"2017-12-12T18:33:26.067566+0100","flow_id":960339972065262,"pcap_cnt":4564,"event_type":"dns","src_ip":"192.168.1.100","src_port":50313,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23052,"rrname":"xugiqonenuz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.289317+0100","flow_id":379570198720571,"pcap_cnt":2411,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63977,"proto":"UDP","dns":{"type":"answer","id":36363,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:19.653778+0100","flow_id":1660838400227474,"pcap_cnt":2811,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53062,"proto":"UDP","dns":{"type":"answer","id":40157,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:26.067834+0100","flow_id":960339972065262,"pcap_cnt":4565,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50313,"proto":"UDP","dns":{"type":"answer","id":23052,"rcode":"NXDOMAIN","rrname":"xugiqonenuz.eu"}}
{"timestamp":"2017-12-12T18:33:17.372247+0100","flow_id":2074244034642945,"pcap_cnt":2484,"event_type":"dns","src_ip":"192.168.1.100","src_port":57541,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":21096,"rrname":"cilodamenub.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:15.726812+0100","flow_id":1524550497666280,"pcap_cnt":1974,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64109,"proto":"UDP","dns":{"type":"answer","id":23016,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:26.067834+0100","flow_id":960339972065262,"pcap_cnt":4565,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50313,"proto":"UDP","dns":{"type":"answer","id":23052,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:17.175400+0100","flow_id":436465630555215,"pcap_cnt":2371,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54752,"proto":"UDP","dns":{"type":"answer","id":38193,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:16.411736+0100","flow_id":1207839609342040,"pcap_cnt":2000,"event_type":"dns","src_ip":"192.168.1.100","src_port":55071,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5302,"rrname":"gadurabotiw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.330299+0100","flow_id":93166747060490,"pcap_cnt":2458,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55815,"proto":"UDP","dns":{"type":"answer","id":38155,"rcode":"NXDOMAIN","rrname":"pujuduvaxim.eu"}}
{"timestamp":"2017-12-12T18:33:16.672065+0100","flow_id":1164194151678001,"pcap_cnt":2107,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50468,"proto":"UDP","dns":{"type":"answer","id":31619,"rcode":"NXDOMAIN","rrname":"lysovidacyx.eu"}}
{"timestamp":"2017-12-12T18:33:16.512121+0100","flow_id":1207839609342040,"pcap_cnt":2044,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55071,"proto":"UDP","dns":{"type":"answer","id":5302,"rcode":"NXDOMAIN","rrname":"gadurabotiw.eu"}}
{"timestamp":"2017-12-12T18:33:17.405337+0100","flow_id":1844551331163763,"pcap_cnt":2497,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61589,"proto":"UDP","dns":{"type":"answer","id":23756,"rcode":"NXDOMAIN","rrname":"nofucemihub.eu"}}
{"timestamp":"2017-12-12T18:33:16.512121+0100","flow_id":1207839609342040,"pcap_cnt":2044,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55071,"proto":"UDP","dns":{"type":"answer","id":5302,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.819628+0100","flow_id":1650710865918279,"pcap_cnt":2155,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59313,"proto":"UDP","dns":{"type":"answer","id":55432,"rcode":"NXDOMAIN","rrname":"lykemujebeq.eu"}}
{"timestamp":"2017-12-12T18:33:17.719740+0100","flow_id":179053208140404,"pcap_cnt":2669,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63337,"proto":"UDP","dns":{"type":"answer","id":20054,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:16.819628+0100","flow_id":1650710865918279,"pcap_cnt":2155,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59313,"proto":"UDP","dns":{"type":"answer","id":55432,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:20.977464+0100","flow_id":1935437134083286,"pcap_cnt":3430,"event_type":"dns","src_ip":"192.168.1.100","src_port":52599,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62960,"rrname":"lygyxeruqoc.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:20.511408+0100","flow_id":1049726831087024,"pcap_cnt":3216,"event_type":"dns","src_ip":"192.168.1.100","src_port":57686,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41040,"rrname":"vonupyfogiq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.866412+0100","flow_id":1898328616679532,"pcap_cnt":2750,"event_type":"dns","src_ip":"192.168.1.100","src_port":58855,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5775,"rrname":"cinorufifac.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.020678+0100","flow_id":354494032203723,"pcap_cnt":2283,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59928,"proto":"UDP","dns":{"type":"answer","id":39881,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:20.977713+0100","flow_id":1935437134083286,"pcap_cnt":3431,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52599,"proto":"UDP","dns":{"type":"answer","id":62960,"rcode":"NXDOMAIN","rrname":"lygyxeruqoc.eu"}}
{"timestamp":"2017-12-12T18:33:20.511725+0100","flow_id":1049726831087024,"pcap_cnt":3217,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57686,"proto":"UDP","dns":{"type":"answer","id":41040,"rcode":"NXDOMAIN","rrname":"vonupyfogiq.eu"}}
{"timestamp":"2017-12-12T18:33:20.977713+0100","flow_id":1935437134083286,"pcap_cnt":3431,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52599,"proto":"UDP","dns":{"type":"answer","id":62960,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:16.875064+0100","flow_id":2092265717389880,"pcap_cnt":2200,"event_type":"dns","src_ip":"192.168.1.100","src_port":61784,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5902,"rrname":"ryleryqacic.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.033889+0100","flow_id":1198659116827484,"pcap_cnt":2291,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51939,"proto":"UDP","dns":{"type":"answer","id":36386,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:19.836096+0100","flow_id":571596039012433,"pcap_cnt":2901,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53272,"proto":"UDP","dns":{"type":"answer","id":53057,"rcode":"NXDOMAIN","rrname":"puzoxyvojyc.eu"}}
{"timestamp":"2017-12-12T18:33:16.562723+0100","flow_id":939462135436314,"pcap_cnt":2068,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56884,"proto":"UDP","dns":{"type":"answer","id":23969,"rcode":"NXDOMAIN","rrname":"foxikiwiqub.eu"}}
{"timestamp":"2017-12-12T18:33:17.174119+0100","flow_id":696903857448999,"pcap_cnt":2368,"event_type":"dns","src_ip":"192.168.1.100","src_port":62581,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":39657,"rrname":"maxotikojax.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.572061+0100","flow_id":1756236066044573,"pcap_cnt":1890,"event_type":"dns","src_ip":"192.168.1.100","src_port":53208,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45124,"rrname":"xugavariruq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.562723+0100","flow_id":939462135436314,"pcap_cnt":2068,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56884,"proto":"UDP","dns":{"type":"answer","id":23969,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.174397+0100","flow_id":696903857448999,"pcap_cnt":2369,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62581,"proto":"UDP","dns":{"type":"answer","id":39657,"rcode":"NXDOMAIN","rrname":"maxotikojax.eu"}}
{"timestamp":"2017-12-12T18:33:16.868902+0100","flow_id":1474741762015782,"pcap_cnt":2196,"event_type":"dns","src_ip":"192.168.1.100","src_port":55763,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34190,"rrname":"kejitanokon.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.174397+0100","flow_id":696903857448999,"pcap_cnt":2369,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62581,"proto":"UDP","dns":{"type":"answer","id":39657,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:20.720027+0100","flow_id":1679570900155547,"pcap_cnt":3308,"event_type":"dns","src_ip":"192.168.1.100","src_port":56722,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62107,"rrname":"tucipipumig.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.903787+0100","flow_id":901653538523430,"pcap_cnt":2923,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57635,"proto":"UDP","dns":{"type":"answer","id":19388,"rcode":"NXDOMAIN","rrname":"puvacigakog.eu"}}
{"timestamp":"2017-12-12T18:33:17.564842+0100","flow_id":1442920349408620,"pcap_cnt":2593,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53722,"proto":"UDP","dns":{"type":"answer","id":32951,"rcode":"NXDOMAIN","rrname":"vowagufifam.eu"}}
{"timestamp":"2017-12-12T18:33:16.679206+0100","flow_id":580037797239834,"pcap_cnt":2111,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64414,"proto":"UDP","dns":{"type":"answer","id":42389,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":560}}
{"timestamp":"2017-12-12T18:33:17.928942+0100","flow_id":1795288056277955,"pcap_cnt":2791,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60512,"proto":"UDP","dns":{"type":"answer","id":14329,"rcode":"NXDOMAIN","rrname":"jeledajifor.eu"}}
{"timestamp":"2017-12-12T18:33:19.903787+0100","flow_id":901653538523430,"pcap_cnt":2923,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57635,"proto":"UDP","dns":{"type":"answer","id":19388,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:20.098776+0100","flow_id":323561677947352,"pcap_cnt":3014,"event_type":"dns","src_ip":"192.168.1.100","src_port":58470,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31663,"rrname":"diravasymob.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.623963+0100","flow_id":217495313089883,"pcap_cnt":3266,"event_type":"dns","src_ip":"192.168.1.100","src_port":60893,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":15935,"rrname":"xukuqyruwoq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.045305+0100","flow_id":1013546026277134,"pcap_cnt":2988,"event_type":"dns","src_ip":"192.168.1.100","src_port":64367,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":16700,"rrname":"gacypizohut.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:16.573905+0100","flow_id":1427969568194741,"pcap_cnt":2074,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53230,"proto":"UDP","dns":{"type":"answer","id":53387,"rcode":"NXDOMAIN","rrname":"xubifaremin.eu"}}
{"timestamp":"2017-12-12T18:33:20.624224+0100","flow_id":217495313089883,"pcap_cnt":3267,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60893,"proto":"UDP","dns":{"type":"answer","id":15935,"rcode":"NXDOMAIN","rrname":"xukuqyruwoq.eu"}}
{"timestamp":"2017-12-12T18:33:20.045557+0100","flow_id":1013546026277134,"pcap_cnt":2989,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64367,"proto":"UDP","dns":{"type":"answer","id":16700,"rcode":"NXDOMAIN","rrname":"gacypizohut.eu"}}
{"timestamp":"2017-12-12T18:33:20.624224+0100","flow_id":217495313089883,"pcap_cnt":3267,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60893,"proto":"UDP","dns":{"type":"answer","id":15935,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:20.045557+0100","flow_id":1013546026277134,"pcap_cnt":2989,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64367,"proto":"UDP","dns":{"type":"answer","id":16700,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:19.949000+0100","flow_id":1759605468134152,"pcap_cnt":2944,"event_type":"dns","src_ip":"192.168.1.100","src_port":61114,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14631,"rrname":"rytifaquwer.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.321001+0100","flow_id":381361200752105,"pcap_cnt":4678,"event_type":"dns","src_ip":"192.168.1.100","src_port":58833,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33926,"rrname":"kericoxojil.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.746318+0100","flow_id":1931616760914766,"pcap_cnt":3312,"event_type":"dns","src_ip":"192.168.1.100","src_port":62530,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31568,"rrname":"dikexosajif.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.908205+0100","flow_id":1382902476364717,"pcap_cnt":2210,"event_type":"dns","src_ip":"192.168.1.100","src_port":64973,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2989,"rrname":"gacezobeqon.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.949297+0100","flow_id":1759605468134152,"pcap_cnt":2945,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61114,"proto":"UDP","dns":{"type":"answer","id":14631,"rcode":"NXDOMAIN","rrname":"rytifaquwer.eu"}}
{"timestamp":"2017-12-12T18:33:16.672065+0100","flow_id":1164194151678001,"pcap_cnt":2107,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50468,"proto":"UDP","dns":{"type":"answer","id":31619,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":560}}
{"timestamp":"2017-12-12T18:33:19.949297+0100","flow_id":1759605468134152,"pcap_cnt":2945,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61114,"proto":"UDP","dns":{"type":"answer","id":14631,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:15.563109+0100","flow_id":2180411331168565,"pcap_cnt":1886,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50889,"proto":"UDP","dns":{"type":"answer","id":300,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.405337+0100","flow_id":1844551331163763,"pcap_cnt":2497,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61589,"proto":"UDP","dns":{"type":"answer","id":23756,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:16.720748+0100","flow_id":265566734268505,"pcap_cnt":2124,"event_type":"dns","src_ip":"192.168.1.100","src_port":61064,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":39023,"rrname":"qekusagigyz.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:16.920399+0100","flow_id":1446158754646863,"pcap_cnt":2228,"event_type":"dns","src_ip":"192.168.1.100","src_port":49175,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":20653,"rrname":"jenokirifux.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.663214+0100","flow_id":2169903693766318,"pcap_cnt":2640,"event_type":"dns","src_ip":"192.168.1.100","src_port":53500,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33155,"rrname":"cihevykupoc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.409267+0100","flow_id":19581072391622,"pcap_cnt":2505,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50666,"proto":"UDP","dns":{"type":"answer","id":678,"rcode":"NXDOMAIN","rrname":"tunicyqokuv.eu"}}
{"timestamp":"2017-12-12T18:33:16.920639+0100","flow_id":1446158754646863,"pcap_cnt":2229,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49175,"proto":"UDP","dns":{"type":"answer","id":20653,"rcode":"NXDOMAIN","rrname":"jenokirifux.eu"}}
{"timestamp":"2017-12-12T18:33:17.551494+0100","flow_id":1670463421770098,"pcap_cnt":2569,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58990,"proto":"UDP","dns":{"type":"answer","id":15711,"rcode":"NXDOMAIN","rrname":"makexotevyl.eu"}}
{"timestamp":"2017-12-12T18:33:16.920639+0100","flow_id":1446158754646863,"pcap_cnt":2229,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49175,"proto":"UDP","dns":{"type":"answer","id":20653,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:17.866667+0100","flow_id":1898328616679532,"pcap_cnt":2751,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58855,"proto":"UDP","dns":{"type":"answer","id":5775,"rcode":"NXDOMAIN","rrname":"cinorufifac.eu"}}
{"timestamp":"2017-12-12T18:33:17.551494+0100","flow_id":1670463421770098,"pcap_cnt":2569,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58990,"proto":"UDP","dns":{"type":"answer","id":15711,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:17.294032+0100","flow_id":2023468931316880,"pcap_cnt":2415,"event_type":"dns","src_ip":"192.168.1.100","src_port":55034,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":16748,"rrname":"gaduzehokar.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.968810+0100","flow_id":503653951391850,"pcap_cnt":2260,"event_type":"dns","src_ip":"192.168.1.100","src_port":50166,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9432,"rrname":"jepycudijyq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.229094+0100","flow_id":1497436369551078,"pcap_cnt":3544,"event_type":"dns","src_ip":"192.168.1.100","src_port":56036,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38555,"rrname":"keradijumyn.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.294388+0100","flow_id":2023468931316880,"pcap_cnt":2416,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55034,"proto":"UDP","dns":{"type":"answer","id":16748,"rcode":"NXDOMAIN","rrname":"gaduzehokar.eu"}}
{"timestamp":"2017-12-12T18:33:16.875327+0100","flow_id":2092265717389880,"pcap_cnt":2201,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61784,"proto":"UDP","dns":{"type":"answer","id":5902,"rcode":"NXDOMAIN","rrname":"ryleryqacic.eu"}}
{"timestamp":"2017-12-12T18:33:17.294388+0100","flow_id":2023468931316880,"pcap_cnt":2416,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55034,"proto":"UDP","dns":{"type":"answer","id":16748,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:19.793003+0100","flow_id":922759004895224,"pcap_cnt":2879,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64084,"proto":"UDP","dns":{"type":"answer","id":11380,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:16.875327+0100","flow_id":2092265717389880,"pcap_cnt":2201,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61784,"proto":"UDP","dns":{"type":"answer","id":5902,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:19.836096+0100","flow_id":571596039012433,"pcap_cnt":2901,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53272,"proto":"UDP","dns":{"type":"answer","id":53057,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:17.354347+0100","flow_id":1553788487690283,"pcap_cnt":2474,"event_type":"dns","src_ip":"192.168.1.100","src_port":54291,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2746,"rrname":"gatykibojig.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:14.485565+0100","flow_id":580295495148386,"pcap_cnt":1752,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63578,"proto":"UDP","dns":{"type":"answer","id":3442,"rcode":"NXDOMAIN","rrname":"lyxyjijajel.eu"}}
{"timestamp":"2017-12-12T18:33:16.971608+0100","flow_id":1372085601227608,"pcap_cnt":2262,"event_type":"dns","src_ip":"192.168.1.100","src_port":62935,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18489,"rrname":"gadaqusupyj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.384584+0100","flow_id":1337103092866632,"pcap_cnt":3158,"event_type":"dns","src_ip":"192.168.1.100","src_port":52788,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9607,"rrname":"cinafocuryb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.354589+0100","flow_id":1553788487690283,"pcap_cnt":2475,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54291,"proto":"UDP","dns":{"type":"answer","id":2746,"rcode":"NXDOMAIN","rrname":"gatykibojig.eu"}}
{"timestamp":"2017-12-12T18:33:17.113576+0100","flow_id":948756444724136,"pcap_cnt":2336,"event_type":"dns","src_ip":"192.168.1.100","src_port":53080,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":56335,"rrname":"foxehehywef.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.869140+0100","flow_id":1474741762015782,"pcap_cnt":2197,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55763,"proto":"UDP","dns":{"type":"answer","id":34190,"rcode":"NXDOMAIN","rrname":"kejitanokon.eu"}}
{"timestamp":"2017-12-12T18:33:17.354589+0100","flow_id":1553788487690283,"pcap_cnt":2475,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54291,"proto":"UDP","dns":{"type":"answer","id":2746,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:14.514774+0100","flow_id":622233700768041,"pcap_cnt":1768,"event_type":"dns","src_ip":"192.168.1.100","src_port":57702,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":55852,"rrname":"cileretirus.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:16.869140+0100","flow_id":1474741762015782,"pcap_cnt":2197,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55763,"proto":"UDP","dns":{"type":"answer","id":34190,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:17.564842+0100","flow_id":1442920349408620,"pcap_cnt":2593,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53722,"proto":"UDP","dns":{"type":"answer","id":32951,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:17.113805+0100","flow_id":948756444724136,"pcap_cnt":2337,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53080,"proto":"UDP","dns":{"type":"answer","id":56335,"rcode":"NXDOMAIN","rrname":"foxehehywef.eu"}}
{"timestamp":"2017-12-12T18:33:16.718035+0100","flow_id":606254277653715,"pcap_cnt":2122,"event_type":"dns","src_ip":"192.168.1.100","src_port":63344,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14945,"rrname":"cinepycusaw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.113805+0100","flow_id":948756444724136,"pcap_cnt":2337,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53080,"proto":"UDP","dns":{"type":"answer","id":56335,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:16.924229+0100","flow_id":2169341052983877,"pcap_cnt":2234,"event_type":"dns","src_ip":"192.168.1.100","src_port":50632,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30187,"rrname":"vofydatacut.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.099048+0100","flow_id":323561677947352,"pcap_cnt":3015,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58470,"proto":"UDP","dns":{"type":"answer","id":31663,"rcode":"NXDOMAIN","rrname":"diravasymob.eu"}}
{"timestamp":"2017-12-12T18:33:17.895021+0100","flow_id":1482013141739565,"pcap_cnt":2766,"event_type":"dns","src_ip":"192.168.1.100","src_port":65248,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9290,"rrname":"ciqapomogyg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.322734+0100","flow_id":715230482918574,"pcap_cnt":2450,"event_type":"dns","src_ip":"192.168.1.100","src_port":57926,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64189,"rrname":"dikatahyqar.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.573905+0100","flow_id":1427969568194741,"pcap_cnt":2074,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53230,"proto":"UDP","dns":{"type":"answer","id":53387,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":559}}
{"timestamp":"2017-12-12T18:33:20.099048+0100","flow_id":323561677947352,"pcap_cnt":3015,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58470,"proto":"UDP","dns":{"type":"answer","id":31663,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:17.917183+0100","flow_id":880526594277055,"pcap_cnt":2782,"event_type":"dns","src_ip":"192.168.1.100","src_port":50009,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14771,"rrname":"tupikogyqoz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.112023+0100","flow_id":1289093948421527,"pcap_cnt":3032,"event_type":"dns","src_ip":"192.168.1.100","src_port":50548,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7195,"rrname":"kezeceduwov.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.301896+0100","flow_id":1426593031185839,"pcap_cnt":2425,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53843,"proto":"UDP","dns":{"type":"answer","id":3747,"rcode":"NXDOMAIN","rrname":"vocuzikubal.eu"}}
{"timestamp":"2017-12-12T18:33:17.330299+0100","flow_id":93166747060490,"pcap_cnt":2458,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55815,"proto":"UDP","dns":{"type":"answer","id":38155,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:20.746726+0100","flow_id":1931616760914766,"pcap_cnt":3313,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62530,"proto":"UDP","dns":{"type":"answer","id":31568,"rcode":"NXDOMAIN","rrname":"dikexosajif.eu"}}
{"timestamp":"2017-12-12T18:33:26.321203+0100","flow_id":381361200752105,"pcap_cnt":4679,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58833,"proto":"UDP","dns":{"type":"answer","id":33926,"rcode":"NXDOMAIN","rrname":"kericoxojil.eu"}}
{"timestamp":"2017-12-12T18:33:16.908449+0100","flow_id":1382902476364717,"pcap_cnt":2211,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64973,"proto":"UDP","dns":{"type":"answer","id":2989,"rcode":"NXDOMAIN","rrname":"gacezobeqon.eu"}}
{"timestamp":"2017-12-12T18:33:20.152190+0100","flow_id":1394481708421758,"pcap_cnt":3048,"event_type":"dns","src_ip":"192.168.1.100","src_port":64683,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5373,"rrname":"vopycyfutoc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.375840+0100","flow_id":1008744252774465,"pcap_cnt":1990,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55854,"proto":"UDP","dns":{"type":"answer","id":16454,"rcode":"NXDOMAIN","rrname":"pupoliqotul.eu"}}
{"timestamp":"2017-12-12T18:33:16.890121+0100","flow_id":372734758262025,"pcap_cnt":2204,"event_type":"dns","src_ip":"192.168.1.100","src_port":64089,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":12201,"rrname":"fotyriwavix.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.720984+0100","flow_id":265566734268505,"pcap_cnt":2125,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61064,"proto":"UDP","dns":{"type":"answer","id":39023,"rcode":"NXDOMAIN","rrname":"qekusagigyz.eu"}}
{"timestamp":"2017-12-12T18:33:16.375840+0100","flow_id":1008744252774465,"pcap_cnt":1990,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55854,"proto":"UDP","dns":{"type":"answer","id":16454,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.663462+0100","flow_id":2169903693766318,"pcap_cnt":2641,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53500,"proto":"UDP","dns":{"type":"answer","id":33155,"rcode":"NXDOMAIN","rrname":"cihevykupoc.eu"}}
{"timestamp":"2017-12-12T18:33:20.152464+0100","flow_id":1394481708421758,"pcap_cnt":3049,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64683,"proto":"UDP","dns":{"type":"answer","id":5373,"rcode":"NXDOMAIN","rrname":"vopycyfutoc.eu"}}
{"timestamp":"2017-12-12T18:33:16.517759+0100","flow_id":1434873728132735,"pcap_cnt":2047,"event_type":"dns","src_ip":"192.168.1.100","src_port":59966,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63363,"rrname":"galodiwosuf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.184906+0100","flow_id":702558181904970,"pcap_cnt":2374,"event_type":"dns","src_ip":"192.168.1.100","src_port":52885,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50361,"rrname":"tufigolidat.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.152464+0100","flow_id":1394481708421758,"pcap_cnt":3049,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64683,"proto":"UDP","dns":{"type":"answer","id":5373,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:20.511725+0100","flow_id":1049726831087024,"pcap_cnt":3217,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57686,"proto":"UDP","dns":{"type":"answer","id":41040,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:19.675407+0100","flow_id":314078390079055,"pcap_cnt":2818,"event_type":"dns","src_ip":"192.168.1.100","src_port":59848,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5815,"rrname":"ryloqulebih.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.264898+0100","flow_id":275161691458242,"pcap_cnt":3100,"event_type":"dns","src_ip":"192.168.1.100","src_port":50221,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":32661,"rrname":"cilupakuquk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.179003+0100","flow_id":422988023446331,"pcap_cnt":3520,"event_type":"dns","src_ip":"192.168.1.100","src_port":61647,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23314,"rrname":"cilihumecox.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.229320+0100","flow_id":1497436369551078,"pcap_cnt":3545,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56036,"proto":"UDP","dns":{"type":"answer","id":38555,"rcode":"NXDOMAIN","rrname":"keradijumyn.eu"}}
{"timestamp":"2017-12-12T18:33:19.675724+0100","flow_id":314078390079055,"pcap_cnt":2819,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59848,"proto":"UDP","dns":{"type":"answer","id":5815,"rcode":"NXDOMAIN","rrname":"ryloqulebih.eu"}}
{"timestamp":"2017-12-12T18:33:19.931252+0100","flow_id":2042708237432244,"pcap_cnt":2936,"event_type":"dns","src_ip":"192.168.1.100","src_port":58252,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23810,"rrname":"maganomojer.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.229320+0100","flow_id":1497436369551078,"pcap_cnt":3545,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56036,"proto":"UDP","dns":{"type":"answer","id":38555,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:19.675724+0100","flow_id":314078390079055,"pcap_cnt":2819,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59848,"proto":"UDP","dns":{"type":"answer","id":5815,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:14.485565+0100","flow_id":580295495148386,"pcap_cnt":1752,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63578,"proto":"UDP","dns":{"type":"answer","id":3442,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.971854+0100","flow_id":1372085601227608,"pcap_cnt":2263,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62935,"proto":"UDP","dns":{"type":"answer","id":18489,"rcode":"NXDOMAIN","rrname":"gadaqusupyj.eu"}}
{"timestamp":"2017-12-12T18:33:20.384903+0100","flow_id":1337103092866632,"pcap_cnt":3159,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52788,"proto":"UDP","dns":{"type":"answer","id":9607,"rcode":"NXDOMAIN","rrname":"cinafocuryb.eu"}}
{"timestamp":"2017-12-12T18:33:15.679303+0100","flow_id":1146045767310727,"pcap_cnt":1953,"event_type":"dns","src_ip":"192.168.1.100","src_port":51736,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64778,"rrname":"fodasusuvyn.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.720337+0100","flow_id":1679570900155547,"pcap_cnt":3309,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56722,"proto":"UDP","dns":{"type":"answer","id":62107,"rcode":"NXDOMAIN","rrname":"tucipipumig.eu"}}
{"timestamp":"2017-12-12T18:33:17.411984+0100","flow_id":949675567696208,"pcap_cnt":2506,"event_type":"dns","src_ip":"192.168.1.100","src_port":56014,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":20246,"rrname":"puvojyqevus.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.720337+0100","flow_id":1679570900155547,"pcap_cnt":3309,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56722,"proto":"UDP","dns":{"type":"answer","id":62107,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:14.560989+0100","flow_id":622233700768041,"pcap_cnt":1799,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57702,"proto":"UDP","dns":{"type":"answer","id":55852,"rcode":"NXDOMAIN","rrname":"cileretirus.eu"}}
{"timestamp":"2017-12-12T18:33:17.412216+0100","flow_id":949675567696208,"pcap_cnt":2507,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56014,"proto":"UDP","dns":{"type":"answer","id":20246,"rcode":"NXDOMAIN","rrname":"puvojyqevus.eu"}}
{"timestamp":"2017-12-12T18:33:14.560989+0100","flow_id":622233700768041,"pcap_cnt":1799,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57702,"proto":"UDP","dns":{"type":"answer","id":55852,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.718321+0100","flow_id":606254277653715,"pcap_cnt":2123,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63344,"proto":"UDP","dns":{"type":"answer","id":14945,"rcode":"NXDOMAIN","rrname":"cinepycusaw.eu"}}
{"timestamp":"2017-12-12T18:33:16.924492+0100","flow_id":2169341052983877,"pcap_cnt":2235,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50632,"proto":"UDP","dns":{"type":"answer","id":30187,"rcode":"NXDOMAIN","rrname":"vofydatacut.eu"}}
{"timestamp":"2017-12-12T18:33:14.609599+0100","flow_id":1146425871846719,"pcap_cnt":1824,"event_type":"dns","src_ip":"192.168.1.100","src_port":55895,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34893,"rrname":"nozecafycyk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.924492+0100","flow_id":2169341052983877,"pcap_cnt":2235,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50632,"proto":"UDP","dns":{"type":"answer","id":30187,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:17.323005+0100","flow_id":715230482918574,"pcap_cnt":2451,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57926,"proto":"UDP","dns":{"type":"answer","id":64189,"rcode":"NXDOMAIN","rrname":"dikatahyqar.eu"}}
{"timestamp":"2017-12-12T18:33:15.458287+0100","flow_id":1146425871846719,"pcap_cnt":1862,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55895,"proto":"UDP","dns":{"type":"answer","id":34893,"rcode":"NXDOMAIN","rrname":"nozecafycyk.eu"}}
{"timestamp":"2017-12-12T18:33:17.895255+0100","flow_id":1482013141739565,"pcap_cnt":2767,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65248,"proto":"UDP","dns":{"type":"answer","id":9290,"rcode":"NXDOMAIN","rrname":"ciqapomogyg.eu"}}
{"timestamp":"2017-12-12T18:33:17.323005+0100","flow_id":715230482918574,"pcap_cnt":2451,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57926,"proto":"UDP","dns":{"type":"answer","id":64189,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:16.854359+0100","flow_id":1322519531096407,"pcap_cnt":2178,"event_type":"dns","src_ip":"192.168.1.100","src_port":58010,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34769,"rrname":"fodutazenaf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.895255+0100","flow_id":1482013141739565,"pcap_cnt":2767,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65248,"proto":"UDP","dns":{"type":"answer","id":9290,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:17.466075+0100","flow_id":1026083034996104,"pcap_cnt":2526,"event_type":"dns","src_ip":"192.168.1.100","src_port":57568,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30337,"rrname":"divufozutog.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:17.301896+0100","flow_id":1426593031185839,"pcap_cnt":2425,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53843,"proto":"UDP","dns":{"type":"answer","id":3747,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:20.112280+0100","flow_id":1289093948421527,"pcap_cnt":3033,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50548,"proto":"UDP","dns":{"type":"answer","id":7195,"rcode":"NXDOMAIN","rrname":"kezeceduwov.eu"}}
{"timestamp":"2017-12-12T18:33:20.746726+0100","flow_id":1931616760914766,"pcap_cnt":3313,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62530,"proto":"UDP","dns":{"type":"answer","id":31568,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:20.112280+0100","flow_id":1289093948421527,"pcap_cnt":3033,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50548,"proto":"UDP","dns":{"type":"answer","id":7195,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:17.308350+0100","flow_id":1212377242383486,"pcap_cnt":2434,"event_type":"dns","src_ip":"192.168.1.100","src_port":53367,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27557,"rrname":"qeqotogemet.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.836721+0100","flow_id":135135020237937,"pcap_cnt":3346,"event_type":"dns","src_ip":"192.168.1.100","src_port":59051,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":57359,"rrname":"rytozygyvup.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.908449+0100","flow_id":1382902476364717,"pcap_cnt":2211,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64973,"proto":"UDP","dns":{"type":"answer","id":2989,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:17.409267+0100","flow_id":19581072391622,"pcap_cnt":2505,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50666,"proto":"UDP","dns":{"type":"answer","id":678,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:16.720984+0100","flow_id":265566734268505,"pcap_cnt":2125,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61064,"proto":"UDP","dns":{"type":"answer","id":39023,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:17.866667+0100","flow_id":1898328616679532,"pcap_cnt":2751,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58855,"proto":"UDP","dns":{"type":"answer","id":5775,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:17.517785+0100","flow_id":1267595489437337,"pcap_cnt":2550,"event_type":"dns","src_ip":"192.168.1.100","src_port":63170,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4476,"rrname":"lysowaxojib.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.890389+0100","flow_id":372734758262025,"pcap_cnt":2205,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64089,"proto":"UDP","dns":{"type":"answer","id":12201,"rcode":"NXDOMAIN","rrname":"fotyriwavix.eu"}}
{"timestamp":"2017-12-12T18:33:17.896376+0100","flow_id":1355685268663672,"pcap_cnt":2768,"event_type":"dns","src_ip":"192.168.1.100","src_port":59458,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5495,"rrname":"vonymomaxyb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.568673+0100","flow_id":1434873728132735,"pcap_cnt":2072,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59966,"proto":"UDP","dns":{"type":"answer","id":63363,"rcode":"NXDOMAIN","rrname":"galodiwosuf.eu"}}
{"timestamp":"2017-12-12T18:33:17.896621+0100","flow_id":1355685268663672,"pcap_cnt":2769,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59458,"proto":"UDP","dns":{"type":"answer","id":5495,"rcode":"NXDOMAIN","rrname":"vonymomaxyb.eu"}}
{"timestamp":"2017-12-12T18:33:16.568673+0100","flow_id":1434873728132735,"pcap_cnt":2072,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59966,"proto":"UDP","dns":{"type":"answer","id":63363,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.896621+0100","flow_id":1355685268663672,"pcap_cnt":2769,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59458,"proto":"UDP","dns":{"type":"answer","id":5495,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:16.844564+0100","flow_id":1234517798740512,"pcap_cnt":2169,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63837,"proto":"UDP","dns":{"type":"answer","id":60808,"rcode":"NXDOMAIN","rrname":"rycypolavag.eu"}}
{"timestamp":"2017-12-12T18:33:19.634237+0100","flow_id":1912450469309821,"pcap_cnt":2804,"event_type":"dns","src_ip":"192.168.1.100","src_port":51436,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31617,"rrname":"pupegeqifev.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.907734+0100","flow_id":2043126995698867,"pcap_cnt":2208,"event_type":"dns","src_ip":"192.168.1.100","src_port":49165,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19391,"rrname":"fobonobaxog.eu","rrtype":"A","tx_id":2}}
{"timestamp":"2017-12-12T18:33:20.265151+0100","flow_id":275161691458242,"pcap_cnt":3101,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50221,"proto":"UDP","dns":{"type":"answer","id":32661,"rcode":"NXDOMAIN","rrname":"cilupakuquk.eu"}}
{"timestamp":"2017-12-12T18:33:15.608899+0100","flow_id":626333249674484,"pcap_cnt":1902,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57947,"proto":"UDP","dns":{"type":"answer","id":63585,"rcode":"NXDOMAIN","rrname":"lykiwaryvuk.eu"}}
{"timestamp":"2017-12-12T18:33:20.265151+0100","flow_id":275161691458242,"pcap_cnt":3101,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50221,"proto":"UDP","dns":{"type":"answer","id":32661,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:17.329168+0100","flow_id":2231323873531024,"pcap_cnt":2456,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54416,"proto":"UDP","dns":{"type":"answer","id":65221,"rcode":"NXDOMAIN","rrname":"makatokagal.eu"}}
{"timestamp":"2017-12-12T18:33:15.608899+0100","flow_id":626333249674484,"pcap_cnt":1902,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57947,"proto":"UDP","dns":{"type":"answer","id":63585,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:20.592088+0100","flow_id":1293584336685272,"pcap_cnt":3250,"event_type":"dns","src_ip":"192.168.1.100","src_port":52862,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":65357,"rrname":"disojawogaw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.459328+0100","flow_id":1278152519254592,"pcap_cnt":3652,"event_type":"dns","src_ip":"192.168.1.100","src_port":49823,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41672,"rrname":"qexiveguwys.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.592390+0100","flow_id":1293584336685272,"pcap_cnt":3251,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52862,"proto":"UDP","dns":{"type":"answer","id":65357,"rcode":"NXDOMAIN","rrname":"disojawogaw.eu"}}
{"timestamp":"2017-12-12T18:33:16.971854+0100","flow_id":1372085601227608,"pcap_cnt":2263,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62935,"proto":"UDP","dns":{"type":"answer","id":18489,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:21.459601+0100","flow_id":1278152519254592,"pcap_cnt":3653,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49823,"proto":"UDP","dns":{"type":"answer","id":41672,"rcode":"NXDOMAIN","rrname":"qexiveguwys.eu"}}
{"timestamp":"2017-12-12T18:33:17.928942+0100","flow_id":1795288056277955,"pcap_cnt":2791,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60512,"proto":"UDP","dns":{"type":"answer","id":14329,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:21.459601+0100","flow_id":1278152519254592,"pcap_cnt":3653,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49823,"proto":"UDP","dns":{"type":"answer","id":41672,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:20.384903+0100","flow_id":1337103092866632,"pcap_cnt":3159,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52788,"proto":"UDP","dns":{"type":"answer","id":9607,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:17.428642+0100","flow_id":1474069599717701,"pcap_cnt":2513,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64285,"proto":"UDP","dns":{"type":"answer","id":19936,"rcode":"NXDOMAIN","rrname":"magalukacom.eu"}}
{"timestamp":"2017-12-12T18:33:19.862517+0100","flow_id":590773068179765,"pcap_cnt":2912,"event_type":"dns","src_ip":"192.168.1.100","src_port":49471,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":54197,"rrname":"tuniqigison.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.745981+0100","flow_id":1146045767310727,"pcap_cnt":1986,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51736,"proto":"UDP","dns":{"type":"answer","id":64778,"rcode":"NXDOMAIN","rrname":"fodasusuvyn.eu"}}
{"timestamp":"2017-12-12T18:33:20.550382+0100","flow_id":402019993019886,"pcap_cnt":3238,"event_type":"dns","src_ip":"192.168.1.100","src_port":53827,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14219,"rrname":"qexukoqodar.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.610740+0100","flow_id":1099320818487732,"pcap_cnt":3710,"event_type":"dns","src_ip":"192.168.1.100","src_port":63035,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18627,"rrname":"nopujokelek.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.862813+0100","flow_id":590773068179765,"pcap_cnt":2913,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49471,"proto":"UDP","dns":{"type":"answer","id":54197,"rcode":"NXDOMAIN","rrname":"tuniqigison.eu"}}
{"timestamp":"2017-12-12T18:33:17.412216+0100","flow_id":949675567696208,"pcap_cnt":2507,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56014,"proto":"UDP","dns":{"type":"answer","id":20246,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:19.862813+0100","flow_id":590773068179765,"pcap_cnt":2913,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49471,"proto":"UDP","dns":{"type":"answer","id":54197,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:17.372483+0100","flow_id":2074244034642945,"pcap_cnt":2485,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57541,"proto":"UDP","dns":{"type":"answer","id":21096,"rcode":"NXDOMAIN","rrname":"cilodamenub.eu"}}
{"timestamp":"2017-12-12T18:33:21.611020+0100","flow_id":1099320818487732,"pcap_cnt":3711,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63035,"proto":"UDP","dns":{"type":"answer","id":18627,"rcode":"NXDOMAIN","rrname":"nopujokelek.eu"}}
{"timestamp":"2017-12-12T18:33:17.297683+0100","flow_id":588999246534360,"pcap_cnt":2421,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63091,"proto":"UDP","dns":{"type":"answer","id":8359,"rcode":"NXDOMAIN","rrname":"xuqotujodaz.eu"}}
{"timestamp":"2017-12-12T18:33:15.458287+0100","flow_id":1146425871846719,"pcap_cnt":1862,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55895,"proto":"UDP","dns":{"type":"answer","id":34893,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:21.611020+0100","flow_id":1099320818487732,"pcap_cnt":3711,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63035,"proto":"UDP","dns":{"type":"answer","id":18627,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:17.297683+0100","flow_id":588999246534360,"pcap_cnt":2421,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63091,"proto":"UDP","dns":{"type":"answer","id":8359,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.854610+0100","flow_id":1322519531096407,"pcap_cnt":2179,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58010,"proto":"UDP","dns":{"type":"answer","id":34769,"rcode":"NXDOMAIN","rrname":"fodutazenaf.eu"}}
{"timestamp":"2017-12-12T18:33:17.466351+0100","flow_id":1026083034996104,"pcap_cnt":2527,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57568,"proto":"UDP","dns":{"type":"answer","id":30337,"rcode":"NXDOMAIN","rrname":"divufozutog.eu"}}
{"timestamp":"2017-12-12T18:33:17.667903+0100","flow_id":1291243579322623,"pcap_cnt":2646,"event_type":"dns","src_ip":"192.168.1.100","src_port":64252,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26401,"rrname":"nopodykecoc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.466351+0100","flow_id":1026083034996104,"pcap_cnt":2527,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57568,"proto":"UDP","dns":{"type":"answer","id":30337,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:20.396619+0100","flow_id":946905313971531,"pcap_cnt":3166,"event_type":"dns","src_ip":"192.168.1.100","src_port":57162,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63399,"rrname":"tuwucopexot.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.308562+0100","flow_id":1212377242383486,"pcap_cnt":2435,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53367,"proto":"UDP","dns":{"type":"answer","id":27557,"rcode":"NXDOMAIN","rrname":"qeqotogemet.eu"}}
{"timestamp":"2017-12-12T18:33:17.668151+0100","flow_id":1291243579322623,"pcap_cnt":2647,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64252,"proto":"UDP","dns":{"type":"answer","id":26401,"rcode":"NXDOMAIN","rrname":"nopodykecoc.eu"}}
{"timestamp":"2017-12-12T18:33:26.321203+0100","flow_id":381361200752105,"pcap_cnt":4679,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58833,"proto":"UDP","dns":{"type":"answer","id":33926,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:20.396944+0100","flow_id":946905313971531,"pcap_cnt":3167,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57162,"proto":"UDP","dns":{"type":"answer","id":63399,"rcode":"NXDOMAIN","rrname":"tuwucopexot.eu"}}
{"timestamp":"2017-12-12T18:33:17.668151+0100","flow_id":1291243579322623,"pcap_cnt":2647,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64252,"proto":"UDP","dns":{"type":"answer","id":26401,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:20.836965+0100","flow_id":135135020237937,"pcap_cnt":3347,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59051,"proto":"UDP","dns":{"type":"answer","id":57359,"rcode":"NXDOMAIN","rrname":"rytozygyvup.eu"}}
{"timestamp":"2017-12-12T18:33:16.751795+0100","flow_id":1849756831479987,"pcap_cnt":2136,"event_type":"dns","src_ip":"192.168.1.100","src_port":64557,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51807,"rrname":"dirosehijel.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.890389+0100","flow_id":372734758262025,"pcap_cnt":2205,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64089,"proto":"UDP","dns":{"type":"answer","id":12201,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:20.396944+0100","flow_id":946905313971531,"pcap_cnt":3167,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57162,"proto":"UDP","dns":{"type":"answer","id":63399,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:20.836965+0100","flow_id":135135020237937,"pcap_cnt":3347,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59051,"proto":"UDP","dns":{"type":"answer","id":57359,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:16.752041+0100","flow_id":1849756831479987,"pcap_cnt":2137,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64557,"proto":"UDP","dns":{"type":"answer","id":51807,"rcode":"NXDOMAIN","rrname":"dirosehijel.eu"}}
{"timestamp":"2017-12-12T18:33:16.917609+0100","flow_id":1818609728618601,"pcap_cnt":2222,"event_type":"dns","src_ip":"192.168.1.100","src_port":59723,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":16474,"rrname":"jeluganusog.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.528369+0100","flow_id":290015835852785,"pcap_cnt":3222,"event_type":"dns","src_ip":"192.168.1.100","src_port":62436,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":58375,"rrname":"novomyfexij.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.752041+0100","flow_id":1849756831479987,"pcap_cnt":2137,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64557,"proto":"UDP","dns":{"type":"answer","id":51807,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:20.997514+0100","flow_id":93027160832138,"pcap_cnt":3432,"event_type":"dns","src_ip":"192.168.1.100","src_port":52758,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27909,"rrname":"pupodylahej.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.179290+0100","flow_id":422988023446331,"pcap_cnt":3521,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61647,"proto":"UDP","dns":{"type":"answer","id":23314,"rcode":"NXDOMAIN","rrname":"cilihumecox.eu"}}
{"timestamp":"2017-12-12T18:33:19.634480+0100","flow_id":1912450469309821,"pcap_cnt":2805,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51436,"proto":"UDP","dns":{"type":"answer","id":31617,"rcode":"NXDOMAIN","rrname":"pupegeqifev.eu"}}
{"timestamp":"2017-12-12T18:33:16.907978+0100","flow_id":2043126995698867,"pcap_cnt":2209,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49165,"proto":"UDP","dns":{"type":"answer","id":19391,"rcode":"NXDOMAIN","rrname":"fobonobaxog.eu"}}
{"timestamp":"2017-12-12T18:33:19.634480+0100","flow_id":1912450469309821,"pcap_cnt":2805,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51436,"proto":"UDP","dns":{"type":"answer","id":31617,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:16.907978+0100","flow_id":2043126995698867,"pcap_cnt":2209,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49165,"proto":"UDP","dns":{"type":"answer","id":19391,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":560}}
{"timestamp":"2017-12-12T18:33:15.616016+0100","flow_id":1756236066044573,"pcap_cnt":1905,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53208,"proto":"UDP","dns":{"type":"answer","id":45124,"rcode":"NXDOMAIN","rrname":"xugavariruq.eu"}}
{"timestamp":"2017-12-12T18:33:16.954192+0100","flow_id":1455317772439376,"pcap_cnt":2254,"event_type":"dns","src_ip":"192.168.1.100","src_port":59067,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":58684,"rrname":"puzecypigyw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.912497+0100","flow_id":803996719639665,"pcap_cnt":2928,"event_type":"dns","src_ip":"192.168.1.100","src_port":57901,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":15730,"rrname":"volugomymet.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.592390+0100","flow_id":1293584336685272,"pcap_cnt":3251,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52862,"proto":"UDP","dns":{"type":"answer","id":65357,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:17.299115+0100","flow_id":1258543845793782,"pcap_cnt":2422,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56763,"proto":"UDP","dns":{"type":"answer","id":21095,"rcode":"NXDOMAIN","rrname":"cinenikekar.eu"}}
{"timestamp":"2017-12-12T18:33:16.954439+0100","flow_id":1455317772439376,"pcap_cnt":2255,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59067,"proto":"UDP","dns":{"type":"answer","id":58684,"rcode":"NXDOMAIN","rrname":"puzecypigyw.eu"}}
{"timestamp":"2017-12-12T18:33:17.428642+0100","flow_id":1474069599717701,"pcap_cnt":2513,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64285,"proto":"UDP","dns":{"type":"answer","id":19936,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:17.900880+0100","flow_id":611214964932127,"pcap_cnt":2775,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63075,"proto":"UDP","dns":{"type":"answer","id":2022,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:15.745981+0100","flow_id":1146045767310727,"pcap_cnt":1986,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51736,"proto":"UDP","dns":{"type":"answer","id":64778,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:16.718321+0100","flow_id":606254277653715,"pcap_cnt":2123,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63344,"proto":"UDP","dns":{"type":"answer","id":14945,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":559}}
{"timestamp":"2017-12-12T18:33:19.615134+0100","flow_id":1021848198275806,"pcap_cnt":2792,"event_type":"dns","src_ip":"192.168.1.100","src_port":62255,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34777,"rrname":"kejywajazok.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.550701+0100","flow_id":402019993019886,"pcap_cnt":3239,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53827,"proto":"UDP","dns":{"type":"answer","id":14219,"rcode":"NXDOMAIN","rrname":"qexukoqodar.eu"}}
{"timestamp":"2017-12-12T18:33:19.906764+0100","flow_id":1334231907161612,"pcap_cnt":2926,"event_type":"dns","src_ip":"192.168.1.100","src_port":49340,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8174,"rrname":"dixyjohevon.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.750220+0100","flow_id":71204431753868,"pcap_cnt":2134,"event_type":"dns","src_ip":"192.168.1.100","src_port":59155,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53798,"rrname":"pupujeguper.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.372483+0100","flow_id":2074244034642945,"pcap_cnt":2485,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57541,"proto":"UDP","dns":{"type":"answer","id":21096,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:19.907020+0100","flow_id":1334231907161612,"pcap_cnt":2927,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49340,"proto":"UDP","dns":{"type":"answer","id":8174,"rcode":"NXDOMAIN","rrname":"dixyjohevon.eu"}}
{"timestamp":"2017-12-12T18:33:17.917440+0100","flow_id":880526594277055,"pcap_cnt":2783,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50009,"proto":"UDP","dns":{"type":"answer","id":14771,"rcode":"NXDOMAIN","rrname":"tupikogyqoz.eu"}}
{"timestamp":"2017-12-12T18:33:19.907020+0100","flow_id":1334231907161612,"pcap_cnt":2927,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49340,"proto":"UDP","dns":{"type":"answer","id":8174,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:17.484969+0100","flow_id":1916120518714985,"pcap_cnt":2536,"event_type":"dns","src_ip":"192.168.1.100","src_port":57261,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51752,"rrname":"kepypirutyx.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.917440+0100","flow_id":880526594277055,"pcap_cnt":2783,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50009,"proto":"UDP","dns":{"type":"answer","id":14771,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:16.854610+0100","flow_id":1322519531096407,"pcap_cnt":2179,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58010,"proto":"UDP","dns":{"type":"answer","id":34769,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:19.921984+0100","flow_id":1640153837670784,"pcap_cnt":2932,"event_type":"dns","src_ip":"192.168.1.100","src_port":56513,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53144,"rrname":"nojotomipel.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.353517+0100","flow_id":500535805175021,"pcap_cnt":2472,"event_type":"dns","src_ip":"192.168.1.100","src_port":60365,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1315,"rrname":"fodavibusim.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.555312+0100","flow_id":1402975006062896,"pcap_cnt":2574,"event_type":"dns","src_ip":"192.168.1.100","src_port":53126,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":24418,"rrname":"tupamapazer.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.878344+0100","flow_id":1723927174604552,"pcap_cnt":2202,"event_type":"dns","src_ip":"192.168.1.100","src_port":58117,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":39972,"rrname":"tujybuqeqis.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.518040+0100","flow_id":1267595489437337,"pcap_cnt":2551,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63170,"proto":"UDP","dns":{"type":"answer","id":4476,"rcode":"NXDOMAIN","rrname":"lysowaxojib.eu"}}
{"timestamp":"2017-12-12T18:33:26.344724+0100","flow_id":278728662205076,"pcap_cnt":4686,"event_type":"dns","src_ip":"192.168.1.100","src_port":60387,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37028,"rrname":"tupikogyqoz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.777309+0100","flow_id":768030663367773,"pcap_cnt":2702,"event_type":"dns","src_ip":"192.168.1.100","src_port":54730,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31197,"rrname":"qetunopifef.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.663462+0100","flow_id":2169903693766318,"pcap_cnt":2641,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53500,"proto":"UDP","dns":{"type":"answer","id":33155,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:17.185174+0100","flow_id":702558181904970,"pcap_cnt":2375,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52885,"proto":"UDP","dns":{"type":"answer","id":50361,"rcode":"NXDOMAIN","rrname":"tufigolidat.eu"}}
{"timestamp":"2017-12-12T18:33:16.969041+0100","flow_id":503653951391850,"pcap_cnt":2261,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50166,"proto":"UDP","dns":{"type":"answer","id":9432,"rcode":"NXDOMAIN","rrname":"jepycudijyq.eu"}}
{"timestamp":"2017-12-12T18:33:17.185174+0100","flow_id":702558181904970,"pcap_cnt":2375,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52885,"proto":"UDP","dns":{"type":"answer","id":50361,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:17.757596+0100","flow_id":669929315340124,"pcap_cnt":2690,"event_type":"dns","src_ip":"192.168.1.100","src_port":62821,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50475,"rrname":"dikuvizigiz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.844564+0100","flow_id":1234517798740512,"pcap_cnt":2169,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63837,"proto":"UDP","dns":{"type":"answer","id":60808,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:16.913908+0100","flow_id":1857900089504244,"pcap_cnt":2218,"event_type":"dns","src_ip":"192.168.1.100","src_port":57311,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64766,"rrname":"nomebemenid.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.528687+0100","flow_id":290015835852785,"pcap_cnt":3223,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62436,"proto":"UDP","dns":{"type":"answer","id":58375,"rcode":"NXDOMAIN","rrname":"novomyfexij.eu"}}
{"timestamp":"2017-12-12T18:33:19.931549+0100","flow_id":2042708237432244,"pcap_cnt":2937,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58252,"proto":"UDP","dns":{"type":"answer","id":23810,"rcode":"NXDOMAIN","rrname":"maganomojer.eu"}}
{"timestamp":"2017-12-12T18:33:20.528687+0100","flow_id":290015835852785,"pcap_cnt":3223,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62436,"proto":"UDP","dns":{"type":"answer","id":58375,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:20.997801+0100","flow_id":93027160832138,"pcap_cnt":3433,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52758,"proto":"UDP","dns":{"type":"answer","id":27909,"rcode":"NXDOMAIN","rrname":"pupodylahej.eu"}}
{"timestamp":"2017-12-12T18:33:19.931549+0100","flow_id":2042708237432244,"pcap_cnt":2937,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58252,"proto":"UDP","dns":{"type":"answer","id":23810,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:19.995620+0100","flow_id":1368535809972238,"pcap_cnt":2964,"event_type":"dns","src_ip":"192.168.1.100","src_port":57783,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63017,"rrname":"makymykakic.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:15.616016+0100","flow_id":1756236066044573,"pcap_cnt":1905,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53208,"proto":"UDP","dns":{"type":"answer","id":45124,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:20.246405+0100","flow_id":1298510664221317,"pcap_cnt":3086,"event_type":"dns","src_ip":"192.168.1.100","src_port":52177,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19003,"rrname":"gatahohalir.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.652079+0100","flow_id":1335997138858799,"pcap_cnt":3730,"event_type":"dns","src_ip":"192.168.1.100","src_port":58354,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53455,"rrname":"dikymezosaj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.912768+0100","flow_id":803996719639665,"pcap_cnt":2929,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57901,"proto":"UDP","dns":{"type":"answer","id":15730,"rcode":"NXDOMAIN","rrname":"volugomymet.eu"}}
{"timestamp":"2017-12-12T18:33:15.639831+0100","flow_id":867091936428887,"pcap_cnt":1916,"event_type":"dns","src_ip":"192.168.1.100","src_port":56778,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53199,"rrname":"citahikodab.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.299115+0100","flow_id":1258543845793782,"pcap_cnt":2422,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56763,"proto":"UDP","dns":{"type":"answer","id":21095,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:21.652394+0100","flow_id":1335997138858799,"pcap_cnt":3731,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58354,"proto":"UDP","dns":{"type":"answer","id":53455,"rcode":"NXDOMAIN","rrname":"dikymezosaj.eu"}}
{"timestamp":"2017-12-12T18:33:19.912768+0100","flow_id":803996719639665,"pcap_cnt":2929,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57901,"proto":"UDP","dns":{"type":"answer","id":15730,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:15.644737+0100","flow_id":2006804458100353,"pcap_cnt":1921,"event_type":"dns","src_ip":"192.168.1.100","src_port":57569,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42570,"rrname":"qexeholagav.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.469234+0100","flow_id":1280156121245938,"pcap_cnt":2530,"event_type":"dns","src_ip":"192.168.1.100","src_port":59230,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41686,"rrname":"galavozaxog.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.528781+0100","flow_id":2201190383030669,"pcap_cnt":2562,"event_type":"dns","src_ip":"192.168.1.100","src_port":61226,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29833,"rrname":"qekikyvutic.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.102292+0100","flow_id":1761310570221460,"pcap_cnt":3018,"event_type":"dns","src_ip":"192.168.1.100","src_port":63571,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5295,"rrname":"disenybuqyj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.550701+0100","flow_id":402019993019886,"pcap_cnt":3239,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53827,"proto":"UDP","dns":{"type":"answer","id":14219,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:20.096726+0100","flow_id":1540669510285782,"pcap_cnt":3012,"event_type":"dns","src_ip":"192.168.1.100","src_port":53542,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42945,"rrname":"vowezacuryr.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.469515+0100","flow_id":1280156121245938,"pcap_cnt":2531,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59230,"proto":"UDP","dns":{"type":"answer","id":41686,"rcode":"NXDOMAIN","rrname":"galavozaxog.eu"}}
{"timestamp":"2017-12-12T18:33:16.750427+0100","flow_id":71204431753868,"pcap_cnt":2135,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59155,"proto":"UDP","dns":{"type":"answer","id":53798,"rcode":"NXDOMAIN","rrname":"pupujeguper.eu"}}
{"timestamp":"2017-12-12T18:33:20.096981+0100","flow_id":1540669510285782,"pcap_cnt":3013,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53542,"proto":"UDP","dns":{"type":"answer","id":42945,"rcode":"NXDOMAIN","rrname":"vowezacuryr.eu"}}
{"timestamp":"2017-12-12T18:33:16.750427+0100","flow_id":71204431753868,"pcap_cnt":2135,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59155,"proto":"UDP","dns":{"type":"answer","id":53798,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:20.096981+0100","flow_id":1540669510285782,"pcap_cnt":3013,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53542,"proto":"UDP","dns":{"type":"answer","id":42945,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:19.790903+0100","flow_id":792050268049783,"pcap_cnt":2876,"event_type":"dns","src_ip":"192.168.1.100","src_port":59585,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6548,"rrname":"kemadedevak.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.308562+0100","flow_id":1212377242383486,"pcap_cnt":2435,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53367,"proto":"UDP","dns":{"type":"answer","id":27557,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:16.910622+0100","flow_id":519992006993182,"pcap_cnt":2212,"event_type":"dns","src_ip":"192.168.1.100","src_port":53291,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":21164,"rrname":"xudylenyrob.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.791136+0100","flow_id":792050268049783,"pcap_cnt":2877,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59585,"proto":"UDP","dns":{"type":"answer","id":6548,"rcode":"NXDOMAIN","rrname":"kemadedevak.eu"}}
{"timestamp":"2017-12-12T18:33:19.922265+0100","flow_id":1640153837670784,"pcap_cnt":2933,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56513,"proto":"UDP","dns":{"type":"answer","id":53144,"rcode":"NXDOMAIN","rrname":"nojotomipel.eu"}}
{"timestamp":"2017-12-12T18:33:17.327973+0100","flow_id":1863545823972766,"pcap_cnt":2455,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58818,"proto":"UDP","dns":{"type":"answer","id":26733,"rcode":"NXDOMAIN","rrname":"lymyfenumij.eu"}}
{"timestamp":"2017-12-12T18:33:19.791136+0100","flow_id":792050268049783,"pcap_cnt":2877,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59585,"proto":"UDP","dns":{"type":"answer","id":6548,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:17.353723+0100","flow_id":500535805175021,"pcap_cnt":2473,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60365,"proto":"UDP","dns":{"type":"answer","id":1315,"rcode":"NXDOMAIN","rrname":"fodavibusim.eu"}}
{"timestamp":"2017-12-12T18:33:17.327973+0100","flow_id":1863545823972766,"pcap_cnt":2455,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58818,"proto":"UDP","dns":{"type":"answer","id":26733,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.518040+0100","flow_id":1267595489437337,"pcap_cnt":2551,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63170,"proto":"UDP","dns":{"type":"answer","id":4476,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:17.353723+0100","flow_id":500535805175021,"pcap_cnt":2473,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60365,"proto":"UDP","dns":{"type":"answer","id":1315,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:16.917852+0100","flow_id":1818609728618601,"pcap_cnt":2223,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59723,"proto":"UDP","dns":{"type":"answer","id":16474,"rcode":"NXDOMAIN","rrname":"jeluganusog.eu"}}
{"timestamp":"2017-12-12T18:33:17.408173+0100","flow_id":1808398443952749,"pcap_cnt":2502,"event_type":"dns","src_ip":"192.168.1.100","src_port":51492,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53522,"rrname":"ryqyqequsud.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.801159+0100","flow_id":1408521956309383,"pcap_cnt":2716,"event_type":"dns","src_ip":"192.168.1.100","src_port":61239,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29038,"rrname":"ciciqacidir.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.305942+0100","flow_id":1356887859505942,"pcap_cnt":2430,"event_type":"dns","src_ip":"192.168.1.100","src_port":61198,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13677,"rrname":"nopexifigep.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.179290+0100","flow_id":422988023446331,"pcap_cnt":3521,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61647,"proto":"UDP","dns":{"type":"answer","id":23314,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:17.757868+0100","flow_id":669929315340124,"pcap_cnt":2691,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62821,"proto":"UDP","dns":{"type":"answer","id":50475,"rcode":"NXDOMAIN","rrname":"dikuvizigiz.eu"}}
{"timestamp":"2017-12-12T18:33:17.408398+0100","flow_id":1808398443952749,"pcap_cnt":2503,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51492,"proto":"UDP","dns":{"type":"answer","id":53522,"rcode":"NXDOMAIN","rrname":"ryqyqequsud.eu"}}
{"timestamp":"2017-12-12T18:33:16.914150+0100","flow_id":1857900089504244,"pcap_cnt":2219,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57311,"proto":"UDP","dns":{"type":"answer","id":64766,"rcode":"NXDOMAIN","rrname":"nomebemenid.eu"}}
{"timestamp":"2017-12-12T18:33:17.329168+0100","flow_id":2231323873531024,"pcap_cnt":2456,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54416,"proto":"UDP","dns":{"type":"answer","id":65221,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.757868+0100","flow_id":669929315340124,"pcap_cnt":2691,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62821,"proto":"UDP","dns":{"type":"answer","id":50475,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:16.914150+0100","flow_id":1857900089504244,"pcap_cnt":2219,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57311,"proto":"UDP","dns":{"type":"answer","id":64766,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:19.995869+0100","flow_id":1368535809972238,"pcap_cnt":2965,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57783,"proto":"UDP","dns":{"type":"answer","id":63017,"rcode":"NXDOMAIN","rrname":"makymykakic.eu"}}
{"timestamp":"2017-12-12T18:33:17.511902+0100","flow_id":1535521991806878,"pcap_cnt":2548,"event_type":"dns","src_ip":"192.168.1.100","src_port":62220,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5400,"rrname":"cinyhotyqyt.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.621949+0100","flow_id":1193365569633661,"pcap_cnt":2614,"event_type":"dns","src_ip":"192.168.1.100","src_port":60675,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37925,"rrname":"dirojubusux.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.995869+0100","flow_id":1368535809972238,"pcap_cnt":2965,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57783,"proto":"UDP","dns":{"type":"answer","id":63017,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:20.638741+0100","flow_id":1247559467187989,"pcap_cnt":3278,"event_type":"dns","src_ip":"192.168.1.100","src_port":55039,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":57086,"rrname":"cidizakisuv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.622210+0100","flow_id":1193365569633661,"pcap_cnt":2615,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60675,"proto":"UDP","dns":{"type":"answer","id":37925,"rcode":"NXDOMAIN","rrname":"dirojubusux.eu"}}
{"timestamp":"2017-12-12T18:33:16.849739+0100","flow_id":1073134402598731,"pcap_cnt":2172,"event_type":"dns","src_ip":"192.168.1.100","src_port":62260,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36159,"rrname":"tulimolywan.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.622210+0100","flow_id":1193365569633661,"pcap_cnt":2615,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60675,"proto":"UDP","dns":{"type":"answer","id":37925,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:20.117785+0100","flow_id":701424310733849,"pcap_cnt":3040,"event_type":"dns","src_ip":"192.168.1.100","src_port":52426,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64045,"rrname":"xugosedaloc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.639054+0100","flow_id":1247559467187989,"pcap_cnt":3279,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55039,"proto":"UDP","dns":{"type":"answer","id":57086,"rcode":"NXDOMAIN","rrname":"cidizakisuv.eu"}}
{"timestamp":"2017-12-12T18:33:16.850008+0100","flow_id":1073134402598731,"pcap_cnt":2173,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62260,"proto":"UDP","dns":{"type":"answer","id":36159,"rcode":"NXDOMAIN","rrname":"tulimolywan.eu"}}
{"timestamp":"2017-12-12T18:33:17.499114+0100","flow_id":645918300675498,"pcap_cnt":2540,"event_type":"dns","src_ip":"192.168.1.100","src_port":53014,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18230,"rrname":"xuqaxiraxyx.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.615461+0100","flow_id":1021848198275806,"pcap_cnt":2793,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62255,"proto":"UDP","dns":{"type":"answer","id":34777,"rcode":"NXDOMAIN","rrname":"kejywajazok.eu"}}
{"timestamp":"2017-12-12T18:33:19.715872+0100","flow_id":1418447625907296,"pcap_cnt":2836,"event_type":"dns","src_ip":"192.168.1.100","src_port":58200,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7095,"rrname":"xugelurisep.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.615461+0100","flow_id":1021848198275806,"pcap_cnt":2793,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62255,"proto":"UDP","dns":{"type":"answer","id":34777,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:20.888228+0100","flow_id":1874214523014564,"pcap_cnt":3368,"event_type":"dns","src_ip":"192.168.1.100","src_port":63387,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43494,"rrname":"jejurijogut.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.499357+0100","flow_id":645918300675498,"pcap_cnt":2541,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53014,"proto":"UDP","dns":{"type":"answer","id":18230,"rcode":"NXDOMAIN","rrname":"xuqaxiraxyx.eu"}}
{"timestamp":"2017-12-12T18:33:20.102573+0100","flow_id":1761310570221460,"pcap_cnt":3019,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63571,"proto":"UDP","dns":{"type":"answer","id":5295,"rcode":"NXDOMAIN","rrname":"disenybuqyj.eu"}}
{"timestamp":"2017-12-12T18:33:19.716133+0100","flow_id":1418447625907296,"pcap_cnt":2837,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58200,"proto":"UDP","dns":{"type":"answer","id":7095,"rcode":"NXDOMAIN","rrname":"xugelurisep.eu"}}
{"timestamp":"2017-12-12T18:33:20.102573+0100","flow_id":1761310570221460,"pcap_cnt":3019,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63571,"proto":"UDP","dns":{"type":"answer","id":5295,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:19.716133+0100","flow_id":1418447625907296,"pcap_cnt":2837,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58200,"proto":"UDP","dns":{"type":"answer","id":7095,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:22.036742+0100","flow_id":342513221275526,"pcap_cnt":3868,"event_type":"dns","src_ip":"192.168.1.100","src_port":58719,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48490,"rrname":"vopudetezuq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.485225+0100","flow_id":1916120518714985,"pcap_cnt":2537,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57261,"proto":"UDP","dns":{"type":"answer","id":51752,"rcode":"NXDOMAIN","rrname":"kepypirutyx.eu"}}
{"timestamp":"2017-12-12T18:33:19.874569+0100","flow_id":433061869082697,"pcap_cnt":2918,"event_type":"dns","src_ip":"192.168.1.100","src_port":53608,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36472,"rrname":"lymutinutyz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.485225+0100","flow_id":1916120518714985,"pcap_cnt":2537,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57261,"proto":"UDP","dns":{"type":"answer","id":51752,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:22.037221+0100","flow_id":342513221275526,"pcap_cnt":3869,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58719,"proto":"UDP","dns":{"type":"answer","id":48490,"rcode":"NXDOMAIN","rrname":"vopudetezuq.eu"}}
{"timestamp":"2017-12-12T18:33:16.910880+0100","flow_id":519992006993182,"pcap_cnt":2213,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53291,"proto":"UDP","dns":{"type":"answer","id":21164,"rcode":"NXDOMAIN","rrname":"xudylenyrob.eu"}}
{"timestamp":"2017-12-12T18:33:17.683089+0100","flow_id":1360987405773905,"pcap_cnt":2654,"event_type":"dns","src_ip":"192.168.1.100","src_port":55792,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":55732,"rrname":"mamomamymyl.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.555544+0100","flow_id":1402975006062896,"pcap_cnt":2575,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53126,"proto":"UDP","dns":{"type":"answer","id":24418,"rcode":"NXDOMAIN","rrname":"tupamapazer.eu"}}
{"timestamp":"2017-12-12T18:33:19.922265+0100","flow_id":1640153837670784,"pcap_cnt":2933,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56513,"proto":"UDP","dns":{"type":"answer","id":53144,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:16.878615+0100","flow_id":1723927174604552,"pcap_cnt":2203,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58117,"proto":"UDP","dns":{"type":"answer","id":39972,"rcode":"NXDOMAIN","rrname":"tujybuqeqis.eu"}}
{"timestamp":"2017-12-12T18:33:17.555544+0100","flow_id":1402975006062896,"pcap_cnt":2575,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53126,"proto":"UDP","dns":{"type":"answer","id":24418,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:16.878615+0100","flow_id":1723927174604552,"pcap_cnt":2203,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58117,"proto":"UDP","dns":{"type":"answer","id":39972,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:20.120152+0100","flow_id":654716541392216,"pcap_cnt":3044,"event_type":"dns","src_ip":"192.168.1.100","src_port":56767,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31235,"rrname":"rylyzevipyw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.969041+0100","flow_id":503653951391850,"pcap_cnt":2261,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50166,"proto":"UDP","dns":{"type":"answer","id":9432,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:17.569873+0100","flow_id":1317472944632337,"pcap_cnt":2600,"event_type":"dns","src_ip":"192.168.1.100","src_port":57880,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64328,"rrname":"qexoligupag.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.917852+0100","flow_id":1818609728618601,"pcap_cnt":2223,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59723,"proto":"UDP","dns":{"type":"answer","id":16474,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:17.086160+0100","flow_id":2124849486844048,"pcap_cnt":2308,"event_type":"dns","src_ip":"192.168.1.100","src_port":54590,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34389,"rrname":"qedixogazen.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.251691+0100","flow_id":261106410837803,"pcap_cnt":2398,"event_type":"dns","src_ip":"192.168.1.100","src_port":56458,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37466,"rrname":"gaqehysohec.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.570121+0100","flow_id":1317472944632337,"pcap_cnt":2601,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57880,"proto":"UDP","dns":{"type":"answer","id":64328,"rcode":"NXDOMAIN","rrname":"qexoligupag.eu"}}
{"timestamp":"2017-12-12T18:33:21.412182+0100","flow_id":1140711418317334,"pcap_cnt":3632,"event_type":"dns","src_ip":"192.168.1.100","src_port":57281,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26315,"rrname":"maxemocexar.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.251949+0100","flow_id":261106410837803,"pcap_cnt":2399,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56458,"proto":"UDP","dns":{"type":"answer","id":37466,"rcode":"NXDOMAIN","rrname":"gaqehysohec.eu"}}
{"timestamp":"2017-12-12T18:33:17.306195+0100","flow_id":1356887859505942,"pcap_cnt":2431,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61198,"proto":"UDP","dns":{"type":"answer","id":13677,"rcode":"NXDOMAIN","rrname":"nopexifigep.eu"}}
{"timestamp":"2017-12-12T18:33:20.531749+0100","flow_id":1226954361543973,"pcap_cnt":3226,"event_type":"dns","src_ip":"192.168.1.100","src_port":57689,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35021,"rrname":"ryhipugajim.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.412425+0100","flow_id":1140711418317334,"pcap_cnt":3633,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57281,"proto":"UDP","dns":{"type":"answer","id":26315,"rcode":"NXDOMAIN","rrname":"maxemocexar.eu"}}
{"timestamp":"2017-12-12T18:33:20.997801+0100","flow_id":93027160832138,"pcap_cnt":3433,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52758,"proto":"UDP","dns":{"type":"answer","id":27909,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:20.532017+0100","flow_id":1226954361543973,"pcap_cnt":3227,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57689,"proto":"UDP","dns":{"type":"answer","id":35021,"rcode":"NXDOMAIN","rrname":"ryhipugajim.eu"}}
{"timestamp":"2017-12-12T18:33:20.246709+0100","flow_id":1298510664221317,"pcap_cnt":3087,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52177,"proto":"UDP","dns":{"type":"answer","id":19003,"rcode":"NXDOMAIN","rrname":"gatahohalir.eu"}}
{"timestamp":"2017-12-12T18:33:21.034560+0100","flow_id":971262073603840,"pcap_cnt":3446,"event_type":"dns","src_ip":"192.168.1.100","src_port":49820,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43578,"rrname":"kezywuxyven.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.246709+0100","flow_id":1298510664221317,"pcap_cnt":3087,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52177,"proto":"UDP","dns":{"type":"answer","id":19003,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:17.883768+0100","flow_id":1503582467488824,"pcap_cnt":2760,"event_type":"dns","src_ip":"192.168.1.100","src_port":61524,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13811,"rrname":"makififupap.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.954439+0100","flow_id":1455317772439376,"pcap_cnt":2255,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59067,"proto":"UDP","dns":{"type":"answer","id":58684,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:20.246895+0100","flow_id":972213408810095,"pcap_cnt":3088,"event_type":"dns","src_ip":"192.168.1.100","src_port":63564,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40112,"rrname":"jewypojynil.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.512155+0100","flow_id":1535521991806878,"pcap_cnt":2549,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62220,"proto":"UDP","dns":{"type":"answer","id":5400,"rcode":"NXDOMAIN","rrname":"cinyhotyqyt.eu"}}
{"timestamp":"2017-12-12T18:33:17.884033+0100","flow_id":1503582467488824,"pcap_cnt":2761,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61524,"proto":"UDP","dns":{"type":"answer","id":13811,"rcode":"NXDOMAIN","rrname":"makififupap.eu"}}
{"timestamp":"2017-12-12T18:33:21.652394+0100","flow_id":1335997138858799,"pcap_cnt":3731,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58354,"proto":"UDP","dns":{"type":"answer","id":53455,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:17.512155+0100","flow_id":1535521991806878,"pcap_cnt":2549,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62220,"proto":"UDP","dns":{"type":"answer","id":5400,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:15.687749+0100","flow_id":867091936428887,"pcap_cnt":1960,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56778,"proto":"UDP","dns":{"type":"answer","id":53199,"rcode":"NXDOMAIN","rrname":"citahikodab.eu"}}
{"timestamp":"2017-12-12T18:33:20.639054+0100","flow_id":1247559467187989,"pcap_cnt":3279,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55039,"proto":"UDP","dns":{"type":"answer","id":57086,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:20.118042+0100","flow_id":701424310733849,"pcap_cnt":3041,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52426,"proto":"UDP","dns":{"type":"answer","id":64045,"rcode":"NXDOMAIN","rrname":"xugosedaloc.eu"}}
{"timestamp":"2017-12-12T18:33:16.850008+0100","flow_id":1073134402598731,"pcap_cnt":2173,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62260,"proto":"UDP","dns":{"type":"answer","id":36159,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:17.529046+0100","flow_id":2201190383030669,"pcap_cnt":2563,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61226,"proto":"UDP","dns":{"type":"answer","id":29833,"rcode":"NXDOMAIN","rrname":"qekikyvutic.eu"}}
{"timestamp":"2017-12-12T18:33:20.804968+0100","flow_id":1251837254584424,"pcap_cnt":3336,"event_type":"dns","src_ip":"192.168.1.100","src_port":62891,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5121,"rrname":"cicynefogic.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.499357+0100","flow_id":645918300675498,"pcap_cnt":2541,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53014,"proto":"UDP","dns":{"type":"answer","id":18230,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:17.469515+0100","flow_id":1280156121245938,"pcap_cnt":2531,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59230,"proto":"UDP","dns":{"type":"answer","id":41686,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:20.888461+0100","flow_id":1874214523014564,"pcap_cnt":3369,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63387,"proto":"UDP","dns":{"type":"answer","id":43494,"rcode":"NXDOMAIN","rrname":"jejurijogut.eu"}}
{"timestamp":"2017-12-12T18:33:20.805246+0100","flow_id":1251837254584424,"pcap_cnt":3337,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62891,"proto":"UDP","dns":{"type":"answer","id":5121,"rcode":"NXDOMAIN","rrname":"cicynefogic.eu"}}
{"timestamp":"2017-12-12T18:33:19.667420+0100","flow_id":1242403358846748,"pcap_cnt":2816,"event_type":"dns","src_ip":"192.168.1.100","src_port":63537,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50356,"rrname":"foqinywenec.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.005617+0100","flow_id":2141498927551985,"pcap_cnt":2276,"event_type":"dns","src_ip":"192.168.1.100","src_port":53517,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23636,"rrname":"fokafobeqix.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.276310+0100","flow_id":193853665589078,"pcap_cnt":3108,"event_type":"dns","src_ip":"192.168.1.100","src_port":59905,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60732,"rrname":"puzydaqybad.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.874839+0100","flow_id":433061869082697,"pcap_cnt":2919,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53608,"proto":"UDP","dns":{"type":"answer","id":36472,"rcode":"NXDOMAIN","rrname":"lymutinutyz.eu"}}
{"timestamp":"2017-12-12T18:33:17.005867+0100","flow_id":2141498927551985,"pcap_cnt":2277,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53517,"proto":"UDP","dns":{"type":"answer","id":23636,"rcode":"NXDOMAIN","rrname":"fokafobeqix.eu"}}
{"timestamp":"2017-12-12T18:33:19.845742+0100","flow_id":338398642431918,"pcap_cnt":2906,"event_type":"dns","src_ip":"192.168.1.100","src_port":60357,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23012,"rrname":"jepazunalyx.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.345054+0100","flow_id":278728662205076,"pcap_cnt":4687,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60387,"proto":"UDP","dns":{"type":"answer","id":37028,"rcode":"NXDOMAIN","rrname":"tupikogyqoz.eu"}}
{"timestamp":"2017-12-12T18:33:17.683361+0100","flow_id":1360987405773905,"pcap_cnt":2655,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55792,"proto":"UDP","dns":{"type":"answer","id":55732,"rcode":"NXDOMAIN","rrname":"mamomamymyl.eu"}}
{"timestamp":"2017-12-12T18:33:19.846007+0100","flow_id":338398642431918,"pcap_cnt":2907,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60357,"proto":"UDP","dns":{"type":"answer","id":23012,"rcode":"NXDOMAIN","rrname":"jepazunalyx.eu"}}
{"timestamp":"2017-12-12T18:33:17.777600+0100","flow_id":768030663367773,"pcap_cnt":2703,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54730,"proto":"UDP","dns":{"type":"answer","id":31197,"rcode":"NXDOMAIN","rrname":"qetunopifef.eu"}}
{"timestamp":"2017-12-12T18:33:17.683361+0100","flow_id":1360987405773905,"pcap_cnt":2655,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55792,"proto":"UDP","dns":{"type":"answer","id":55732,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:20.120436+0100","flow_id":654716541392216,"pcap_cnt":3045,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56767,"proto":"UDP","dns":{"type":"answer","id":31235,"rcode":"NXDOMAIN","rrname":"rylyzevipyw.eu"}}
{"timestamp":"2017-12-12T18:33:17.086413+0100","flow_id":2124849486844048,"pcap_cnt":2309,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54590,"proto":"UDP","dns":{"type":"answer","id":34389,"rcode":"NXDOMAIN","rrname":"qedixogazen.eu"}}
{"timestamp":"2017-12-12T18:33:17.767166+0100","flow_id":1493083419948222,"pcap_cnt":2694,"event_type":"dns","src_ip":"192.168.1.100","src_port":55518,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13682,"rrname":"rynikulokop.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.086413+0100","flow_id":2124849486844048,"pcap_cnt":2309,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54590,"proto":"UDP","dns":{"type":"answer","id":34389,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:17.570121+0100","flow_id":1317472944632337,"pcap_cnt":2601,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57880,"proto":"UDP","dns":{"type":"answer","id":64328,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:17.251949+0100","flow_id":261106410837803,"pcap_cnt":2399,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56458,"proto":"UDP","dns":{"type":"answer","id":37466,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:17.134148+0100","flow_id":724965026237444,"pcap_cnt":2342,"event_type":"dns","src_ip":"192.168.1.100","src_port":49451,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5575,"rrname":"vowucotyqyg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.658803+0100","flow_id":40407368797555,"pcap_cnt":2634,"event_type":"dns","src_ip":"192.168.1.100","src_port":61716,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":52710,"rrname":"kevylejigod.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.306195+0100","flow_id":1356887859505942,"pcap_cnt":2431,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61198,"proto":"UDP","dns":{"type":"answer","id":13677,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:17.311226+0100","flow_id":1655854090425182,"pcap_cnt":2436,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61120,"proto":"UDP","dns":{"type":"answer","id":50491,"rcode":"NXDOMAIN","rrname":"xubirenosiq.eu"}}
{"timestamp":"2017-12-12T18:33:17.134403+0100","flow_id":724965026237444,"pcap_cnt":2343,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49451,"proto":"UDP","dns":{"type":"answer","id":5575,"rcode":"NXDOMAIN","rrname":"vowucotyqyg.eu"}}
{"timestamp":"2017-12-12T18:33:17.659048+0100","flow_id":40407368797555,"pcap_cnt":2635,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61716,"proto":"UDP","dns":{"type":"answer","id":52710,"rcode":"NXDOMAIN","rrname":"kevylejigod.eu"}}
{"timestamp":"2017-12-12T18:33:21.034861+0100","flow_id":971262073603840,"pcap_cnt":3447,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49820,"proto":"UDP","dns":{"type":"answer","id":43578,"rcode":"NXDOMAIN","rrname":"kezywuxyven.eu"}}
{"timestamp":"2017-12-12T18:33:17.163044+0100","flow_id":2126981938117860,"pcap_cnt":2362,"event_type":"dns","src_ip":"192.168.1.100","src_port":51508,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29515,"rrname":"vonezukemac.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.034861+0100","flow_id":971262073603840,"pcap_cnt":3447,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49820,"proto":"UDP","dns":{"type":"answer","id":43578,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:17.623679+0100","flow_id":386324034847807,"pcap_cnt":2618,"event_type":"dns","src_ip":"192.168.1.100","src_port":52827,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23712,"rrname":"ganuqibevux.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.126030+0100","flow_id":993853598591811,"pcap_cnt":3490,"event_type":"dns","src_ip":"192.168.1.100","src_port":56166,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43963,"rrname":"kevutodybuk.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:17.163291+0100","flow_id":2126981938117860,"pcap_cnt":2363,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51508,"proto":"UDP","dns":{"type":"answer","id":29515,"rcode":"NXDOMAIN","rrname":"vonezukemac.eu"}}
{"timestamp":"2017-12-12T18:33:17.163291+0100","flow_id":2126981938117860,"pcap_cnt":2363,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51508,"proto":"UDP","dns":{"type":"answer","id":29515,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:21.860780+0100","flow_id":731214203921004,"pcap_cnt":3802,"event_type":"dns","src_ip":"192.168.1.100","src_port":61126,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50058,"rrname":"nozecafycyk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.687594+0100","flow_id":1174435501276650,"pcap_cnt":2660,"event_type":"dns","src_ip":"192.168.1.100","src_port":57843,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6156,"rrname":"digyxywifyq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.664740+0100","flow_id":2089302190138532,"pcap_cnt":2814,"event_type":"dns","src_ip":"192.168.1.100","src_port":57483,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23259,"rrname":"qexusulakiq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.118042+0100","flow_id":701424310733849,"pcap_cnt":3041,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52426,"proto":"UDP","dns":{"type":"answer","id":64045,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:17.687835+0100","flow_id":1174435501276650,"pcap_cnt":2661,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57843,"proto":"UDP","dns":{"type":"answer","id":6156,"rcode":"NXDOMAIN","rrname":"digyxywifyq.eu"}}
{"timestamp":"2017-12-12T18:33:17.529046+0100","flow_id":2201190383030669,"pcap_cnt":2563,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61226,"proto":"UDP","dns":{"type":"answer","id":29833,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:16.855553+0100","flow_id":2742653029889,"pcap_cnt":2180,"event_type":"dns","src_ip":"192.168.1.100","src_port":60445,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62996,"rrname":"gatonazytab.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.665034+0100","flow_id":2089302190138532,"pcap_cnt":2815,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57483,"proto":"UDP","dns":{"type":"answer","id":23259,"rcode":"NXDOMAIN","rrname":"qexusulakiq.eu"}}
{"timestamp":"2017-12-12T18:33:20.191934+0100","flow_id":1902185497554366,"pcap_cnt":3064,"event_type":"dns","src_ip":"192.168.1.100","src_port":58852,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":61119,"rrname":"gaqofubakeh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.888461+0100","flow_id":1874214523014564,"pcap_cnt":3369,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63387,"proto":"UDP","dns":{"type":"answer","id":43494,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:19.665034+0100","flow_id":2089302190138532,"pcap_cnt":2815,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57483,"proto":"UDP","dns":{"type":"answer","id":23259,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:22.037221+0100","flow_id":342513221275526,"pcap_cnt":3869,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58719,"proto":"UDP","dns":{"type":"answer","id":48490,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:20.951089+0100","flow_id":407380112212785,"pcap_cnt":3404,"event_type":"dns","src_ip":"192.168.1.100","src_port":52705,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5997,"rrname":"dimomawezod.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.276624+0100","flow_id":193853665589078,"pcap_cnt":3109,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59905,"proto":"UDP","dns":{"type":"answer","id":60732,"rcode":"NXDOMAIN","rrname":"puzydaqybad.eu"}}
{"timestamp":"2017-12-12T18:33:16.910880+0100","flow_id":519992006993182,"pcap_cnt":2213,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53291,"proto":"UDP","dns":{"type":"answer","id":21164,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:20.276624+0100","flow_id":193853665589078,"pcap_cnt":3109,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59905,"proto":"UDP","dns":{"type":"answer","id":60732,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:19.874839+0100","flow_id":433061869082697,"pcap_cnt":2919,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53608,"proto":"UDP","dns":{"type":"answer","id":36472,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:17.005867+0100","flow_id":2141498927551985,"pcap_cnt":2277,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53517,"proto":"UDP","dns":{"type":"answer","id":23636,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:20.489042+0100","flow_id":779515406087762,"pcap_cnt":3204,"event_type":"dns","src_ip":"192.168.1.100","src_port":52510,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51416,"rrname":"xudevunymex.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.941873+0100","flow_id":974764619095857,"pcap_cnt":2248,"event_type":"dns","src_ip":"192.168.1.100","src_port":63528,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":15815,"rrname":"maravatudur.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.098055+0100","flow_id":1076278318694151,"pcap_cnt":2326,"event_type":"dns","src_ip":"192.168.1.100","src_port":57531,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4524,"rrname":"lygujirupum.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.846007+0100","flow_id":338398642431918,"pcap_cnt":2907,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60357,"proto":"UDP","dns":{"type":"answer","id":23012,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:17.098307+0100","flow_id":1076278318694151,"pcap_cnt":2327,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57531,"proto":"UDP","dns":{"type":"answer","id":4524,"rcode":"NXDOMAIN","rrname":"lygujirupum.eu"}}
{"timestamp":"2017-12-12T18:33:16.942128+0100","flow_id":974764619095857,"pcap_cnt":2249,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63528,"proto":"UDP","dns":{"type":"answer","id":15815,"rcode":"NXDOMAIN","rrname":"maravatudur.eu"}}
{"timestamp":"2017-12-12T18:33:17.777600+0100","flow_id":768030663367773,"pcap_cnt":2703,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54730,"proto":"UDP","dns":{"type":"answer","id":31197,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:20.113576+0100","flow_id":1594539137612712,"pcap_cnt":3034,"event_type":"dns","src_ip":"192.168.1.100","src_port":55453,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13558,"rrname":"lykujedofod.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.120436+0100","flow_id":654716541392216,"pcap_cnt":3045,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56767,"proto":"UDP","dns":{"type":"answer","id":31235,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:17.833601+0100","flow_id":1625203056425025,"pcap_cnt":2730,"event_type":"dns","src_ip":"192.168.1.100","src_port":49430,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27335,"rrname":"jefiredisav.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.767415+0100","flow_id":1493083419948222,"pcap_cnt":2695,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55518,"proto":"UDP","dns":{"type":"answer","id":13682,"rcode":"NXDOMAIN","rrname":"rynikulokop.eu"}}
{"timestamp":"2017-12-12T18:33:20.213906+0100","flow_id":695759248835474,"pcap_cnt":3072,"event_type":"dns","src_ip":"192.168.1.100","src_port":56372,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41958,"rrname":"cihyrimymen.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.408398+0100","flow_id":1808398443952749,"pcap_cnt":2503,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51492,"proto":"UDP","dns":{"type":"answer","id":53522,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:21.412425+0100","flow_id":1140711418317334,"pcap_cnt":3633,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57281,"proto":"UDP","dns":{"type":"answer","id":26315,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:20.532017+0100","flow_id":1226954361543973,"pcap_cnt":3227,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57689,"proto":"UDP","dns":{"type":"answer","id":35021,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:17.695537+0100","flow_id":1962862647811313,"pcap_cnt":2664,"event_type":"dns","src_ip":"192.168.1.100","src_port":59775,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48319,"rrname":"fodihywalyj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.311226+0100","flow_id":1655854090425182,"pcap_cnt":2436,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61120,"proto":"UDP","dns":{"type":"answer","id":50491,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:20.930781+0100","flow_id":1412823366251485,"pcap_cnt":3388,"event_type":"dns","src_ip":"192.168.1.100","src_port":61902,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18557,"rrname":"dixuvebakeq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.561327+0100","flow_id":816462862061743,"pcap_cnt":2586,"event_type":"dns","src_ip":"192.168.1.100","src_port":54778,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48548,"rrname":"kejogydideq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.247165+0100","flow_id":972213408810095,"pcap_cnt":3089,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63564,"proto":"UDP","dns":{"type":"answer","id":40112,"rcode":"NXDOMAIN","rrname":"jewypojynil.eu"}}
{"timestamp":"2017-12-12T18:33:17.324517+0100","flow_id":58725404373925,"pcap_cnt":2452,"event_type":"dns","src_ip":"192.168.1.100","src_port":62619,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33207,"rrname":"fogynahidal.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.247165+0100","flow_id":972213408810095,"pcap_cnt":3089,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63564,"proto":"UDP","dns":{"type":"answer","id":40112,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:17.659048+0100","flow_id":40407368797555,"pcap_cnt":2635,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61716,"proto":"UDP","dns":{"type":"answer","id":52710,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:17.884033+0100","flow_id":1503582467488824,"pcap_cnt":2761,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61524,"proto":"UDP","dns":{"type":"answer","id":13811,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:20.250944+0100","flow_id":497756961559616,"pcap_cnt":3092,"event_type":"dns","src_ip":"192.168.1.100","src_port":57990,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38094,"rrname":"kemimojitir.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.126305+0100","flow_id":993853598591811,"pcap_cnt":3491,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56166,"proto":"UDP","dns":{"type":"answer","id":43963,"rcode":"NXDOMAIN","rrname":"kevutodybuk.eu"}}
{"timestamp":"2017-12-12T18:33:15.687749+0100","flow_id":867091936428887,"pcap_cnt":1960,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56778,"proto":"UDP","dns":{"type":"answer","id":53199,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.623924+0100","flow_id":386324034847807,"pcap_cnt":2619,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52827,"proto":"UDP","dns":{"type":"answer","id":23712,"rcode":"NXDOMAIN","rrname":"ganuqibevux.eu"}}
{"timestamp":"2017-12-12T18:33:21.126305+0100","flow_id":993853598591811,"pcap_cnt":3491,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56166,"proto":"UDP","dns":{"type":"answer","id":43963,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:17.248286+0100","flow_id":1085675707156958,"pcap_cnt":2396,"event_type":"dns","src_ip":"192.168.1.100","src_port":57617,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17370,"rrname":"fotoxysupyd.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.251239+0100","flow_id":497756961559616,"pcap_cnt":3093,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57990,"proto":"UDP","dns":{"type":"answer","id":38094,"rcode":"NXDOMAIN","rrname":"kemimojitir.eu"}}
{"timestamp":"2017-12-12T18:33:17.623924+0100","flow_id":386324034847807,"pcap_cnt":2619,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52827,"proto":"UDP","dns":{"type":"answer","id":23712,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:15.693549+0100","flow_id":2006804458100353,"pcap_cnt":1965,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57569,"proto":"UDP","dns":{"type":"answer","id":42570,"rcode":"NXDOMAIN","rrname":"qexeholagav.eu"}}
{"timestamp":"2017-12-12T18:33:17.498081+0100","flow_id":1125468579142049,"pcap_cnt":2538,"event_type":"dns","src_ip":"192.168.1.100","src_port":52349,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5694,"rrname":"lyrimirohyp.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.356316+0100","flow_id":1713106004832220,"pcap_cnt":3604,"event_type":"dns","src_ip":"192.168.1.100","src_port":58029,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60460,"rrname":"gacarisekub.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.720363+0100","flow_id":1287184835280363,"pcap_cnt":2670,"event_type":"dns","src_ip":"192.168.1.100","src_port":64365,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2267,"rrname":"marawukyqos.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.498353+0100","flow_id":1125468579142049,"pcap_cnt":2539,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52349,"proto":"UDP","dns":{"type":"answer","id":5694,"rcode":"NXDOMAIN","rrname":"lyrimirohyp.eu"}}
{"timestamp":"2017-12-12T18:33:21.356610+0100","flow_id":1713106004832220,"pcap_cnt":3605,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58029,"proto":"UDP","dns":{"type":"answer","id":60460,"rcode":"NXDOMAIN","rrname":"gacarisekub.eu"}}
{"timestamp":"2017-12-12T18:33:17.720610+0100","flow_id":1287184835280363,"pcap_cnt":2671,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64365,"proto":"UDP","dns":{"type":"answer","id":2267,"rcode":"NXDOMAIN","rrname":"marawukyqos.eu"}}
{"timestamp":"2017-12-12T18:33:21.356610+0100","flow_id":1713106004832220,"pcap_cnt":3605,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58029,"proto":"UDP","dns":{"type":"answer","id":60460,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:22.372768+0100","flow_id":994609515900960,"pcap_cnt":4024,"event_type":"dns","src_ip":"192.168.1.100","src_port":60385,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23549,"rrname":"kefucoruvyd.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.951377+0100","flow_id":407380112212785,"pcap_cnt":3405,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52705,"proto":"UDP","dns":{"type":"answer","id":5997,"rcode":"NXDOMAIN","rrname":"dimomawezod.eu"}}
{"timestamp":"2017-12-12T18:33:16.999889+0100","flow_id":210032807133649,"pcap_cnt":2272,"event_type":"dns","src_ip":"192.168.1.100","src_port":63913,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":10795,"rrname":"dixilibaxop.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.345054+0100","flow_id":278728662205076,"pcap_cnt":4687,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60387,"proto":"UDP","dns":{"type":"answer","id":37028,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":577}}
{"timestamp":"2017-12-12T18:33:21.507328+0100","flow_id":207410729958848,"pcap_cnt":3674,"event_type":"dns","src_ip":"192.168.1.100","src_port":60497,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":57223,"rrname":"kezoxenitoj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.660454+0100","flow_id":449715604624358,"pcap_cnt":2638,"event_type":"dns","src_ip":"192.168.1.100","src_port":59461,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18492,"rrname":"xukorejymod.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.000158+0100","flow_id":210032807133649,"pcap_cnt":2273,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63913,"proto":"UDP","dns":{"type":"answer","id":10795,"rcode":"NXDOMAIN","rrname":"dixilibaxop.eu"}}
{"timestamp":"2017-12-12T18:33:21.507611+0100","flow_id":207410729958848,"pcap_cnt":3675,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60497,"proto":"UDP","dns":{"type":"answer","id":57223,"rcode":"NXDOMAIN","rrname":"kezoxenitoj.eu"}}
{"timestamp":"2017-12-12T18:33:17.000158+0100","flow_id":210032807133649,"pcap_cnt":2273,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63913,"proto":"UDP","dns":{"type":"answer","id":10795,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:17.660694+0100","flow_id":449715604624358,"pcap_cnt":2639,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59461,"proto":"UDP","dns":{"type":"answer","id":18492,"rcode":"NXDOMAIN","rrname":"xukorejymod.eu"}}
{"timestamp":"2017-12-12T18:33:21.507611+0100","flow_id":207410729958848,"pcap_cnt":3675,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60497,"proto":"UDP","dns":{"type":"answer","id":57223,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:20.113857+0100","flow_id":1594539137612712,"pcap_cnt":3035,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55453,"proto":"UDP","dns":{"type":"answer","id":13558,"rcode":"NXDOMAIN","rrname":"lykujedofod.eu"}}
{"timestamp":"2017-12-12T18:33:17.253677+0100","flow_id":1610656002203373,"pcap_cnt":2400,"event_type":"dns","src_ip":"192.168.1.100","src_port":55833,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34609,"rrname":"xugefexojow.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.767415+0100","flow_id":1493083419948222,"pcap_cnt":2695,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55518,"proto":"UDP","dns":{"type":"answer","id":13682,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:17.833849+0100","flow_id":1625203056425025,"pcap_cnt":2731,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49430,"proto":"UDP","dns":{"type":"answer","id":27335,"rcode":"NXDOMAIN","rrname":"jefiredisav.eu"}}
{"timestamp":"2017-12-12T18:33:17.253922+0100","flow_id":1610656002203373,"pcap_cnt":2401,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55833,"proto":"UDP","dns":{"type":"answer","id":34609,"rcode":"NXDOMAIN","rrname":"xugefexojow.eu"}}
{"timestamp":"2017-12-12T18:33:17.812935+0100","flow_id":1394745848719239,"pcap_cnt":2722,"event_type":"dns","src_ip":"192.168.1.100","src_port":52497,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":56017,"rrname":"dixonesohed.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.957869+0100","flow_id":1694040645017005,"pcap_cnt":3830,"event_type":"dns","src_ip":"192.168.1.100","src_port":50141,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31600,"rrname":"qekafuqafit.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.695784+0100","flow_id":1962862647811313,"pcap_cnt":2665,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59775,"proto":"UDP","dns":{"type":"answer","id":48319,"rcode":"NXDOMAIN","rrname":"fodihywalyj.eu"}}
{"timestamp":"2017-12-12T18:33:17.813193+0100","flow_id":1394745848719239,"pcap_cnt":2723,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52497,"proto":"UDP","dns":{"type":"answer","id":56017,"rcode":"NXDOMAIN","rrname":"dixonesohed.eu"}}
{"timestamp":"2017-12-12T18:33:20.931111+0100","flow_id":1412823366251485,"pcap_cnt":3389,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61902,"proto":"UDP","dns":{"type":"answer","id":18557,"rcode":"NXDOMAIN","rrname":"dixuvebakeq.eu"}}
{"timestamp":"2017-12-12T18:33:17.695784+0100","flow_id":1962862647811313,"pcap_cnt":2665,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59775,"proto":"UDP","dns":{"type":"answer","id":48319,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:17.324788+0100","flow_id":58725404373925,"pcap_cnt":2453,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62619,"proto":"UDP","dns":{"type":"answer","id":33207,"rcode":"NXDOMAIN","rrname":"fogynahidal.eu"}}
{"timestamp":"2017-12-12T18:33:20.008083+0100","flow_id":1262463003664275,"pcap_cnt":2974,"event_type":"dns","src_ip":"192.168.1.100","src_port":62507,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62512,"rrname":"kefilyrymaj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.747044+0100","flow_id":713274125411876,"pcap_cnt":2856,"event_type":"dns","src_ip":"192.168.1.100","src_port":64904,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":61458,"rrname":"tulyboputal.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.861109+0100","flow_id":731214203921004,"pcap_cnt":3803,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61126,"proto":"UDP","dns":{"type":"answer","id":50058,"rcode":"NXDOMAIN","rrname":"nozecafycyk.eu"}}
{"timestamp":"2017-12-12T18:33:17.687835+0100","flow_id":1174435501276650,"pcap_cnt":2661,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57843,"proto":"UDP","dns":{"type":"answer","id":6156,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:20.931356+0100","flow_id":1828492448642588,"pcap_cnt":3390,"event_type":"dns","src_ip":"192.168.1.100","src_port":58050,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44621,"rrname":"gahadyburaq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.751831+0100","flow_id":1894203300608215,"pcap_cnt":2686,"event_type":"dns","src_ip":"192.168.1.100","src_port":64215,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51490,"rrname":"nofagoteveg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.641637+0100","flow_id":1242210085227109,"pcap_cnt":2626,"event_type":"dns","src_ip":"192.168.1.100","src_port":54990,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37379,"rrname":"fotyfahokab.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.752117+0100","flow_id":1894203300608215,"pcap_cnt":2687,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64215,"proto":"UDP","dns":{"type":"answer","id":51490,"rcode":"NXDOMAIN","rrname":"nofagoteveg.eu"}}
{"timestamp":"2017-12-12T18:33:17.248573+0100","flow_id":1085675707156958,"pcap_cnt":2397,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57617,"proto":"UDP","dns":{"type":"answer","id":17370,"rcode":"NXDOMAIN","rrname":"fotoxysupyd.eu"}}
{"timestamp":"2017-12-12T18:33:17.752117+0100","flow_id":1894203300608215,"pcap_cnt":2687,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64215,"proto":"UDP","dns":{"type":"answer","id":51490,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:17.248573+0100","flow_id":1085675707156958,"pcap_cnt":2397,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57617,"proto":"UDP","dns":{"type":"answer","id":17370,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:20.805246+0100","flow_id":1251837254584424,"pcap_cnt":3337,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62891,"proto":"UDP","dns":{"type":"answer","id":5121,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:17.825101+0100","flow_id":468428777166605,"pcap_cnt":2728,"event_type":"dns","src_ip":"192.168.1.100","src_port":52133,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11393,"rrname":"gahyfesyqad.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.192203+0100","flow_id":1902185497554366,"pcap_cnt":3065,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58852,"proto":"UDP","dns":{"type":"answer","id":61119,"rcode":"NXDOMAIN","rrname":"gaqofubakeh.eu"}}
{"timestamp":"2017-12-12T18:33:17.348036+0100","flow_id":1435371944365956,"pcap_cnt":2468,"event_type":"dns","src_ip":"192.168.1.100","src_port":50531,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2694,"rrname":"tulekuvigij.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.825340+0100","flow_id":468428777166605,"pcap_cnt":2729,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52133,"proto":"UDP","dns":{"type":"answer","id":11393,"rcode":"NXDOMAIN","rrname":"gahyfesyqad.eu"}}
{"timestamp":"2017-12-12T18:33:20.192203+0100","flow_id":1902185497554366,"pcap_cnt":3065,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58852,"proto":"UDP","dns":{"type":"answer","id":61119,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:17.720610+0100","flow_id":1287184835280363,"pcap_cnt":2671,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64365,"proto":"UDP","dns":{"type":"answer","id":2267,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:20.411466+0100","flow_id":481474740334916,"pcap_cnt":3172,"event_type":"dns","src_ip":"192.168.1.100","src_port":58609,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27702,"rrname":"divesosisor.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:20.951377+0100","flow_id":407380112212785,"pcap_cnt":3405,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52705,"proto":"UDP","dns":{"type":"answer","id":5997,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:17.348276+0100","flow_id":1435371944365956,"pcap_cnt":2469,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50531,"proto":"UDP","dns":{"type":"answer","id":2694,"rcode":"NXDOMAIN","rrname":"tulekuvigij.eu"}}
{"timestamp":"2017-12-12T18:33:20.198032+0100","flow_id":1210953460876688,"pcap_cnt":3068,"event_type":"dns","src_ip":"192.168.1.100","src_port":49197,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":3930,"rrname":"digumihurit.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.062134+0100","flow_id":2170782015287990,"pcap_cnt":4746,"event_type":"dns","src_ip":"192.168.1.100","src_port":51317,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26854,"rrname":"ryhuneqevyv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.411700+0100","flow_id":481474740334916,"pcap_cnt":3173,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58609,"proto":"UDP","dns":{"type":"answer","id":27702,"rcode":"NXDOMAIN","rrname":"divesosisor.eu"}}
{"timestamp":"2017-12-12T18:33:17.098307+0100","flow_id":1076278318694151,"pcap_cnt":2327,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57531,"proto":"UDP","dns":{"type":"answer","id":4524,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:16.942128+0100","flow_id":974764619095857,"pcap_cnt":2249,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63528,"proto":"UDP","dns":{"type":"answer","id":15815,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:20.411700+0100","flow_id":481474740334916,"pcap_cnt":3173,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58609,"proto":"UDP","dns":{"type":"answer","id":27702,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:17.660694+0100","flow_id":449715604624358,"pcap_cnt":2639,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59461,"proto":"UDP","dns":{"type":"answer","id":18492,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:17.256468+0100","flow_id":1073600406612436,"pcap_cnt":2402,"event_type":"dns","src_ip":"192.168.1.100","src_port":50745,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13362,"rrname":"jenupydaces.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.670299+0100","flow_id":344568362973787,"pcap_cnt":3292,"event_type":"dns","src_ip":"192.168.1.100","src_port":54651,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2619,"rrname":"pujibylityp.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.214192+0100","flow_id":695759248835474,"pcap_cnt":3073,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56372,"proto":"UDP","dns":{"type":"answer","id":41958,"rcode":"NXDOMAIN","rrname":"cihyrimymen.eu"}}
{"timestamp":"2017-12-12T18:33:17.780980+0100","flow_id":454783666088628,"pcap_cnt":2704,"event_type":"dns","src_ip":"192.168.1.100","src_port":53642,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47219,"rrname":"kericoxojil.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.256725+0100","flow_id":1073600406612436,"pcap_cnt":2403,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50745,"proto":"UDP","dns":{"type":"answer","id":13362,"rcode":"NXDOMAIN","rrname":"jenupydaces.eu"}}
{"timestamp":"2017-12-12T18:33:17.158521+0100","flow_id":77756404427577,"pcap_cnt":2360,"event_type":"dns","src_ip":"192.168.1.100","src_port":60583,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44496,"rrname":"lysygyjytad.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.833849+0100","flow_id":1625203056425025,"pcap_cnt":2731,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49430,"proto":"UDP","dns":{"type":"answer","id":27335,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:17.256725+0100","flow_id":1073600406612436,"pcap_cnt":2403,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50745,"proto":"UDP","dns":{"type":"answer","id":13362,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:17.158756+0100","flow_id":77756404427577,"pcap_cnt":2361,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60583,"proto":"UDP","dns":{"type":"answer","id":44496,"rcode":"NXDOMAIN","rrname":"lysygyjytad.eu"}}
{"timestamp":"2017-12-12T18:33:21.958234+0100","flow_id":1694040645017005,"pcap_cnt":3831,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50141,"proto":"UDP","dns":{"type":"answer","id":31600,"rcode":"NXDOMAIN","rrname":"qekafuqafit.eu"}}
{"timestamp":"2017-12-12T18:33:17.314677+0100","flow_id":359038107634997,"pcap_cnt":2439,"event_type":"dns","src_ip":"192.168.1.100","src_port":58079,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53629,"rrname":"mamyfycoliq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.561574+0100","flow_id":816462862061743,"pcap_cnt":2587,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54778,"proto":"UDP","dns":{"type":"answer","id":48548,"rcode":"NXDOMAIN","rrname":"kejogydideq.eu"}}
{"timestamp":"2017-12-12T18:33:21.958234+0100","flow_id":1694040645017005,"pcap_cnt":3831,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50141,"proto":"UDP","dns":{"type":"answer","id":31600,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:20.931111+0100","flow_id":1412823366251485,"pcap_cnt":3389,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61902,"proto":"UDP","dns":{"type":"answer","id":18557,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:17.314937+0100","flow_id":359038107634997,"pcap_cnt":2440,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58079,"proto":"UDP","dns":{"type":"answer","id":53629,"rcode":"NXDOMAIN","rrname":"mamyfycoliq.eu"}}
{"timestamp":"2017-12-12T18:33:17.851283+0100","flow_id":934080541490515,"pcap_cnt":2740,"event_type":"dns","src_ip":"192.168.1.100","src_port":54601,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48408,"rrname":"pumipuvupuj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.314937+0100","flow_id":359038107634997,"pcap_cnt":2440,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58079,"proto":"UDP","dns":{"type":"answer","id":53629,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:21.169525+0100","flow_id":131205125215797,"pcap_cnt":3514,"event_type":"dns","src_ip":"192.168.1.100","src_port":64668,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":24354,"rrname":"marylefajuj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.008354+0100","flow_id":1262463003664275,"pcap_cnt":2975,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62507,"proto":"UDP","dns":{"type":"answer","id":62512,"rcode":"NXDOMAIN","rrname":"kefilyrymaj.eu"}}
{"timestamp":"2017-12-12T18:33:17.387322+0100","flow_id":544305816922362,"pcap_cnt":2486,"event_type":"dns","src_ip":"192.168.1.100","src_port":54218,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44054,"rrname":"lymunyjigak.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.008354+0100","flow_id":1262463003664275,"pcap_cnt":2975,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62507,"proto":"UDP","dns":{"type":"answer","id":62512,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:21.169778+0100","flow_id":131205125215797,"pcap_cnt":3515,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64668,"proto":"UDP","dns":{"type":"answer","id":24354,"rcode":"NXDOMAIN","rrname":"marylefajuj.eu"}}
{"timestamp":"2017-12-12T18:33:20.931628+0100","flow_id":1828492448642588,"pcap_cnt":3391,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58050,"proto":"UDP","dns":{"type":"answer","id":44621,"rcode":"NXDOMAIN","rrname":"gahadyburaq.eu"}}
{"timestamp":"2017-12-12T18:33:17.387580+0100","flow_id":544305816922362,"pcap_cnt":2487,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54218,"proto":"UDP","dns":{"type":"answer","id":44054,"rcode":"NXDOMAIN","rrname":"lymunyjigak.eu"}}
{"timestamp":"2017-12-12T18:33:15.693549+0100","flow_id":2006804458100353,"pcap_cnt":1965,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57569,"proto":"UDP","dns":{"type":"answer","id":42570,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:20.931628+0100","flow_id":1828492448642588,"pcap_cnt":3391,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58050,"proto":"UDP","dns":{"type":"answer","id":44621,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:17.387580+0100","flow_id":544305816922362,"pcap_cnt":2487,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54218,"proto":"UDP","dns":{"type":"answer","id":44054,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:16.855798+0100","flow_id":2742653029889,"pcap_cnt":2181,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60445,"proto":"UDP","dns":{"type":"answer","id":62996,"rcode":"NXDOMAIN","rrname":"gatonazytab.eu"}}
{"timestamp":"2017-12-12T18:33:21.106228+0100","flow_id":878553057042164,"pcap_cnt":3480,"event_type":"dns","src_ip":"192.168.1.100","src_port":56017,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":20230,"rrname":"gaqozosodul.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.395934+0100","flow_id":2090126823656094,"pcap_cnt":1995,"event_type":"dns","src_ip":"192.168.1.100","src_port":64692,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38138,"rrname":"nofypafiqev.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.498353+0100","flow_id":1125468579142049,"pcap_cnt":2539,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52349,"proto":"UDP","dns":{"type":"answer","id":5694,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:16.855798+0100","flow_id":2742653029889,"pcap_cnt":2181,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60445,"proto":"UDP","dns":{"type":"answer","id":62996,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:22.373041+0100","flow_id":994609515900960,"pcap_cnt":4025,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60385,"proto":"UDP","dns":{"type":"answer","id":23549,"rcode":"NXDOMAIN","rrname":"kefucoruvyd.eu"}}
{"timestamp":"2017-12-12T18:33:20.489312+0100","flow_id":779515406087762,"pcap_cnt":3205,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52510,"proto":"UDP","dns":{"type":"answer","id":51416,"rcode":"NXDOMAIN","rrname":"xudevunymex.eu"}}
{"timestamp":"2017-12-12T18:33:22.373041+0100","flow_id":994609515900960,"pcap_cnt":4025,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60385,"proto":"UDP","dns":{"type":"answer","id":23549,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:20.489312+0100","flow_id":779515406087762,"pcap_cnt":3205,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52510,"proto":"UDP","dns":{"type":"answer","id":51416,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:17.348276+0100","flow_id":1435371944365956,"pcap_cnt":2469,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50531,"proto":"UDP","dns":{"type":"answer","id":2694,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:20.198268+0100","flow_id":1210953460876688,"pcap_cnt":3069,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49197,"proto":"UDP","dns":{"type":"answer","id":3930,"rcode":"NXDOMAIN","rrname":"digumihurit.eu"}}
{"timestamp":"2017-12-12T18:33:22.661238+0100","flow_id":1899129628399350,"pcap_cnt":4118,"event_type":"dns","src_ip":"192.168.1.100","src_port":51327,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27012,"rrname":"tufecagemyl.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.801406+0100","flow_id":1408521956309383,"pcap_cnt":2717,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61239,"proto":"UDP","dns":{"type":"answer","id":29038,"rcode":"NXDOMAIN","rrname":"ciciqacidir.eu"}}
{"timestamp":"2017-12-12T18:33:27.062403+0100","flow_id":2170782015287990,"pcap_cnt":4747,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51317,"proto":"UDP","dns":{"type":"answer","id":26854,"rcode":"NXDOMAIN","rrname":"ryhuneqevyv.eu"}}
{"timestamp":"2017-12-12T18:33:17.462106+0100","flow_id":1204354243431706,"pcap_cnt":2524,"event_type":"dns","src_ip":"192.168.1.100","src_port":64052,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62132,"rrname":"pumelilebon.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.661524+0100","flow_id":1899129628399350,"pcap_cnt":4119,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51327,"proto":"UDP","dns":{"type":"answer","id":27012,"rcode":"NXDOMAIN","rrname":"tufecagemyl.eu"}}
{"timestamp":"2017-12-12T18:33:20.113857+0100","flow_id":1594539137612712,"pcap_cnt":3035,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55453,"proto":"UDP","dns":{"type":"answer","id":13558,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:27.062403+0100","flow_id":2170782015287990,"pcap_cnt":4747,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51317,"proto":"UDP","dns":{"type":"answer","id":26854,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:20.670579+0100","flow_id":344568362973787,"pcap_cnt":3293,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54651,"proto":"UDP","dns":{"type":"answer","id":2619,"rcode":"NXDOMAIN","rrname":"pujibylityp.eu"}}
{"timestamp":"2017-12-12T18:33:17.253922+0100","flow_id":1610656002203373,"pcap_cnt":2401,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55833,"proto":"UDP","dns":{"type":"answer","id":34609,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:17.134403+0100","flow_id":724965026237444,"pcap_cnt":2343,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49451,"proto":"UDP","dns":{"type":"answer","id":5575,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:27.078104+0100","flow_id":321712694964504,"pcap_cnt":4754,"event_type":"dns","src_ip":"192.168.1.100","src_port":62152,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11502,"rrname":"vowuqykecij.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.296934+0100","flow_id":1730554309216230,"pcap_cnt":2419,"event_type":"dns","src_ip":"192.168.1.100","src_port":56665,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50007,"rrname":"vopibycywow.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.813193+0100","flow_id":1394745848719239,"pcap_cnt":2723,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52497,"proto":"UDP","dns":{"type":"answer","id":56017,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:17.561574+0100","flow_id":816462862061743,"pcap_cnt":2587,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54778,"proto":"UDP","dns":{"type":"answer","id":48548,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:17.297228+0100","flow_id":1730554309216230,"pcap_cnt":2420,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56665,"proto":"UDP","dns":{"type":"answer","id":50007,"rcode":"NXDOMAIN","rrname":"vopibycywow.eu"}}
{"timestamp":"2017-12-12T18:33:17.874434+0100","flow_id":2230666743601090,"pcap_cnt":2758,"event_type":"dns","src_ip":"192.168.1.100","src_port":54371,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26335,"rrname":"lysuxinebyg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.297228+0100","flow_id":1730554309216230,"pcap_cnt":2420,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56665,"proto":"UDP","dns":{"type":"answer","id":50007,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:17.562238+0100","flow_id":582112266523710,"pcap_cnt":2588,"event_type":"dns","src_ip":"192.168.1.100","src_port":63523,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40247,"rrname":"xudunudeveq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.874690+0100","flow_id":2230666743601090,"pcap_cnt":2759,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54371,"proto":"UDP","dns":{"type":"answer","id":26335,"rcode":"NXDOMAIN","rrname":"lysuxinebyg.eu"}}
{"timestamp":"2017-12-12T18:33:17.316585+0100","flow_id":111265739297961,"pcap_cnt":2441,"event_type":"dns","src_ip":"192.168.1.100","src_port":64809,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11183,"rrname":"rynenogupez.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.851542+0100","flow_id":934080541490515,"pcap_cnt":2741,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54601,"proto":"UDP","dns":{"type":"answer","id":48408,"rcode":"NXDOMAIN","rrname":"pumipuvupuj.eu"}}
{"timestamp":"2017-12-12T18:33:17.874690+0100","flow_id":2230666743601090,"pcap_cnt":2759,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54371,"proto":"UDP","dns":{"type":"answer","id":26335,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:20.251239+0100","flow_id":497756961559616,"pcap_cnt":3093,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57990,"proto":"UDP","dns":{"type":"answer","id":38094,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:19.630237+0100","flow_id":897337096379869,"pcap_cnt":2796,"event_type":"dns","src_ip":"192.168.1.100","src_port":54587,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48396,"rrname":"xudakejupok.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.169778+0100","flow_id":131205125215797,"pcap_cnt":3515,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64668,"proto":"UDP","dns":{"type":"answer","id":24354,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:20.268365+0100","flow_id":510882381568077,"pcap_cnt":3102,"event_type":"dns","src_ip":"192.168.1.100","src_port":49204,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59694,"rrname":"vojomekisuw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.630502+0100","flow_id":897337096379869,"pcap_cnt":2797,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54587,"proto":"UDP","dns":{"type":"answer","id":48396,"rcode":"NXDOMAIN","rrname":"xudakejupok.eu"}}
{"timestamp":"2017-12-12T18:33:19.667713+0100","flow_id":1242403358846748,"pcap_cnt":2817,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63537,"proto":"UDP","dns":{"type":"answer","id":50356,"rcode":"NXDOMAIN","rrname":"foqinywenec.eu"}}
{"timestamp":"2017-12-12T18:33:21.248726+0100","flow_id":185768389757846,"pcap_cnt":3554,"event_type":"dns","src_ip":"192.168.1.100","src_port":54621,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26212,"rrname":"dixagowunol.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.630502+0100","flow_id":897337096379869,"pcap_cnt":2797,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54587,"proto":"UDP","dns":{"type":"answer","id":48396,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:17.435560+0100","flow_id":311535769331048,"pcap_cnt":2514,"event_type":"dns","src_ip":"192.168.1.100","src_port":58672,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":58400,"rrname":"qedefulywoh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.026512+0100","flow_id":1090050131584912,"pcap_cnt":3442,"event_type":"dns","src_ip":"192.168.1.100","src_port":65042,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33726,"rrname":"jecaduxakeh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.642272+0100","flow_id":2097127620594912,"pcap_cnt":2808,"event_type":"dns","src_ip":"192.168.1.100","src_port":51274,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":15288,"rrname":"vowuqykecij.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.249023+0100","flow_id":185768389757846,"pcap_cnt":3555,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54621,"proto":"UDP","dns":{"type":"answer","id":26212,"rcode":"NXDOMAIN","rrname":"dixagowunol.eu"}}
{"timestamp":"2017-12-12T18:33:21.106497+0100","flow_id":878553057042164,"pcap_cnt":3481,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56017,"proto":"UDP","dns":{"type":"answer","id":20230,"rcode":"NXDOMAIN","rrname":"gaqozosodul.eu"}}
{"timestamp":"2017-12-12T18:33:19.642557+0100","flow_id":2097127620594912,"pcap_cnt":2809,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51274,"proto":"UDP","dns":{"type":"answer","id":15288,"rcode":"NXDOMAIN","rrname":"vowuqykecij.eu"}}
{"timestamp":"2017-12-12T18:33:21.026802+0100","flow_id":1090050131584912,"pcap_cnt":3443,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65042,"proto":"UDP","dns":{"type":"answer","id":33726,"rcode":"NXDOMAIN","rrname":"jecaduxakeh.eu"}}
{"timestamp":"2017-12-12T18:33:16.964199+0100","flow_id":1623577411237479,"pcap_cnt":2258,"event_type":"dns","src_ip":"192.168.1.100","src_port":59878,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17012,"rrname":"fogisysemyq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.026802+0100","flow_id":1090050131584912,"pcap_cnt":3443,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65042,"proto":"UDP","dns":{"type":"answer","id":33726,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:16.919526+0100","flow_id":762958305745470,"pcap_cnt":2226,"event_type":"dns","src_ip":"192.168.1.100","src_port":58515,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50636,"rrname":"kevedorozup.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:20.198268+0100","flow_id":1210953460876688,"pcap_cnt":3069,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49197,"proto":"UDP","dns":{"type":"answer","id":3930,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:21.170338+0100","flow_id":1544560750729570,"pcap_cnt":3516,"event_type":"dns","src_ip":"192.168.1.100","src_port":59209,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38428,"rrname":"rynoryguwuh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.919762+0100","flow_id":762958305745470,"pcap_cnt":2227,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58515,"proto":"UDP","dns":{"type":"answer","id":50636,"rcode":"NXDOMAIN","rrname":"kevedorozup.eu"}}
{"timestamp":"2017-12-12T18:33:17.801406+0100","flow_id":1408521956309383,"pcap_cnt":2717,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61239,"proto":"UDP","dns":{"type":"answer","id":29038,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:16.919762+0100","flow_id":762958305745470,"pcap_cnt":2227,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58515,"proto":"UDP","dns":{"type":"answer","id":50636,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:21.170604+0100","flow_id":1544560750729570,"pcap_cnt":3517,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59209,"proto":"UDP","dns":{"type":"answer","id":38428,"rcode":"NXDOMAIN","rrname":"rynoryguwuh.eu"}}
{"timestamp":"2017-12-12T18:33:20.214192+0100","flow_id":695759248835474,"pcap_cnt":3073,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56372,"proto":"UDP","dns":{"type":"answer","id":41958,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:20.395537+0100","flow_id":1223838362765585,"pcap_cnt":3164,"event_type":"dns","src_ip":"192.168.1.100","src_port":58770,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":52988,"rrname":"ryteqipogoz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.982203+0100","flow_id":59940880055483,"pcap_cnt":2266,"event_type":"dns","src_ip":"192.168.1.100","src_port":52325,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64338,"rrname":"ryqofuvenoc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.271349+0100","flow_id":171549900415989,"pcap_cnt":3104,"event_type":"dns","src_ip":"192.168.1.100","src_port":55029,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":24090,"rrname":"nofexekakuk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.982438+0100","flow_id":59940880055483,"pcap_cnt":2267,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52325,"proto":"UDP","dns":{"type":"answer","id":64338,"rcode":"NXDOMAIN","rrname":"ryqofuvenoc.eu"}}
{"timestamp":"2017-12-12T18:33:17.837844+0100","flow_id":59910815336660,"pcap_cnt":2732,"event_type":"dns","src_ip":"192.168.1.100","src_port":50182,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":16492,"rrname":"rytecyvaxuj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.982438+0100","flow_id":59940880055483,"pcap_cnt":2267,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52325,"proto":"UDP","dns":{"type":"answer","id":64338,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:17.158756+0100","flow_id":77756404427577,"pcap_cnt":2361,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60583,"proto":"UDP","dns":{"type":"answer","id":44496,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:17.312556+0100","flow_id":1617338971309292,"pcap_cnt":2437,"event_type":"dns","src_ip":"192.168.1.100","src_port":55818,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4713,"rrname":"noralycifok.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.838100+0100","flow_id":59910815336660,"pcap_cnt":2733,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50182,"proto":"UDP","dns":{"type":"answer","id":16492,"rcode":"NXDOMAIN","rrname":"rytecyvaxuj.eu"}}
{"timestamp":"2017-12-12T18:33:17.793223+0100","flow_id":758869498075783,"pcap_cnt":2712,"event_type":"dns","src_ip":"192.168.1.100","src_port":54564,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38554,"rrname":"tunegapenef.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.324788+0100","flow_id":58725404373925,"pcap_cnt":2453,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62619,"proto":"UDP","dns":{"type":"answer","id":33207,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:21.971114+0100","flow_id":887342707626346,"pcap_cnt":3842,"event_type":"dns","src_ip":"192.168.1.100","src_port":63516,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49246,"rrname":"direfiwahur.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.793481+0100","flow_id":758869498075783,"pcap_cnt":2713,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54564,"proto":"UDP","dns":{"type":"answer","id":38554,"rcode":"NXDOMAIN","rrname":"tunegapenef.eu"}}
{"timestamp":"2017-12-12T18:33:21.861109+0100","flow_id":731214203921004,"pcap_cnt":3803,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61126,"proto":"UDP","dns":{"type":"answer","id":50058,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:17.793481+0100","flow_id":758869498075783,"pcap_cnt":2713,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54564,"proto":"UDP","dns":{"type":"answer","id":38554,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:21.971512+0100","flow_id":887342707626346,"pcap_cnt":3843,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63516,"proto":"UDP","dns":{"type":"answer","id":49246,"rcode":"NXDOMAIN","rrname":"direfiwahur.eu"}}
{"timestamp":"2017-12-12T18:33:17.851542+0100","flow_id":934080541490515,"pcap_cnt":2741,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54601,"proto":"UDP","dns":{"type":"answer","id":48408,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:21.910550+0100","flow_id":654265569823852,"pcap_cnt":3816,"event_type":"dns","src_ip":"192.168.1.100","src_port":58651,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36010,"rrname":"lysenenyxis.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:17.811626+0100","flow_id":2056963233768042,"pcap_cnt":2720,"event_type":"dns","src_ip":"192.168.1.100","src_port":64705,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14596,"rrname":"magusecutuk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.322400+0100","flow_id":1998534498904928,"pcap_cnt":3138,"event_type":"dns","src_ip":"192.168.1.100","src_port":50817,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19677,"rrname":"jepuderymas.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.641907+0100","flow_id":1242210085227109,"pcap_cnt":2627,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54990,"proto":"UDP","dns":{"type":"answer","id":37379,"rcode":"NXDOMAIN","rrname":"fotyfahokab.eu"}}
{"timestamp":"2017-12-12T18:33:17.811868+0100","flow_id":2056963233768042,"pcap_cnt":2721,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64705,"proto":"UDP","dns":{"type":"answer","id":14596,"rcode":"NXDOMAIN","rrname":"magusecutuk.eu"}}
{"timestamp":"2017-12-12T18:33:19.849922+0100","flow_id":1053699675781122,"pcap_cnt":2908,"event_type":"dns","src_ip":"192.168.1.100","src_port":62986,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18014,"rrname":"ryqudigyqog.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.641907+0100","flow_id":1242210085227109,"pcap_cnt":2627,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54990,"proto":"UDP","dns":{"type":"answer","id":37379,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:17.811868+0100","flow_id":2056963233768042,"pcap_cnt":2721,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64705,"proto":"UDP","dns":{"type":"answer","id":14596,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:16.446566+0100","flow_id":1167636568002662,"pcap_cnt":2010,"event_type":"dns","src_ip":"192.168.1.100","src_port":54620,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":24570,"rrname":"lyrugujiqat.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.683966+0100","flow_id":616860699553726,"pcap_cnt":2822,"event_type":"dns","src_ip":"192.168.1.100","src_port":53974,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2967,"rrname":"jecygyrogec.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.435821+0100","flow_id":311535769331048,"pcap_cnt":2515,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58672,"proto":"UDP","dns":{"type":"answer","id":58400,"rcode":"NXDOMAIN","rrname":"qedefulywoh.eu"}}
{"timestamp":"2017-12-12T18:33:16.470325+0100","flow_id":503961038822061,"pcap_cnt":2015,"event_type":"dns","src_ip":"192.168.1.100","src_port":65488,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40559,"rrname":"volekymyvum.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:21.249023+0100","flow_id":185768389757846,"pcap_cnt":3555,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54621,"proto":"UDP","dns":{"type":"answer","id":26212,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:19.684242+0100","flow_id":616860699553726,"pcap_cnt":2823,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53974,"proto":"UDP","dns":{"type":"answer","id":2967,"rcode":"NXDOMAIN","rrname":"jecygyrogec.eu"}}
{"timestamp":"2017-12-12T18:33:16.497090+0100","flow_id":2090126823656094,"pcap_cnt":2030,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64692,"proto":"UDP","dns":{"type":"answer","id":38138,"rcode":"NXDOMAIN","rrname":"nofypafiqev.eu"}}
{"timestamp":"2017-12-12T18:33:17.435821+0100","flow_id":311535769331048,"pcap_cnt":2515,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58672,"proto":"UDP","dns":{"type":"answer","id":58400,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:22.071776+0100","flow_id":1246436333328480,"pcap_cnt":3890,"event_type":"dns","src_ip":"192.168.1.100","src_port":62525,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7480,"rrname":"tujomalumav.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.234584+0100","flow_id":663171184563288,"pcap_cnt":3546,"event_type":"dns","src_ip":"192.168.1.100","src_port":53928,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47678,"rrname":"tunymoqofol.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.642557+0100","flow_id":2097127620594912,"pcap_cnt":2809,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51274,"proto":"UDP","dns":{"type":"answer","id":15288,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:16.964452+0100","flow_id":1623577411237479,"pcap_cnt":2259,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59878,"proto":"UDP","dns":{"type":"answer","id":17012,"rcode":"NXDOMAIN","rrname":"fogisysemyq.eu"}}
{"timestamp":"2017-12-12T18:33:20.631906+0100","flow_id":159115970126946,"pcap_cnt":3276,"event_type":"dns","src_ip":"192.168.1.100","src_port":52322,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":56187,"rrname":"qeqaxupogog.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.234975+0100","flow_id":663171184563288,"pcap_cnt":3547,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53928,"proto":"UDP","dns":{"type":"answer","id":47678,"rcode":"NXDOMAIN","rrname":"tunymoqofol.eu"}}
{"timestamp":"2017-12-12T18:33:16.964452+0100","flow_id":1623577411237479,"pcap_cnt":2259,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59878,"proto":"UDP","dns":{"type":"answer","id":17012,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:19.699549+0100","flow_id":448805071727773,"pcap_cnt":2830,"event_type":"dns","src_ip":"192.168.1.100","src_port":52942,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8647,"rrname":"disisizazim.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.661524+0100","flow_id":1899129628399350,"pcap_cnt":4119,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51327,"proto":"UDP","dns":{"type":"answer","id":27012,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:21.170604+0100","flow_id":1544560750729570,"pcap_cnt":3517,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59209,"proto":"UDP","dns":{"type":"answer","id":38428,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:19.699857+0100","flow_id":448805071727773,"pcap_cnt":2831,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52942,"proto":"UDP","dns":{"type":"answer","id":8647,"rcode":"NXDOMAIN","rrname":"disisizazim.eu"}}
{"timestamp":"2017-12-12T18:33:17.781235+0100","flow_id":454783666088628,"pcap_cnt":2705,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53642,"proto":"UDP","dns":{"type":"answer","id":47219,"rcode":"NXDOMAIN","rrname":"kericoxojil.eu"}}
{"timestamp":"2017-12-12T18:33:22.895555+0100","flow_id":975642940320323,"pcap_cnt":4196,"event_type":"dns","src_ip":"192.168.1.100","src_port":53344,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41334,"rrname":"disafuwokis.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.770983+0100","flow_id":678663131546535,"pcap_cnt":3324,"event_type":"dns","src_ip":"192.168.1.100","src_port":54807,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53406,"rrname":"vojykocezel.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.670579+0100","flow_id":344568362973787,"pcap_cnt":3293,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54651,"proto":"UDP","dns":{"type":"answer","id":2619,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":589}}
{"timestamp":"2017-12-12T18:33:20.271672+0100","flow_id":171549900415989,"pcap_cnt":3105,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55029,"proto":"UDP","dns":{"type":"answer","id":24090,"rcode":"NXDOMAIN","rrname":"nofexekakuk.eu"}}
{"timestamp":"2017-12-12T18:33:17.089084+0100","flow_id":682934476299260,"pcap_cnt":2314,"event_type":"dns","src_ip":"192.168.1.100","src_port":51919,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35550,"rrname":"purowuqokuq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.078419+0100","flow_id":321712694964504,"pcap_cnt":4755,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62152,"proto":"UDP","dns":{"type":"answer","id":11502,"rcode":"NXDOMAIN","rrname":"vowuqykecij.eu"}}
{"timestamp":"2017-12-12T18:33:22.895788+0100","flow_id":975642940320323,"pcap_cnt":4197,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53344,"proto":"UDP","dns":{"type":"answer","id":41334,"rcode":"NXDOMAIN","rrname":"disafuwokis.eu"}}
{"timestamp":"2017-12-12T18:33:15.529844+0100","flow_id":1991967493526964,"pcap_cnt":1873,"event_type":"dns","src_ip":"192.168.1.100","src_port":51569,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28759,"rrname":"tupycegubej.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.312810+0100","flow_id":1617338971309292,"pcap_cnt":2438,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55818,"proto":"UDP","dns":{"type":"answer","id":4713,"rcode":"NXDOMAIN","rrname":"noralycifok.eu"}}
{"timestamp":"2017-12-12T18:33:17.562503+0100","flow_id":582112266523710,"pcap_cnt":2589,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63523,"proto":"UDP","dns":{"type":"answer","id":40247,"rcode":"NXDOMAIN","rrname":"xudunudeveq.eu"}}
{"timestamp":"2017-12-12T18:33:19.747313+0100","flow_id":713274125411876,"pcap_cnt":2857,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64904,"proto":"UDP","dns":{"type":"answer","id":61458,"rcode":"NXDOMAIN","rrname":"tulyboputal.eu"}}
{"timestamp":"2017-12-12T18:33:17.312810+0100","flow_id":1617338971309292,"pcap_cnt":2438,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55818,"proto":"UDP","dns":{"type":"answer","id":4713,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:17.562503+0100","flow_id":582112266523710,"pcap_cnt":2589,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63523,"proto":"UDP","dns":{"type":"answer","id":40247,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:19.747313+0100","flow_id":713274125411876,"pcap_cnt":2857,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64904,"proto":"UDP","dns":{"type":"answer","id":61458,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:15.581272+0100","flow_id":1991967493526964,"pcap_cnt":1893,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51569,"proto":"UDP","dns":{"type":"answer","id":28759,"rcode":"NXDOMAIN","rrname":"tupycegubej.eu"}}
{"timestamp":"2017-12-12T18:33:21.910927+0100","flow_id":654265569823852,"pcap_cnt":3817,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58651,"proto":"UDP","dns":{"type":"answer","id":36010,"rcode":"NXDOMAIN","rrname":"lysenenyxis.eu"}}
{"timestamp":"2017-12-12T18:33:20.322700+0100","flow_id":1998534498904928,"pcap_cnt":3139,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50817,"proto":"UDP","dns":{"type":"answer","id":19677,"rcode":"NXDOMAIN","rrname":"jepuderymas.eu"}}
{"timestamp":"2017-12-12T18:33:17.369130+0100","flow_id":278202528145898,"pcap_cnt":2480,"event_type":"dns","src_ip":"192.168.1.100","src_port":55165,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63890,"rrname":"lyvevonifun.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.780367+0100","flow_id":7129962375247,"pcap_cnt":2866,"event_type":"dns","src_ip":"192.168.1.100","src_port":57128,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8475,"rrname":"gatuvesisak.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.268694+0100","flow_id":510882381568077,"pcap_cnt":3103,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49204,"proto":"UDP","dns":{"type":"answer","id":59694,"rcode":"NXDOMAIN","rrname":"vojomekisuw.eu"}}
{"timestamp":"2017-12-12T18:33:20.322700+0100","flow_id":1998534498904928,"pcap_cnt":3139,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50817,"proto":"UDP","dns":{"type":"answer","id":19677,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":589}}
{"timestamp":"2017-12-12T18:33:19.850182+0100","flow_id":1053699675781122,"pcap_cnt":2909,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62986,"proto":"UDP","dns":{"type":"answer","id":18014,"rcode":"NXDOMAIN","rrname":"ryqudigyqog.eu"}}
{"timestamp":"2017-12-12T18:33:17.797493+0100","flow_id":1790726800014814,"pcap_cnt":2714,"event_type":"dns","src_ip":"192.168.1.100","src_port":55898,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1130,"rrname":"volocecaluk.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:17.369398+0100","flow_id":278202528145898,"pcap_cnt":2481,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55165,"proto":"UDP","dns":{"type":"answer","id":63890,"rcode":"NXDOMAIN","rrname":"lyvevonifun.eu"}}
{"timestamp":"2017-12-12T18:33:19.684242+0100","flow_id":616860699553726,"pcap_cnt":2823,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53974,"proto":"UDP","dns":{"type":"answer","id":2967,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:20.385217+0100","flow_id":1900849762721985,"pcap_cnt":3160,"event_type":"dns","src_ip":"192.168.1.100","src_port":64443,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45775,"rrname":"vocerocofyf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.797721+0100","flow_id":1790726800014814,"pcap_cnt":2715,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55898,"proto":"UDP","dns":{"type":"answer","id":1130,"rcode":"NXDOMAIN","rrname":"volocecaluk.eu"}}
{"timestamp":"2017-12-12T18:33:17.455733+0100","flow_id":1033399512724533,"pcap_cnt":2518,"event_type":"dns","src_ip":"192.168.1.100","src_port":50096,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":61697,"rrname":"dixesywyruc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.122470+0100","flow_id":822102154141286,"pcap_cnt":2338,"event_type":"dns","src_ip":"192.168.1.100","src_port":58822,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":15220,"rrname":"xudosorihug.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.385518+0100","flow_id":1900849762721985,"pcap_cnt":3161,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64443,"proto":"UDP","dns":{"type":"answer","id":45775,"rcode":"NXDOMAIN","rrname":"vocerocofyf.eu"}}
{"timestamp":"2017-12-12T18:33:20.665190+0100","flow_id":988302356260454,"pcap_cnt":3290,"event_type":"dns","src_ip":"192.168.1.100","src_port":62298,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":22241,"rrname":"tulyrylynyc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.122740+0100","flow_id":822102154141286,"pcap_cnt":2339,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58822,"proto":"UDP","dns":{"type":"answer","id":15220,"rcode":"NXDOMAIN","rrname":"xudosorihug.eu"}}
{"timestamp":"2017-12-12T18:33:21.805696+0100","flow_id":671988752403264,"pcap_cnt":3776,"event_type":"dns","src_ip":"192.168.1.100","src_port":63052,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":54074,"rrname":"galyzabunoc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.462372+0100","flow_id":1204354243431706,"pcap_cnt":2525,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64052,"proto":"UDP","dns":{"type":"answer","id":62132,"rcode":"NXDOMAIN","rrname":"pumelilebon.eu"}}
{"timestamp":"2017-12-12T18:33:20.665477+0100","flow_id":988302356260454,"pcap_cnt":3291,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62298,"proto":"UDP","dns":{"type":"answer","id":22241,"rcode":"NXDOMAIN","rrname":"tulyrylynyc.eu"}}
{"timestamp":"2017-12-12T18:33:17.338515+0100","flow_id":134838667258451,"pcap_cnt":2462,"event_type":"dns","src_ip":"192.168.1.100","src_port":62393,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53333,"rrname":"lyxaxududes.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.806001+0100","flow_id":671988752403264,"pcap_cnt":3777,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63052,"proto":"UDP","dns":{"type":"answer","id":54074,"rcode":"NXDOMAIN","rrname":"galyzabunoc.eu"}}
{"timestamp":"2017-12-12T18:33:20.665477+0100","flow_id":988302356260454,"pcap_cnt":3291,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62298,"proto":"UDP","dns":{"type":"answer","id":22241,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:17.462372+0100","flow_id":1204354243431706,"pcap_cnt":2525,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64052,"proto":"UDP","dns":{"type":"answer","id":62132,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:20.395895+0100","flow_id":1223838362765585,"pcap_cnt":3165,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58770,"proto":"UDP","dns":{"type":"answer","id":52988,"rcode":"NXDOMAIN","rrname":"ryteqipogoz.eu"}}
{"timestamp":"2017-12-12T18:33:21.301992+0100","flow_id":1825640590449576,"pcap_cnt":3570,"event_type":"dns","src_ip":"192.168.1.100","src_port":55129,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49568,"rrname":"lyruterodiq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.395895+0100","flow_id":1223838362765585,"pcap_cnt":3165,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58770,"proto":"UDP","dns":{"type":"answer","id":52988,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:17.781235+0100","flow_id":454783666088628,"pcap_cnt":2705,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53642,"proto":"UDP","dns":{"type":"answer","id":47219,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:20.271672+0100","flow_id":171549900415989,"pcap_cnt":3105,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55029,"proto":"UDP","dns":{"type":"answer","id":24090,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:20.430717+0100","flow_id":1352824820634237,"pcap_cnt":3176,"event_type":"dns","src_ip":"192.168.1.100","src_port":56637,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17325,"rrname":"makolacynyd.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.302316+0100","flow_id":1825640590449576,"pcap_cnt":3571,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55129,"proto":"UDP","dns":{"type":"answer","id":49568,"rcode":"NXDOMAIN","rrname":"lyruterodiq.eu"}}
{"timestamp":"2017-12-12T18:33:17.838100+0100","flow_id":59910815336660,"pcap_cnt":2733,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50182,"proto":"UDP","dns":{"type":"answer","id":16492,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:19.655753+0100","flow_id":693188710826377,"pcap_cnt":2812,"event_type":"dns","src_ip":"192.168.1.100","src_port":49802,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29471,"rrname":"mavejykidij.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.078419+0100","flow_id":321712694964504,"pcap_cnt":4755,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62152,"proto":"UDP","dns":{"type":"answer","id":11502,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:17.089328+0100","flow_id":682934476299260,"pcap_cnt":2315,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51919,"proto":"UDP","dns":{"type":"answer","id":35550,"rcode":"NXDOMAIN","rrname":"purowuqokuq.eu"}}
{"timestamp":"2017-12-12T18:33:17.416164+0100","flow_id":1201788000491940,"pcap_cnt":2508,"event_type":"dns","src_ip":"192.168.1.100","src_port":50256,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34796,"rrname":"volyrukupoq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.089328+0100","flow_id":682934476299260,"pcap_cnt":2315,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51919,"proto":"UDP","dns":{"type":"answer","id":35550,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:21.971512+0100","flow_id":887342707626346,"pcap_cnt":3843,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63516,"proto":"UDP","dns":{"type":"answer","id":49246,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":595}}
{"timestamp":"2017-12-12T18:33:17.861875+0100","flow_id":2169570833802931,"pcap_cnt":2746,"event_type":"dns","src_ip":"192.168.1.100","src_port":50151,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":52478,"rrname":"jejopiniduh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.093420+0100","flow_id":481672308813036,"pcap_cnt":2320,"event_type":"dns","src_ip":"192.168.1.100","src_port":51882,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19036,"rrname":"jelaqirozum.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.056811+0100","flow_id":843774559444459,"pcap_cnt":3882,"event_type":"dns","src_ip":"192.168.1.100","src_port":59677,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1885,"rrname":"tulaqypiqyh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.610189+0100","flow_id":1455313477521293,"pcap_cnt":2604,"event_type":"dns","src_ip":"192.168.1.100","src_port":61793,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42860,"rrname":"jecocinywut.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.057151+0100","flow_id":843774559444459,"pcap_cnt":3883,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59677,"proto":"UDP","dns":{"type":"answer","id":1885,"rcode":"NXDOMAIN","rrname":"tulaqypiqyh.eu"}}
{"timestamp":"2017-12-12T18:33:19.667713+0100","flow_id":1242403358846748,"pcap_cnt":2817,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63537,"proto":"UDP","dns":{"type":"answer","id":50356,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:22.057151+0100","flow_id":843774559444459,"pcap_cnt":3883,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59677,"proto":"UDP","dns":{"type":"answer","id":1885,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:17.825340+0100","flow_id":468428777166605,"pcap_cnt":2729,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52133,"proto":"UDP","dns":{"type":"answer","id":11393,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:17.610454+0100","flow_id":1455313477521293,"pcap_cnt":2605,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61793,"proto":"UDP","dns":{"type":"answer","id":42860,"rcode":"NXDOMAIN","rrname":"jecocinywut.eu"}}
{"timestamp":"2017-12-12T18:33:19.789373+0100","flow_id":967267753855869,"pcap_cnt":2874,"event_type":"dns","src_ip":"192.168.1.100","src_port":62946,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":39439,"rrname":"nopymecurud.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.610454+0100","flow_id":1455313477521293,"pcap_cnt":2605,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61793,"proto":"UDP","dns":{"type":"answer","id":42860,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:17.864784+0100","flow_id":909143960515908,"pcap_cnt":2748,"event_type":"dns","src_ip":"192.168.1.100","src_port":56875,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50732,"rrname":"kefeminalyn.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:19.780657+0100","flow_id":7129962375247,"pcap_cnt":2867,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57128,"proto":"UDP","dns":{"type":"answer","id":8475,"rcode":"NXDOMAIN","rrname":"gatuvesisak.eu"}}
{"timestamp":"2017-12-12T18:33:19.850182+0100","flow_id":1053699675781122,"pcap_cnt":2909,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62986,"proto":"UDP","dns":{"type":"answer","id":18014,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:19.780657+0100","flow_id":7129962375247,"pcap_cnt":2867,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57128,"proto":"UDP","dns":{"type":"answer","id":8475,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:16.497090+0100","flow_id":2090126823656094,"pcap_cnt":2030,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64692,"proto":"UDP","dns":{"type":"answer","id":38138,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:21.106497+0100","flow_id":878553057042164,"pcap_cnt":3481,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56017,"proto":"UDP","dns":{"type":"answer","id":20230,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:17.369398+0100","flow_id":278202528145898,"pcap_cnt":2481,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55165,"proto":"UDP","dns":{"type":"answer","id":63890,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:16.506549+0100","flow_id":1809442120972981,"pcap_cnt":2038,"event_type":"dns","src_ip":"192.168.1.100","src_port":61744,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1391,"rrname":"rytukuqunun.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.165920+0100","flow_id":672016668386555,"pcap_cnt":3510,"event_type":"dns","src_ip":"192.168.1.100","src_port":59408,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23487,"rrname":"vofirefumuj.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:17.797721+0100","flow_id":1790726800014814,"pcap_cnt":2715,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55898,"proto":"UDP","dns":{"type":"answer","id":1130,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:16.557087+0100","flow_id":1809442120972981,"pcap_cnt":2064,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61744,"proto":"UDP","dns":{"type":"answer","id":1391,"rcode":"NXDOMAIN","rrname":"rytukuqunun.eu"}}
{"timestamp":"2017-12-12T18:33:21.166194+0100","flow_id":672016668386555,"pcap_cnt":3511,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59408,"proto":"UDP","dns":{"type":"answer","id":23487,"rcode":"NXDOMAIN","rrname":"vofirefumuj.eu"}}
{"timestamp":"2017-12-12T18:33:17.455990+0100","flow_id":1033399512724533,"pcap_cnt":2519,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50096,"proto":"UDP","dns":{"type":"answer","id":61697,"rcode":"NXDOMAIN","rrname":"dixesywyruc.eu"}}
{"timestamp":"2017-12-12T18:33:20.385518+0100","flow_id":1900849762721985,"pcap_cnt":3161,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64443,"proto":"UDP","dns":{"type":"answer","id":45775,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:21.166194+0100","flow_id":672016668386555,"pcap_cnt":3511,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59408,"proto":"UDP","dns":{"type":"answer","id":23487,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:20.632213+0100","flow_id":159115970126946,"pcap_cnt":3277,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52322,"proto":"UDP","dns":{"type":"answer","id":56187,"rcode":"NXDOMAIN","rrname":"qeqaxupogog.eu"}}
{"timestamp":"2017-12-12T18:33:20.455827+0100","flow_id":1307577340195987,"pcap_cnt":3188,"event_type":"dns","src_ip":"192.168.1.100","src_port":62910,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":56046,"rrname":"puralevuqes.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.806001+0100","flow_id":671988752403264,"pcap_cnt":3777,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63052,"proto":"UDP","dns":{"type":"answer","id":54074,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:19.699857+0100","flow_id":448805071727773,"pcap_cnt":2831,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52942,"proto":"UDP","dns":{"type":"answer","id":8647,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:20.899635+0100","flow_id":849729531460147,"pcap_cnt":3380,"event_type":"dns","src_ip":"192.168.1.100","src_port":57262,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":55778,"rrname":"novylakuwyw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.338757+0100","flow_id":134838667258451,"pcap_cnt":2463,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62393,"proto":"UDP","dns":{"type":"answer","id":53333,"rcode":"NXDOMAIN","rrname":"lyxaxududes.eu"}}
{"timestamp":"2017-12-12T18:33:17.558647+0100","flow_id":199074198160951,"pcap_cnt":2580,"event_type":"dns","src_ip":"192.168.1.100","src_port":60340,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":12502,"rrname":"fobatesohek.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.456080+0100","flow_id":1307577340195987,"pcap_cnt":3189,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62910,"proto":"UDP","dns":{"type":"answer","id":56046,"rcode":"NXDOMAIN","rrname":"puralevuqes.eu"}}
{"timestamp":"2017-12-12T18:33:21.302316+0100","flow_id":1825640590449576,"pcap_cnt":3571,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55129,"proto":"UDP","dns":{"type":"answer","id":49568,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:20.944282+0100","flow_id":1905342298482842,"pcap_cnt":3400,"event_type":"dns","src_ip":"192.168.1.100","src_port":58019,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8899,"rrname":"vococumecan.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.456080+0100","flow_id":1307577340195987,"pcap_cnt":3189,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62910,"proto":"UDP","dns":{"type":"answer","id":56046,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:20.508995+0100","flow_id":1776321480934467,"pcap_cnt":3212,"event_type":"dns","src_ip":"192.168.1.100","src_port":53964,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23192,"rrname":"vowidimajaz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.895788+0100","flow_id":975642940320323,"pcap_cnt":4197,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53344,"proto":"UDP","dns":{"type":"answer","id":41334,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:21.327628+0100","flow_id":1298785542209484,"pcap_cnt":3584,"event_type":"dns","src_ip":"192.168.1.100","src_port":60534,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4996,"rrname":"dimulisuqun.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.475276+0100","flow_id":1453262630830220,"pcap_cnt":3196,"event_type":"dns","src_ip":"192.168.1.100","src_port":59477,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":61181,"rrname":"jelekynurep.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.509390+0100","flow_id":1776321480934467,"pcap_cnt":3213,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53964,"proto":"UDP","dns":{"type":"answer","id":23192,"rcode":"NXDOMAIN","rrname":"vowidimajaz.eu"}}
{"timestamp":"2017-12-12T18:33:27.125186+0100","flow_id":782167548881154,"pcap_cnt":4788,"event_type":"dns","src_ip":"192.168.1.100","src_port":56263,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1393,"rrname":"fotaqizymig.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.509390+0100","flow_id":1776321480934467,"pcap_cnt":3213,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53964,"proto":"UDP","dns":{"type":"answer","id":23192,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:22.956053+0100","flow_id":1948934069196437,"pcap_cnt":4224,"event_type":"dns","src_ip":"192.168.1.100","src_port":55559,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":61358,"rrname":"dikujysozyk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.416398+0100","flow_id":1201788000491940,"pcap_cnt":2509,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50256,"proto":"UDP","dns":{"type":"answer","id":34796,"rcode":"NXDOMAIN","rrname":"volyrukupoq.eu"}}
{"timestamp":"2017-12-12T18:33:17.862148+0100","flow_id":2169570833802931,"pcap_cnt":2747,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50151,"proto":"UDP","dns":{"type":"answer","id":52478,"rcode":"NXDOMAIN","rrname":"jejopiniduh.eu"}}
{"timestamp":"2017-12-12T18:33:22.956307+0100","flow_id":1948934069196437,"pcap_cnt":4225,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55559,"proto":"UDP","dns":{"type":"answer","id":61358,"rcode":"NXDOMAIN","rrname":"dikujysozyk.eu"}}
{"timestamp":"2017-12-12T18:33:17.093677+0100","flow_id":481672308813036,"pcap_cnt":2321,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51882,"proto":"UDP","dns":{"type":"answer","id":19036,"rcode":"NXDOMAIN","rrname":"jelaqirozum.eu"}}
{"timestamp":"2017-12-12T18:33:21.910927+0100","flow_id":654265569823852,"pcap_cnt":3817,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58651,"proto":"UDP","dns":{"type":"answer","id":36010,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:22.956307+0100","flow_id":1948934069196437,"pcap_cnt":4225,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55559,"proto":"UDP","dns":{"type":"answer","id":61358,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:19.841671+0100","flow_id":1869653267699655,"pcap_cnt":2904,"event_type":"dns","src_ip":"192.168.1.100","src_port":49985,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38177,"rrname":"gadinubidyp.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.093677+0100","flow_id":481672308813036,"pcap_cnt":2321,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51882,"proto":"UDP","dns":{"type":"answer","id":19036,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:22.121853+0100","flow_id":1182134230506493,"pcap_cnt":3914,"event_type":"dns","src_ip":"192.168.1.100","src_port":49223,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35213,"rrname":"fodasusuvyn.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.789654+0100","flow_id":967267753855869,"pcap_cnt":2875,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62946,"proto":"UDP","dns":{"type":"answer","id":39439,"rcode":"NXDOMAIN","rrname":"nopymecurud.eu"}}
{"timestamp":"2017-12-12T18:33:17.628516+0100","flow_id":1798670343051044,"pcap_cnt":2622,"event_type":"dns","src_ip":"192.168.1.100","src_port":54553,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":39324,"rrname":"pufobogyqan.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.122118+0100","flow_id":1182134230506493,"pcap_cnt":3915,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49223,"proto":"UDP","dns":{"type":"answer","id":35213,"rcode":"NXDOMAIN","rrname":"fodasusuvyn.eu"}}
{"timestamp":"2017-12-12T18:33:19.983480+0100","flow_id":733655892689336,"pcap_cnt":2958,"event_type":"dns","src_ip":"192.168.1.100","src_port":50196,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38280,"rrname":"foxofewuteq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.628766+0100","flow_id":1798670343051044,"pcap_cnt":2623,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54553,"proto":"UDP","dns":{"type":"answer","id":39324,"rcode":"NXDOMAIN","rrname":"pufobogyqan.eu"}}
{"timestamp":"2017-12-12T18:33:19.952323+0100","flow_id":2078575509342211,"pcap_cnt":2946,"event_type":"dns","src_ip":"192.168.1.100","src_port":62472,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":54586,"rrname":"lyrosajupid.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.628766+0100","flow_id":1798670343051044,"pcap_cnt":2623,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54553,"proto":"UDP","dns":{"type":"answer","id":39324,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:17.819032+0100","flow_id":1788536367710040,"pcap_cnt":2724,"event_type":"dns","src_ip":"192.168.1.100","src_port":64125,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14393,"rrname":"fokalesaxav.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.072030+0100","flow_id":1246436333328480,"pcap_cnt":3891,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62525,"proto":"UDP","dns":{"type":"answer","id":7480,"rcode":"NXDOMAIN","rrname":"tujomalumav.eu"}}
{"timestamp":"2017-12-12T18:33:16.557087+0100","flow_id":1809442120972981,"pcap_cnt":2064,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61744,"proto":"UDP","dns":{"type":"answer","id":1391,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:21.234975+0100","flow_id":663171184563288,"pcap_cnt":3547,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53928,"proto":"UDP","dns":{"type":"answer","id":47678,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:17.849391+0100","flow_id":1530589221877231,"pcap_cnt":2738,"event_type":"dns","src_ip":"192.168.1.100","src_port":49830,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4816,"rrname":"tuwyjyvymuq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.509013+0100","flow_id":170400996770901,"pcap_cnt":3676,"event_type":"dns","src_ip":"192.168.1.100","src_port":50192,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35754,"rrname":"lykegynahom.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.849668+0100","flow_id":1530589221877231,"pcap_cnt":2739,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49830,"proto":"UDP","dns":{"type":"answer","id":4816,"rcode":"NXDOMAIN","rrname":"tuwyjyvymuq.eu"}}
{"timestamp":"2017-12-12T18:33:21.384476+0100","flow_id":433783423753692,"pcap_cnt":3620,"event_type":"dns","src_ip":"192.168.1.100","src_port":49407,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":22880,"rrname":"xutaquxelat.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.632213+0100","flow_id":159115970126946,"pcap_cnt":3277,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52322,"proto":"UDP","dns":{"type":"answer","id":56187,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":589}}
{"timestamp":"2017-12-12T18:33:21.928325+0100","flow_id":1486967386745413,"pcap_cnt":3820,"event_type":"dns","src_ip":"192.168.1.100","src_port":63490,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27163,"rrname":"xutulenuqix.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.771334+0100","flow_id":678663131546535,"pcap_cnt":3325,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54807,"proto":"UDP","dns":{"type":"answer","id":53406,"rcode":"NXDOMAIN","rrname":"vojykocezel.eu"}}
{"timestamp":"2017-12-12T18:33:21.384764+0100","flow_id":433783423753692,"pcap_cnt":3621,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49407,"proto":"UDP","dns":{"type":"answer","id":22880,"rcode":"NXDOMAIN","rrname":"xutaquxelat.eu"}}
{"timestamp":"2017-12-12T18:33:17.338757+0100","flow_id":134838667258451,"pcap_cnt":2463,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62393,"proto":"UDP","dns":{"type":"answer","id":53333,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:19.793154+0100","flow_id":148724296653378,"pcap_cnt":2880,"event_type":"dns","src_ip":"192.168.1.100","src_port":53428,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5485,"rrname":"xuxivydifoj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.900033+0100","flow_id":849729531460147,"pcap_cnt":3381,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57262,"proto":"UDP","dns":{"type":"answer","id":55778,"rcode":"NXDOMAIN","rrname":"novylakuwyw.eu"}}
{"timestamp":"2017-12-12T18:33:20.431035+0100","flow_id":1352824820634237,"pcap_cnt":3177,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56637,"proto":"UDP","dns":{"type":"answer","id":17325,"rcode":"NXDOMAIN","rrname":"makolacynyd.eu"}}
{"timestamp":"2017-12-12T18:33:17.558917+0100","flow_id":199074198160951,"pcap_cnt":2581,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60340,"proto":"UDP","dns":{"type":"answer","id":12502,"rcode":"NXDOMAIN","rrname":"fobatesohek.eu"}}
{"timestamp":"2017-12-12T18:33:20.900033+0100","flow_id":849729531460147,"pcap_cnt":3381,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57262,"proto":"UDP","dns":{"type":"answer","id":55778,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:17.558917+0100","flow_id":199074198160951,"pcap_cnt":2581,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60340,"proto":"UDP","dns":{"type":"answer","id":12502,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:21.122463+0100","flow_id":919342360336873,"pcap_cnt":3486,"event_type":"dns","src_ip":"192.168.1.100","src_port":57613,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7374,"rrname":"jenegodelur.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:17.316843+0100","flow_id":111265739297961,"pcap_cnt":2442,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64809,"proto":"UDP","dns":{"type":"answer","id":11183,"rcode":"NXDOMAIN","rrname":"rynenogupez.eu"}}
{"timestamp":"2017-12-12T18:33:15.581272+0100","flow_id":1991967493526964,"pcap_cnt":1893,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51569,"proto":"UDP","dns":{"type":"answer","id":28759,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:21.122763+0100","flow_id":919342360336873,"pcap_cnt":3487,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57613,"proto":"UDP","dns":{"type":"answer","id":7374,"rcode":"NXDOMAIN","rrname":"jenegodelur.eu"}}
{"timestamp":"2017-12-12T18:33:20.475571+0100","flow_id":1453262630830220,"pcap_cnt":3197,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59477,"proto":"UDP","dns":{"type":"answer","id":61181,"rcode":"NXDOMAIN","rrname":"jelekynurep.eu"}}
{"timestamp":"2017-12-12T18:33:20.574529+0100","flow_id":1862581604107329,"pcap_cnt":3246,"event_type":"dns","src_ip":"192.168.1.100","src_port":55584,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":22769,"rrname":"jecuzojitub.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.122763+0100","flow_id":919342360336873,"pcap_cnt":3487,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57613,"proto":"UDP","dns":{"type":"answer","id":7374,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:17.416398+0100","flow_id":1201788000491940,"pcap_cnt":2509,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50256,"proto":"UDP","dns":{"type":"answer","id":34796,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:21.180328+0100","flow_id":1182417698275432,"pcap_cnt":3522,"event_type":"dns","src_ip":"192.168.1.100","src_port":53222,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29836,"rrname":"vojopumuqot.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.099339+0100","flow_id":2170627396109323,"pcap_cnt":3904,"event_type":"dns","src_ip":"192.168.1.100","src_port":62498,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28890,"rrname":"fotitezycas.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.574818+0100","flow_id":1862581604107329,"pcap_cnt":3247,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55584,"proto":"UDP","dns":{"type":"answer","id":22769,"rcode":"NXDOMAIN","rrname":"jecuzojitub.eu"}}
{"timestamp":"2017-12-12T18:33:20.268694+0100","flow_id":510882381568077,"pcap_cnt":3103,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49204,"proto":"UDP","dns":{"type":"answer","id":59694,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:19.676542+0100","flow_id":77805796676286,"pcap_cnt":2820,"event_type":"dns","src_ip":"192.168.1.100","src_port":58483,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43435,"rrname":"ganazywutes.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.574818+0100","flow_id":1862581604107329,"pcap_cnt":3247,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55584,"proto":"UDP","dns":{"type":"answer","id":22769,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":589}}
{"timestamp":"2017-12-12T18:33:19.841968+0100","flow_id":1869653267699655,"pcap_cnt":2905,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49985,"proto":"UDP","dns":{"type":"answer","id":38177,"rcode":"NXDOMAIN","rrname":"gadinubidyp.eu"}}
{"timestamp":"2017-12-12T18:33:17.300298+0100","flow_id":1461990004200714,"pcap_cnt":2423,"event_type":"dns","src_ip":"192.168.1.100","src_port":58012,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":20567,"rrname":"xukyhudokex.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.789654+0100","flow_id":967267753855869,"pcap_cnt":2875,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62946,"proto":"UDP","dns":{"type":"answer","id":39439,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:20.662808+0100","flow_id":1832602732338456,"pcap_cnt":3288,"event_type":"dns","src_ip":"192.168.1.100","src_port":64765,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35701,"rrname":"rycefelelys.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.828493+0100","flow_id":1233291585758285,"pcap_cnt":2898,"event_type":"dns","src_ip":"192.168.1.100","src_port":52580,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26615,"rrname":"masovufohoh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.300533+0100","flow_id":1461990004200714,"pcap_cnt":2424,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58012,"proto":"UDP","dns":{"type":"answer","id":20567,"rcode":"NXDOMAIN","rrname":"xukyhudokex.eu"}}
{"timestamp":"2017-12-12T18:33:20.663210+0100","flow_id":1832602732338456,"pcap_cnt":3289,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64765,"proto":"UDP","dns":{"type":"answer","id":35701,"rcode":"NXDOMAIN","rrname":"rycefelelys.eu"}}
{"timestamp":"2017-12-12T18:33:19.828857+0100","flow_id":1233291585758285,"pcap_cnt":2899,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52580,"proto":"UDP","dns":{"type":"answer","id":26615,"rcode":"NXDOMAIN","rrname":"masovufohoh.eu"}}
{"timestamp":"2017-12-12T18:33:17.300533+0100","flow_id":1461990004200714,"pcap_cnt":2424,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58012,"proto":"UDP","dns":{"type":"answer","id":20567,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:20.663210+0100","flow_id":1832602732338456,"pcap_cnt":3289,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64765,"proto":"UDP","dns":{"type":"answer","id":35701,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:19.828857+0100","flow_id":1233291585758285,"pcap_cnt":2899,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52580,"proto":"UDP","dns":{"type":"answer","id":26615,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:17.819303+0100","flow_id":1788536367710040,"pcap_cnt":2725,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64125,"proto":"UDP","dns":{"type":"answer","id":14393,"rcode":"NXDOMAIN","rrname":"fokalesaxav.eu"}}
{"timestamp":"2017-12-12T18:33:20.933029+0100","flow_id":1978683160018085,"pcap_cnt":3394,"event_type":"dns","src_ip":"192.168.1.100","src_port":64885,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44123,"rrname":"fokikebyvaj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.581720+0100","flow_id":1427224391376984,"pcap_cnt":2076,"event_type":"dns","src_ip":"192.168.1.100","src_port":53778,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45601,"rrname":"cicaratupig.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.122740+0100","flow_id":822102154141286,"pcap_cnt":2339,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58822,"proto":"UDP","dns":{"type":"answer","id":15220,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:16.581997+0100","flow_id":1427224391376984,"pcap_cnt":2077,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53778,"proto":"UDP","dns":{"type":"answer","id":45601,"rcode":"NXDOMAIN","rrname":"cicaratupig.eu"}}
{"timestamp":"2017-12-12T18:33:21.509308+0100","flow_id":170400996770901,"pcap_cnt":3677,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50192,"proto":"UDP","dns":{"type":"answer","id":35754,"rcode":"NXDOMAIN","rrname":"lykegynahom.eu"}}
{"timestamp":"2017-12-12T18:33:17.849668+0100","flow_id":1530589221877231,"pcap_cnt":2739,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49830,"proto":"UDP","dns":{"type":"answer","id":4816,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:20.692594+0100","flow_id":1551080511017330,"pcap_cnt":3302,"event_type":"dns","src_ip":"192.168.1.100","src_port":59187,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36229,"rrname":"jewobuxisyt.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.928708+0100","flow_id":1486967386745413,"pcap_cnt":3821,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63490,"proto":"UDP","dns":{"type":"answer","id":27163,"rcode":"NXDOMAIN","rrname":"xutulenuqix.eu"}}
{"timestamp":"2017-12-12T18:33:19.631974+0100","flow_id":1922582297158822,"pcap_cnt":2800,"event_type":"dns","src_ip":"192.168.1.100","src_port":49973,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43474,"rrname":"ryhuneqevyv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.771334+0100","flow_id":678663131546535,"pcap_cnt":3325,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54807,"proto":"UDP","dns":{"type":"answer","id":53406,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:20.692882+0100","flow_id":1551080511017330,"pcap_cnt":3303,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59187,"proto":"UDP","dns":{"type":"answer","id":36229,"rcode":"NXDOMAIN","rrname":"jewobuxisyt.eu"}}
{"timestamp":"2017-12-12T18:33:19.632223+0100","flow_id":1922582297158822,"pcap_cnt":2801,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49973,"proto":"UDP","dns":{"type":"answer","id":43474,"rcode":"NXDOMAIN","rrname":"ryhuneqevyv.eu"}}
{"timestamp":"2017-12-12T18:33:20.692882+0100","flow_id":1551080511017330,"pcap_cnt":3303,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59187,"proto":"UDP","dns":{"type":"answer","id":36229,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":589}}
{"timestamp":"2017-12-12T18:33:20.944581+0100","flow_id":1905342298482842,"pcap_cnt":3401,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58019,"proto":"UDP","dns":{"type":"answer","id":8899,"rcode":"NXDOMAIN","rrname":"vococumecan.eu"}}
{"timestamp":"2017-12-12T18:33:17.557682+0100","flow_id":1283467541054066,"pcap_cnt":2578,"event_type":"dns","src_ip":"192.168.1.100","src_port":56297,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13812,"rrname":"dimigesupew.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.793400+0100","flow_id":148724296653378,"pcap_cnt":2881,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53428,"proto":"UDP","dns":{"type":"answer","id":5485,"rcode":"NXDOMAIN","rrname":"xuxivydifoj.eu"}}
{"timestamp":"2017-12-12T18:33:20.944581+0100","flow_id":1905342298482842,"pcap_cnt":3401,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58019,"proto":"UDP","dns":{"type":"answer","id":8899,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:19.633487+0100","flow_id":1762556110678671,"pcap_cnt":2802,"event_type":"dns","src_ip":"192.168.1.100","src_port":55184,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":22549,"rrname":"tufozequwyd.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.557936+0100","flow_id":1283467541054066,"pcap_cnt":2579,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56297,"proto":"UDP","dns":{"type":"answer","id":13812,"rcode":"NXDOMAIN","rrname":"dimigesupew.eu"}}
{"timestamp":"2017-12-12T18:33:20.947526+0100","flow_id":476664377144646,"pcap_cnt":3402,"event_type":"dns","src_ip":"192.168.1.100","src_port":51707,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":58345,"rrname":"nozejimuqag.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.566138+0100","flow_id":353624301347706,"pcap_cnt":2594,"event_type":"dns","src_ip":"192.168.1.100","src_port":60776,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30532,"rrname":"citizufurah.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.557936+0100","flow_id":1283467541054066,"pcap_cnt":2579,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56297,"proto":"UDP","dns":{"type":"answer","id":13812,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:20.947864+0100","flow_id":476664377144646,"pcap_cnt":3403,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51707,"proto":"UDP","dns":{"type":"answer","id":58345,"rcode":"NXDOMAIN","rrname":"nozejimuqag.eu"}}
{"timestamp":"2017-12-12T18:33:17.862148+0100","flow_id":2169570833802931,"pcap_cnt":2747,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50151,"proto":"UDP","dns":{"type":"answer","id":52478,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:15.627924+0100","flow_id":634603209200852,"pcap_cnt":1910,"event_type":"dns","src_ip":"192.168.1.100","src_port":52567,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41654,"rrname":"gacucuhumeg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.566402+0100","flow_id":353624301347706,"pcap_cnt":2595,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60776,"proto":"UDP","dns":{"type":"answer","id":30532,"rcode":"NXDOMAIN","rrname":"citizufurah.eu"}}
{"timestamp":"2017-12-12T18:33:17.510876+0100","flow_id":1009270386445212,"pcap_cnt":2546,"event_type":"dns","src_ip":"192.168.1.100","src_port":62322,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31221,"rrname":"kefidaxupif.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.566402+0100","flow_id":353624301347706,"pcap_cnt":2595,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60776,"proto":"UDP","dns":{"type":"answer","id":30532,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:22.099623+0100","flow_id":2170627396109323,"pcap_cnt":3905,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62498,"proto":"UDP","dns":{"type":"answer","id":28890,"rcode":"NXDOMAIN","rrname":"fotitezycas.eu"}}
{"timestamp":"2017-12-12T18:33:20.354955+0100","flow_id":961682148977291,"pcap_cnt":3148,"event_type":"dns","src_ip":"192.168.1.100","src_port":58810,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17653,"rrname":"nojycutalop.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.099623+0100","flow_id":2170627396109323,"pcap_cnt":3905,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62498,"proto":"UDP","dns":{"type":"answer","id":28890,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:19.676794+0100","flow_id":77805796676286,"pcap_cnt":2821,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58483,"proto":"UDP","dns":{"type":"answer","id":43435,"rcode":"NXDOMAIN","rrname":"ganazywutes.eu"}}
{"timestamp":"2017-12-12T18:33:17.865019+0100","flow_id":909143960515908,"pcap_cnt":2749,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56875,"proto":"UDP","dns":{"type":"answer","id":50732,"rcode":"NXDOMAIN","rrname":"kefeminalyn.eu"}}
{"timestamp":"2017-12-12T18:33:20.355320+0100","flow_id":961682148977291,"pcap_cnt":3149,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58810,"proto":"UDP","dns":{"type":"answer","id":17653,"rcode":"NXDOMAIN","rrname":"nojycutalop.eu"}}
{"timestamp":"2017-12-12T18:33:17.865019+0100","flow_id":909143960515908,"pcap_cnt":2749,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56875,"proto":"UDP","dns":{"type":"answer","id":50732,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:22.122118+0100","flow_id":1182134230506493,"pcap_cnt":3915,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49223,"proto":"UDP","dns":{"type":"answer","id":35213,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:20.355320+0100","flow_id":961682148977291,"pcap_cnt":3149,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58810,"proto":"UDP","dns":{"type":"answer","id":17653,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:19.986781+0100","flow_id":1124618175712925,"pcap_cnt":2960,"event_type":"dns","src_ip":"192.168.1.100","src_port":64592,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11462,"rrname":"nozapekidis.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.631106+0100","flow_id":2220517736030530,"pcap_cnt":2798,"event_type":"dns","src_ip":"192.168.1.100","src_port":52523,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40403,"rrname":"citydekohiw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.983746+0100","flow_id":733655892689336,"pcap_cnt":2959,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50196,"proto":"UDP","dns":{"type":"answer","id":38280,"rcode":"NXDOMAIN","rrname":"foxofewuteq.eu"}}
{"timestamp":"2017-12-12T18:33:17.754602+0100","flow_id":1462958519321514,"pcap_cnt":2688,"event_type":"dns","src_ip":"192.168.1.100","src_port":56163,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14827,"rrname":"lyvoguraxeh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.983746+0100","flow_id":733655892689336,"pcap_cnt":2959,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50196,"proto":"UDP","dns":{"type":"answer","id":38280,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:17.325554+0100","flow_id":938021173870630,"pcap_cnt":2454,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63103,"proto":"UDP","dns":{"type":"answer","id":56016,"rcode":"NXDOMAIN","rrname":"nozogikirar.eu"}}
{"timestamp":"2017-12-12T18:33:22.072030+0100","flow_id":1246436333328480,"pcap_cnt":3891,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62525,"proto":"UDP","dns":{"type":"answer","id":7480,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:17.325554+0100","flow_id":938021173870630,"pcap_cnt":2454,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63103,"proto":"UDP","dns":{"type":"answer","id":56016,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:20.933291+0100","flow_id":1978683160018085,"pcap_cnt":3395,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64885,"proto":"UDP","dns":{"type":"answer","id":44123,"rcode":"NXDOMAIN","rrname":"fokikebyvaj.eu"}}
{"timestamp":"2017-12-12T18:33:17.455990+0100","flow_id":1033399512724533,"pcap_cnt":2519,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50096,"proto":"UDP","dns":{"type":"answer","id":61697,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:22.432081+0100","flow_id":1777311471015889,"pcap_cnt":4042,"event_type":"dns","src_ip":"192.168.1.100","src_port":64952,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11224,"rrname":"nofyjikoxex.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.581997+0100","flow_id":1427224391376984,"pcap_cnt":2077,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53778,"proto":"UDP","dns":{"type":"answer","id":45601,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":559}}
{"timestamp":"2017-12-12T18:33:17.156857+0100","flow_id":233588555343033,"pcap_cnt":2358,"event_type":"dns","src_ip":"192.168.1.100","src_port":58215,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35949,"rrname":"rylicepyryf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.509308+0100","flow_id":170400996770901,"pcap_cnt":3677,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50192,"proto":"UDP","dns":{"type":"answer","id":35754,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:21.928708+0100","flow_id":1486967386745413,"pcap_cnt":3821,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63490,"proto":"UDP","dns":{"type":"answer","id":27163,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:22.432293+0100","flow_id":1777311471015889,"pcap_cnt":4043,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64952,"proto":"UDP","dns":{"type":"answer","id":11224,"rcode":"NXDOMAIN","rrname":"nofyjikoxex.eu"}}
{"timestamp":"2017-12-12T18:33:19.656051+0100","flow_id":693188710826377,"pcap_cnt":2813,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49802,"proto":"UDP","dns":{"type":"answer","id":29471,"rcode":"NXDOMAIN","rrname":"mavejykidij.eu"}}
{"timestamp":"2017-12-12T18:33:22.432293+0100","flow_id":1777311471015889,"pcap_cnt":4043,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64952,"proto":"UDP","dns":{"type":"answer","id":11224,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":553}}
{"timestamp":"2017-12-12T18:33:17.157083+0100","flow_id":233588555343033,"pcap_cnt":2359,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58215,"proto":"UDP","dns":{"type":"answer","id":35949,"rcode":"NXDOMAIN","rrname":"rylicepyryf.eu"}}
{"timestamp":"2017-12-12T18:33:19.656051+0100","flow_id":693188710826377,"pcap_cnt":2813,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49802,"proto":"UDP","dns":{"type":"answer","id":29471,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:22.228666+0100","flow_id":60144891362618,"pcap_cnt":3960,"event_type":"dns","src_ip":"192.168.1.100","src_port":60356,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11570,"rrname":"keralanyxiq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.793400+0100","flow_id":148724296653378,"pcap_cnt":2881,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53428,"proto":"UDP","dns":{"type":"answer","id":5485,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:21.327873+0100","flow_id":1298785542209484,"pcap_cnt":3585,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60534,"proto":"UDP","dns":{"type":"answer","id":4996,"rcode":"NXDOMAIN","rrname":"dimulisuqun.eu"}}
{"timestamp":"2017-12-12T18:33:22.228934+0100","flow_id":60144891362618,"pcap_cnt":3961,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60356,"proto":"UDP","dns":{"type":"answer","id":11570,"rcode":"NXDOMAIN","rrname":"keralanyxiq.eu"}}
{"timestamp":"2017-12-12T18:33:20.064624+0100","flow_id":406834651397232,"pcap_cnt":2998,"event_type":"dns","src_ip":"192.168.1.100","src_port":52594,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40867,"rrname":"qekovipynan.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.327873+0100","flow_id":1298785542209484,"pcap_cnt":3585,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60534,"proto":"UDP","dns":{"type":"answer","id":4996,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:22.228934+0100","flow_id":60144891362618,"pcap_cnt":3961,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60356,"proto":"UDP","dns":{"type":"answer","id":11570,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":595}}
{"timestamp":"2017-12-12T18:33:20.947864+0100","flow_id":476664377144646,"pcap_cnt":3403,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51707,"proto":"UDP","dns":{"type":"answer","id":58345,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:20.064910+0100","flow_id":406834651397232,"pcap_cnt":2999,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52594,"proto":"UDP","dns":{"type":"answer","id":40867,"rcode":"NXDOMAIN","rrname":"qekovipynan.eu"}}
{"timestamp":"2017-12-12T18:33:22.258984+0100","flow_id":1869855131366312,"pcap_cnt":3974,"event_type":"dns","src_ip":"192.168.1.100","src_port":52671,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31578,"rrname":"xubirenosiq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.180578+0100","flow_id":1182417698275432,"pcap_cnt":3523,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53222,"proto":"UDP","dns":{"type":"answer","id":29836,"rcode":"NXDOMAIN","rrname":"vojopumuqot.eu"}}
{"timestamp":"2017-12-12T18:33:15.631258+0100","flow_id":1481742558667226,"pcap_cnt":1912,"event_type":"dns","src_ip":"192.168.1.100","src_port":64786,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62382,"rrname":"kejepujajeg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.180578+0100","flow_id":1182417698275432,"pcap_cnt":3523,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53222,"proto":"UDP","dns":{"type":"answer","id":29836,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:20.280975+0100","flow_id":699231729895823,"pcap_cnt":3112,"event_type":"dns","src_ip":"192.168.1.100","src_port":57625,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23500,"rrname":"fogavewogad.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.511152+0100","flow_id":1009270386445212,"pcap_cnt":2547,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62322,"proto":"UDP","dns":{"type":"answer","id":31221,"rcode":"NXDOMAIN","rrname":"kefidaxupif.eu"}}
{"timestamp":"2017-12-12T18:33:21.296679+0100","flow_id":1195216700802791,"pcap_cnt":3568,"event_type":"dns","src_ip":"192.168.1.100","src_port":54771,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44385,"rrname":"kepegaruqik.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.673320+0100","flow_id":634603209200852,"pcap_cnt":1947,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52567,"proto":"UDP","dns":{"type":"answer","id":41654,"rcode":"NXDOMAIN","rrname":"gacucuhumeg.eu"}}
{"timestamp":"2017-12-12T18:33:17.566929+0100","flow_id":972614988048017,"pcap_cnt":2596,"event_type":"dns","src_ip":"192.168.1.100","src_port":58382,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":56818,"rrname":"nomytifazah.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.673320+0100","flow_id":634603209200852,"pcap_cnt":1947,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52567,"proto":"UDP","dns":{"type":"answer","id":41654,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:17.511152+0100","flow_id":1009270386445212,"pcap_cnt":2547,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62322,"proto":"UDP","dns":{"type":"answer","id":31221,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:19.841968+0100","flow_id":1869653267699655,"pcap_cnt":2905,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49985,"proto":"UDP","dns":{"type":"answer","id":38177,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:20.824816+0100","flow_id":477484715906544,"pcap_cnt":3342,"event_type":"dns","src_ip":"192.168.1.100","src_port":65154,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":46407,"rrname":"magetyfisus.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.677610+0100","flow_id":1481742558667226,"pcap_cnt":1951,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64786,"proto":"UDP","dns":{"type":"answer","id":62382,"rcode":"NXDOMAIN","rrname":"kejepujajeg.eu"}}
{"timestamp":"2017-12-12T18:33:19.952628+0100","flow_id":2078575509342211,"pcap_cnt":2947,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62472,"proto":"UDP","dns":{"type":"answer","id":54586,"rcode":"NXDOMAIN","rrname":"lyrosajupid.eu"}}
{"timestamp":"2017-12-12T18:33:15.677610+0100","flow_id":1481742558667226,"pcap_cnt":1951,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64786,"proto":"UDP","dns":{"type":"answer","id":62382,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:20.825173+0100","flow_id":477484715906544,"pcap_cnt":3343,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65154,"proto":"UDP","dns":{"type":"answer","id":46407,"rcode":"NXDOMAIN","rrname":"magetyfisus.eu"}}
{"timestamp":"2017-12-12T18:33:15.682289+0100","flow_id":772849616513329,"pcap_cnt":1955,"event_type":"dns","src_ip":"192.168.1.100","src_port":61882,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26627,"rrname":"rynafivyvol.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.819303+0100","flow_id":1788536367710040,"pcap_cnt":2725,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64125,"proto":"UDP","dns":{"type":"answer","id":14393,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:20.041071+0100","flow_id":856285799030895,"pcap_cnt":2986,"event_type":"dns","src_ip":"192.168.1.100","src_port":51296,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40324,"rrname":"ciqivutevam.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.749192+0100","flow_id":772849616513329,"pcap_cnt":1987,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61882,"proto":"UDP","dns":{"type":"answer","id":26627,"rcode":"NXDOMAIN","rrname":"rynafivyvol.eu"}}
{"timestamp":"2017-12-12T18:33:17.870724+0100","flow_id":1469884154071364,"pcap_cnt":2752,"event_type":"dns","src_ip":"192.168.1.100","src_port":62016,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6340,"rrname":"vocebufazap.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:15.749192+0100","flow_id":772849616513329,"pcap_cnt":1987,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61882,"proto":"UDP","dns":{"type":"answer","id":26627,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:20.041345+0100","flow_id":856285799030895,"pcap_cnt":2987,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51296,"proto":"UDP","dns":{"type":"answer","id":40324,"rcode":"NXDOMAIN","rrname":"ciqivutevam.eu"}}
{"timestamp":"2017-12-12T18:33:17.457741+0100","flow_id":608902125059085,"pcap_cnt":2520,"event_type":"dns","src_ip":"192.168.1.100","src_port":49768,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11061,"rrname":"fokuquwifys.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.041345+0100","flow_id":856285799030895,"pcap_cnt":2987,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51296,"proto":"UDP","dns":{"type":"answer","id":40324,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:17.870964+0100","flow_id":1469884154071364,"pcap_cnt":2753,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62016,"proto":"UDP","dns":{"type":"answer","id":6340,"rcode":"NXDOMAIN","rrname":"vocebufazap.eu"}}
{"timestamp":"2017-12-12T18:33:16.441591+0100","flow_id":1162592128908535,"pcap_cnt":2006,"event_type":"dns","src_ip":"192.168.1.100","src_port":49839,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17661,"rrname":"fokyhyhumap.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.870964+0100","flow_id":1469884154071364,"pcap_cnt":2753,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62016,"proto":"UDP","dns":{"type":"answer","id":6340,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:20.895435+0100","flow_id":480201282726347,"pcap_cnt":3376,"event_type":"dns","src_ip":"192.168.1.100","src_port":58522,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48477,"rrname":"ciqirokajyr.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.512703+0100","flow_id":2107895103738559,"pcap_cnt":3678,"event_type":"dns","src_ip":"192.168.1.100","src_port":53821,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41447,"rrname":"xugutynyxoh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.632223+0100","flow_id":1922582297158822,"pcap_cnt":2801,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49973,"proto":"UDP","dns":{"type":"answer","id":43474,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:22.551048+0100","flow_id":282903370164360,"pcap_cnt":4086,"event_type":"dns","src_ip":"192.168.1.100","src_port":54404,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":21631,"rrname":"jejedudupuc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.895761+0100","flow_id":480201282726347,"pcap_cnt":3377,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58522,"proto":"UDP","dns":{"type":"answer","id":48477,"rcode":"NXDOMAIN","rrname":"ciqirokajyr.eu"}}
{"timestamp":"2017-12-12T18:33:17.157083+0100","flow_id":233588555343033,"pcap_cnt":2359,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58215,"proto":"UDP","dns":{"type":"answer","id":35949,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:20.895761+0100","flow_id":480201282726347,"pcap_cnt":3377,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58522,"proto":"UDP","dns":{"type":"answer","id":48477,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:21.513037+0100","flow_id":2107895103738559,"pcap_cnt":3679,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53821,"proto":"UDP","dns":{"type":"answer","id":41447,"rcode":"NXDOMAIN","rrname":"xugutynyxoh.eu"}}
{"timestamp":"2017-12-12T18:33:20.910637+0100","flow_id":1528568439956781,"pcap_cnt":3386,"event_type":"dns","src_ip":"192.168.1.100","src_port":64688,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5063,"rrname":"lyrojunynah.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.551298+0100","flow_id":282903370164360,"pcap_cnt":4087,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54404,"proto":"UDP","dns":{"type":"answer","id":21631,"rcode":"NXDOMAIN","rrname":"jejedudupuc.eu"}}
{"timestamp":"2017-12-12T18:33:20.910930+0100","flow_id":1528568439956781,"pcap_cnt":3387,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64688,"proto":"UDP","dns":{"type":"answer","id":5063,"rcode":"NXDOMAIN","rrname":"lyrojunynah.eu"}}
{"timestamp":"2017-12-12T18:33:17.316843+0100","flow_id":111265739297961,"pcap_cnt":2442,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64809,"proto":"UDP","dns":{"type":"answer","id":11183,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:20.910930+0100","flow_id":1528568439956781,"pcap_cnt":3387,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64688,"proto":"UDP","dns":{"type":"answer","id":5063,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:19.633734+0100","flow_id":1762556110678671,"pcap_cnt":2803,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55184,"proto":"UDP","dns":{"type":"answer","id":22549,"rcode":"NXDOMAIN","rrname":"tufozequwyd.eu"}}
{"timestamp":"2017-12-12T18:33:21.083296+0100","flow_id":166788929242464,"pcap_cnt":3468,"event_type":"dns","src_ip":"192.168.1.100","src_port":52662,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":10605,"rrname":"tujizipipiz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.318548+0100","flow_id":1218284969909332,"pcap_cnt":2444,"event_type":"dns","src_ip":"192.168.1.100","src_port":53957,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":10087,"rrname":"tucyzogojat.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.095483+0100","flow_id":990960941102331,"pcap_cnt":3472,"event_type":"dns","src_ip":"192.168.1.100","src_port":59522,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":15554,"rrname":"ryciqavuqav.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.083602+0100","flow_id":166788929242464,"pcap_cnt":3469,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52662,"proto":"UDP","dns":{"type":"answer","id":10605,"rcode":"NXDOMAIN","rrname":"tujizipipiz.eu"}}
{"timestamp":"2017-12-12T18:33:20.064910+0100","flow_id":406834651397232,"pcap_cnt":2999,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52594,"proto":"UDP","dns":{"type":"answer","id":40867,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:21.083602+0100","flow_id":166788929242464,"pcap_cnt":3469,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52662,"proto":"UDP","dns":{"type":"answer","id":10605,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:22.259296+0100","flow_id":1869855131366312,"pcap_cnt":3975,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52671,"proto":"UDP","dns":{"type":"answer","id":31578,"rcode":"NXDOMAIN","rrname":"xubirenosiq.eu"}}
{"timestamp":"2017-12-12T18:33:25.488857+0100","flow_id":2109754824816025,"pcap_cnt":4322,"event_type":"dns","src_ip":"192.168.1.100","src_port":64179,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48547,"rrname":"maxotikojax.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.095868+0100","flow_id":990960941102331,"pcap_cnt":3473,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59522,"proto":"UDP","dns":{"type":"answer","id":15554,"rcode":"NXDOMAIN","rrname":"ryciqavuqav.eu"}}
{"timestamp":"2017-12-12T18:33:20.100807+0100","flow_id":1639370006235591,"pcap_cnt":3016,"event_type":"dns","src_ip":"192.168.1.100","src_port":51310,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23893,"rrname":"pufotyvecyq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.314053+0100","flow_id":2129447248609249,"pcap_cnt":4000,"event_type":"dns","src_ip":"192.168.1.100","src_port":59918,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":195,"rrname":"cinenikekar.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:19.676794+0100","flow_id":77805796676286,"pcap_cnt":2821,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58483,"proto":"UDP","dns":{"type":"answer","id":43435,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:20.101071+0100","flow_id":1639370006235591,"pcap_cnt":3017,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51310,"proto":"UDP","dns":{"type":"answer","id":23893,"rcode":"NXDOMAIN","rrname":"pufotyvecyq.eu"}}
{"timestamp":"2017-12-12T18:33:22.149740+0100","flow_id":1889274825951468,"pcap_cnt":3926,"event_type":"dns","src_ip":"192.168.1.100","src_port":50310,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34839,"rrname":"cihuzucagot.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.314331+0100","flow_id":2129447248609249,"pcap_cnt":4001,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59918,"proto":"UDP","dns":{"type":"answer","id":195,"rcode":"NXDOMAIN","rrname":"cinenikekar.eu"}}
{"timestamp":"2017-12-12T18:33:17.567181+0100","flow_id":972614988048017,"pcap_cnt":2597,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58382,"proto":"UDP","dns":{"type":"answer","id":56818,"rcode":"NXDOMAIN","rrname":"nomytifazah.eu"}}
{"timestamp":"2017-12-12T18:33:17.622805+0100","flow_id":716576954752305,"pcap_cnt":2616,"event_type":"dns","src_ip":"192.168.1.100","src_port":51199,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":32552,"rrname":"foqesibojup.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:19.987029+0100","flow_id":1124618175712925,"pcap_cnt":2961,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64592,"proto":"UDP","dns":{"type":"answer","id":11462,"rcode":"NXDOMAIN","rrname":"nozapekidis.eu"}}
{"timestamp":"2017-12-12T18:33:19.926302+0100","flow_id":1399423068217950,"pcap_cnt":2934,"event_type":"dns","src_ip":"192.168.1.100","src_port":56169,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":52282,"rrname":"gahoqohofib.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.150061+0100","flow_id":1889274825951468,"pcap_cnt":3927,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50310,"proto":"UDP","dns":{"type":"answer","id":34839,"rcode":"NXDOMAIN","rrname":"cihuzucagot.eu"}}
{"timestamp":"2017-12-12T18:33:19.952628+0100","flow_id":2078575509342211,"pcap_cnt":2947,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62472,"proto":"UDP","dns":{"type":"answer","id":54586,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:17.623042+0100","flow_id":716576954752305,"pcap_cnt":2617,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51199,"proto":"UDP","dns":{"type":"answer","id":32552,"rcode":"NXDOMAIN","rrname":"foqesibojup.eu"}}
{"timestamp":"2017-12-12T18:33:20.825173+0100","flow_id":477484715906544,"pcap_cnt":3343,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65154,"proto":"UDP","dns":{"type":"answer","id":46407,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:17.467094+0100","flow_id":1914765455840475,"pcap_cnt":2528,"event_type":"dns","src_ip":"192.168.1.100","src_port":60400,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53233,"rrname":"foxirozigon.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:17.623042+0100","flow_id":716576954752305,"pcap_cnt":2617,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51199,"proto":"UDP","dns":{"type":"answer","id":32552,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:20.933291+0100","flow_id":1978683160018085,"pcap_cnt":3395,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64885,"proto":"UDP","dns":{"type":"answer","id":44123,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:20.831439+0100","flow_id":1611441981403087,"pcap_cnt":3344,"event_type":"dns","src_ip":"192.168.1.100","src_port":55817,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13126,"rrname":"qedunygajux.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.467321+0100","flow_id":1914765455840475,"pcap_cnt":2529,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60400,"proto":"UDP","dns":{"type":"answer","id":53233,"rcode":"NXDOMAIN","rrname":"foxirozigon.eu"}}
{"timestamp":"2017-12-12T18:33:20.061115+0100","flow_id":1031108147867323,"pcap_cnt":2996,"event_type":"dns","src_ip":"192.168.1.100","src_port":53037,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49095,"rrname":"jelimixecuz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.472366+0100","flow_id":1384603283698990,"pcap_cnt":3656,"event_type":"dns","src_ip":"192.168.1.100","src_port":51816,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":668,"rrname":"tujydygelyp.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.457984+0100","flow_id":608902125059085,"pcap_cnt":2521,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49768,"proto":"UDP","dns":{"type":"answer","id":11061,"rcode":"NXDOMAIN","rrname":"fokuquwifys.eu"}}
{"timestamp":"2017-12-12T18:33:17.467321+0100","flow_id":1914765455840475,"pcap_cnt":2529,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60400,"proto":"UDP","dns":{"type":"answer","id":53233,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:19.637348+0100","flow_id":851133985262752,"pcap_cnt":2806,"event_type":"dns","src_ip":"192.168.1.100","src_port":65045,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8828,"rrname":"dirutewaled.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:21.472793+0100","flow_id":1384603283698990,"pcap_cnt":3657,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51816,"proto":"UDP","dns":{"type":"answer","id":668,"rcode":"NXDOMAIN","rrname":"tujydygelyp.eu"}}
{"timestamp":"2017-12-12T18:33:20.061477+0100","flow_id":1031108147867323,"pcap_cnt":2997,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53037,"proto":"UDP","dns":{"type":"answer","id":49095,"rcode":"NXDOMAIN","rrname":"jelimixecuz.eu"}}
{"timestamp":"2017-12-12T18:33:17.482268+0100","flow_id":481672308813036,"pcap_cnt":2534,"event_type":"dns","src_ip":"192.168.1.100","src_port":51882,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34113,"rrname":"jefejurenyp.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:20.796295+0100","flow_id":1245072681084551,"pcap_cnt":3334,"event_type":"dns","src_ip":"192.168.1.100","src_port":61783,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11360,"rrname":"xubateditid.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.431035+0100","flow_id":1352824820634237,"pcap_cnt":3177,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56637,"proto":"UDP","dns":{"type":"answer","id":17325,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:20.061477+0100","flow_id":1031108147867323,"pcap_cnt":2997,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53037,"proto":"UDP","dns":{"type":"answer","id":49095,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:20.796610+0100","flow_id":1245072681084551,"pcap_cnt":3335,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61783,"proto":"UDP","dns":{"type":"answer","id":11360,"rcode":"NXDOMAIN","rrname":"xubateditid.eu"}}
{"timestamp":"2017-12-12T18:33:20.443309+0100","flow_id":2118428510962605,"pcap_cnt":3180,"event_type":"dns","src_ip":"192.168.1.100","src_port":54894,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48845,"rrname":"tupibevecev.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.796610+0100","flow_id":1245072681084551,"pcap_cnt":3335,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61783,"proto":"UDP","dns":{"type":"answer","id":11360,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:20.242652+0100","flow_id":258031214441436,"pcap_cnt":3084,"event_type":"dns","src_ip":"192.168.1.100","src_port":54551,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":65067,"rrname":"marefomecef.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.443591+0100","flow_id":2118428510962605,"pcap_cnt":3181,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54894,"proto":"UDP","dns":{"type":"answer","id":48845,"rcode":"NXDOMAIN","rrname":"tupibevecev.eu"}}
{"timestamp":"2017-12-12T18:33:20.901934+0100","flow_id":2136020697006894,"pcap_cnt":3382,"event_type":"dns","src_ip":"192.168.1.100","src_port":63416,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37779,"rrname":"qekorelelyq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.559568+0100","flow_id":709196053842384,"pcap_cnt":2582,"event_type":"dns","src_ip":"192.168.1.100","src_port":49437,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28565,"rrname":"gacenysacew.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.242927+0100","flow_id":258031214441436,"pcap_cnt":3085,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54551,"proto":"UDP","dns":{"type":"answer","id":65067,"rcode":"NXDOMAIN","rrname":"marefomecef.eu"}}
{"timestamp":"2017-12-12T18:33:20.475571+0100","flow_id":1453262630830220,"pcap_cnt":3197,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59477,"proto":"UDP","dns":{"type":"answer","id":61181,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:19.633734+0100","flow_id":1762556110678671,"pcap_cnt":2803,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55184,"proto":"UDP","dns":{"type":"answer","id":22549,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:20.242927+0100","flow_id":258031214441436,"pcap_cnt":3085,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54551,"proto":"UDP","dns":{"type":"answer","id":65067,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":589}}
{"timestamp":"2017-12-12T18:33:17.318805+0100","flow_id":1218284969909332,"pcap_cnt":2445,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53957,"proto":"UDP","dns":{"type":"answer","id":10087,"rcode":"NXDOMAIN","rrname":"tucyzogojat.eu"}}
{"timestamp":"2017-12-12T18:33:17.559815+0100","flow_id":709196053842384,"pcap_cnt":2583,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49437,"proto":"UDP","dns":{"type":"answer","id":28565,"rcode":"NXDOMAIN","rrname":"gacenysacew.eu"}}
{"timestamp":"2017-12-12T18:33:20.881106+0100","flow_id":311780582650322,"pcap_cnt":3360,"event_type":"dns","src_ip":"192.168.1.100","src_port":62442,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41907,"rrname":"maxifakofyk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.559815+0100","flow_id":709196053842384,"pcap_cnt":2583,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49437,"proto":"UDP","dns":{"type":"answer","id":28565,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:20.281244+0100","flow_id":699231729895823,"pcap_cnt":3113,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57625,"proto":"UDP","dns":{"type":"answer","id":23500,"rcode":"NXDOMAIN","rrname":"fogavewogad.eu"}}
{"timestamp":"2017-12-12T18:33:20.881371+0100","flow_id":311780582650322,"pcap_cnt":3361,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62442,"proto":"UDP","dns":{"type":"answer","id":41907,"rcode":"NXDOMAIN","rrname":"maxifakofyk.eu"}}
{"timestamp":"2017-12-12T18:33:20.281244+0100","flow_id":699231729895823,"pcap_cnt":3113,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57625,"proto":"UDP","dns":{"type":"answer","id":23500,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:21.296955+0100","flow_id":1195216700802791,"pcap_cnt":3569,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54771,"proto":"UDP","dns":{"type":"answer","id":44385,"rcode":"NXDOMAIN","rrname":"kepegaruqik.eu"}}
{"timestamp":"2017-12-12T18:33:20.881371+0100","flow_id":311780582650322,"pcap_cnt":3361,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62442,"proto":"UDP","dns":{"type":"answer","id":41907,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:19.695475+0100","flow_id":1499268172979379,"pcap_cnt":2828,"event_type":"dns","src_ip":"192.168.1.100","src_port":52967,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29929,"rrname":"kezituraxep.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.567181+0100","flow_id":972614988048017,"pcap_cnt":2597,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58382,"proto":"UDP","dns":{"type":"answer","id":56818,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:19.631352+0100","flow_id":2220517736030530,"pcap_cnt":2799,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52523,"proto":"UDP","dns":{"type":"answer","id":40403,"rcode":"NXDOMAIN","rrname":"citydekohiw.eu"}}
{"timestamp":"2017-12-12T18:33:17.636753+0100","flow_id":1583531136235345,"pcap_cnt":2624,"event_type":"dns","src_ip":"192.168.1.100","src_port":63907,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28901,"rrname":"diselahidaf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.978373+0100","flow_id":834186044763589,"pcap_cnt":2956,"event_type":"dns","src_ip":"192.168.1.100","src_port":64842,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17747,"rrname":"divulewybek.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.637018+0100","flow_id":1583531136235345,"pcap_cnt":2625,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63907,"proto":"UDP","dns":{"type":"answer","id":28901,"rcode":"NXDOMAIN","rrname":"diselahidaf.eu"}}
{"timestamp":"2017-12-12T18:33:19.926561+0100","flow_id":1399423068217950,"pcap_cnt":2935,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56169,"proto":"UDP","dns":{"type":"answer","id":52282,"rcode":"NXDOMAIN","rrname":"gahoqohofib.eu"}}
{"timestamp":"2017-12-12T18:33:17.754867+0100","flow_id":1462958519321514,"pcap_cnt":2689,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56163,"proto":"UDP","dns":{"type":"answer","id":14827,"rcode":"NXDOMAIN","rrname":"lyvoguraxeh.eu"}}
{"timestamp":"2017-12-12T18:33:19.926561+0100","flow_id":1399423068217950,"pcap_cnt":2935,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56169,"proto":"UDP","dns":{"type":"answer","id":52282,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:19.970540+0100","flow_id":1486729015971628,"pcap_cnt":2954,"event_type":"dns","src_ip":"192.168.1.100","src_port":59227,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":52351,"rrname":"cinycekecid.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.754867+0100","flow_id":1462958519321514,"pcap_cnt":2689,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56163,"proto":"UDP","dns":{"type":"answer","id":14827,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:17.685181+0100","flow_id":1576120170148989,"pcap_cnt":2656,"event_type":"dns","src_ip":"192.168.1.100","src_port":52414,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":10191,"rrname":"rycuheqojyk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.970822+0100","flow_id":1486729015971628,"pcap_cnt":2955,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59227,"proto":"UDP","dns":{"type":"answer","id":52351,"rcode":"NXDOMAIN","rrname":"cinycekecid.eu"}}
{"timestamp":"2017-12-12T18:33:16.628305+0100","flow_id":132755608082001,"pcap_cnt":2090,"event_type":"dns","src_ip":"192.168.1.100","src_port":60081,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14291,"rrname":"pumadypyruv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.905213+0100","flow_id":1918774808530941,"pcap_cnt":2778,"event_type":"dns","src_ip":"192.168.1.100","src_port":62476,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2072,"rrname":"qegarigohox.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.457984+0100","flow_id":608902125059085,"pcap_cnt":2521,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49768,"proto":"UDP","dns":{"type":"answer","id":11061,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:16.804491+0100","flow_id":1328463765849739,"pcap_cnt":2150,"event_type":"dns","src_ip":"192.168.1.100","src_port":62955,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49768,"rrname":"jecijyjudew.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.472793+0100","flow_id":1384603283698990,"pcap_cnt":3657,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51816,"proto":"UDP","dns":{"type":"answer","id":668,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:16.628555+0100","flow_id":132755608082001,"pcap_cnt":2091,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60081,"proto":"UDP","dns":{"type":"answer","id":14291,"rcode":"NXDOMAIN","rrname":"pumadypyruv.eu"}}
{"timestamp":"2017-12-12T18:33:20.330395+0100","flow_id":1937094991678107,"pcap_cnt":3140,"event_type":"dns","src_ip":"192.168.1.100","src_port":57654,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38967,"rrname":"fokenuzohym.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.628555+0100","flow_id":132755608082001,"pcap_cnt":2091,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60081,"proto":"UDP","dns":{"type":"answer","id":14291,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":559}}
{"timestamp":"2017-12-12T18:33:21.513037+0100","flow_id":2107895103738559,"pcap_cnt":3679,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53821,"proto":"UDP","dns":{"type":"answer","id":41447,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:20.330691+0100","flow_id":1937094991678107,"pcap_cnt":3141,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57654,"proto":"UDP","dns":{"type":"answer","id":38967,"rcode":"NXDOMAIN","rrname":"fokenuzohym.eu"}}
{"timestamp":"2017-12-12T18:33:16.645697+0100","flow_id":1456722226559012,"pcap_cnt":2096,"event_type":"dns","src_ip":"192.168.1.100","src_port":52104,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47768,"rrname":"gahihezenal.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:22.551298+0100","flow_id":282903370164360,"pcap_cnt":4087,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54404,"proto":"UDP","dns":{"type":"answer","id":21631,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":554}}
{"timestamp":"2017-12-12T18:33:21.634006+0100","flow_id":2197058624793750,"pcap_cnt":3724,"event_type":"dns","src_ip":"192.168.1.100","src_port":62512,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43851,"rrname":"puzapelumaq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.125504+0100","flow_id":782167548881154,"pcap_cnt":4789,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56263,"proto":"UDP","dns":{"type":"answer","id":1393,"rcode":"NXDOMAIN","rrname":"fotaqizymig.eu"}}
{"timestamp":"2017-12-12T18:33:20.443591+0100","flow_id":2118428510962605,"pcap_cnt":3181,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54894,"proto":"UDP","dns":{"type":"answer","id":48845,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:20.902347+0100","flow_id":2136020697006894,"pcap_cnt":3383,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63416,"proto":"UDP","dns":{"type":"answer","id":37779,"rcode":"NXDOMAIN","rrname":"qekorelelyq.eu"}}
{"timestamp":"2017-12-12T18:33:21.659865+0100","flow_id":1307134958571929,"pcap_cnt":3732,"event_type":"dns","src_ip":"192.168.1.100","src_port":63433,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31728,"rrname":"fogixezajaq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.125504+0100","flow_id":782167548881154,"pcap_cnt":4789,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56263,"proto":"UDP","dns":{"type":"answer","id":1393,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:20.902347+0100","flow_id":2136020697006894,"pcap_cnt":3383,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63416,"proto":"UDP","dns":{"type":"answer","id":37779,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:19.805343+0100","flow_id":1619069843229151,"pcap_cnt":2886,"event_type":"dns","src_ip":"192.168.1.100","src_port":62748,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14044,"rrname":"vojedufynoj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.328658+0100","flow_id":1563507999310802,"pcap_cnt":4890,"event_type":"dns","src_ip":"192.168.1.100","src_port":61930,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":58526,"rrname":"pumebeqalew.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.095868+0100","flow_id":990960941102331,"pcap_cnt":3473,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59522,"proto":"UDP","dns":{"type":"answer","id":15554,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:19.805614+0100","flow_id":1619069843229151,"pcap_cnt":2887,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62748,"proto":"UDP","dns":{"type":"answer","id":14044,"rcode":"NXDOMAIN","rrname":"vojedufynoj.eu"}}
{"timestamp":"2017-12-12T18:33:25.489118+0100","flow_id":2109754824816025,"pcap_cnt":4323,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64179,"proto":"UDP","dns":{"type":"answer","id":48547,"rcode":"NXDOMAIN","rrname":"maxotikojax.eu"}}
{"timestamp":"2017-12-12T18:33:17.659532+0100","flow_id":1146045767310727,"pcap_cnt":2636,"event_type":"dns","src_ip":"192.168.1.100","src_port":51736,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62618,"rrname":"lyxufejazov.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:20.101071+0100","flow_id":1639370006235591,"pcap_cnt":3017,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51310,"proto":"UDP","dns":{"type":"answer","id":23893,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:21.514877+0100","flow_id":654819620674365,"pcap_cnt":3680,"event_type":"dns","src_ip":"192.168.1.100","src_port":56921,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27425,"rrname":"cidinymuqom.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.284888+0100","flow_id":1582551883864280,"pcap_cnt":3114,"event_type":"dns","src_ip":"192.168.1.100","src_port":51373,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7208,"rrname":"ryqanylofuq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.515201+0100","flow_id":654819620674365,"pcap_cnt":3681,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56921,"proto":"UDP","dns":{"type":"answer","id":27425,"rcode":"NXDOMAIN","rrname":"cidinymuqom.eu"}}
{"timestamp":"2017-12-12T18:33:21.020027+0100","flow_id":2239550883712571,"pcap_cnt":3440,"event_type":"dns","src_ip":"192.168.1.100","src_port":57965,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35565,"rrname":"ganikuzosem.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.296955+0100","flow_id":1195216700802791,"pcap_cnt":3569,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54771,"proto":"UDP","dns":{"type":"answer","id":44385,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:21.515201+0100","flow_id":654819620674365,"pcap_cnt":3681,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56921,"proto":"UDP","dns":{"type":"answer","id":27425,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:20.285190+0100","flow_id":1582551883864280,"pcap_cnt":3115,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51373,"proto":"UDP","dns":{"type":"answer","id":7208,"rcode":"NXDOMAIN","rrname":"ryqanylofuq.eu"}}
{"timestamp":"2017-12-12T18:33:19.695762+0100","flow_id":1499268172979379,"pcap_cnt":2829,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52967,"proto":"UDP","dns":{"type":"answer","id":29929,"rcode":"NXDOMAIN","rrname":"kezituraxep.eu"}}
{"timestamp":"2017-12-12T18:33:20.285190+0100","flow_id":1582551883864280,"pcap_cnt":3115,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51373,"proto":"UDP","dns":{"type":"answer","id":7208,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":589}}
{"timestamp":"2017-12-12T18:33:21.020352+0100","flow_id":2239550883712571,"pcap_cnt":3441,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57965,"proto":"UDP","dns":{"type":"answer","id":35565,"rcode":"NXDOMAIN","rrname":"ganikuzosem.eu"}}
{"timestamp":"2017-12-12T18:33:17.637018+0100","flow_id":1583531136235345,"pcap_cnt":2625,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63907,"proto":"UDP","dns":{"type":"answer","id":28901,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:21.384764+0100","flow_id":433783423753692,"pcap_cnt":3621,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49407,"proto":"UDP","dns":{"type":"answer","id":22880,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:20.885259+0100","flow_id":446756372382219,"pcap_cnt":3364,"event_type":"dns","src_ip":"192.168.1.100","src_port":50848,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42721,"rrname":"foxalihynut.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.970822+0100","flow_id":1486729015971628,"pcap_cnt":2955,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59227,"proto":"UDP","dns":{"type":"answer","id":52351,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:20.885597+0100","flow_id":446756372382219,"pcap_cnt":3365,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50848,"proto":"UDP","dns":{"type":"answer","id":42721,"rcode":"NXDOMAIN","rrname":"foxalihynut.eu"}}
{"timestamp":"2017-12-12T18:33:21.457415+0100","flow_id":1924343233903303,"pcap_cnt":3648,"event_type":"dns","src_ip":"192.168.1.100","src_port":59607,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19984,"rrname":"mavywefycyc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.088697+0100","flow_id":1173196403399289,"pcap_cnt":3002,"event_type":"dns","src_ip":"192.168.1.100","src_port":53558,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":55546,"rrname":"kejaxoxuqut.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.905464+0100","flow_id":1918774808530941,"pcap_cnt":2779,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62476,"proto":"UDP","dns":{"type":"answer","id":2072,"rcode":"NXDOMAIN","rrname":"qegarigohox.eu"}}
{"timestamp":"2017-12-12T18:33:19.637594+0100","flow_id":851133985262752,"pcap_cnt":2807,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65045,"proto":"UDP","dns":{"type":"answer","id":8828,"rcode":"NXDOMAIN","rrname":"dirutewaled.eu"}}
{"timestamp":"2017-12-12T18:33:21.457707+0100","flow_id":1924343233903303,"pcap_cnt":3649,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59607,"proto":"UDP","dns":{"type":"answer","id":19984,"rcode":"NXDOMAIN","rrname":"mavywefycyc.eu"}}
{"timestamp":"2017-12-12T18:33:19.637594+0100","flow_id":851133985262752,"pcap_cnt":2807,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65045,"proto":"UDP","dns":{"type":"answer","id":8828,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:21.457707+0100","flow_id":1924343233903303,"pcap_cnt":3649,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59607,"proto":"UDP","dns":{"type":"answer","id":19984,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:19.684895+0100","flow_id":1913887135855455,"pcap_cnt":2824,"event_type":"dns","src_ip":"192.168.1.100","src_port":50346,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38047,"rrname":"tujaculurim.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.330691+0100","flow_id":1937094991678107,"pcap_cnt":3141,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57654,"proto":"UDP","dns":{"type":"answer","id":38967,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:21.585455+0100","flow_id":1467049475960559,"pcap_cnt":3696,"event_type":"dns","src_ip":"192.168.1.100","src_port":54706,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":65535,"rrname":"xukisijycer.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.645951+0100","flow_id":1456722226559012,"pcap_cnt":2097,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52104,"proto":"UDP","dns":{"type":"answer","id":47768,"rcode":"NXDOMAIN","rrname":"gahihezenal.eu"}}
{"timestamp":"2017-12-12T18:33:21.089529+0100","flow_id":1019254038158777,"pcap_cnt":3470,"event_type":"dns","src_ip":"192.168.1.100","src_port":60127,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11973,"rrname":"qebysovexaf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.645951+0100","flow_id":1456722226559012,"pcap_cnt":2097,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52104,"proto":"UDP","dns":{"type":"answer","id":47768,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":559}}
{"timestamp":"2017-12-12T18:33:21.634262+0100","flow_id":2197058624793750,"pcap_cnt":3725,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62512,"proto":"UDP","dns":{"type":"answer","id":43851,"rcode":"NXDOMAIN","rrname":"puzapelumaq.eu"}}
{"timestamp":"2017-12-12T18:33:20.689637+0100","flow_id":986343851197925,"pcap_cnt":3300,"event_type":"dns","src_ip":"192.168.1.100","src_port":56153,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47429,"rrname":"kemelixakyz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.852902+0100","flow_id":97038660010918,"pcap_cnt":2176,"event_type":"dns","src_ip":"192.168.1.100","src_port":49990,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":58533,"rrname":"digegazolan.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.259296+0100","flow_id":1869855131366312,"pcap_cnt":3975,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52671,"proto":"UDP","dns":{"type":"answer","id":31578,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":595}}
{"timestamp":"2017-12-12T18:33:17.318805+0100","flow_id":1218284969909332,"pcap_cnt":2445,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53957,"proto":"UDP","dns":{"type":"answer","id":10087,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:20.411856+0100","flow_id":170379521837264,"pcap_cnt":3174,"event_type":"dns","src_ip":"192.168.1.100","src_port":55335,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43555,"rrname":"foxyqosajol.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:16.853163+0100","flow_id":97038660010918,"pcap_cnt":2177,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49990,"proto":"UDP","dns":{"type":"answer","id":58533,"rcode":"NXDOMAIN","rrname":"digegazolan.eu"}}
{"timestamp":"2017-12-12T18:33:17.370603+0100","flow_id":141382049965995,"pcap_cnt":2482,"event_type":"dns","src_ip":"192.168.1.100","src_port":63421,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":46572,"rrname":"xuxukanoluf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.328982+0100","flow_id":1563507999310802,"pcap_cnt":4891,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61930,"proto":"UDP","dns":{"type":"answer","id":58526,"rcode":"NXDOMAIN","rrname":"pumebeqalew.eu"}}
{"timestamp":"2017-12-12T18:33:20.412102+0100","flow_id":170379521837264,"pcap_cnt":3175,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55335,"proto":"UDP","dns":{"type":"answer","id":43555,"rcode":"NXDOMAIN","rrname":"foxyqosajol.eu"}}
{"timestamp":"2017-12-12T18:33:19.805614+0100","flow_id":1619069843229151,"pcap_cnt":2887,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62748,"proto":"UDP","dns":{"type":"answer","id":14044,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:22.314331+0100","flow_id":2129447248609249,"pcap_cnt":4001,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59918,"proto":"UDP","dns":{"type":"answer","id":195,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":595}}
{"timestamp":"2017-12-12T18:33:25.489118+0100","flow_id":2109754824816025,"pcap_cnt":4323,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64179,"proto":"UDP","dns":{"type":"answer","id":48547,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:20.107575+0100","flow_id":1215680072426551,"pcap_cnt":3026,"event_type":"dns","src_ip":"192.168.1.100","src_port":56370,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30489,"rrname":"vocijekyqiv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.810744+0100","flow_id":8697625403128,"pcap_cnt":2888,"event_type":"dns","src_ip":"192.168.1.100","src_port":55160,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8055,"rrname":"tucumyvipys.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.536660+0100","flow_id":1975391067910228,"pcap_cnt":4352,"event_type":"dns","src_ip":"192.168.1.100","src_port":58030,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":22030,"rrname":"ganofazigor.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.107881+0100","flow_id":1215680072426551,"pcap_cnt":3027,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56370,"proto":"UDP","dns":{"type":"answer","id":30489,"rcode":"NXDOMAIN","rrname":"vocijekyqiv.eu"}}
{"timestamp":"2017-12-12T18:33:22.150061+0100","flow_id":1889274825951468,"pcap_cnt":3927,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50310,"proto":"UDP","dns":{"type":"answer","id":34839,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:20.107881+0100","flow_id":1215680072426551,"pcap_cnt":3027,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56370,"proto":"UDP","dns":{"type":"answer","id":30489,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:19.811062+0100","flow_id":8697625403128,"pcap_cnt":2889,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55160,"proto":"UDP","dns":{"type":"answer","id":8055,"rcode":"NXDOMAIN","rrname":"tucumyvipys.eu"}}
{"timestamp":"2017-12-12T18:33:25.536894+0100","flow_id":1975391067910228,"pcap_cnt":4353,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58030,"proto":"UDP","dns":{"type":"answer","id":22030,"rcode":"NXDOMAIN","rrname":"ganofazigor.eu"}}
{"timestamp":"2017-12-12T18:33:22.109615+0100","flow_id":972922078538799,"pcap_cnt":3908,"event_type":"dns","src_ip":"192.168.1.100","src_port":51171,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49338,"rrname":"pujycupodyn.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.351190+0100","flow_id":839404430121942,"pcap_cnt":3600,"event_type":"dns","src_ip":"192.168.1.100","src_port":54121,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28066,"rrname":"fobifisoduf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.536894+0100","flow_id":1975391067910228,"pcap_cnt":4353,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58030,"proto":"UDP","dns":{"type":"answer","id":22030,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:19.940396+0100","flow_id":512220263831916,"pcap_cnt":2940,"event_type":"dns","src_ip":"192.168.1.100","src_port":52026,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14519,"rrname":"qedylaqecel.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.018344+0100","flow_id":313084105607080,"pcap_cnt":4532,"event_type":"dns","src_ip":"192.168.1.100","src_port":53939,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":57054,"rrname":"qekikyvutic.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.831720+0100","flow_id":1611441981403087,"pcap_cnt":3345,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55817,"proto":"UDP","dns":{"type":"answer","id":13126,"rcode":"NXDOMAIN","rrname":"qedunygajux.eu"}}
{"timestamp":"2017-12-12T18:33:17.685447+0100","flow_id":1576120170148989,"pcap_cnt":2657,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52414,"proto":"UDP","dns":{"type":"answer","id":10191,"rcode":"NXDOMAIN","rrname":"rycuheqojyk.eu"}}
{"timestamp":"2017-12-12T18:33:20.831720+0100","flow_id":1611441981403087,"pcap_cnt":3345,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55817,"proto":"UDP","dns":{"type":"answer","id":13126,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:17.678145+0100","flow_id":1795960218671361,"pcap_cnt":2650,"event_type":"dns","src_ip":"192.168.1.100","src_port":61221,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":65413,"rrname":"vopejamogul.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.885597+0100","flow_id":446756372382219,"pcap_cnt":3365,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50848,"proto":"UDP","dns":{"type":"answer","id":42721,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:17.482501+0100","flow_id":481672308813036,"pcap_cnt":2535,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51882,"proto":"UDP","dns":{"type":"answer","id":34113,"rcode":"NXDOMAIN","rrname":"jefejurenyp.eu"}}
{"timestamp":"2017-12-12T18:33:17.678422+0100","flow_id":1795960218671361,"pcap_cnt":2651,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61221,"proto":"UDP","dns":{"type":"answer","id":65413,"rcode":"NXDOMAIN","rrname":"vopejamogul.eu"}}
{"timestamp":"2017-12-12T18:33:16.804745+0100","flow_id":1328463765849739,"pcap_cnt":2151,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62955,"proto":"UDP","dns":{"type":"answer","id":49768,"rcode":"NXDOMAIN","rrname":"jecijyjudew.eu"}}
{"timestamp":"2017-12-12T18:33:20.088969+0100","flow_id":1173196403399289,"pcap_cnt":3003,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53558,"proto":"UDP","dns":{"type":"answer","id":55546,"rcode":"NXDOMAIN","rrname":"kejaxoxuqut.eu"}}
{"timestamp":"2017-12-12T18:33:21.528252+0100","flow_id":495888650801020,"pcap_cnt":3686,"event_type":"dns","src_ip":"192.168.1.100","src_port":52282,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35380,"rrname":"norygumekon.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.088969+0100","flow_id":1173196403399289,"pcap_cnt":3003,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53558,"proto":"UDP","dns":{"type":"answer","id":55546,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:17.905464+0100","flow_id":1918774808530941,"pcap_cnt":2779,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62476,"proto":"UDP","dns":{"type":"answer","id":2072,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:17.235779+0100","flow_id":1975902168520963,"pcap_cnt":2392,"event_type":"dns","src_ip":"192.168.1.100","src_port":65512,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":12299,"rrname":"pufepepazyd.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.528550+0100","flow_id":495888650801020,"pcap_cnt":3687,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52282,"proto":"UDP","dns":{"type":"answer","id":35380,"rcode":"NXDOMAIN","rrname":"norygumekon.eu"}}
{"timestamp":"2017-12-12T18:33:22.738309+0100","flow_id":1844811177018373,"pcap_cnt":4140,"event_type":"dns","src_ip":"192.168.1.100","src_port":61346,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14788,"rrname":"xuguxujytej.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.528550+0100","flow_id":495888650801020,"pcap_cnt":3687,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52282,"proto":"UDP","dns":{"type":"answer","id":35380,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:19.740168+0100","flow_id":306633064270664,"pcap_cnt":2846,"event_type":"dns","src_ip":"192.168.1.100","src_port":64466,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47402,"rrname":"kevopoxecun.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.634262+0100","flow_id":2197058624793750,"pcap_cnt":3725,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62512,"proto":"UDP","dns":{"type":"answer","id":43851,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:21.602436+0100","flow_id":1225345896362308,"pcap_cnt":3706,"event_type":"dns","src_ip":"192.168.1.100","src_port":57081,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":65501,"rrname":"tulugiqezib.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.089935+0100","flow_id":1019254038158777,"pcap_cnt":3471,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60127,"proto":"UDP","dns":{"type":"answer","id":11973,"rcode":"NXDOMAIN","rrname":"qebysovexaf.eu"}}
{"timestamp":"2017-12-12T18:33:20.689974+0100","flow_id":986343851197925,"pcap_cnt":3301,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56153,"proto":"UDP","dns":{"type":"answer","id":47429,"rcode":"NXDOMAIN","rrname":"kemelixakyz.eu"}}
{"timestamp":"2017-12-12T18:33:22.743474+0100","flow_id":1113008879327282,"pcap_cnt":4142,"event_type":"dns","src_ip":"192.168.1.100","src_port":49816,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44554,"rrname":"cidohukigeq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.602793+0100","flow_id":1225345896362308,"pcap_cnt":3707,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57081,"proto":"UDP","dns":{"type":"answer","id":65501,"rcode":"NXDOMAIN","rrname":"tulugiqezib.eu"}}
{"timestamp":"2017-12-12T18:33:16.853163+0100","flow_id":97038660010918,"pcap_cnt":2177,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49990,"proto":"UDP","dns":{"type":"answer","id":58533,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:22.743771+0100","flow_id":1113008879327282,"pcap_cnt":4143,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49816,"proto":"UDP","dns":{"type":"answer","id":44554,"rcode":"NXDOMAIN","rrname":"cidohukigeq.eu"}}
{"timestamp":"2017-12-12T18:33:27.328982+0100","flow_id":1563507999310802,"pcap_cnt":4891,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61930,"proto":"UDP","dns":{"type":"answer","id":58526,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:22.743771+0100","flow_id":1113008879327282,"pcap_cnt":4143,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49816,"proto":"UDP","dns":{"type":"answer","id":44554,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:20.412102+0100","flow_id":170379521837264,"pcap_cnt":3175,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55335,"proto":"UDP","dns":{"type":"answer","id":43555,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:17.370848+0100","flow_id":141382049965995,"pcap_cnt":2483,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63421,"proto":"UDP","dns":{"type":"answer","id":46572,"rcode":"NXDOMAIN","rrname":"xuxukanoluf.eu"}}
{"timestamp":"2017-12-12T18:33:27.337400+0100","flow_id":271221059429880,"pcap_cnt":4892,"event_type":"dns","src_ip":"192.168.1.100","src_port":58148,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34995,"rrname":"divulewybek.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.395729+0100","flow_id":1406535534447057,"pcap_cnt":4274,"event_type":"dns","src_ip":"192.168.1.100","src_port":60842,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29223,"rrname":"volojifebeh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.534598+0100","flow_id":885800814258246,"pcap_cnt":3228,"event_type":"dns","src_ip":"192.168.1.100","src_port":55345,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":54131,"rrname":"pupexuguwun.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.370848+0100","flow_id":141382049965995,"pcap_cnt":2483,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63421,"proto":"UDP","dns":{"type":"answer","id":46572,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:27.337771+0100","flow_id":271221059429880,"pcap_cnt":4893,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58148,"proto":"UDP","dns":{"type":"answer","id":34995,"rcode":"NXDOMAIN","rrname":"divulewybek.eu"}}
{"timestamp":"2017-12-12T18:33:22.603851+0100","flow_id":190512181163723,"pcap_cnt":4102,"event_type":"dns","src_ip":"192.168.1.100","src_port":60703,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":39162,"rrname":"rydinivoloh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.337771+0100","flow_id":271221059429880,"pcap_cnt":4893,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58148,"proto":"UDP","dns":{"type":"answer","id":34995,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:21.020352+0100","flow_id":2239550883712571,"pcap_cnt":3441,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57965,"proto":"UDP","dns":{"type":"answer","id":35565,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:27.586069+0100","flow_id":398283371966805,"pcap_cnt":5002,"event_type":"dns","src_ip":"192.168.1.100","src_port":55128,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45739,"rrname":"gaqofubakeh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.811062+0100","flow_id":8697625403128,"pcap_cnt":2889,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55160,"proto":"UDP","dns":{"type":"answer","id":8055,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:21.440672+0100","flow_id":2210826142464352,"pcap_cnt":3642,"event_type":"dns","src_ip":"192.168.1.100","src_port":55685,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":3427,"rrname":"vowokafopyv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.018593+0100","flow_id":313084105607080,"pcap_cnt":4533,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53939,"proto":"UDP","dns":{"type":"answer","id":57054,"rcode":"NXDOMAIN","rrname":"qekikyvutic.eu"}}
{"timestamp":"2017-12-12T18:33:19.993093+0100","flow_id":1012036345472837,"pcap_cnt":2962,"event_type":"dns","src_ip":"192.168.1.100","src_port":49187,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25076,"rrname":"jejubyrexeq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.351474+0100","flow_id":839404430121942,"pcap_cnt":3601,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54121,"proto":"UDP","dns":{"type":"answer","id":28066,"rcode":"NXDOMAIN","rrname":"fobifisoduf.eu"}}
{"timestamp":"2017-12-12T18:33:19.940706+0100","flow_id":512220263831916,"pcap_cnt":2941,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52026,"proto":"UDP","dns":{"type":"answer","id":14519,"rcode":"NXDOMAIN","rrname":"qedylaqecel.eu"}}
{"timestamp":"2017-12-12T18:33:20.016547+0100","flow_id":2076565464694947,"pcap_cnt":2980,"event_type":"dns","src_ip":"192.168.1.100","src_port":61758,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33007,"rrname":"lysafurisam.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.940706+0100","flow_id":512220263831916,"pcap_cnt":2941,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52026,"proto":"UDP","dns":{"type":"answer","id":14519,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:20.968592+0100","flow_id":1421398268495760,"pcap_cnt":3426,"event_type":"dns","src_ip":"192.168.1.100","src_port":58366,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":24119,"rrname":"xudiherodos.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.016819+0100","flow_id":2076565464694947,"pcap_cnt":2981,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61758,"proto":"UDP","dns":{"type":"answer","id":33007,"rcode":"NXDOMAIN","rrname":"lysafurisam.eu"}}
{"timestamp":"2017-12-12T18:33:17.482501+0100","flow_id":481672308813036,"pcap_cnt":2535,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51882,"proto":"UDP","dns":{"type":"answer","id":34113,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:20.016819+0100","flow_id":2076565464694947,"pcap_cnt":2981,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61758,"proto":"UDP","dns":{"type":"answer","id":33007,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:20.968959+0100","flow_id":1421398268495760,"pcap_cnt":3427,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58366,"proto":"UDP","dns":{"type":"answer","id":24119,"rcode":"NXDOMAIN","rrname":"xudiherodos.eu"}}
{"timestamp":"2017-12-12T18:33:16.804745+0100","flow_id":1328463765849739,"pcap_cnt":2151,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62955,"proto":"UDP","dns":{"type":"answer","id":49768,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:17.508054+0100","flow_id":1818609728618601,"pcap_cnt":2544,"event_type":"dns","src_ip":"192.168.1.100","src_port":59723,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1244,"rrname":"jejykaxymob.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:19.685155+0100","flow_id":1913887135855455,"pcap_cnt":2825,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50346,"proto":"UDP","dns":{"type":"answer","id":38047,"rcode":"NXDOMAIN","rrname":"tujaculurim.eu"}}
{"timestamp":"2017-12-12T18:33:20.228682+0100","flow_id":383111399505226,"pcap_cnt":3080,"event_type":"dns","src_ip":"192.168.1.100","src_port":49805,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":57653,"rrname":"nopolomojen.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.236064+0100","flow_id":1975902168520963,"pcap_cnt":2393,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65512,"proto":"UDP","dns":{"type":"answer","id":12299,"rcode":"NXDOMAIN","rrname":"pufepepazyd.eu"}}
{"timestamp":"2017-12-12T18:33:16.939225+0100","flow_id":1070439310578905,"pcap_cnt":2244,"event_type":"dns","src_ip":"192.168.1.100","src_port":54444,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":57871,"rrname":"cihakotihuz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.570041+0100","flow_id":403877566395065,"pcap_cnt":3244,"event_type":"dns","src_ip":"192.168.1.100","src_port":52854,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":46165,"rrname":"pufucaqurak.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.236064+0100","flow_id":1975902168520963,"pcap_cnt":2393,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65512,"proto":"UDP","dns":{"type":"answer","id":12299,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:19.740417+0100","flow_id":306633064270664,"pcap_cnt":2847,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64466,"proto":"UDP","dns":{"type":"answer","id":47402,"rcode":"NXDOMAIN","rrname":"kevopoxecun.eu"}}
{"timestamp":"2017-12-12T18:33:21.660225+0100","flow_id":1307134958571929,"pcap_cnt":3733,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63433,"proto":"UDP","dns":{"type":"answer","id":31728,"rcode":"NXDOMAIN","rrname":"fogixezajaq.eu"}}
{"timestamp":"2017-12-12T18:33:19.740417+0100","flow_id":306633064270664,"pcap_cnt":2847,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64466,"proto":"UDP","dns":{"type":"answer","id":47402,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:21.002291+0100","flow_id":1991297479018739,"pcap_cnt":3434,"event_type":"dns","src_ip":"192.168.1.100","src_port":61879,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":55202,"rrname":"citapytakic.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.689974+0100","flow_id":986343851197925,"pcap_cnt":3301,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56153,"proto":"UDP","dns":{"type":"answer","id":47429,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":589}}
{"timestamp":"2017-12-12T18:33:21.602793+0100","flow_id":1225345896362308,"pcap_cnt":3707,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57081,"proto":"UDP","dns":{"type":"answer","id":65501,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:20.747506+0100","flow_id":2152393112315890,"pcap_cnt":3316,"event_type":"dns","src_ip":"192.168.1.100","src_port":53022,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48062,"rrname":"xuxorixurez.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.659767+0100","flow_id":1146045767310727,"pcap_cnt":2637,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51736,"proto":"UDP","dns":{"type":"answer","id":62618,"rcode":"NXDOMAIN","rrname":"lyxufejazov.eu"}}
{"timestamp":"2017-12-12T18:33:22.039406+0100","flow_id":436807080778222,"pcap_cnt":3870,"event_type":"dns","src_ip":"192.168.1.100","src_port":54580,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":16334,"rrname":"mamevetopym.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.747780+0100","flow_id":2152393112315890,"pcap_cnt":3317,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53022,"proto":"UDP","dns":{"type":"answer","id":48062,"rcode":"NXDOMAIN","rrname":"xuxorixurez.eu"}}
{"timestamp":"2017-12-12T18:33:19.987029+0100","flow_id":1124618175712925,"pcap_cnt":2961,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64592,"proto":"UDP","dns":{"type":"answer","id":11462,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:19.631352+0100","flow_id":2220517736030530,"pcap_cnt":2799,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52523,"proto":"UDP","dns":{"type":"answer","id":40403,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:19.978654+0100","flow_id":834186044763589,"pcap_cnt":2957,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64842,"proto":"UDP","dns":{"type":"answer","id":17747,"rcode":"NXDOMAIN","rrname":"divulewybek.eu"}}
{"timestamp":"2017-12-12T18:33:20.465396+0100","flow_id":610605079730676,"pcap_cnt":3192,"event_type":"dns","src_ip":"192.168.1.100","src_port":55431,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59956,"rrname":"dimyfebidec.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.396026+0100","flow_id":1406535534447057,"pcap_cnt":4275,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60842,"proto":"UDP","dns":{"type":"answer","id":29223,"rcode":"NXDOMAIN","rrname":"volojifebeh.eu"}}
{"timestamp":"2017-12-12T18:33:20.168969+0100","flow_id":288164704982025,"pcap_cnt":3054,"event_type":"dns","src_ip":"192.168.1.100","src_port":59321,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":61601,"rrname":"qebequgyqip.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.863976+0100","flow_id":1156104580968168,"pcap_cnt":2914,"event_type":"dns","src_ip":"192.168.1.100","src_port":49767,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45207,"rrname":"digofasexal.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.695762+0100","flow_id":1499268172979379,"pcap_cnt":2829,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52967,"proto":"UDP","dns":{"type":"answer","id":29929,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:20.465639+0100","flow_id":610605079730676,"pcap_cnt":3193,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55431,"proto":"UDP","dns":{"type":"answer","id":59956,"rcode":"NXDOMAIN","rrname":"dimyfebidec.eu"}}
{"timestamp":"2017-12-12T18:33:27.586464+0100","flow_id":398283371966805,"pcap_cnt":5003,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55128,"proto":"UDP","dns":{"type":"answer","id":45739,"rcode":"NXDOMAIN","rrname":"gaqofubakeh.eu"}}
{"timestamp":"2017-12-12T18:33:22.109983+0100","flow_id":972922078538799,"pcap_cnt":3909,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51171,"proto":"UDP","dns":{"type":"answer","id":49338,"rcode":"NXDOMAIN","rrname":"pujycupodyn.eu"}}
{"timestamp":"2017-12-12T18:33:19.864285+0100","flow_id":1156104580968168,"pcap_cnt":2915,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49767,"proto":"UDP","dns":{"type":"answer","id":45207,"rcode":"NXDOMAIN","rrname":"digofasexal.eu"}}
{"timestamp":"2017-12-12T18:33:20.465639+0100","flow_id":610605079730676,"pcap_cnt":3193,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55431,"proto":"UDP","dns":{"type":"answer","id":59956,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:19.726664+0100","flow_id":769037833279112,"pcap_cnt":2842,"event_type":"dns","src_ip":"192.168.1.100","src_port":59830,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36756,"rrname":"gaqecizupun.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.586464+0100","flow_id":398283371966805,"pcap_cnt":5003,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55128,"proto":"UDP","dns":{"type":"answer","id":45739,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:19.993360+0100","flow_id":1012036345472837,"pcap_cnt":2963,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49187,"proto":"UDP","dns":{"type":"answer","id":25076,"rcode":"NXDOMAIN","rrname":"jejubyrexeq.eu"}}
{"timestamp":"2017-12-12T18:33:17.678422+0100","flow_id":1795960218671361,"pcap_cnt":2651,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61221,"proto":"UDP","dns":{"type":"answer","id":65413,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:19.726939+0100","flow_id":769037833279112,"pcap_cnt":2843,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59830,"proto":"UDP","dns":{"type":"answer","id":36756,"rcode":"NXDOMAIN","rrname":"gaqecizupun.eu"}}
{"timestamp":"2017-12-12T18:33:19.742442+0100","flow_id":1886891118908458,"pcap_cnt":2850,"event_type":"dns","src_ip":"192.168.1.100","src_port":58821,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":22738,"rrname":"norebituwez.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.766263+0100","flow_id":2014333535891767,"pcap_cnt":2692,"event_type":"dns","src_ip":"192.168.1.100","src_port":56289,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51557,"rrname":"masytoturen.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.473201+0100","flow_id":1206714328168561,"pcap_cnt":3194,"event_type":"dns","src_ip":"192.168.1.100","src_port":60327,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":20242,"rrname":"gacovybybec.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.766533+0100","flow_id":2014333535891767,"pcap_cnt":2693,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56289,"proto":"UDP","dns":{"type":"answer","id":51557,"rcode":"NXDOMAIN","rrname":"masytoturen.eu"}}
{"timestamp":"2017-12-12T18:33:19.742706+0100","flow_id":1886891118908458,"pcap_cnt":2851,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58821,"proto":"UDP","dns":{"type":"answer","id":22738,"rcode":"NXDOMAIN","rrname":"norebituwez.eu"}}
{"timestamp":"2017-12-12T18:33:17.766533+0100","flow_id":2014333535891767,"pcap_cnt":2693,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56289,"proto":"UDP","dns":{"type":"answer","id":51557,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:19.742706+0100","flow_id":1886891118908458,"pcap_cnt":2851,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58821,"proto":"UDP","dns":{"type":"answer","id":22738,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:19.685155+0100","flow_id":1913887135855455,"pcap_cnt":2825,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50346,"proto":"UDP","dns":{"type":"answer","id":38047,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:17.508303+0100","flow_id":1818609728618601,"pcap_cnt":2545,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59723,"proto":"UDP","dns":{"type":"answer","id":1244,"rcode":"NXDOMAIN","rrname":"jejykaxymob.eu"}}
{"timestamp":"2017-12-12T18:33:17.898401+0100","flow_id":756475053847905,"pcap_cnt":2770,"event_type":"dns","src_ip":"192.168.1.100","src_port":49774,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25287,"rrname":"novixamymyf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.760237+0100","flow_id":1419976634243501,"pcap_cnt":2860,"event_type":"dns","src_ip":"192.168.1.100","src_port":61241,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2993,"rrname":"lyxemoxyquf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.089935+0100","flow_id":1019254038158777,"pcap_cnt":3471,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60127,"proto":"UDP","dns":{"type":"answer","id":11973,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:17.508303+0100","flow_id":1818609728618601,"pcap_cnt":2545,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59723,"proto":"UDP","dns":{"type":"answer","id":1244,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:20.570290+0100","flow_id":403877566395065,"pcap_cnt":3245,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52854,"proto":"UDP","dns":{"type":"answer","id":46165,"rcode":"NXDOMAIN","rrname":"pufucaqurak.eu"}}
{"timestamp":"2017-12-12T18:33:21.119480+0100","flow_id":509389880545976,"pcap_cnt":3484,"event_type":"dns","src_ip":"192.168.1.100","src_port":64359,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41992,"rrname":"digusebyvad.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.560462+0100","flow_id":735326634872142,"pcap_cnt":2584,"event_type":"dns","src_ip":"192.168.1.100","src_port":54550,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9771,"rrname":"jeluzydyqej.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.411529+0100","flow_id":1706612014335881,"pcap_cnt":4036,"event_type":"dns","src_ip":"192.168.1.100","src_port":64905,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17714,"rrname":"lymylorozig.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.119847+0100","flow_id":509389880545976,"pcap_cnt":3485,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64359,"proto":"UDP","dns":{"type":"answer","id":41992,"rcode":"NXDOMAIN","rrname":"digusebyvad.eu"}}
{"timestamp":"2017-12-12T18:33:17.560722+0100","flow_id":735326634872142,"pcap_cnt":2585,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54550,"proto":"UDP","dns":{"type":"answer","id":9771,"rcode":"NXDOMAIN","rrname":"jeluzydyqej.eu"}}
{"timestamp":"2017-12-12T18:33:21.119847+0100","flow_id":509389880545976,"pcap_cnt":3485,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64359,"proto":"UDP","dns":{"type":"answer","id":41992,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:21.002585+0100","flow_id":1991297479018739,"pcap_cnt":3435,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61879,"proto":"UDP","dns":{"type":"answer","id":55202,"rcode":"NXDOMAIN","rrname":"citapytakic.eu"}}
{"timestamp":"2017-12-12T18:33:16.978386+0100","flow_id":1624930325803396,"pcap_cnt":2264,"event_type":"dns","src_ip":"192.168.1.100","src_port":52821,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40978,"rrname":"kerijudacyj.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:25.389857+0100","flow_id":2033368831488737,"pcap_cnt":4266,"event_type":"dns","src_ip":"192.168.1.100","src_port":55658,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":12706,"rrname":"nojepofyren.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.447358+0100","flow_id":1714042307728254,"pcap_cnt":3644,"event_type":"dns","src_ip":"192.168.1.100","src_port":65147,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":65193,"rrname":"nomedefajys.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.747780+0100","flow_id":2152393112315890,"pcap_cnt":3317,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53022,"proto":"UDP","dns":{"type":"answer","id":48062,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:21.447679+0100","flow_id":1714042307728254,"pcap_cnt":3645,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65147,"proto":"UDP","dns":{"type":"answer","id":65193,"rcode":"NXDOMAIN","rrname":"nomedefajys.eu"}}
{"timestamp":"2017-12-12T18:33:22.039730+0100","flow_id":436807080778222,"pcap_cnt":3871,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54580,"proto":"UDP","dns":{"type":"answer","id":16334,"rcode":"NXDOMAIN","rrname":"mamevetopym.eu"}}
{"timestamp":"2017-12-12T18:33:21.447679+0100","flow_id":1714042307728254,"pcap_cnt":3645,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65147,"proto":"UDP","dns":{"type":"answer","id":65193,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:20.769070+0100","flow_id":1812747098569774,"pcap_cnt":3322,"event_type":"dns","src_ip":"192.168.1.100","src_port":52252,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28780,"rrname":"cilavocofer.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.534874+0100","flow_id":885800814258246,"pcap_cnt":3229,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55345,"proto":"UDP","dns":{"type":"answer","id":54131,"rcode":"NXDOMAIN","rrname":"pupexuguwun.eu"}}
{"timestamp":"2017-12-12T18:33:17.620329+0100","flow_id":2216761786988329,"pcap_cnt":2610,"event_type":"dns","src_ip":"192.168.1.100","src_port":54325,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41022,"rrname":"tufyquvaxic.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.534874+0100","flow_id":885800814258246,"pcap_cnt":3229,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55345,"proto":"UDP","dns":{"type":"answer","id":54131,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:25.396026+0100","flow_id":1406535534447057,"pcap_cnt":4275,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60842,"proto":"UDP","dns":{"type":"answer","id":29223,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:22.604135+0100","flow_id":190512181163723,"pcap_cnt":4103,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60703,"proto":"UDP","dns":{"type":"answer","id":39162,"rcode":"NXDOMAIN","rrname":"rydinivoloh.eu"}}
{"timestamp":"2017-12-12T18:33:17.620543+0100","flow_id":2216761786988329,"pcap_cnt":2611,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54325,"proto":"UDP","dns":{"type":"answer","id":41022,"rcode":"NXDOMAIN","rrname":"tufyquvaxic.eu"}}
{"timestamp":"2017-12-12T18:33:25.793987+0100","flow_id":1331820283370883,"pcap_cnt":4430,"event_type":"dns","src_ip":"192.168.1.100","src_port":52150,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":24558,"rrname":"gaduzehokar.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.440960+0100","flow_id":2210826142464352,"pcap_cnt":3643,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55685,"proto":"UDP","dns":{"type":"answer","id":3427,"rcode":"NXDOMAIN","rrname":"vowokafopyv.eu"}}
{"timestamp":"2017-12-12T18:33:21.351474+0100","flow_id":839404430121942,"pcap_cnt":3601,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54121,"proto":"UDP","dns":{"type":"answer","id":28066,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:21.440960+0100","flow_id":2210826142464352,"pcap_cnt":3643,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55685,"proto":"UDP","dns":{"type":"answer","id":3427,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:19.864285+0100","flow_id":1156104580968168,"pcap_cnt":2915,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49767,"proto":"UDP","dns":{"type":"answer","id":45207,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:17.685447+0100","flow_id":1576120170148989,"pcap_cnt":2657,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52414,"proto":"UDP","dns":{"type":"answer","id":10191,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:20.115130+0100","flow_id":498510728315322,"pcap_cnt":3036,"event_type":"dns","src_ip":"192.168.1.100","src_port":61782,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":15286,"rrname":"mavitacazyw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.092469+0100","flow_id":1568369901857077,"pcap_cnt":3008,"event_type":"dns","src_ip":"192.168.1.100","src_port":62958,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14147,"rrname":"lygegoxidul.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.993360+0100","flow_id":1012036345472837,"pcap_cnt":2963,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49187,"proto":"UDP","dns":{"type":"answer","id":25076,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:20.491397+0100","flow_id":1854290169724805,"pcap_cnt":3206,"event_type":"dns","src_ip":"192.168.1.100","src_port":60366,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30512,"rrname":"xutoxedyniq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.115390+0100","flow_id":498510728315322,"pcap_cnt":3037,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61782,"proto":"UDP","dns":{"type":"answer","id":15286,"rcode":"NXDOMAIN","rrname":"mavitacazyw.eu"}}
{"timestamp":"2017-12-12T18:33:20.958733+0100","flow_id":718524723011853,"pcap_cnt":3414,"event_type":"dns","src_ip":"192.168.1.100","src_port":50369,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":46630,"rrname":"purupoqogob.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.726939+0100","flow_id":769037833279112,"pcap_cnt":2843,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59830,"proto":"UDP","dns":{"type":"answer","id":36756,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:20.968959+0100","flow_id":1421398268495760,"pcap_cnt":3427,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58366,"proto":"UDP","dns":{"type":"answer","id":24119,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:21.585728+0100","flow_id":1467049475960559,"pcap_cnt":3697,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54706,"proto":"UDP","dns":{"type":"answer","id":65535,"rcode":"NXDOMAIN","rrname":"xukisijycer.eu"}}
{"timestamp":"2017-12-12T18:33:20.473979+0100","flow_id":1206714328168561,"pcap_cnt":3195,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60327,"proto":"UDP","dns":{"type":"answer","id":20242,"rcode":"NXDOMAIN","rrname":"gacovybybec.eu"}}
{"timestamp":"2017-12-12T18:33:19.794523+0100","flow_id":1240642422251419,"pcap_cnt":2882,"event_type":"dns","src_ip":"192.168.1.100","src_port":54393,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34692,"rrname":"marixecoguv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.473979+0100","flow_id":1206714328168561,"pcap_cnt":3195,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60327,"proto":"UDP","dns":{"type":"answer","id":20242,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:16.939494+0100","flow_id":1070439310578905,"pcap_cnt":2245,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54444,"proto":"UDP","dns":{"type":"answer","id":57871,"rcode":"NXDOMAIN","rrname":"cihakotihuz.eu"}}
{"timestamp":"2017-12-12T18:33:19.794745+0100","flow_id":1240642422251419,"pcap_cnt":2883,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54393,"proto":"UDP","dns":{"type":"answer","id":34692,"rcode":"NXDOMAIN","rrname":"marixecoguv.eu"}}
{"timestamp":"2017-12-12T18:33:17.898644+0100","flow_id":756475053847905,"pcap_cnt":2771,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49774,"proto":"UDP","dns":{"type":"answer","id":25287,"rcode":"NXDOMAIN","rrname":"novixamymyf.eu"}}
{"timestamp":"2017-12-12T18:33:20.570290+0100","flow_id":403877566395065,"pcap_cnt":3245,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52854,"proto":"UDP","dns":{"type":"answer","id":46165,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:17.713510+0100","flow_id":1143440869810982,"pcap_cnt":2666,"event_type":"dns","src_ip":"192.168.1.100","src_port":61578,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59247,"rrname":"gatopuwenyq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.660225+0100","flow_id":1307134958571929,"pcap_cnt":3733,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63433,"proto":"UDP","dns":{"type":"answer","id":31728,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:19.782168+0100","flow_id":1918774808530941,"pcap_cnt":2868,"event_type":"dns","src_ip":"192.168.1.100","src_port":62476,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7537,"rrname":"cihihacakuf.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:17.713768+0100","flow_id":1143440869810982,"pcap_cnt":2667,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61578,"proto":"UDP","dns":{"type":"answer","id":59247,"rcode":"NXDOMAIN","rrname":"gatopuwenyq.eu"}}
{"timestamp":"2017-12-12T18:33:21.715439+0100","flow_id":216866100472495,"pcap_cnt":3748,"event_type":"dns","src_ip":"192.168.1.100","src_port":63712,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31385,"rrname":"cicypucitan.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.411906+0100","flow_id":1706612014335881,"pcap_cnt":4037,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64905,"proto":"UDP","dns":{"type":"answer","id":17714,"rcode":"NXDOMAIN","rrname":"lymylorozig.eu"}}
{"timestamp":"2017-12-12T18:33:17.560722+0100","flow_id":735326634872142,"pcap_cnt":2585,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54550,"proto":"UDP","dns":{"type":"answer","id":9771,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:17.659767+0100","flow_id":1146045767310727,"pcap_cnt":2637,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51736,"proto":"UDP","dns":{"type":"answer","id":62618,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:21.002585+0100","flow_id":1991297479018739,"pcap_cnt":3435,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61879,"proto":"UDP","dns":{"type":"answer","id":55202,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:21.715820+0100","flow_id":216866100472495,"pcap_cnt":3749,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63712,"proto":"UDP","dns":{"type":"answer","id":31385,"rcode":"NXDOMAIN","rrname":"cicypucitan.eu"}}
{"timestamp":"2017-12-12T18:33:17.611328+0100","flow_id":1980076876715008,"pcap_cnt":2606,"event_type":"dns","src_ip":"192.168.1.100","src_port":52742,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":61308,"rrname":"kezajonifuz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.715820+0100","flow_id":216866100472495,"pcap_cnt":3749,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63712,"proto":"UDP","dns":{"type":"answer","id":31385,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:19.746073+0100","flow_id":1492529369277017,"pcap_cnt":2854,"event_type":"dns","src_ip":"192.168.1.100","src_port":56950,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11309,"rrname":"rycaropynar.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.292841+0100","flow_id":1890365747591145,"pcap_cnt":3566,"event_type":"dns","src_ip":"192.168.1.100","src_port":52332,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34613,"rrname":"nojuwakofed.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.580252+0100","flow_id":1289459020716700,"pcap_cnt":3694,"event_type":"dns","src_ip":"192.168.1.100","src_port":52388,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41585,"rrname":"qebonuqirin.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.611574+0100","flow_id":1980076876715008,"pcap_cnt":2607,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52742,"proto":"UDP","dns":{"type":"answer","id":61308,"rcode":"NXDOMAIN","rrname":"kezajonifuz.eu"}}
{"timestamp":"2017-12-12T18:33:20.769443+0100","flow_id":1812747098569774,"pcap_cnt":3323,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52252,"proto":"UDP","dns":{"type":"answer","id":28780,"rcode":"NXDOMAIN","rrname":"cilavocofer.eu"}}
{"timestamp":"2017-12-12T18:33:17.611574+0100","flow_id":1980076876715008,"pcap_cnt":2607,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52742,"proto":"UDP","dns":{"type":"answer","id":61308,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:19.746320+0100","flow_id":1492529369277017,"pcap_cnt":2855,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56950,"proto":"UDP","dns":{"type":"answer","id":11309,"rcode":"NXDOMAIN","rrname":"rycaropynar.eu"}}
{"timestamp":"2017-12-12T18:33:20.769443+0100","flow_id":1812747098569774,"pcap_cnt":3323,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52252,"proto":"UDP","dns":{"type":"answer","id":28780,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:19.692078+0100","flow_id":1619076285697902,"pcap_cnt":2826,"event_type":"dns","src_ip":"192.168.1.100","src_port":59831,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":24992,"rrname":"pufyjulogih.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.169268+0100","flow_id":288164704982025,"pcap_cnt":3055,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59321,"proto":"UDP","dns":{"type":"answer","id":61601,"rcode":"NXDOMAIN","rrname":"qebequgyqip.eu"}}
{"timestamp":"2017-12-12T18:33:19.746320+0100","flow_id":1492529369277017,"pcap_cnt":2855,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56950,"proto":"UDP","dns":{"type":"answer","id":11309,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:22.604135+0100","flow_id":190512181163723,"pcap_cnt":4103,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60703,"proto":"UDP","dns":{"type":"answer","id":39162,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":554}}
{"timestamp":"2017-12-12T18:33:25.794274+0100","flow_id":1331820283370883,"pcap_cnt":4431,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52150,"proto":"UDP","dns":{"type":"answer","id":24558,"rcode":"NXDOMAIN","rrname":"gaduzehokar.eu"}}
{"timestamp":"2017-12-12T18:33:19.692366+0100","flow_id":1619076285697902,"pcap_cnt":2827,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59831,"proto":"UDP","dns":{"type":"answer","id":24992,"rcode":"NXDOMAIN","rrname":"pufyjulogih.eu"}}
{"timestamp":"2017-12-12T18:33:25.794274+0100","flow_id":1331820283370883,"pcap_cnt":4431,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52150,"proto":"UDP","dns":{"type":"answer","id":24558,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:21.380695+0100","flow_id":2192233229045527,"pcap_cnt":3616,"event_type":"dns","src_ip":"192.168.1.100","src_port":51688,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25014,"rrname":"galoqyzajep.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.740450+0100","flow_id":2959548959842,"pcap_cnt":2676,"event_type":"dns","src_ip":"192.168.1.100","src_port":51338,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":55960,"rrname":"xuxetiryqem.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.717171+0100","flow_id":855611489644915,"pcap_cnt":5056,"event_type":"dns","src_ip":"192.168.1.100","src_port":52853,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64898,"rrname":"tucakaqalav.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.115390+0100","flow_id":498510728315322,"pcap_cnt":3037,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61782,"proto":"UDP","dns":{"type":"answer","id":15286,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:26.028407+0100","flow_id":462450183270135,"pcap_cnt":4540,"event_type":"dns","src_ip":"192.168.1.100","src_port":58352,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":32107,"rrname":"xudunudeveq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.381018+0100","flow_id":2192233229045527,"pcap_cnt":3617,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51688,"proto":"UDP","dns":{"type":"answer","id":25014,"rcode":"NXDOMAIN","rrname":"galoqyzajep.eu"}}
{"timestamp":"2017-12-12T18:33:20.491721+0100","flow_id":1854290169724805,"pcap_cnt":3207,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60366,"proto":"UDP","dns":{"type":"answer","id":30512,"rcode":"NXDOMAIN","rrname":"xutoxedyniq.eu"}}
{"timestamp":"2017-12-12T18:33:22.738588+0100","flow_id":1844811177018373,"pcap_cnt":4141,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61346,"proto":"UDP","dns":{"type":"answer","id":14788,"rcode":"NXDOMAIN","rrname":"xuguxujytej.eu"}}
{"timestamp":"2017-12-12T18:33:20.228955+0100","flow_id":383111399505226,"pcap_cnt":3081,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49805,"proto":"UDP","dns":{"type":"answer","id":57653,"rcode":"NXDOMAIN","rrname":"nopolomojen.eu"}}
{"timestamp":"2017-12-12T18:33:27.717441+0100","flow_id":855611489644915,"pcap_cnt":5057,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52853,"proto":"UDP","dns":{"type":"answer","id":64898,"rcode":"NXDOMAIN","rrname":"tucakaqalav.eu"}}
{"timestamp":"2017-12-12T18:33:22.738588+0100","flow_id":1844811177018373,"pcap_cnt":4141,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61346,"proto":"UDP","dns":{"type":"answer","id":14788,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:27.717441+0100","flow_id":855611489644915,"pcap_cnt":5057,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52853,"proto":"UDP","dns":{"type":"answer","id":64898,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:19.779464+0100","flow_id":1012837356922056,"pcap_cnt":2864,"event_type":"dns","src_ip":"192.168.1.100","src_port":50356,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17099,"rrname":"xukuxaxidub.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.760488+0100","flow_id":1419976634243501,"pcap_cnt":2861,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61241,"proto":"UDP","dns":{"type":"answer","id":2993,"rcode":"NXDOMAIN","rrname":"lyxemoxyquf.eu"}}
{"timestamp":"2017-12-12T18:33:16.939494+0100","flow_id":1070439310578905,"pcap_cnt":2245,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54444,"proto":"UDP","dns":{"type":"answer","id":57871,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:22.838047+0100","flow_id":714667842521503,"pcap_cnt":4174,"event_type":"dns","src_ip":"192.168.1.100","src_port":59582,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6514,"rrname":"tujybuqeqis.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.794745+0100","flow_id":1240642422251419,"pcap_cnt":2883,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54393,"proto":"UDP","dns":{"type":"answer","id":34692,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:19.779778+0100","flow_id":1012837356922056,"pcap_cnt":2865,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50356,"proto":"UDP","dns":{"type":"answer","id":17099,"rcode":"NXDOMAIN","rrname":"xukuxaxidub.eu"}}
{"timestamp":"2017-12-12T18:33:17.713768+0100","flow_id":1143440869810982,"pcap_cnt":2667,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61578,"proto":"UDP","dns":{"type":"answer","id":59247,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:20.105422+0100","flow_id":1920363946613710,"pcap_cnt":3022,"event_type":"dns","src_ip":"192.168.1.100","src_port":62652,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13262,"rrname":"foqykasisof.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.782459+0100","flow_id":1918774808530941,"pcap_cnt":2869,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62476,"proto":"UDP","dns":{"type":"answer","id":7537,"rcode":"NXDOMAIN","rrname":"cihihacakuf.eu"}}
{"timestamp":"2017-12-12T18:33:22.411906+0100","flow_id":1706612014335881,"pcap_cnt":4037,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64905,"proto":"UDP","dns":{"type":"answer","id":17714,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":553}}
{"timestamp":"2017-12-12T18:33:16.978625+0100","flow_id":1624930325803396,"pcap_cnt":2265,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52821,"proto":"UDP","dns":{"type":"answer","id":40978,"rcode":"NXDOMAIN","rrname":"kerijudacyj.eu"}}
{"timestamp":"2017-12-12T18:33:25.390147+0100","flow_id":2033368831488737,"pcap_cnt":4267,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55658,"proto":"UDP","dns":{"type":"answer","id":12706,"rcode":"NXDOMAIN","rrname":"nojepofyren.eu"}}
{"timestamp":"2017-12-12T18:33:16.978625+0100","flow_id":1624930325803396,"pcap_cnt":2265,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52821,"proto":"UDP","dns":{"type":"answer","id":40978,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:25.390147+0100","flow_id":2033368831488737,"pcap_cnt":4267,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55658,"proto":"UDP","dns":{"type":"answer","id":12706,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:21.787166+0100","flow_id":677716091273950,"pcap_cnt":3768,"event_type":"dns","src_ip":"192.168.1.100","src_port":52469,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36363,"rrname":"pumugoviwod.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.293148+0100","flow_id":1890365747591145,"pcap_cnt":3567,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52332,"proto":"UDP","dns":{"type":"answer","id":34613,"rcode":"NXDOMAIN","rrname":"nojuwakofed.eu"}}
{"timestamp":"2017-12-12T18:33:17.295192+0100","flow_id":1167636568002662,"pcap_cnt":2417,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54620,"proto":"UDP","dns":{"type":"answer","id":24570,"rcode":"NXDOMAIN","rrname":"lyrugujiqat.eu"}}
{"timestamp":"2017-12-12T18:33:21.293148+0100","flow_id":1890365747591145,"pcap_cnt":3567,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52332,"proto":"UDP","dns":{"type":"answer","id":34613,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:17.295192+0100","flow_id":1167636568002662,"pcap_cnt":2417,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54620,"proto":"UDP","dns":{"type":"answer","id":24570,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:20.891634+0100","flow_id":82837350947570,"pcap_cnt":3372,"event_type":"dns","src_ip":"192.168.1.100","src_port":53447,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47502,"rrname":"lyselojumyr.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.773486+0100","flow_id":1765399379168622,"pcap_cnt":3764,"event_type":"dns","src_ip":"192.168.1.100","src_port":52515,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":16132,"rrname":"nofoletezup.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.620543+0100","flow_id":2216761786988329,"pcap_cnt":2611,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54325,"proto":"UDP","dns":{"type":"answer","id":41022,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:22.109983+0100","flow_id":972922078538799,"pcap_cnt":3909,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51171,"proto":"UDP","dns":{"type":"answer","id":49338,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:20.891935+0100","flow_id":82837350947570,"pcap_cnt":3373,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53447,"proto":"UDP","dns":{"type":"answer","id":47502,"rcode":"NXDOMAIN","rrname":"lyselojumyr.eu"}}
{"timestamp":"2017-12-12T18:33:17.788219+0100","flow_id":2186130080204539,"pcap_cnt":2710,"event_type":"dns","src_ip":"192.168.1.100","src_port":53381,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":22715,"rrname":"ryqozapaleb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.822834+0100","flow_id":1026576957279794,"pcap_cnt":2894,"event_type":"dns","src_ip":"192.168.1.100","src_port":54153,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14357,"rrname":"rynepevymuc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.117591+0100","flow_id":887881726085975,"pcap_cnt":3912,"event_type":"dns","src_ip":"192.168.1.100","src_port":54436,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6853,"rrname":"lyxotyxubop.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.908236+0100","flow_id":1755993400859596,"pcap_cnt":4202,"event_type":"dns","src_ip":"192.168.1.100","src_port":58007,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53453,"rrname":"jenokirifux.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.092740+0100","flow_id":1568369901857077,"pcap_cnt":3009,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62958,"proto":"UDP","dns":{"type":"answer","id":14147,"rcode":"NXDOMAIN","rrname":"lygegoxidul.eu"}}
{"timestamp":"2017-12-12T18:33:20.215815+0100","flow_id":1024251229612313,"pcap_cnt":3074,"event_type":"dns","src_ip":"192.168.1.100","src_port":64682,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25269,"rrname":"xukafinezeg.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:20.092740+0100","flow_id":1568369901857077,"pcap_cnt":3009,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62958,"proto":"UDP","dns":{"type":"answer","id":14147,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:21.381018+0100","flow_id":2192233229045527,"pcap_cnt":3617,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51688,"proto":"UDP","dns":{"type":"answer","id":25014,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:20.227437+0100","flow_id":1668545719072877,"pcap_cnt":3078,"event_type":"dns","src_ip":"192.168.1.100","src_port":61504,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47966,"rrname":"lyxilunogem.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.959000+0100","flow_id":718524723011853,"pcap_cnt":3415,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50369,"proto":"UDP","dns":{"type":"answer","id":46630,"rcode":"NXDOMAIN","rrname":"purupoqogob.eu"}}
{"timestamp":"2017-12-12T18:33:20.227748+0100","flow_id":1668545719072877,"pcap_cnt":3079,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61504,"proto":"UDP","dns":{"type":"answer","id":47966,"rcode":"NXDOMAIN","rrname":"lyxilunogem.eu"}}
{"timestamp":"2017-12-12T18:33:20.491721+0100","flow_id":1854290169724805,"pcap_cnt":3207,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60366,"proto":"UDP","dns":{"type":"answer","id":30512,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:21.171591+0100","flow_id":1361698223136327,"pcap_cnt":3518,"event_type":"dns","src_ip":"192.168.1.100","src_port":61981,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7592,"rrname":"qequfygycuq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.585728+0100","flow_id":1467049475960559,"pcap_cnt":3697,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54706,"proto":"UDP","dns":{"type":"answer","id":65535,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:20.594384+0100","flow_id":1305341809660368,"pcap_cnt":3252,"event_type":"dns","src_ip":"192.168.1.100","src_port":53121,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8486,"rrname":"xugynajuquf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.171838+0100","flow_id":1361698223136327,"pcap_cnt":3519,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61981,"proto":"UDP","dns":{"type":"answer","id":7592,"rcode":"NXDOMAIN","rrname":"qequfygycuq.eu"}}
{"timestamp":"2017-12-12T18:33:21.749499+0100","flow_id":1175386836791227,"pcap_cnt":3756,"event_type":"dns","src_ip":"192.168.1.100","src_port":61923,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8562,"rrname":"magygicumof.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.171838+0100","flow_id":1361698223136327,"pcap_cnt":3519,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61981,"proto":"UDP","dns":{"type":"answer","id":7592,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:20.594631+0100","flow_id":1305341809660368,"pcap_cnt":3253,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53121,"proto":"UDP","dns":{"type":"answer","id":8486,"rcode":"NXDOMAIN","rrname":"xugynajuquf.eu"}}
{"timestamp":"2017-12-12T18:33:17.898644+0100","flow_id":756475053847905,"pcap_cnt":2771,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49774,"proto":"UDP","dns":{"type":"answer","id":25287,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:21.749855+0100","flow_id":1175386836791227,"pcap_cnt":3757,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61923,"proto":"UDP","dns":{"type":"answer","id":8562,"rcode":"NXDOMAIN","rrname":"magygicumof.eu"}}
{"timestamp":"2017-12-12T18:33:19.760488+0100","flow_id":1419976634243501,"pcap_cnt":2861,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61241,"proto":"UDP","dns":{"type":"answer","id":2993,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:21.749855+0100","flow_id":1175386836791227,"pcap_cnt":3757,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61923,"proto":"UDP","dns":{"type":"answer","id":8562,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:17.899280+0100","flow_id":88556099713232,"pcap_cnt":2772,"event_type":"dns","src_ip":"192.168.1.100","src_port":52834,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44164,"rrname":"maxagamisyb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.905565+0100","flow_id":1753850211979613,"pcap_cnt":2924,"event_type":"dns","src_ip":"192.168.1.100","src_port":60410,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29400,"rrname":"cicezomaxyz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.779778+0100","flow_id":1012837356922056,"pcap_cnt":2865,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50356,"proto":"UDP","dns":{"type":"answer","id":17099,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:22.096535+0100","flow_id":2037060355651863,"pcap_cnt":3902,"event_type":"dns","src_ip":"192.168.1.100","src_port":64748,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":65247,"rrname":"gaqaneziwoc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.771493+0100","flow_id":2206634254124453,"pcap_cnt":2700,"event_type":"dns","src_ip":"192.168.1.100","src_port":51476,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13332,"rrname":"jepuqoxupit.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.782459+0100","flow_id":1918774808530941,"pcap_cnt":2869,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62476,"proto":"UDP","dns":{"type":"answer","id":7537,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:20.105695+0100","flow_id":1920363946613710,"pcap_cnt":3023,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62652,"proto":"UDP","dns":{"type":"answer","id":13262,"rcode":"NXDOMAIN","rrname":"foqykasisof.eu"}}
{"timestamp":"2017-12-12T18:33:19.978654+0100","flow_id":834186044763589,"pcap_cnt":2957,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64842,"proto":"UDP","dns":{"type":"answer","id":17747,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:19.916736+0100","flow_id":2129090767224064,"pcap_cnt":2930,"event_type":"dns","src_ip":"192.168.1.100","src_port":55466,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41375,"rrname":"fokisohurif.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.105695+0100","flow_id":1920363946613710,"pcap_cnt":3023,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62652,"proto":"UDP","dns":{"type":"answer","id":13262,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:22.039730+0100","flow_id":436807080778222,"pcap_cnt":3871,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54580,"proto":"UDP","dns":{"type":"answer","id":16334,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:20.251876+0100","flow_id":2113433464002532,"pcap_cnt":3094,"event_type":"dns","src_ip":"192.168.1.100","src_port":51511,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11509,"rrname":"lyvoxajohul.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.134139+0100","flow_id":539424586594159,"pcap_cnt":4596,"event_type":"dns","src_ip":"192.168.1.100","src_port":51671,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4721,"rrname":"fodihywalyj.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:20.180592+0100","flow_id":1831045806735728,"pcap_cnt":3060,"event_type":"dns","src_ip":"192.168.1.100","src_port":58704,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47152,"rrname":"tulojigakit.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.041438+0100","flow_id":1345776779436510,"pcap_cnt":3872,"event_type":"dns","src_ip":"192.168.1.100","src_port":60696,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6162,"rrname":"qebukypahyh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.134383+0100","flow_id":539424586594159,"pcap_cnt":4597,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51671,"proto":"UDP","dns":{"type":"answer","id":4721,"rcode":"NXDOMAIN","rrname":"fodihywalyj.eu"}}
{"timestamp":"2017-12-12T18:33:26.018593+0100","flow_id":313084105607080,"pcap_cnt":4533,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53939,"proto":"UDP","dns":{"type":"answer","id":57054,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:20.180860+0100","flow_id":1831045806735728,"pcap_cnt":3061,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58704,"proto":"UDP","dns":{"type":"answer","id":47152,"rcode":"NXDOMAIN","rrname":"tulojigakit.eu"}}
{"timestamp":"2017-12-12T18:33:22.041703+0100","flow_id":1345776779436510,"pcap_cnt":3873,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60696,"proto":"UDP","dns":{"type":"answer","id":6162,"rcode":"NXDOMAIN","rrname":"qebukypahyh.eu"}}
{"timestamp":"2017-12-12T18:33:20.180860+0100","flow_id":1831045806735728,"pcap_cnt":3061,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58704,"proto":"UDP","dns":{"type":"answer","id":47152,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:22.041703+0100","flow_id":1345776779436510,"pcap_cnt":3873,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60696,"proto":"UDP","dns":{"type":"answer","id":6162,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:21.623943+0100","flow_id":93166747060490,"pcap_cnt":3718,"event_type":"dns","src_ip":"192.168.1.100","src_port":55815,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":434,"rrname":"kemybarodiv.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:19.692366+0100","flow_id":1619076285697902,"pcap_cnt":2827,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59831,"proto":"UDP","dns":{"type":"answer","id":24992,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:22.239955+0100","flow_id":1114673179175251,"pcap_cnt":3966,"event_type":"dns","src_ip":"192.168.1.100","src_port":60292,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41245,"rrname":"ryqehegubes.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.788473+0100","flow_id":2186130080204539,"pcap_cnt":2711,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53381,"proto":"UDP","dns":{"type":"answer","id":22715,"rcode":"NXDOMAIN","rrname":"ryqozapaleb.eu"}}
{"timestamp":"2017-12-12T18:33:22.117888+0100","flow_id":887881726085975,"pcap_cnt":3913,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54436,"proto":"UDP","dns":{"type":"answer","id":6853,"rcode":"NXDOMAIN","rrname":"lyxotyxubop.eu"}}
{"timestamp":"2017-12-12T18:33:17.788473+0100","flow_id":2186130080204539,"pcap_cnt":2711,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53381,"proto":"UDP","dns":{"type":"answer","id":22715,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:19.823128+0100","flow_id":1026576957279794,"pcap_cnt":2895,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54153,"proto":"UDP","dns":{"type":"answer","id":14357,"rcode":"NXDOMAIN","rrname":"rynepevymuc.eu"}}
{"timestamp":"2017-12-12T18:33:22.117888+0100","flow_id":887881726085975,"pcap_cnt":3913,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54436,"proto":"UDP","dns":{"type":"answer","id":6853,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:17.740724+0100","flow_id":2959548959842,"pcap_cnt":2677,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51338,"proto":"UDP","dns":{"type":"answer","id":55960,"rcode":"NXDOMAIN","rrname":"xuxetiryqem.eu"}}
{"timestamp":"2017-12-12T18:33:19.823128+0100","flow_id":1026576957279794,"pcap_cnt":2895,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54153,"proto":"UDP","dns":{"type":"answer","id":14357,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:22.908532+0100","flow_id":1755993400859596,"pcap_cnt":4203,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58007,"proto":"UDP","dns":{"type":"answer","id":53453,"rcode":"NXDOMAIN","rrname":"jenokirifux.eu"}}
{"timestamp":"2017-12-12T18:33:17.740724+0100","flow_id":2959548959842,"pcap_cnt":2677,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51338,"proto":"UDP","dns":{"type":"answer","id":55960,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:20.444069+0100","flow_id":224508994700965,"pcap_cnt":3182,"event_type":"dns","src_ip":"192.168.1.100","src_port":60936,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26447,"rrname":"jejajaduwok.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.836868+0100","flow_id":92266951591172,"pcap_cnt":2902,"event_type":"dns","src_ip":"192.168.1.100","src_port":51072,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":3482,"rrname":"qetekugexom.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.756252+0100","flow_id":1223065268750876,"pcap_cnt":3760,"event_type":"dns","src_ip":"192.168.1.100","src_port":61150,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49809,"rrname":"vojubetafuc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.028685+0100","flow_id":462450183270135,"pcap_cnt":4541,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58352,"proto":"UDP","dns":{"type":"answer","id":32107,"rcode":"NXDOMAIN","rrname":"xudunudeveq.eu"}}
{"timestamp":"2017-12-12T18:33:20.959000+0100","flow_id":718524723011853,"pcap_cnt":3415,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50369,"proto":"UDP","dns":{"type":"answer","id":46630,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:20.444390+0100","flow_id":224508994700965,"pcap_cnt":3183,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60936,"proto":"UDP","dns":{"type":"answer","id":26447,"rcode":"NXDOMAIN","rrname":"jejajaduwok.eu"}}
{"timestamp":"2017-12-12T18:33:20.228955+0100","flow_id":383111399505226,"pcap_cnt":3081,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49805,"proto":"UDP","dns":{"type":"answer","id":57653,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:27.945104+0100","flow_id":1186186532449232,"pcap_cnt":5158,"event_type":"dns","src_ip":"192.168.1.100","src_port":60705,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":20807,"rrname":"maxaxyfumim.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.677375+0100","flow_id":1103583573464575,"pcap_cnt":3294,"event_type":"dns","src_ip":"192.168.1.100","src_port":57810,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38325,"rrname":"digalyzohyx.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.319132+0100","flow_id":1152756654136988,"pcap_cnt":3574,"event_type":"dns","src_ip":"192.168.1.100","src_port":61478,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13583,"rrname":"makanytezih.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.594631+0100","flow_id":1305341809660368,"pcap_cnt":3253,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53121,"proto":"UDP","dns":{"type":"answer","id":8486,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:22.838320+0100","flow_id":714667842521503,"pcap_cnt":4175,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59582,"proto":"UDP","dns":{"type":"answer","id":6514,"rcode":"NXDOMAIN","rrname":"tujybuqeqis.eu"}}
{"timestamp":"2017-12-12T18:33:20.759296+0100","flow_id":1483688179176960,"pcap_cnt":3320,"event_type":"dns","src_ip":"192.168.1.100","src_port":52480,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17806,"rrname":"jepemadodiv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.677642+0100","flow_id":1103583573464575,"pcap_cnt":3295,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57810,"proto":"UDP","dns":{"type":"answer","id":38325,"rcode":"NXDOMAIN","rrname":"digalyzohyx.eu"}}
{"timestamp":"2017-12-12T18:33:21.319421+0100","flow_id":1152756654136988,"pcap_cnt":3575,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61478,"proto":"UDP","dns":{"type":"answer","id":13583,"rcode":"NXDOMAIN","rrname":"makanytezih.eu"}}
{"timestamp":"2017-12-12T18:33:20.677642+0100","flow_id":1103583573464575,"pcap_cnt":3295,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57810,"proto":"UDP","dns":{"type":"answer","id":38325,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":589}}
{"timestamp":"2017-12-12T18:33:20.759550+0100","flow_id":1483688179176960,"pcap_cnt":3321,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52480,"proto":"UDP","dns":{"type":"answer","id":17806,"rcode":"NXDOMAIN","rrname":"jepemadodiv.eu"}}
{"timestamp":"2017-12-12T18:33:19.997111+0100","flow_id":211173121144567,"pcap_cnt":2968,"event_type":"dns","src_ip":"192.168.1.100","src_port":59042,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":39733,"rrname":"rydohyluruc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.771751+0100","flow_id":2206634254124453,"pcap_cnt":2701,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51476,"proto":"UDP","dns":{"type":"answer","id":13332,"rcode":"NXDOMAIN","rrname":"jepuqoxupit.eu"}}
{"timestamp":"2017-12-12T18:33:20.759550+0100","flow_id":1483688179176960,"pcap_cnt":3321,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52480,"proto":"UDP","dns":{"type":"answer","id":17806,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:22.532962+0100","flow_id":900274853783622,"pcap_cnt":4082,"event_type":"dns","src_ip":"192.168.1.100","src_port":54928,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11392,"rrname":"nozoxucavaq.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:19.917043+0100","flow_id":2129090767224064,"pcap_cnt":2931,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55466,"proto":"UDP","dns":{"type":"answer","id":41375,"rcode":"NXDOMAIN","rrname":"fokisohurif.eu"}}
{"timestamp":"2017-12-12T18:33:20.583987+0100","flow_id":1116732614743275,"pcap_cnt":3248,"event_type":"dns","src_ip":"192.168.1.100","src_port":52852,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7852,"rrname":"gaqyqewymow.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:20.252154+0100","flow_id":2113433464002532,"pcap_cnt":3095,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51511,"proto":"UDP","dns":{"type":"answer","id":11509,"rcode":"NXDOMAIN","rrname":"lyvoxajohul.eu"}}
{"timestamp":"2017-12-12T18:33:20.877635+0100","flow_id":494196433642563,"pcap_cnt":3358,"event_type":"dns","src_ip":"192.168.1.100","src_port":54951,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":54785,"rrname":"puvewevodek.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.252154+0100","flow_id":2113433464002532,"pcap_cnt":3095,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51511,"proto":"UDP","dns":{"type":"answer","id":11509,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:17.318439+0100","flow_id":503961038822061,"pcap_cnt":2443,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65488,"proto":"UDP","dns":{"type":"answer","id":40559,"rcode":"NXDOMAIN","rrname":"volekymyvum.eu"}}
{"timestamp":"2017-12-12T18:33:20.169268+0100","flow_id":288164704982025,"pcap_cnt":3055,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59321,"proto":"UDP","dns":{"type":"answer","id":61601,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:20.878019+0100","flow_id":494196433642563,"pcap_cnt":3359,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54951,"proto":"UDP","dns":{"type":"answer","id":54785,"rcode":"NXDOMAIN","rrname":"puvewevodek.eu"}}
{"timestamp":"2017-12-12T18:33:20.253288+0100","flow_id":113645151378792,"pcap_cnt":3096,"event_type":"dns","src_ip":"192.168.1.100","src_port":58159,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17450,"rrname":"rynovaqidef.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.878019+0100","flow_id":494196433642563,"pcap_cnt":3359,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54951,"proto":"UDP","dns":{"type":"answer","id":54785,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:20.178924+0100","flow_id":205770052385516,"pcap_cnt":3058,"event_type":"dns","src_ip":"192.168.1.100","src_port":55634,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40266,"rrname":"fotulybidyq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.624287+0100","flow_id":93166747060490,"pcap_cnt":3719,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55815,"proto":"UDP","dns":{"type":"answer","id":434,"rcode":"NXDOMAIN","rrname":"kemybarodiv.eu"}}
{"timestamp":"2017-12-12T18:33:20.253558+0100","flow_id":113645151378792,"pcap_cnt":3097,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58159,"proto":"UDP","dns":{"type":"answer","id":17450,"rcode":"NXDOMAIN","rrname":"rynovaqidef.eu"}}
{"timestamp":"2017-12-12T18:33:20.954718+0100","flow_id":579168066638174,"pcap_cnt":3410,"event_type":"dns","src_ip":"192.168.1.100","src_port":49505,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40414,"rrname":"fobexawumov.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.624287+0100","flow_id":93166747060490,"pcap_cnt":3719,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55815,"proto":"UDP","dns":{"type":"answer","id":434,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:22.240279+0100","flow_id":1114673179175251,"pcap_cnt":3967,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60292,"proto":"UDP","dns":{"type":"answer","id":41245,"rcode":"NXDOMAIN","rrname":"ryqehegubes.eu"}}
{"timestamp":"2017-12-12T18:33:19.710067+0100","flow_id":1907816199607731,"pcap_cnt":2832,"event_type":"dns","src_ip":"192.168.1.100","src_port":55235,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":3640,"rrname":"fotaqizymig.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.216106+0100","flow_id":1024251229612313,"pcap_cnt":3075,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64682,"proto":"UDP","dns":{"type":"answer","id":25269,"rcode":"NXDOMAIN","rrname":"xukafinezeg.eu"}}
{"timestamp":"2017-12-12T18:33:22.240279+0100","flow_id":1114673179175251,"pcap_cnt":3967,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60292,"proto":"UDP","dns":{"type":"answer","id":41245,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":595}}
{"timestamp":"2017-12-12T18:33:22.908532+0100","flow_id":1755993400859596,"pcap_cnt":4203,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58007,"proto":"UDP","dns":{"type":"answer","id":53453,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:20.216106+0100","flow_id":1024251229612313,"pcap_cnt":3075,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64682,"proto":"UDP","dns":{"type":"answer","id":25269,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":589}}
{"timestamp":"2017-12-12T18:33:20.227748+0100","flow_id":1668545719072877,"pcap_cnt":3079,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61504,"proto":"UDP","dns":{"type":"answer","id":47966,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:19.837176+0100","flow_id":92266951591172,"pcap_cnt":2903,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51072,"proto":"UDP","dns":{"type":"answer","id":3482,"rcode":"NXDOMAIN","rrname":"qetekugexom.eu"}}
{"timestamp":"2017-12-12T18:33:22.306275+0100","flow_id":1321347005459555,"pcap_cnt":3988,"event_type":"dns","src_ip":"192.168.1.100","src_port":62589,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59344,"rrname":"magowymafum.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.756622+0100","flow_id":1223065268750876,"pcap_cnt":3761,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61150,"proto":"UDP","dns":{"type":"answer","id":49809,"rcode":"NXDOMAIN","rrname":"vojubetafuc.eu"}}
{"timestamp":"2017-12-12T18:33:19.837176+0100","flow_id":92266951591172,"pcap_cnt":2903,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51072,"proto":"UDP","dns":{"type":"answer","id":3482,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:20.309825+0100","flow_id":177418973264449,"pcap_cnt":3130,"event_type":"dns","src_ip":"192.168.1.100","src_port":52037,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50911,"rrname":"tucakaqalav.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.306558+0100","flow_id":1321347005459555,"pcap_cnt":3989,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62589,"proto":"UDP","dns":{"type":"answer","id":59344,"rcode":"NXDOMAIN","rrname":"magowymafum.eu"}}
{"timestamp":"2017-12-12T18:33:21.756622+0100","flow_id":1223065268750876,"pcap_cnt":3761,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61150,"proto":"UDP","dns":{"type":"answer","id":49809,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:17.899515+0100","flow_id":88556099713232,"pcap_cnt":2773,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52834,"proto":"UDP","dns":{"type":"answer","id":44164,"rcode":"NXDOMAIN","rrname":"maxagamisyb.eu"}}
{"timestamp":"2017-12-12T18:33:20.310117+0100","flow_id":177418973264449,"pcap_cnt":3131,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52037,"proto":"UDP","dns":{"type":"answer","id":50911,"rcode":"NXDOMAIN","rrname":"tucakaqalav.eu"}}
{"timestamp":"2017-12-12T18:33:17.899515+0100","flow_id":88556099713232,"pcap_cnt":2773,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52834,"proto":"UDP","dns":{"type":"answer","id":44164,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:20.310117+0100","flow_id":177418973264449,"pcap_cnt":3131,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52037,"proto":"UDP","dns":{"type":"answer","id":50911,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":589}}
{"timestamp":"2017-12-12T18:33:22.096825+0100","flow_id":2037060355651863,"pcap_cnt":3903,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64748,"proto":"UDP","dns":{"type":"answer","id":65247,"rcode":"NXDOMAIN","rrname":"gaqaneziwoc.eu"}}
{"timestamp":"2017-12-12T18:33:17.902300+0100","flow_id":1686816509772956,"pcap_cnt":2776,"event_type":"dns","src_ip":"192.168.1.100","src_port":59198,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4257,"rrname":"rydyvigecot.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.319421+0100","flow_id":1152756654136988,"pcap_cnt":3575,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61478,"proto":"UDP","dns":{"type":"answer","id":13583,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:22.096825+0100","flow_id":2037060355651863,"pcap_cnt":3903,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64748,"proto":"UDP","dns":{"type":"answer","id":65247,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:20.621402+0100","flow_id":240153413057370,"pcap_cnt":3262,"event_type":"dns","src_ip":"192.168.1.100","src_port":52176,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7321,"rrname":"kezigojohuf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.819836+0100","flow_id":1656844080677500,"pcap_cnt":3340,"event_type":"dns","src_ip":"192.168.1.100","src_port":58636,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37526,"rrname":"nojogefumuc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.787459+0100","flow_id":677716091273950,"pcap_cnt":3769,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52469,"proto":"UDP","dns":{"type":"answer","id":36363,"rcode":"NXDOMAIN","rrname":"pumugoviwod.eu"}}
{"timestamp":"2017-12-12T18:33:21.406936+0100","flow_id":1639067211085208,"pcap_cnt":3628,"event_type":"dns","src_ip":"192.168.1.100","src_port":60709,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2453,"rrname":"kejilodirub.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.997370+0100","flow_id":211173121144567,"pcap_cnt":2969,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59042,"proto":"UDP","dns":{"type":"answer","id":39733,"rcode":"NXDOMAIN","rrname":"rydohyluruc.eu"}}
{"timestamp":"2017-12-12T18:33:21.787459+0100","flow_id":677716091273950,"pcap_cnt":3769,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52469,"proto":"UDP","dns":{"type":"answer","id":36363,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:20.621692+0100","flow_id":240153413057370,"pcap_cnt":3263,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52176,"proto":"UDP","dns":{"type":"answer","id":7321,"rcode":"NXDOMAIN","rrname":"kezigojohuf.eu"}}
{"timestamp":"2017-12-12T18:33:19.997370+0100","flow_id":211173121144567,"pcap_cnt":2969,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59042,"proto":"UDP","dns":{"type":"answer","id":39733,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:21.816184+0100","flow_id":998704767136824,"pcap_cnt":3780,"event_type":"dns","src_ip":"192.168.1.100","src_port":63998,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18924,"rrname":"gahekisybyr.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.533202+0100","flow_id":900274853783622,"pcap_cnt":4083,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54928,"proto":"UDP","dns":{"type":"answer","id":11392,"rcode":"NXDOMAIN","rrname":"nozoxucavaq.eu"}}
{"timestamp":"2017-12-12T18:33:20.584260+0100","flow_id":1116732614743275,"pcap_cnt":3249,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52852,"proto":"UDP","dns":{"type":"answer","id":7852,"rcode":"NXDOMAIN","rrname":"gaqyqewymow.eu"}}
{"timestamp":"2017-12-12T18:33:21.816485+0100","flow_id":998704767136824,"pcap_cnt":3781,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63998,"proto":"UDP","dns":{"type":"answer","id":18924,"rcode":"NXDOMAIN","rrname":"gahekisybyr.eu"}}
{"timestamp":"2017-12-12T18:33:21.773969+0100","flow_id":1765399379168622,"pcap_cnt":3765,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52515,"proto":"UDP","dns":{"type":"answer","id":16132,"rcode":"NXDOMAIN","rrname":"nofoletezup.eu"}}
{"timestamp":"2017-12-12T18:33:20.584260+0100","flow_id":1116732614743275,"pcap_cnt":3249,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52852,"proto":"UDP","dns":{"type":"answer","id":7852,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:21.816485+0100","flow_id":998704767136824,"pcap_cnt":3781,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63998,"proto":"UDP","dns":{"type":"answer","id":18924,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:21.773969+0100","flow_id":1765399379168622,"pcap_cnt":3765,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52515,"proto":"UDP","dns":{"type":"answer","id":16132,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:19.998574+0100","flow_id":1958911278005422,"pcap_cnt":2970,"event_type":"dns","src_ip":"192.168.1.100","src_port":60414,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":22456,"rrname":"tupepulofup.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.758318+0100","flow_id":1983989591653980,"pcap_cnt":3318,"event_type":"dns","src_ip":"192.168.1.100","src_port":64188,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35854,"rrname":"gadoposuwif.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:20.179174+0100","flow_id":205770052385516,"pcap_cnt":3059,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55634,"proto":"UDP","dns":{"type":"answer","id":40266,"rcode":"NXDOMAIN","rrname":"fotulybidyq.eu"}}
{"timestamp":"2017-12-12T18:33:21.792276+0100","flow_id":325932499932884,"pcap_cnt":3770,"event_type":"dns","src_ip":"192.168.1.100","src_port":63947,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9927,"rrname":"divotabofov.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.758648+0100","flow_id":1983989591653980,"pcap_cnt":3319,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64188,"proto":"UDP","dns":{"type":"answer","id":35854,"rcode":"NXDOMAIN","rrname":"gadoposuwif.eu"}}
{"timestamp":"2017-12-12T18:33:19.998831+0100","flow_id":1958911278005422,"pcap_cnt":2971,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60414,"proto":"UDP","dns":{"type":"answer","id":22456,"rcode":"NXDOMAIN","rrname":"tupepulofup.eu"}}
{"timestamp":"2017-12-12T18:33:21.696229+0100","flow_id":2169645996023717,"pcap_cnt":3742,"event_type":"dns","src_ip":"192.168.1.100","src_port":62303,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17676,"rrname":"lymoxuxelam.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.758648+0100","flow_id":1983989591653980,"pcap_cnt":3319,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64188,"proto":"UDP","dns":{"type":"answer","id":35854,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:19.998831+0100","flow_id":1958911278005422,"pcap_cnt":2971,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60414,"proto":"UDP","dns":{"type":"answer","id":22456,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:19.710342+0100","flow_id":1907816199607731,"pcap_cnt":2833,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55235,"proto":"UDP","dns":{"type":"answer","id":3640,"rcode":"NXDOMAIN","rrname":"fotaqizymig.eu"}}
{"timestamp":"2017-12-12T18:33:20.311833+0100","flow_id":1731116950143513,"pcap_cnt":3132,"event_type":"dns","src_ip":"192.168.1.100","src_port":49977,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":58969,"rrname":"cicidutuwap.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.710342+0100","flow_id":1907816199607731,"pcap_cnt":2833,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55235,"proto":"UDP","dns":{"type":"answer","id":3640,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:20.890082+0100","flow_id":1094003648926946,"pcap_cnt":3370,"event_type":"dns","src_ip":"192.168.1.100","src_port":59697,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":65212,"rrname":"kefobojexyl.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.444390+0100","flow_id":224508994700965,"pcap_cnt":3183,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60936,"proto":"UDP","dns":{"type":"answer","id":26447,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:27.945380+0100","flow_id":1186186532449232,"pcap_cnt":5159,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60705,"proto":"UDP","dns":{"type":"answer","id":20807,"rcode":"NXDOMAIN","rrname":"maxaxyfumim.eu"}}
{"timestamp":"2017-12-12T18:33:21.010780+0100","flow_id":1752615408970268,"pcap_cnt":3438,"event_type":"dns","src_ip":"192.168.1.100","src_port":64969,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17295,"rrname":"foqyvyzuqeh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.038264+0100","flow_id":233934300222840,"pcap_cnt":2294,"event_type":"dns","src_ip":"192.168.1.100","src_port":51802,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49804,"rrname":"lyrefanyril.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.462801+0100","flow_id":224508994700965,"pcap_cnt":3190,"event_type":"dns","src_ip":"192.168.1.100","src_port":60936,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":12544,"rrname":"lysumedalik.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:22.306558+0100","flow_id":1321347005459555,"pcap_cnt":3989,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62589,"proto":"UDP","dns":{"type":"answer","id":59344,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":595}}
{"timestamp":"2017-12-12T18:33:21.011076+0100","flow_id":1752615408970268,"pcap_cnt":3439,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64969,"proto":"UDP","dns":{"type":"answer","id":17295,"rcode":"NXDOMAIN","rrname":"foqyvyzuqeh.eu"}}
{"timestamp":"2017-12-12T18:33:20.463070+0100","flow_id":224508994700965,"pcap_cnt":3191,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60936,"proto":"UDP","dns":{"type":"answer","id":12544,"rcode":"NXDOMAIN","rrname":"lysumedalik.eu"}}
{"timestamp":"2017-12-12T18:33:21.998368+0100","flow_id":831982726626272,"pcap_cnt":3850,"event_type":"dns","src_ip":"192.168.1.100","src_port":54993,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48053,"rrname":"foqurowyxul.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.976918+0100","flow_id":1799555106531350,"pcap_cnt":3428,"event_type":"dns","src_ip":"192.168.1.100","src_port":58225,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":10347,"rrname":"kejamerecos.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.939458+0100","flow_id":232274295543234,"pcap_cnt":3396,"event_type":"dns","src_ip":"192.168.1.100","src_port":64178,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25449,"rrname":"cinuqumahag.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.902545+0100","flow_id":1686816509772956,"pcap_cnt":2777,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59198,"proto":"UDP","dns":{"type":"answer","id":4257,"rcode":"NXDOMAIN","rrname":"rydyvigecot.eu"}}
{"timestamp":"2017-12-12T18:33:17.771751+0100","flow_id":2206634254124453,"pcap_cnt":2701,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51476,"proto":"UDP","dns":{"type":"answer","id":13332,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:22.445635+0100","flow_id":2160635154713795,"pcap_cnt":4044,"event_type":"dns","src_ip":"192.168.1.100","src_port":55148,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49443,"rrname":"qetoqolusex.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.902545+0100","flow_id":1686816509772956,"pcap_cnt":2777,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59198,"proto":"UDP","dns":{"type":"answer","id":4257,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:21.580491+0100","flow_id":1289459020716700,"pcap_cnt":3695,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52388,"proto":"UDP","dns":{"type":"answer","id":41585,"rcode":"NXDOMAIN","rrname":"qebonuqirin.eu"}}
{"timestamp":"2017-12-12T18:33:26.134383+0100","flow_id":539424586594159,"pcap_cnt":4597,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51671,"proto":"UDP","dns":{"type":"answer","id":4721,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:22.445980+0100","flow_id":2160635154713795,"pcap_cnt":4045,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55148,"proto":"UDP","dns":{"type":"answer","id":49443,"rcode":"NXDOMAIN","rrname":"qetoqolusex.eu"}}
{"timestamp":"2017-12-12T18:33:21.407262+0100","flow_id":1639067211085208,"pcap_cnt":3629,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60709,"proto":"UDP","dns":{"type":"answer","id":2453,"rcode":"NXDOMAIN","rrname":"kejilodirub.eu"}}
{"timestamp":"2017-12-12T18:33:22.445980+0100","flow_id":2160635154713795,"pcap_cnt":4045,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55148,"proto":"UDP","dns":{"type":"answer","id":49443,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":553}}
{"timestamp":"2017-12-12T18:33:20.621692+0100","flow_id":240153413057370,"pcap_cnt":3263,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52176,"proto":"UDP","dns":{"type":"answer","id":7321,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:21.407262+0100","flow_id":1639067211085208,"pcap_cnt":3629,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60709,"proto":"UDP","dns":{"type":"answer","id":2453,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:22.640519+0100","flow_id":253566596072967,"pcap_cnt":4114,"event_type":"dns","src_ip":"192.168.1.100","src_port":57119,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6241,"rrname":"ryhoqagoxyr.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.627187+0100","flow_id":1484405438714355,"pcap_cnt":3270,"event_type":"dns","src_ip":"192.168.1.100","src_port":57782,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14266,"rrname":"cihocytodoh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.318439+0100","flow_id":503961038822061,"pcap_cnt":2443,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65488,"proto":"UDP","dns":{"type":"answer","id":40559,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:20.891935+0100","flow_id":82837350947570,"pcap_cnt":3373,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53447,"proto":"UDP","dns":{"type":"answer","id":47502,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:20.292687+0100","flow_id":1308966762084175,"pcap_cnt":3122,"event_type":"dns","src_ip":"192.168.1.100","src_port":61313,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59382,"rrname":"kerowyripac.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.253558+0100","flow_id":113645151378792,"pcap_cnt":3097,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58159,"proto":"UDP","dns":{"type":"answer","id":17450,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":589}}
{"timestamp":"2017-12-12T18:33:21.167530+0100","flow_id":252694717632106,"pcap_cnt":3512,"event_type":"dns","src_ip":"192.168.1.100","src_port":57019,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53887,"rrname":"nopabefipuq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.960130+0100","flow_id":1762538930939522,"pcap_cnt":3832,"event_type":"dns","src_ip":"192.168.1.100","src_port":50428,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36784,"rrname":"maxilumiriz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.954992+0100","flow_id":579168066638174,"pcap_cnt":3411,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49505,"proto":"UDP","dns":{"type":"answer","id":40414,"rcode":"NXDOMAIN","rrname":"fobexawumov.eu"}}
{"timestamp":"2017-12-12T18:33:21.960624+0100","flow_id":1762538930939522,"pcap_cnt":3833,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50428,"proto":"UDP","dns":{"type":"answer","id":36784,"rcode":"NXDOMAIN","rrname":"maxilumiriz.eu"}}
{"timestamp":"2017-12-12T18:33:20.179174+0100","flow_id":205770052385516,"pcap_cnt":3059,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55634,"proto":"UDP","dns":{"type":"answer","id":40266,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:17.781726+0100","flow_id":2066983392505246,"pcap_cnt":2706,"event_type":"dns","src_ip":"192.168.1.100","src_port":55250,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64572,"rrname":"lymajaxecir.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.792551+0100","flow_id":325932499932884,"pcap_cnt":3771,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63947,"proto":"UDP","dns":{"type":"answer","id":9927,"rcode":"NXDOMAIN","rrname":"divotabofov.eu"}}
{"timestamp":"2017-12-12T18:33:20.187447+0100","flow_id":524387906280503,"pcap_cnt":3062,"event_type":"dns","src_ip":"192.168.1.100","src_port":50705,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35136,"rrname":"pujepigeviz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.792551+0100","flow_id":325932499932884,"pcap_cnt":3771,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63947,"proto":"UDP","dns":{"type":"answer","id":9927,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:25.350066+0100","flow_id":543214895716210,"pcap_cnt":4244,"event_type":"dns","src_ip":"192.168.1.100","src_port":55227,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33408,"rrname":"xubeqidudyh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.696555+0100","flow_id":2169645996023717,"pcap_cnt":3743,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62303,"proto":"UDP","dns":{"type":"answer","id":17676,"rcode":"NXDOMAIN","rrname":"lymoxuxelam.eu"}}
{"timestamp":"2017-12-12T18:33:20.187713+0100","flow_id":524387906280503,"pcap_cnt":3063,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50705,"proto":"UDP","dns":{"type":"answer","id":35136,"rcode":"NXDOMAIN","rrname":"pujepigeviz.eu"}}
{"timestamp":"2017-12-12T18:33:19.820628+0100","flow_id":590017153959316,"pcap_cnt":2892,"event_type":"dns","src_ip":"192.168.1.100","src_port":52235,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":55006,"rrname":"fogytubuwyx.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.696555+0100","flow_id":2169645996023717,"pcap_cnt":3743,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62303,"proto":"UDP","dns":{"type":"answer","id":17676,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:25.350400+0100","flow_id":543214895716210,"pcap_cnt":4245,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55227,"proto":"UDP","dns":{"type":"answer","id":33408,"rcode":"NXDOMAIN","rrname":"xubeqidudyh.eu"}}
{"timestamp":"2017-12-12T18:33:20.890365+0100","flow_id":1094003648926946,"pcap_cnt":3371,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59697,"proto":"UDP","dns":{"type":"answer","id":65212,"rcode":"NXDOMAIN","rrname":"kefobojexyl.eu"}}
{"timestamp":"2017-12-12T18:33:19.820963+0100","flow_id":590017153959316,"pcap_cnt":2893,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52235,"proto":"UDP","dns":{"type":"answer","id":55006,"rcode":"NXDOMAIN","rrname":"fogytubuwyx.eu"}}
{"timestamp":"2017-12-12T18:33:27.945380+0100","flow_id":1186186532449232,"pcap_cnt":5159,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60705,"proto":"UDP","dns":{"type":"answer","id":20807,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:19.820963+0100","flow_id":590017153959316,"pcap_cnt":2893,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52235,"proto":"UDP","dns":{"type":"answer","id":55006,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:19.905829+0100","flow_id":1753850211979613,"pcap_cnt":2925,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60410,"proto":"UDP","dns":{"type":"answer","id":29400,"rcode":"NXDOMAIN","rrname":"cicezomaxyz.eu"}}
{"timestamp":"2017-12-12T18:33:17.038527+0100","flow_id":233934300222840,"pcap_cnt":2295,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51802,"proto":"UDP","dns":{"type":"answer","id":49804,"rcode":"NXDOMAIN","rrname":"lyrefanyril.eu"}}
{"timestamp":"2017-12-12T18:33:28.110096+0100","flow_id":117375330987536,"pcap_cnt":5248,"event_type":"dns","src_ip":"192.168.1.100","src_port":63955,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30122,"rrname":"kemelixakyz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.905829+0100","flow_id":1753850211979613,"pcap_cnt":2925,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60410,"proto":"UDP","dns":{"type":"answer","id":29400,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:21.011076+0100","flow_id":1752615408970268,"pcap_cnt":3439,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64969,"proto":"UDP","dns":{"type":"answer","id":17295,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:22.552031+0100","flow_id":100356522667103,"pcap_cnt":4088,"event_type":"dns","src_ip":"192.168.1.100","src_port":52280,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":310,"rrname":"lysovidacyx.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.998695+0100","flow_id":831982726626272,"pcap_cnt":3851,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54993,"proto":"UDP","dns":{"type":"answer","id":48053,"rcode":"NXDOMAIN","rrname":"foqurowyxul.eu"}}
{"timestamp":"2017-12-12T18:33:20.939680+0100","flow_id":232274295543234,"pcap_cnt":3397,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64178,"proto":"UDP","dns":{"type":"answer","id":25449,"rcode":"NXDOMAIN","rrname":"cinuqumahag.eu"}}
{"timestamp":"2017-12-12T18:33:21.998695+0100","flow_id":831982726626272,"pcap_cnt":3851,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54993,"proto":"UDP","dns":{"type":"answer","id":48053,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:21.124266+0100","flow_id":702581804492138,"pcap_cnt":3488,"event_type":"dns","src_ip":"192.168.1.100","src_port":53245,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47585,"rrname":"fodoqebirac.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.939680+0100","flow_id":232274295543234,"pcap_cnt":3397,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64178,"proto":"UDP","dns":{"type":"answer","id":25449,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:17.839439+0100","flow_id":1948386460552975,"pcap_cnt":2734,"event_type":"dns","src_ip":"192.168.1.100","src_port":52741,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38323,"rrname":"kepabydokas.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.124530+0100","flow_id":702581804492138,"pcap_cnt":3489,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53245,"proto":"UDP","dns":{"type":"answer","id":47585,"rcode":"NXDOMAIN","rrname":"fodoqebirac.eu"}}
{"timestamp":"2017-12-12T18:33:21.580491+0100","flow_id":1289459020716700,"pcap_cnt":3695,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52388,"proto":"UDP","dns":{"type":"answer","id":41585,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:21.124530+0100","flow_id":702581804492138,"pcap_cnt":3489,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53245,"proto":"UDP","dns":{"type":"answer","id":47585,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:19.717085+0100","flow_id":1496583818440989,"pcap_cnt":2838,"event_type":"dns","src_ip":"192.168.1.100","src_port":62783,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":21290,"rrname":"cidufitojex.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.839698+0100","flow_id":1948386460552975,"pcap_cnt":2735,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52741,"proto":"UDP","dns":{"type":"answer","id":38323,"rcode":"NXDOMAIN","rrname":"kepabydokas.eu"}}
{"timestamp":"2017-12-12T18:33:21.417010+0100","flow_id":1962862647811313,"pcap_cnt":3634,"event_type":"dns","src_ip":"192.168.1.100","src_port":59775,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27795,"rrname":"lygofodagud.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:26.141757+0100","flow_id":1974304441248189,"pcap_cnt":4600,"event_type":"dns","src_ip":"192.168.1.100","src_port":58642,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1836,"rrname":"fotyfahokab.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.243497+0100","flow_id":1282492584081193,"pcap_cnt":4636,"event_type":"dns","src_ip":"192.168.1.100","src_port":51277,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41706,"rrname":"qetunopifef.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.417282+0100","flow_id":1962862647811313,"pcap_cnt":3635,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59775,"proto":"UDP","dns":{"type":"answer","id":27795,"rcode":"NXDOMAIN","rrname":"lygofodagud.eu"}}
{"timestamp":"2017-12-12T18:33:20.301553+0100","flow_id":1078412917643761,"pcap_cnt":3124,"event_type":"dns","src_ip":"192.168.1.100","src_port":57661,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53968,"rrname":"lymevyrajas.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.825135+0100","flow_id":1097042338354991,"pcap_cnt":3788,"event_type":"dns","src_ip":"192.168.1.100","src_port":54269,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25323,"rrname":"tunakupycut.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.417282+0100","flow_id":1962862647811313,"pcap_cnt":3635,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59775,"proto":"UDP","dns":{"type":"answer","id":27795,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:26.243771+0100","flow_id":1282492584081193,"pcap_cnt":4637,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51277,"proto":"UDP","dns":{"type":"answer","id":41706,"rcode":"NXDOMAIN","rrname":"qetunopifef.eu"}}
{"timestamp":"2017-12-12T18:33:17.321119+0100","flow_id":217916219713119,"pcap_cnt":2447,"event_type":"dns","src_ip":"192.168.1.100","src_port":52903,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18621,"rrname":"puzigagacal.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.292977+0100","flow_id":1308966762084175,"pcap_cnt":3123,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61313,"proto":"UDP","dns":{"type":"answer","id":59382,"rcode":"NXDOMAIN","rrname":"kerowyripac.eu"}}
{"timestamp":"2017-12-12T18:33:21.825465+0100","flow_id":1097042338354991,"pcap_cnt":3789,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54269,"proto":"UDP","dns":{"type":"answer","id":25323,"rcode":"NXDOMAIN","rrname":"tunakupycut.eu"}}
{"timestamp":"2017-12-12T18:33:20.273326+0100","flow_id":1383649799509954,"pcap_cnt":3106,"event_type":"dns","src_ip":"192.168.1.100","src_port":58107,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9937,"rrname":"masygekevuq.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:21.825465+0100","flow_id":1097042338354991,"pcap_cnt":3789,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54269,"proto":"UDP","dns":{"type":"answer","id":25323,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:20.292977+0100","flow_id":1308966762084175,"pcap_cnt":3123,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61313,"proto":"UDP","dns":{"type":"answer","id":59382,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:17.321488+0100","flow_id":217916219713119,"pcap_cnt":2448,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52903,"proto":"UDP","dns":{"type":"answer","id":18621,"rcode":"NXDOMAIN","rrname":"puzigagacal.eu"}}
{"timestamp":"2017-12-12T18:33:22.126431+0100","flow_id":591477443063263,"pcap_cnt":3916,"event_type":"dns","src_ip":"192.168.1.100","src_port":52156,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":65354,"rrname":"gatequsiryg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.954992+0100","flow_id":579168066638174,"pcap_cnt":3411,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49505,"proto":"UDP","dns":{"type":"answer","id":40414,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:21.960624+0100","flow_id":1762538930939522,"pcap_cnt":3833,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50428,"proto":"UDP","dns":{"type":"answer","id":36784,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:20.273617+0100","flow_id":1383649799509954,"pcap_cnt":3107,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58107,"proto":"UDP","dns":{"type":"answer","id":9937,"rcode":"NXDOMAIN","rrname":"masygekevuq.eu"}}
{"timestamp":"2017-12-12T18:33:20.103878+0100","flow_id":1989989661447622,"pcap_cnt":3020,"event_type":"dns","src_ip":"192.168.1.100","src_port":52964,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11745,"rrname":"nomugacogyk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.957839+0100","flow_id":1066303257039061,"pcap_cnt":3412,"event_type":"dns","src_ip":"192.168.1.100","src_port":54616,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13993,"rrname":"makysimodan.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:22.282749+0100","flow_id":694655441850837,"pcap_cnt":3982,"event_type":"dns","src_ip":"192.168.1.100","src_port":53378,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2640,"rrname":"volekymyvum.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:20.958114+0100","flow_id":1066303257039061,"pcap_cnt":3413,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54616,"proto":"UDP","dns":{"type":"answer","id":13993,"rcode":"NXDOMAIN","rrname":"makysimodan.eu"}}
{"timestamp":"2017-12-12T18:33:19.856833+0100","flow_id":1749076355781377,"pcap_cnt":2910,"event_type":"dns","src_ip":"192.168.1.100","src_port":64135,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35446,"rrname":"qeqohevazud.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.958114+0100","flow_id":1066303257039061,"pcap_cnt":3413,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54616,"proto":"UDP","dns":{"type":"answer","id":13993,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:25.350400+0100","flow_id":543214895716210,"pcap_cnt":4245,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55227,"proto":"UDP","dns":{"type":"answer","id":33408,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:21.698055+0100","flow_id":1838211959727815,"pcap_cnt":3744,"event_type":"dns","src_ip":"192.168.1.100","src_port":59684,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":61599,"rrname":"xubehuxunag.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.042191+0100","flow_id":1369304610219215,"pcap_cnt":3450,"event_type":"dns","src_ip":"192.168.1.100","src_port":49427,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36982,"rrname":"nomuxytirix.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.838320+0100","flow_id":714667842521503,"pcap_cnt":4175,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59582,"proto":"UDP","dns":{"type":"answer","id":6514,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:20.890365+0100","flow_id":1094003648926946,"pcap_cnt":3371,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59697,"proto":"UDP","dns":{"type":"answer","id":65212,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:21.698376+0100","flow_id":1838211959727815,"pcap_cnt":3745,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59684,"proto":"UDP","dns":{"type":"answer","id":61599,"rcode":"NXDOMAIN","rrname":"xubehuxunag.eu"}}
{"timestamp":"2017-12-12T18:33:20.463070+0100","flow_id":224508994700965,"pcap_cnt":3191,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60936,"proto":"UDP","dns":{"type":"answer","id":12544,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:21.698376+0100","flow_id":1838211959727815,"pcap_cnt":3745,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59684,"proto":"UDP","dns":{"type":"answer","id":61599,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:21.227501+0100","flow_id":271122274810029,"pcap_cnt":3540,"event_type":"dns","src_ip":"192.168.1.100","src_port":60042,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31570,"rrname":"gadyvuhagyn.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.015424+0100","flow_id":771866069318720,"pcap_cnt":2978,"event_type":"dns","src_ip":"192.168.1.100","src_port":52591,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":46630,"rrname":"dimoxuzynup.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.820166+0100","flow_id":1656844080677500,"pcap_cnt":3341,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58636,"proto":"UDP","dns":{"type":"answer","id":37526,"rcode":"NXDOMAIN","rrname":"nojogefumuc.eu"}}
{"timestamp":"2017-12-12T18:33:21.826575+0100","flow_id":2198937672981711,"pcap_cnt":3790,"event_type":"dns","src_ip":"192.168.1.100","src_port":59159,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18775,"rrname":"fokovisekyz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.977251+0100","flow_id":1799555106531350,"pcap_cnt":3429,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58225,"proto":"UDP","dns":{"type":"answer","id":10347,"rcode":"NXDOMAIN","rrname":"kejamerecos.eu"}}
{"timestamp":"2017-12-12T18:33:22.552229+0100","flow_id":100356522667103,"pcap_cnt":4089,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52280,"proto":"UDP","dns":{"type":"answer","id":310,"rcode":"NXDOMAIN","rrname":"lysovidacyx.eu"}}
{"timestamp":"2017-12-12T18:33:22.300861+0100","flow_id":1355556419966781,"pcap_cnt":3984,"event_type":"dns","src_ip":"192.168.1.100","src_port":57435,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60382,"rrname":"nojudymiwuh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.977251+0100","flow_id":1799555106531350,"pcap_cnt":3429,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58225,"proto":"UDP","dns":{"type":"answer","id":10347,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:19.917043+0100","flow_id":2129090767224064,"pcap_cnt":2931,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55466,"proto":"UDP","dns":{"type":"answer","id":41375,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:22.145963+0100","flow_id":1400131738024491,"pcap_cnt":3924,"event_type":"dns","src_ip":"192.168.1.100","src_port":59409,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64075,"rrname":"xukenyxitox.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.839698+0100","flow_id":1948386460552975,"pcap_cnt":2735,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52741,"proto":"UDP","dns":{"type":"answer","id":38323,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:22.301171+0100","flow_id":1355556419966781,"pcap_cnt":3985,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57435,"proto":"UDP","dns":{"type":"answer","id":60382,"rcode":"NXDOMAIN","rrname":"nojudymiwuh.eu"}}
{"timestamp":"2017-12-12T18:33:19.717374+0100","flow_id":1496583818440989,"pcap_cnt":2839,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62783,"proto":"UDP","dns":{"type":"answer","id":21290,"rcode":"NXDOMAIN","rrname":"cidufitojex.eu"}}
{"timestamp":"2017-12-12T18:33:22.146253+0100","flow_id":1400131738024491,"pcap_cnt":3925,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59409,"proto":"UDP","dns":{"type":"answer","id":64075,"rcode":"NXDOMAIN","rrname":"xukenyxitox.eu"}}
{"timestamp":"2017-12-12T18:33:20.056529+0100","flow_id":203674108353745,"pcap_cnt":2992,"event_type":"dns","src_ip":"192.168.1.100","src_port":50348,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49908,"rrname":"noveditifan.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.621452+0100","flow_id":1247722675862412,"pcap_cnt":2794,"event_type":"dns","src_ip":"192.168.1.100","src_port":57402,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7650,"rrname":"lygivejynow.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.200289+0100","flow_id":539905623199329,"pcap_cnt":3948,"event_type":"dns","src_ip":"192.168.1.100","src_port":61845,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5515,"rrname":"dikolobeliw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.243771+0100","flow_id":1282492584081193,"pcap_cnt":4637,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51277,"proto":"UDP","dns":{"type":"answer","id":41706,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:19.621673+0100","flow_id":1247722675862412,"pcap_cnt":2795,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57402,"proto":"UDP","dns":{"type":"answer","id":7650,"rcode":"NXDOMAIN","rrname":"lygivejynow.eu"}}
{"timestamp":"2017-12-12T18:33:21.167799+0100","flow_id":252694717632106,"pcap_cnt":3513,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57019,"proto":"UDP","dns":{"type":"answer","id":53887,"rcode":"NXDOMAIN","rrname":"nopabefipuq.eu"}}
{"timestamp":"2017-12-12T18:33:27.120106+0100","flow_id":23156633359658,"pcap_cnt":4786,"event_type":"dns","src_ip":"192.168.1.100","src_port":57728,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":12720,"rrname":"disisizazim.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.167799+0100","flow_id":252694717632106,"pcap_cnt":3513,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57019,"proto":"UDP","dns":{"type":"answer","id":53887,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:20.347648+0100","flow_id":1286598572396032,"pcap_cnt":3142,"event_type":"dns","src_ip":"192.168.1.100","src_port":59679,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":899,"rrname":"gahuzuzecyg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.028685+0100","flow_id":462450183270135,"pcap_cnt":4541,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58352,"proto":"UDP","dns":{"type":"answer","id":32107,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:17.781985+0100","flow_id":2066983392505246,"pcap_cnt":2707,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55250,"proto":"UDP","dns":{"type":"answer","id":64572,"rcode":"NXDOMAIN","rrname":"lymajaxecir.eu"}}
{"timestamp":"2017-12-12T18:33:26.042533+0100","flow_id":1140711418317334,"pcap_cnt":4546,"event_type":"dns","src_ip":"192.168.1.100","src_port":57281,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62080,"rrname":"citizufurah.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:20.273617+0100","flow_id":1383649799509954,"pcap_cnt":3107,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58107,"proto":"UDP","dns":{"type":"answer","id":9937,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:17.781985+0100","flow_id":2066983392505246,"pcap_cnt":2707,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55250,"proto":"UDP","dns":{"type":"answer","id":64572,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:26.042805+0100","flow_id":1140711418317334,"pcap_cnt":4547,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57281,"proto":"UDP","dns":{"type":"answer","id":62080,"rcode":"NXDOMAIN","rrname":"citizufurah.eu"}}
{"timestamp":"2017-12-12T18:33:20.287830+0100","flow_id":366502760965206,"pcap_cnt":3118,"event_type":"dns","src_ip":"192.168.1.100","src_port":65190,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":32167,"rrname":"puvugulynum.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.321358+0100","flow_id":1574758665742158,"pcap_cnt":3136,"event_type":"dns","src_ip":"192.168.1.100","src_port":58718,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":58506,"rrname":"gadekewexac.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.862556+0100","flow_id":1574290514323804,"pcap_cnt":3804,"event_type":"dns","src_ip":"192.168.1.100","src_port":52704,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":539,"rrname":"vocoqafajyw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.288151+0100","flow_id":366502760965206,"pcap_cnt":3119,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65190,"proto":"UDP","dns":{"type":"answer","id":32167,"rcode":"NXDOMAIN","rrname":"puvugulynum.eu"}}
{"timestamp":"2017-12-12T18:33:20.321695+0100","flow_id":1574758665742158,"pcap_cnt":3137,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58718,"proto":"UDP","dns":{"type":"answer","id":58506,"rcode":"NXDOMAIN","rrname":"gadekewexac.eu"}}
{"timestamp":"2017-12-12T18:33:20.312092+0100","flow_id":1731116950143513,"pcap_cnt":3133,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49977,"proto":"UDP","dns":{"type":"answer","id":58969,"rcode":"NXDOMAIN","rrname":"cicidutuwap.eu"}}
{"timestamp":"2017-12-12T18:33:21.863009+0100","flow_id":1574290514323804,"pcap_cnt":3805,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52704,"proto":"UDP","dns":{"type":"answer","id":539,"rcode":"NXDOMAIN","rrname":"vocoqafajyw.eu"}}
{"timestamp":"2017-12-12T18:33:19.857125+0100","flow_id":1749076355781377,"pcap_cnt":2911,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64135,"proto":"UDP","dns":{"type":"answer","id":35446,"rcode":"NXDOMAIN","rrname":"qeqohevazud.eu"}}
{"timestamp":"2017-12-12T18:33:21.863009+0100","flow_id":1574290514323804,"pcap_cnt":3805,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52704,"proto":"UDP","dns":{"type":"answer","id":539,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:19.857125+0100","flow_id":1749076355781377,"pcap_cnt":2911,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64135,"proto":"UDP","dns":{"type":"answer","id":35446,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:25.452284+0100","flow_id":1285144726333116,"pcap_cnt":4290,"event_type":"dns","src_ip":"192.168.1.100","src_port":52181,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44422,"rrname":"qegovyqaxuk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.493785+0100","flow_id":618305956448473,"pcap_cnt":4330,"event_type":"dns","src_ip":"192.168.1.100","src_port":64500,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4414,"rrname":"pupatololoz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.866545+0100","flow_id":1773954953984241,"pcap_cnt":3806,"event_type":"dns","src_ip":"192.168.1.100","src_port":51683,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36336,"rrname":"makujafiqyq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.452479+0100","flow_id":1285144726333116,"pcap_cnt":4291,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52181,"proto":"UDP","dns":{"type":"answer","id":44422,"rcode":"NXDOMAIN","rrname":"qegovyqaxuk.eu"}}
{"timestamp":"2017-12-12T18:33:25.493983+0100","flow_id":618305956448473,"pcap_cnt":4331,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64500,"proto":"UDP","dns":{"type":"answer","id":4414,"rcode":"NXDOMAIN","rrname":"pupatololoz.eu"}}
{"timestamp":"2017-12-12T18:33:28.110350+0100","flow_id":117375330987536,"pcap_cnt":5249,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63955,"proto":"UDP","dns":{"type":"answer","id":30122,"rcode":"NXDOMAIN","rrname":"kemelixakyz.eu"}}
{"timestamp":"2017-12-12T18:33:25.493983+0100","flow_id":618305956448473,"pcap_cnt":4331,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64500,"proto":"UDP","dns":{"type":"answer","id":4414,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:21.162588+0100","flow_id":977365222128412,"pcap_cnt":3504,"event_type":"dns","src_ip":"192.168.1.100","src_port":56808,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":56749,"rrname":"lyxonadituw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.110350+0100","flow_id":117375330987536,"pcap_cnt":5249,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63955,"proto":"UDP","dns":{"type":"answer","id":30122,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:20.820166+0100","flow_id":1656844080677500,"pcap_cnt":3341,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58636,"proto":"UDP","dns":{"type":"answer","id":37526,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:20.015696+0100","flow_id":771866069318720,"pcap_cnt":2979,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52591,"proto":"UDP","dns":{"type":"answer","id":46630,"rcode":"NXDOMAIN","rrname":"dimoxuzynup.eu"}}
{"timestamp":"2017-12-12T18:33:21.189574+0100","flow_id":1118807085147270,"pcap_cnt":3524,"event_type":"dns","src_ip":"192.168.1.100","src_port":61769,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":680,"rrname":"tucebygodym.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.826877+0100","flow_id":2198937672981711,"pcap_cnt":3791,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59159,"proto":"UDP","dns":{"type":"answer","id":18775,"rcode":"NXDOMAIN","rrname":"fokovisekyz.eu"}}
{"timestamp":"2017-12-12T18:33:20.015696+0100","flow_id":771866069318720,"pcap_cnt":2979,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52591,"proto":"UDP","dns":{"type":"answer","id":46630,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:21.159528+0100","flow_id":665050232745768,"pcap_cnt":3502,"event_type":"dns","src_ip":"192.168.1.100","src_port":65243,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25538,"rrname":"xuxyxynahop.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.826877+0100","flow_id":2198937672981711,"pcap_cnt":3791,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59159,"proto":"UDP","dns":{"type":"answer","id":18775,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:26.142041+0100","flow_id":1974304441248189,"pcap_cnt":4601,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58642,"proto":"UDP","dns":{"type":"answer","id":1836,"rcode":"NXDOMAIN","rrname":"fotyfahokab.eu"}}
{"timestamp":"2017-12-12T18:33:22.301171+0100","flow_id":1355556419966781,"pcap_cnt":3985,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57435,"proto":"UDP","dns":{"type":"answer","id":60382,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":595}}
{"timestamp":"2017-12-12T18:33:21.159801+0100","flow_id":665050232745768,"pcap_cnt":3503,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65243,"proto":"UDP","dns":{"type":"answer","id":25538,"rcode":"NXDOMAIN","rrname":"xuxyxynahop.eu"}}
{"timestamp":"2017-12-12T18:33:19.717374+0100","flow_id":1496583818440989,"pcap_cnt":2839,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62783,"proto":"UDP","dns":{"type":"answer","id":21290,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:21.159801+0100","flow_id":665050232745768,"pcap_cnt":3503,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65243,"proto":"UDP","dns":{"type":"answer","id":25538,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:22.696956+0100","flow_id":745379006161532,"pcap_cnt":4126,"event_type":"dns","src_ip":"192.168.1.100","src_port":49845,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63038,"rrname":"jeluganusog.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.056845+0100","flow_id":203674108353745,"pcap_cnt":2993,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50348,"proto":"UDP","dns":{"type":"answer","id":49908,"rcode":"NXDOMAIN","rrname":"noveditifan.eu"}}
{"timestamp":"2017-12-12T18:33:19.933829+0100","flow_id":1360364635635653,"pcap_cnt":2938,"event_type":"dns","src_ip":"192.168.1.100","src_port":60415,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1847,"rrname":"jefecajazif.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.697251+0100","flow_id":745379006161532,"pcap_cnt":4127,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49845,"proto":"UDP","dns":{"type":"answer","id":63038,"rcode":"NXDOMAIN","rrname":"jeluganusog.eu"}}
{"timestamp":"2017-12-12T18:33:20.056845+0100","flow_id":203674108353745,"pcap_cnt":2993,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50348,"proto":"UDP","dns":{"type":"answer","id":49908,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:22.200607+0100","flow_id":539905623199329,"pcap_cnt":3949,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61845,"proto":"UDP","dns":{"type":"answer","id":5515,"rcode":"NXDOMAIN","rrname":"dikolobeliw.eu"}}
{"timestamp":"2017-12-12T18:33:20.058637+0100","flow_id":412151820903693,"pcap_cnt":2994,"event_type":"dns","src_ip":"192.168.1.100","src_port":53627,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13871,"rrname":"maxuwitalag.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.872105+0100","flow_id":1929235201609385,"pcap_cnt":3808,"event_type":"dns","src_ip":"192.168.1.100","src_port":57367,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19882,"rrname":"jejigenitos.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.321488+0100","flow_id":217916219713119,"pcap_cnt":2448,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52903,"proto":"UDP","dns":{"type":"answer","id":18621,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:27.120397+0100","flow_id":23156633359658,"pcap_cnt":4787,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57728,"proto":"UDP","dns":{"type":"answer","id":12720,"rcode":"NXDOMAIN","rrname":"disisizazim.eu"}}
{"timestamp":"2017-12-12T18:33:21.196796+0100","flow_id":353300031537340,"pcap_cnt":3530,"event_type":"dns","src_ip":"192.168.1.100","src_port":62228,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":3545,"rrname":"puzulugelyh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.347958+0100","flow_id":1286598572396032,"pcap_cnt":3143,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59679,"proto":"UDP","dns":{"type":"answer","id":899,"rcode":"NXDOMAIN","rrname":"gahuzuzecyg.eu"}}
{"timestamp":"2017-12-12T18:33:22.126691+0100","flow_id":591477443063263,"pcap_cnt":3917,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52156,"proto":"UDP","dns":{"type":"answer","id":65354,"rcode":"NXDOMAIN","rrname":"gatequsiryg.eu"}}
{"timestamp":"2017-12-12T18:33:20.347958+0100","flow_id":1286598572396032,"pcap_cnt":3143,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59679,"proto":"UDP","dns":{"type":"answer","id":899,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:26.042805+0100","flow_id":1140711418317334,"pcap_cnt":4547,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57281,"proto":"UDP","dns":{"type":"answer","id":62080,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":577}}
{"timestamp":"2017-12-12T18:33:22.126691+0100","flow_id":591477443063263,"pcap_cnt":3917,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52156,"proto":"UDP","dns":{"type":"answer","id":65354,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:20.187713+0100","flow_id":524387906280503,"pcap_cnt":3063,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50705,"proto":"UDP","dns":{"type":"answer","id":35136,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:20.104151+0100","flow_id":1989989661447622,"pcap_cnt":3021,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52964,"proto":"UDP","dns":{"type":"answer","id":11745,"rcode":"NXDOMAIN","rrname":"nomugacogyk.eu"}}
{"timestamp":"2017-12-12T18:33:20.288151+0100","flow_id":366502760965206,"pcap_cnt":3119,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65190,"proto":"UDP","dns":{"type":"answer","id":32167,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":589}}
{"timestamp":"2017-12-12T18:33:22.283071+0100","flow_id":694655441850837,"pcap_cnt":3983,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53378,"proto":"UDP","dns":{"type":"answer","id":2640,"rcode":"NXDOMAIN","rrname":"volekymyvum.eu"}}
{"timestamp":"2017-12-12T18:33:22.164053+0100","flow_id":22686334091477,"pcap_cnt":3934,"event_type":"dns","src_ip":"192.168.1.100","src_port":65381,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6172,"rrname":"qeqilivejor.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.283071+0100","flow_id":694655441850837,"pcap_cnt":3983,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53378,"proto":"UDP","dns":{"type":"answer","id":2640,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":595}}
{"timestamp":"2017-12-12T18:33:20.305881+0100","flow_id":1747850142722777,"pcap_cnt":3126,"event_type":"dns","src_ip":"192.168.1.100","src_port":53574,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36148,"rrname":"xubukyrecax.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.164377+0100","flow_id":22686334091477,"pcap_cnt":3935,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65381,"proto":"UDP","dns":{"type":"answer","id":6172,"rcode":"NXDOMAIN","rrname":"qeqilivejor.eu"}}
{"timestamp":"2017-12-12T18:33:21.042530+0100","flow_id":1369304610219215,"pcap_cnt":3451,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49427,"proto":"UDP","dns":{"type":"answer","id":36982,"rcode":"NXDOMAIN","rrname":"nomuxytirix.eu"}}
{"timestamp":"2017-12-12T18:33:22.164377+0100","flow_id":22686334091477,"pcap_cnt":3935,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65381,"proto":"UDP","dns":{"type":"answer","id":6172,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:17.038527+0100","flow_id":233934300222840,"pcap_cnt":2295,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51802,"proto":"UDP","dns":{"type":"answer","id":49804,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:21.042530+0100","flow_id":1369304610219215,"pcap_cnt":3451,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49427,"proto":"UDP","dns":{"type":"answer","id":36982,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:21.866890+0100","flow_id":1773954953984241,"pcap_cnt":3807,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51683,"proto":"UDP","dns":{"type":"answer","id":36336,"rcode":"NXDOMAIN","rrname":"makujafiqyq.eu"}}
{"timestamp":"2017-12-12T18:33:22.381116+0100","flow_id":1933654723055804,"pcap_cnt":4026,"event_type":"dns","src_ip":"192.168.1.100","src_port":56097,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45634,"rrname":"dikoniwudim.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.227772+0100","flow_id":271122274810029,"pcap_cnt":3541,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60042,"proto":"UDP","dns":{"type":"answer","id":31570,"rcode":"NXDOMAIN","rrname":"gadyvuhagyn.eu"}}
{"timestamp":"2017-12-12T18:33:21.866890+0100","flow_id":1773954953984241,"pcap_cnt":3807,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51683,"proto":"UDP","dns":{"type":"answer","id":36336,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:21.162866+0100","flow_id":977365222128412,"pcap_cnt":3505,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56808,"proto":"UDP","dns":{"type":"answer","id":56749,"rcode":"NXDOMAIN","rrname":"lyxonadituw.eu"}}
{"timestamp":"2017-12-12T18:33:21.227772+0100","flow_id":271122274810029,"pcap_cnt":3541,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60042,"proto":"UDP","dns":{"type":"answer","id":31570,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:28.176613+0100","flow_id":1247535845388773,"pcap_cnt":5274,"event_type":"dns","src_ip":"192.168.1.100","src_port":61976,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50535,"rrname":"foguhosecib.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.025466+0100","flow_id":1914022426167536,"pcap_cnt":3864,"event_type":"dns","src_ip":"192.168.1.100","src_port":63165,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37522,"rrname":"kejepujajeg.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:21.162866+0100","flow_id":977365222128412,"pcap_cnt":3505,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56808,"proto":"UDP","dns":{"type":"answer","id":56749,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:21.189951+0100","flow_id":1118807085147270,"pcap_cnt":3525,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61769,"proto":"UDP","dns":{"type":"answer","id":680,"rcode":"NXDOMAIN","rrname":"tucebygodym.eu"}}
{"timestamp":"2017-12-12T18:33:20.089993+0100","flow_id":1076138732445577,"pcap_cnt":3004,"event_type":"dns","src_ip":"192.168.1.100","src_port":62175,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":12295,"rrname":"tufydopogab.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.640836+0100","flow_id":253566596072967,"pcap_cnt":4115,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57119,"proto":"UDP","dns":{"type":"answer","id":6241,"rcode":"NXDOMAIN","rrname":"ryhoqagoxyr.eu"}}
{"timestamp":"2017-12-12T18:33:22.025770+0100","flow_id":1914022426167536,"pcap_cnt":3865,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63165,"proto":"UDP","dns":{"type":"answer","id":37522,"rcode":"NXDOMAIN","rrname":"kejepujajeg.eu"}}
{"timestamp":"2017-12-12T18:33:21.404480+0100","flow_id":1300501381590016,"pcap_cnt":3626,"event_type":"dns","src_ip":"192.168.1.100","src_port":63131,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42996,"rrname":"novopicahal.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.882992+0100","flow_id":1288731023735088,"pcap_cnt":3812,"event_type":"dns","src_ip":"192.168.1.100","src_port":55079,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47370,"rrname":"kefatenahic.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.189951+0100","flow_id":1118807085147270,"pcap_cnt":3525,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61769,"proto":"UDP","dns":{"type":"answer","id":680,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:21.258249+0100","flow_id":2069659157393609,"pcap_cnt":3556,"event_type":"dns","src_ip":"192.168.1.100","src_port":53036,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5130,"rrname":"cicokokyvyf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.934136+0100","flow_id":1360364635635653,"pcap_cnt":2939,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60415,"proto":"UDP","dns":{"type":"answer","id":1847,"rcode":"NXDOMAIN","rrname":"jefecajazif.eu"}}
{"timestamp":"2017-12-12T18:33:21.404800+0100","flow_id":1300501381590016,"pcap_cnt":3627,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63131,"proto":"UDP","dns":{"type":"answer","id":42996,"rcode":"NXDOMAIN","rrname":"novopicahal.eu"}}
{"timestamp":"2017-12-12T18:33:21.625757+0100","flow_id":1637158098144349,"pcap_cnt":3720,"event_type":"dns","src_ip":"192.168.1.100","src_port":54602,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":3486,"rrname":"qeqeqalitek.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.934136+0100","flow_id":1360364635635653,"pcap_cnt":2939,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60415,"proto":"UDP","dns":{"type":"answer","id":1847,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:22.200607+0100","flow_id":539905623199329,"pcap_cnt":3949,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61845,"proto":"UDP","dns":{"type":"answer","id":5515,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":595}}
{"timestamp":"2017-12-12T18:33:20.058931+0100","flow_id":412151820903693,"pcap_cnt":2995,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53627,"proto":"UDP","dns":{"type":"answer","id":13871,"rcode":"NXDOMAIN","rrname":"maxuwitalag.eu"}}
{"timestamp":"2017-12-12T18:33:21.626070+0100","flow_id":1637158098144349,"pcap_cnt":3721,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54602,"proto":"UDP","dns":{"type":"answer","id":3486,"rcode":"NXDOMAIN","rrname":"qeqeqalitek.eu"}}
{"timestamp":"2017-12-12T18:33:20.090904+0100","flow_id":161742342611736,"pcap_cnt":3006,"event_type":"dns","src_ip":"192.168.1.100","src_port":56150,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":57467,"rrname":"pupiwopexof.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.872442+0100","flow_id":1929235201609385,"pcap_cnt":3809,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57367,"proto":"UDP","dns":{"type":"answer","id":19882,"rcode":"NXDOMAIN","rrname":"jejigenitos.eu"}}
{"timestamp":"2017-12-12T18:33:17.343680+0100","flow_id":1247780657774208,"pcap_cnt":2466,"event_type":"dns","src_ip":"192.168.1.100","src_port":64224,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5861,"rrname":"qeburuvenij.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.120397+0100","flow_id":23156633359658,"pcap_cnt":4787,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57728,"proto":"UDP","dns":{"type":"answer","id":12720,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:20.091182+0100","flow_id":161742342611736,"pcap_cnt":3007,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56150,"proto":"UDP","dns":{"type":"answer","id":57467,"rcode":"NXDOMAIN","rrname":"pupiwopexof.eu"}}
{"timestamp":"2017-12-12T18:33:21.197055+0100","flow_id":353300031537340,"pcap_cnt":3531,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62228,"proto":"UDP","dns":{"type":"answer","id":3545,"rcode":"NXDOMAIN","rrname":"puzulugelyh.eu"}}
{"timestamp":"2017-12-12T18:33:26.330508+0100","flow_id":1819402150742796,"pcap_cnt":4684,"event_type":"dns","src_ip":"192.168.1.100","src_port":59737,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14681,"rrname":"xubysaxywil.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.091182+0100","flow_id":161742342611736,"pcap_cnt":3007,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56150,"proto":"UDP","dns":{"type":"answer","id":57467,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:17.343928+0100","flow_id":1247780657774208,"pcap_cnt":2467,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64224,"proto":"UDP","dns":{"type":"answer","id":5861,"rcode":"NXDOMAIN","rrname":"qeburuvenij.eu"}}
{"timestamp":"2017-12-12T18:33:20.535705+0100","flow_id":510832989449369,"pcap_cnt":3230,"event_type":"dns","src_ip":"192.168.1.100","src_port":58876,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":3341,"rrname":"tufamugevih.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.312092+0100","flow_id":1731116950143513,"pcap_cnt":3133,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49977,"proto":"UDP","dns":{"type":"answer","id":58969,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:17.343928+0100","flow_id":1247780657774208,"pcap_cnt":2467,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64224,"proto":"UDP","dns":{"type":"answer","id":5861,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:20.120880+0100","flow_id":1258127234226224,"pcap_cnt":3046,"event_type":"dns","src_ip":"192.168.1.100","src_port":52953,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36131,"rrname":"tujigevojyj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.870250+0100","flow_id":2108032542525290,"pcap_cnt":2916,"event_type":"dns","src_ip":"192.168.1.100","src_port":52419,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33131,"rrname":"keryginebyp.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.306177+0100","flow_id":1747850142722777,"pcap_cnt":3127,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53574,"proto":"UDP","dns":{"type":"answer","id":36148,"rcode":"NXDOMAIN","rrname":"xubukyrecax.eu"}}
{"timestamp":"2017-12-12T18:33:20.121151+0100","flow_id":1258127234226224,"pcap_cnt":3047,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52953,"proto":"UDP","dns":{"type":"answer","id":36131,"rcode":"NXDOMAIN","rrname":"tujigevojyj.eu"}}
{"timestamp":"2017-12-12T18:33:25.452479+0100","flow_id":1285144726333116,"pcap_cnt":4291,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52181,"proto":"UDP","dns":{"type":"answer","id":44422,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:19.870579+0100","flow_id":2108032542525290,"pcap_cnt":2917,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52419,"proto":"UDP","dns":{"type":"answer","id":33131,"rcode":"NXDOMAIN","rrname":"keryginebyp.eu"}}
{"timestamp":"2017-12-12T18:33:25.589549+0100","flow_id":2236769891681366,"pcap_cnt":4368,"event_type":"dns","src_ip":"192.168.1.100","src_port":59823,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43827,"rrname":"disumesenyv.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:19.870579+0100","flow_id":2108032542525290,"pcap_cnt":2917,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52419,"proto":"UDP","dns":{"type":"answer","id":33131,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:21.279436+0100","flow_id":137782867608460,"pcap_cnt":3562,"event_type":"dns","src_ip":"192.168.1.100","src_port":63100,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1506,"rrname":"gahunawahik.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.286735+0100","flow_id":4752698007567,"pcap_cnt":3116,"event_type":"dns","src_ip":"192.168.1.100","src_port":62034,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":12295,"rrname":"tunyzylazuj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.552229+0100","flow_id":100356522667103,"pcap_cnt":4089,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52280,"proto":"UDP","dns":{"type":"answer","id":310,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":554}}
{"timestamp":"2017-12-12T18:33:21.279745+0100","flow_id":137782867608460,"pcap_cnt":3563,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63100,"proto":"UDP","dns":{"type":"answer","id":1506,"rcode":"NXDOMAIN","rrname":"gahunawahik.eu"}}
{"timestamp":"2017-12-12T18:33:20.286979+0100","flow_id":4752698007567,"pcap_cnt":3117,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62034,"proto":"UDP","dns":{"type":"answer","id":12295,"rcode":"NXDOMAIN","rrname":"tunyzylazuj.eu"}}
{"timestamp":"2017-12-12T18:33:22.601673+0100","flow_id":1201311259438665,"pcap_cnt":4100,"event_type":"dns","src_ip":"192.168.1.100","src_port":65132,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6345,"rrname":"tupazivenom.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.176861+0100","flow_id":1247535845388773,"pcap_cnt":5275,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61976,"proto":"UDP","dns":{"type":"answer","id":50535,"rcode":"NXDOMAIN","rrname":"foguhosecib.eu"}}
{"timestamp":"2017-12-12T18:33:20.286979+0100","flow_id":4752698007567,"pcap_cnt":3117,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62034,"proto":"UDP","dns":{"type":"answer","id":12295,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:22.146253+0100","flow_id":1400131738024491,"pcap_cnt":3925,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59409,"proto":"UDP","dns":{"type":"answer","id":64075,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:22.640836+0100","flow_id":253566596072967,"pcap_cnt":4115,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57119,"proto":"UDP","dns":{"type":"answer","id":6241,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:20.350509+0100","flow_id":1303567988185389,"pcap_cnt":3146,"event_type":"dns","src_ip":"192.168.1.100","src_port":55327,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8884,"rrname":"kepatixidyg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.025770+0100","flow_id":1914022426167536,"pcap_cnt":3865,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63165,"proto":"UDP","dns":{"type":"answer","id":37522,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:22.308832+0100","flow_id":724464662918752,"pcap_cnt":3992,"event_type":"dns","src_ip":"192.168.1.100","src_port":61034,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37384,"rrname":"tuwiduqotug.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.090264+0100","flow_id":1076138732445577,"pcap_cnt":3005,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62175,"proto":"UDP","dns":{"type":"answer","id":12295,"rcode":"NXDOMAIN","rrname":"tufydopogab.eu"}}
{"timestamp":"2017-12-12T18:33:25.386063+0100","flow_id":2133886098596879,"pcap_cnt":4260,"event_type":"dns","src_ip":"192.168.1.100","src_port":53681,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":52963,"rrname":"cinivamolil.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.697251+0100","flow_id":745379006161532,"pcap_cnt":4127,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49845,"proto":"UDP","dns":{"type":"answer","id":63038,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:21.883347+0100","flow_id":1288731023735088,"pcap_cnt":3813,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55079,"proto":"UDP","dns":{"type":"answer","id":47370,"rcode":"NXDOMAIN","rrname":"kefatenahic.eu"}}
{"timestamp":"2017-12-12T18:33:22.309069+0100","flow_id":724464662918752,"pcap_cnt":3993,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61034,"proto":"UDP","dns":{"type":"answer","id":37384,"rcode":"NXDOMAIN","rrname":"tuwiduqotug.eu"}}
{"timestamp":"2017-12-12T18:33:25.386558+0100","flow_id":2133886098596879,"pcap_cnt":4261,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53681,"proto":"UDP","dns":{"type":"answer","id":52963,"rcode":"NXDOMAIN","rrname":"cinivamolil.eu"}}
{"timestamp":"2017-12-12T18:33:21.883347+0100","flow_id":1288731023735088,"pcap_cnt":3813,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55079,"proto":"UDP","dns":{"type":"answer","id":47370,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:20.058931+0100","flow_id":412151820903693,"pcap_cnt":2995,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53627,"proto":"UDP","dns":{"type":"answer","id":13871,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:21.626070+0100","flow_id":1637158098144349,"pcap_cnt":3721,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54602,"proto":"UDP","dns":{"type":"answer","id":3486,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:22.455842+0100","flow_id":1390515306296482,"pcap_cnt":4048,"event_type":"dns","src_ip":"192.168.1.100","src_port":50303,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6178,"rrname":"cicaratupig.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.872442+0100","flow_id":1929235201609385,"pcap_cnt":3809,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57367,"proto":"UDP","dns":{"type":"answer","id":19882,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:20.176674+0100","flow_id":1264565390193186,"pcap_cnt":3056,"event_type":"dns","src_ip":"192.168.1.100","src_port":57218,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13349,"rrname":"rycucugisix.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.907293+0100","flow_id":769037833279112,"pcap_cnt":3384,"event_type":"dns","src_ip":"192.168.1.100","src_port":59830,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43016,"rrname":"kepicynezam.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:20.321695+0100","flow_id":1574758665742158,"pcap_cnt":3137,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58718,"proto":"UDP","dns":{"type":"answer","id":58506,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:22.274631+0100","flow_id":2243401321951431,"pcap_cnt":3980,"event_type":"dns","src_ip":"192.168.1.100","src_port":63770,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50409,"rrname":"gahipyhopax.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.104151+0100","flow_id":1989989661447622,"pcap_cnt":3021,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52964,"proto":"UDP","dns":{"type":"answer","id":11745,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:21.966855+0100","flow_id":680585129186402,"pcap_cnt":3838,"event_type":"dns","src_ip":"192.168.1.100","src_port":57065,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6577,"rrname":"dimasyhageh.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:20.907555+0100","flow_id":769037833279112,"pcap_cnt":3385,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59830,"proto":"UDP","dns":{"type":"answer","id":43016,"rcode":"NXDOMAIN","rrname":"kepicynezam.eu"}}
{"timestamp":"2017-12-12T18:33:22.274901+0100","flow_id":2243401321951431,"pcap_cnt":3981,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63770,"proto":"UDP","dns":{"type":"answer","id":50409,"rcode":"NXDOMAIN","rrname":"gahipyhopax.eu"}}
{"timestamp":"2017-12-12T18:33:20.111497+0100","flow_id":178423995609993,"pcap_cnt":3030,"event_type":"dns","src_ip":"192.168.1.100","src_port":57978,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36475,"rrname":"jecoqedevod.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.316115+0100","flow_id":1487008188912339,"pcap_cnt":3134,"event_type":"dns","src_ip":"192.168.1.100","src_port":64071,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18663,"rrname":"dikiwewutav.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.121151+0100","flow_id":1258127234226224,"pcap_cnt":3047,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52953,"proto":"UDP","dns":{"type":"answer","id":36131,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:20.306177+0100","flow_id":1747850142722777,"pcap_cnt":3127,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53574,"proto":"UDP","dns":{"type":"answer","id":36148,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:20.316389+0100","flow_id":1487008188912339,"pcap_cnt":3135,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64071,"proto":"UDP","dns":{"type":"answer","id":18663,"rcode":"NXDOMAIN","rrname":"dikiwewutav.eu"}}
{"timestamp":"2017-12-12T18:33:25.471081+0100","flow_id":923611559178281,"pcap_cnt":4304,"event_type":"dns","src_ip":"192.168.1.100","src_port":55214,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":55297,"rrname":"kejycirenuh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.369419+0100","flow_id":937029036712715,"pcap_cnt":3152,"event_type":"dns","src_ip":"192.168.1.100","src_port":53605,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37805,"rrname":"xuqiloxyvyf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.589823+0100","flow_id":2236769891681366,"pcap_cnt":4369,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59823,"proto":"UDP","dns":{"type":"answer","id":43827,"rcode":"NXDOMAIN","rrname":"disumesenyv.eu"}}
{"timestamp":"2017-12-12T18:33:25.471359+0100","flow_id":923611559178281,"pcap_cnt":4305,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55214,"proto":"UDP","dns":{"type":"answer","id":55297,"rcode":"NXDOMAIN","rrname":"kejycirenuh.eu"}}
{"timestamp":"2017-12-12T18:33:25.589823+0100","flow_id":2236769891681366,"pcap_cnt":4369,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59823,"proto":"UDP","dns":{"type":"answer","id":43827,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:21.071263+0100","flow_id":1613016086943327,"pcap_cnt":3462,"event_type":"dns","src_ip":"192.168.1.100","src_port":64602,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25201,"rrname":"norococitef.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.279745+0100","flow_id":137782867608460,"pcap_cnt":3563,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63100,"proto":"UDP","dns":{"type":"answer","id":1506,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:26.142041+0100","flow_id":1974304441248189,"pcap_cnt":4601,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58642,"proto":"UDP","dns":{"type":"answer","id":1836,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:22.601932+0100","flow_id":1201311259438665,"pcap_cnt":4101,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65132,"proto":"UDP","dns":{"type":"answer","id":6345,"rcode":"NXDOMAIN","rrname":"tupazivenom.eu"}}
{"timestamp":"2017-12-12T18:33:28.176861+0100","flow_id":1247535845388773,"pcap_cnt":5275,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61976,"proto":"UDP","dns":{"type":"answer","id":50535,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:22.601932+0100","flow_id":1201311259438665,"pcap_cnt":4101,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65132,"proto":"UDP","dns":{"type":"answer","id":6345,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":554}}
{"timestamp":"2017-12-12T18:33:20.627520+0100","flow_id":1484405438714355,"pcap_cnt":3271,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57782,"proto":"UDP","dns":{"type":"answer","id":14266,"rcode":"NXDOMAIN","rrname":"cihocytodoh.eu"}}
{"timestamp":"2017-12-12T18:33:20.301873+0100","flow_id":1078412917643761,"pcap_cnt":3125,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57661,"proto":"UDP","dns":{"type":"answer","id":53968,"rcode":"NXDOMAIN","rrname":"lymevyrajas.eu"}}
{"timestamp":"2017-12-12T18:33:20.090264+0100","flow_id":1076138732445577,"pcap_cnt":3005,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62175,"proto":"UDP","dns":{"type":"answer","id":12295,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:22.103206+0100","flow_id":1995901684060966,"pcap_cnt":3906,"event_type":"dns","src_ip":"192.168.1.100","src_port":56782,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30982,"rrname":"kevigyxelox.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.350903+0100","flow_id":1303567988185389,"pcap_cnt":3147,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55327,"proto":"UDP","dns":{"type":"answer","id":8884,"rcode":"NXDOMAIN","rrname":"kepatixidyg.eu"}}
{"timestamp":"2017-12-12T18:33:19.621673+0100","flow_id":1247722675862412,"pcap_cnt":2795,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57402,"proto":"UDP","dns":{"type":"answer","id":7650,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:21.258595+0100","flow_id":2069659157393609,"pcap_cnt":3557,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53036,"proto":"UDP","dns":{"type":"answer","id":5130,"rcode":"NXDOMAIN","rrname":"cicokokyvyf.eu"}}
{"timestamp":"2017-12-12T18:33:20.350903+0100","flow_id":1303567988185389,"pcap_cnt":3147,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55327,"proto":"UDP","dns":{"type":"answer","id":8884,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:22.309069+0100","flow_id":724464662918752,"pcap_cnt":3993,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61034,"proto":"UDP","dns":{"type":"answer","id":37384,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":595}}
{"timestamp":"2017-12-12T18:33:22.103477+0100","flow_id":1995901684060966,"pcap_cnt":3907,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56782,"proto":"UDP","dns":{"type":"answer","id":30982,"rcode":"NXDOMAIN","rrname":"kevigyxelox.eu"}}
{"timestamp":"2017-12-12T18:33:21.062485+0100","flow_id":21417171219477,"pcap_cnt":3458,"event_type":"dns","src_ip":"192.168.1.100","src_port":63374,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47868,"rrname":"qexetupezix.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.103477+0100","flow_id":1995901684060966,"pcap_cnt":3907,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56782,"proto":"UDP","dns":{"type":"answer","id":30982,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:22.008725+0100","flow_id":349851172872725,"pcap_cnt":3858,"event_type":"dns","src_ip":"192.168.1.100","src_port":57165,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64577,"rrname":"jelojujopen.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.197055+0100","flow_id":353300031537340,"pcap_cnt":3531,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62228,"proto":"UDP","dns":{"type":"answer","id":3545,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:27.298971+0100","flow_id":1985406931800027,"pcap_cnt":4878,"event_type":"dns","src_ip":"192.168.1.100","src_port":54570,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":24288,"rrname":"nojotomipel.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.009058+0100","flow_id":349851172872725,"pcap_cnt":3859,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57165,"proto":"UDP","dns":{"type":"answer","id":64577,"rcode":"NXDOMAIN","rrname":"jelojujopen.eu"}}
{"timestamp":"2017-12-12T18:33:21.325839+0100","flow_id":2152393112315890,"pcap_cnt":3580,"event_type":"dns","src_ip":"192.168.1.100","src_port":53022,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17173,"rrname":"purebupycug.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:22.456146+0100","flow_id":1390515306296482,"pcap_cnt":4049,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50303,"proto":"UDP","dns":{"type":"answer","id":6178,"rcode":"NXDOMAIN","rrname":"cicaratupig.eu"}}
{"timestamp":"2017-12-12T18:33:20.514383+0100","flow_id":1866172196772175,"pcap_cnt":3218,"event_type":"dns","src_ip":"192.168.1.100","src_port":59786,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38219,"rrname":"mavyvomuqal.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.330879+0100","flow_id":1819402150742796,"pcap_cnt":4685,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59737,"proto":"UDP","dns":{"type":"answer","id":14681,"rcode":"NXDOMAIN","rrname":"xubysaxywil.eu"}}
{"timestamp":"2017-12-12T18:33:27.299273+0100","flow_id":1985406931800027,"pcap_cnt":4879,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54570,"proto":"UDP","dns":{"type":"answer","id":24288,"rcode":"NXDOMAIN","rrname":"nojotomipel.eu"}}
{"timestamp":"2017-12-12T18:33:20.486260+0100","flow_id":1830704356813684,"pcap_cnt":3200,"event_type":"dns","src_ip":"192.168.1.100","src_port":62037,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":20326,"rrname":"fobirybakes.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.299273+0100","flow_id":1985406931800027,"pcap_cnt":4879,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54570,"proto":"UDP","dns":{"type":"answer","id":24288,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:21.967168+0100","flow_id":680585129186402,"pcap_cnt":3839,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57065,"proto":"UDP","dns":{"type":"answer","id":6577,"rcode":"NXDOMAIN","rrname":"dimasyhageh.eu"}}
{"timestamp":"2017-12-12T18:33:27.388393+0100","flow_id":724524792802601,"pcap_cnt":4918,"event_type":"dns","src_ip":"192.168.1.100","src_port":57588,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31211,"rrname":"vonokutuwah.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.486581+0100","flow_id":1830704356813684,"pcap_cnt":3201,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62037,"proto":"UDP","dns":{"type":"answer","id":20326,"rcode":"NXDOMAIN","rrname":"fobirybakes.eu"}}
{"timestamp":"2017-12-12T18:33:22.274901+0100","flow_id":2243401321951431,"pcap_cnt":3981,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63770,"proto":"UDP","dns":{"type":"answer","id":50409,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":595}}
{"timestamp":"2017-12-12T18:33:27.388735+0100","flow_id":724524792802601,"pcap_cnt":4919,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57588,"proto":"UDP","dns":{"type":"answer","id":31211,"rcode":"NXDOMAIN","rrname":"vonokutuwah.eu"}}
{"timestamp":"2017-12-12T18:33:20.111758+0100","flow_id":178423995609993,"pcap_cnt":3031,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57978,"proto":"UDP","dns":{"type":"answer","id":36475,"rcode":"NXDOMAIN","rrname":"jecoqedevod.eu"}}
{"timestamp":"2017-12-12T18:33:22.864053+0100","flow_id":457090063806261,"pcap_cnt":4184,"event_type":"dns","src_ip":"192.168.1.100","src_port":49436,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":24665,"rrname":"lyvitexemod.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.056817+0100","flow_id":1414431831350769,"pcap_cnt":2298,"event_type":"dns","src_ip":"192.168.1.100","src_port":62044,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63167,"rrname":"makiwemihiw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.111758+0100","flow_id":178423995609993,"pcap_cnt":3031,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57978,"proto":"UDP","dns":{"type":"answer","id":36475,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:20.154991+0100","flow_id":44919232159087,"pcap_cnt":3050,"event_type":"dns","src_ip":"192.168.1.100","src_port":57191,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19723,"rrname":"norijyfohop.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.316389+0100","flow_id":1487008188912339,"pcap_cnt":3135,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64071,"proto":"UDP","dns":{"type":"answer","id":18663,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":589}}
{"timestamp":"2017-12-12T18:33:17.057077+0100","flow_id":1414431831350769,"pcap_cnt":2299,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62044,"proto":"UDP","dns":{"type":"answer","id":63167,"rcode":"NXDOMAIN","rrname":"makiwemihiw.eu"}}
{"timestamp":"2017-12-12T18:33:20.155261+0100","flow_id":44919232159087,"pcap_cnt":3051,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57191,"proto":"UDP","dns":{"type":"answer","id":19723,"rcode":"NXDOMAIN","rrname":"norijyfohop.eu"}}
{"timestamp":"2017-12-12T18:33:20.596012+0100","flow_id":1889412264761388,"pcap_cnt":3254,"event_type":"dns","src_ip":"192.168.1.100","src_port":55880,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43861,"rrname":"fotasawezak.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.155261+0100","flow_id":44919232159087,"pcap_cnt":3051,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57191,"proto":"UDP","dns":{"type":"answer","id":19723,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:25.471359+0100","flow_id":923611559178281,"pcap_cnt":4305,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55214,"proto":"UDP","dns":{"type":"answer","id":55297,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:20.596244+0100","flow_id":1889412264761388,"pcap_cnt":3255,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55880,"proto":"UDP","dns":{"type":"answer","id":43861,"rcode":"NXDOMAIN","rrname":"fotasawezak.eu"}}
{"timestamp":"2017-12-12T18:33:20.197565+0100","flow_id":1328032121881533,"pcap_cnt":3066,"event_type":"dns","src_ip":"192.168.1.100","src_port":51885,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":3661,"rrname":"jenerunybem.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.632680+0100","flow_id":1642724376029032,"pcap_cnt":4378,"event_type":"dns","src_ip":"192.168.1.100","src_port":59028,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":22348,"rrname":"kevimudyqec.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.071594+0100","flow_id":1613016086943327,"pcap_cnt":3463,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64602,"proto":"UDP","dns":{"type":"answer","id":25201,"rcode":"NXDOMAIN","rrname":"norococitef.eu"}}
{"timestamp":"2017-12-12T18:33:20.197822+0100","flow_id":1328032121881533,"pcap_cnt":3067,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51885,"proto":"UDP","dns":{"type":"answer","id":3661,"rcode":"NXDOMAIN","rrname":"jenerunybem.eu"}}
{"timestamp":"2017-12-12T18:33:21.071594+0100","flow_id":1613016086943327,"pcap_cnt":3463,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64602,"proto":"UDP","dns":{"type":"answer","id":25201,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:28.188409+0100","flow_id":1056049023475705,"pcap_cnt":5278,"event_type":"dns","src_ip":"192.168.1.100","src_port":51443,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47732,"rrname":"jepemadodiv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.725756+0100","flow_id":1776321480934467,"pcap_cnt":4136,"event_type":"dns","src_ip":"192.168.1.100","src_port":53964,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":65392,"rrname":"lygananavof.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:21.228356+0100","flow_id":2162411123604484,"pcap_cnt":3542,"event_type":"dns","src_ip":"192.168.1.100","src_port":63850,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":61514,"rrname":"jepikijexyg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.627520+0100","flow_id":1484405438714355,"pcap_cnt":3271,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57782,"proto":"UDP","dns":{"type":"answer","id":14266,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:28.188690+0100","flow_id":1056049023475705,"pcap_cnt":5279,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51443,"proto":"UDP","dns":{"type":"answer","id":47732,"rcode":"NXDOMAIN","rrname":"jepemadodiv.eu"}}
{"timestamp":"2017-12-12T18:33:21.228633+0100","flow_id":2162411123604484,"pcap_cnt":3543,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63850,"proto":"UDP","dns":{"type":"answer","id":61514,"rcode":"NXDOMAIN","rrname":"jepikijexyg.eu"}}
{"timestamp":"2017-12-12T18:33:20.249360+0100","flow_id":1713889836322320,"pcap_cnt":3090,"event_type":"dns","src_ip":"192.168.1.100","src_port":57234,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40400,"rrname":"qequroquweb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.630233+0100","flow_id":827567500205529,"pcap_cnt":3274,"event_type":"dns","src_ip":"192.168.1.100","src_port":54582,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":46666,"rrname":"nopuputyboh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.404800+0100","flow_id":1300501381590016,"pcap_cnt":3627,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63131,"proto":"UDP","dns":{"type":"answer","id":42996,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:19.996363+0100","flow_id":1178590882247691,"pcap_cnt":2966,"event_type":"dns","src_ip":"192.168.1.100","src_port":49818,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18531,"rrname":"qeguxylevus.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.258595+0100","flow_id":2069659157393609,"pcap_cnt":3557,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53036,"proto":"UDP","dns":{"type":"answer","id":5130,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:25.494655+0100","flow_id":1077534597155903,"pcap_cnt":4332,"event_type":"dns","src_ip":"192.168.1.100","src_port":62598,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31776,"rrname":"dirynozebot.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.484595+0100","flow_id":1671741174801651,"pcap_cnt":3662,"event_type":"dns","src_ip":"192.168.1.100","src_port":52206,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11168,"rrname":"disovyhityp.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.062782+0100","flow_id":21417171219477,"pcap_cnt":3459,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63374,"proto":"UDP","dns":{"type":"answer","id":47868,"rcode":"NXDOMAIN","rrname":"qexetupezix.eu"}}
{"timestamp":"2017-12-12T18:33:22.226134+0100","flow_id":1670463421770098,"pcap_cnt":3956,"event_type":"dns","src_ip":"192.168.1.100","src_port":58990,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17021,"rrname":"qetoxagekec.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:20.177016+0100","flow_id":1264565390193186,"pcap_cnt":3057,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57218,"proto":"UDP","dns":{"type":"answer","id":13349,"rcode":"NXDOMAIN","rrname":"rycucugisix.eu"}}
{"timestamp":"2017-12-12T18:33:22.009058+0100","flow_id":349851172872725,"pcap_cnt":3859,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57165,"proto":"UDP","dns":{"type":"answer","id":64577,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:22.226394+0100","flow_id":1670463421770098,"pcap_cnt":3957,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58990,"proto":"UDP","dns":{"type":"answer","id":17021,"rcode":"NXDOMAIN","rrname":"qetoxagekec.eu"}}
{"timestamp":"2017-12-12T18:33:22.325396+0100","flow_id":1003721289037588,"pcap_cnt":4008,"event_type":"dns","src_ip":"192.168.1.100","src_port":64421,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11070,"rrname":"vocuzikubal.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.167751+0100","flow_id":664517655798558,"pcap_cnt":3936,"event_type":"dns","src_ip":"192.168.1.100","src_port":59990,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51430,"rrname":"marynicosol.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:22.456146+0100","flow_id":1390515306296482,"pcap_cnt":4049,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50303,"proto":"UDP","dns":{"type":"answer","id":6178,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":553}}
{"timestamp":"2017-12-12T18:33:20.514628+0100","flow_id":1866172196772175,"pcap_cnt":3219,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59786,"proto":"UDP","dns":{"type":"answer","id":38219,"rcode":"NXDOMAIN","rrname":"mavyvomuqal.eu"}}
{"timestamp":"2017-12-12T18:33:22.168050+0100","flow_id":664517655798558,"pcap_cnt":3937,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59990,"proto":"UDP","dns":{"type":"answer","id":51430,"rcode":"NXDOMAIN","rrname":"marynicosol.eu"}}
{"timestamp":"2017-12-12T18:33:20.514628+0100","flow_id":1866172196772175,"pcap_cnt":3219,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59786,"proto":"UDP","dns":{"type":"answer","id":38219,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:26.330879+0100","flow_id":1819402150742796,"pcap_cnt":4685,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59737,"proto":"UDP","dns":{"type":"answer","id":14681,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":577}}
{"timestamp":"2017-12-12T18:33:20.535970+0100","flow_id":510832989449369,"pcap_cnt":3231,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58876,"proto":"UDP","dns":{"type":"answer","id":3341,"rcode":"NXDOMAIN","rrname":"tufamugevih.eu"}}
{"timestamp":"2017-12-12T18:33:17.352135+0100","flow_id":1909566398419620,"pcap_cnt":2470,"event_type":"dns","src_ip":"192.168.1.100","src_port":63808,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59319,"rrname":"digowibymih.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:21.967168+0100","flow_id":680585129186402,"pcap_cnt":3839,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57065,"proto":"UDP","dns":{"type":"answer","id":6577,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:20.486581+0100","flow_id":1830704356813684,"pcap_cnt":3201,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62037,"proto":"UDP","dns":{"type":"answer","id":20326,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:27.388735+0100","flow_id":724524792802601,"pcap_cnt":4919,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57588,"proto":"UDP","dns":{"type":"answer","id":31211,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:17.352379+0100","flow_id":1909566398419620,"pcap_cnt":2471,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63808,"proto":"UDP","dns":{"type":"answer","id":59319,"rcode":"NXDOMAIN","rrname":"digowibymih.eu"}}
{"timestamp":"2017-12-12T18:33:20.264352+0100","flow_id":1210075140065440,"pcap_cnt":3098,"event_type":"dns","src_ip":"192.168.1.100","src_port":63400,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59311,"rrname":"xuxehajexuw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.678427+0100","flow_id":1682130701081115,"pcap_cnt":5038,"event_type":"dns","src_ip":"192.168.1.100","src_port":62421,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29172,"rrname":"marefomecef.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.533202+0100","flow_id":900274853783622,"pcap_cnt":4083,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54928,"proto":"UDP","dns":{"type":"answer","id":11392,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":553}}
{"timestamp":"2017-12-12T18:33:17.057077+0100","flow_id":1414431831350769,"pcap_cnt":2299,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62044,"proto":"UDP","dns":{"type":"answer","id":63167,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:20.264619+0100","flow_id":1210075140065440,"pcap_cnt":3099,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63400,"proto":"UDP","dns":{"type":"answer","id":59311,"rcode":"NXDOMAIN","rrname":"xuxehajexuw.eu"}}
{"timestamp":"2017-12-12T18:33:20.369808+0100","flow_id":937029036712715,"pcap_cnt":3153,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53605,"proto":"UDP","dns":{"type":"answer","id":37805,"rcode":"NXDOMAIN","rrname":"xuqiloxyvyf.eu"}}
{"timestamp":"2017-12-12T18:33:22.836992+0100","flow_id":2237126374407928,"pcap_cnt":4172,"event_type":"dns","src_ip":"192.168.1.100","src_port":54163,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11356,"rrname":"ryleryqacic.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:21.317207+0100","flow_id":1683891637311255,"pcap_cnt":3572,"event_type":"dns","src_ip":"192.168.1.100","src_port":58582,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33615,"rrname":"xuqonerekij.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.369808+0100","flow_id":937029036712715,"pcap_cnt":3153,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53605,"proto":"UDP","dns":{"type":"answer","id":37805,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:20.596244+0100","flow_id":1889412264761388,"pcap_cnt":3255,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55880,"proto":"UDP","dns":{"type":"answer","id":43861,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:22.837264+0100","flow_id":2237126374407928,"pcap_cnt":4173,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54163,"proto":"UDP","dns":{"type":"answer","id":11356,"rcode":"NXDOMAIN","rrname":"ryleryqacic.eu"}}
{"timestamp":"2017-12-12T18:33:26.218152+0100","flow_id":32824604644392,"pcap_cnt":4628,"event_type":"dns","src_ip":"192.168.1.100","src_port":56621,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17503,"rrname":"qeqyvulidox.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.324928+0100","flow_id":1571992706872640,"pcap_cnt":3578,"event_type":"dns","src_ip":"192.168.1.100","src_port":62403,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":52022,"rrname":"rydufupipug.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.837264+0100","flow_id":2237126374407928,"pcap_cnt":4173,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54163,"proto":"UDP","dns":{"type":"answer","id":11356,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:25.632949+0100","flow_id":1642724376029032,"pcap_cnt":4379,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59028,"proto":"UDP","dns":{"type":"answer","id":22348,"rcode":"NXDOMAIN","rrname":"kevimudyqec.eu"}}
{"timestamp":"2017-12-12T18:33:26.218457+0100","flow_id":32824604644392,"pcap_cnt":4629,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56621,"proto":"UDP","dns":{"type":"answer","id":17503,"rcode":"NXDOMAIN","rrname":"qeqyvulidox.eu"}}
{"timestamp":"2017-12-12T18:33:28.188690+0100","flow_id":1056049023475705,"pcap_cnt":5279,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51443,"proto":"UDP","dns":{"type":"answer","id":47732,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:26.218457+0100","flow_id":32824604644392,"pcap_cnt":4629,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56621,"proto":"UDP","dns":{"type":"answer","id":17503,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:25.632949+0100","flow_id":1642724376029032,"pcap_cnt":4379,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59028,"proto":"UDP","dns":{"type":"answer","id":22348,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:22.726008+0100","flow_id":1776321480934467,"pcap_cnt":4137,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53964,"proto":"UDP","dns":{"type":"answer","id":65392,"rcode":"NXDOMAIN","rrname":"lygananavof.eu"}}
{"timestamp":"2017-12-12T18:33:26.285925+0100","flow_id":539630745574629,"pcap_cnt":4658,"event_type":"dns","src_ip":"192.168.1.100","src_port":60926,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37403,"rrname":"fogokozazit.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.726008+0100","flow_id":1776321480934467,"pcap_cnt":4137,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53964,"proto":"UDP","dns":{"type":"answer","id":65392,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:25.386558+0100","flow_id":2133886098596879,"pcap_cnt":4261,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53681,"proto":"UDP","dns":{"type":"answer","id":52963,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:22.485469+0100","flow_id":604446096779357,"pcap_cnt":4068,"event_type":"dns","src_ip":"192.168.1.100","src_port":57114,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53987,"rrname":"tunujolavez.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.936114+0100","flow_id":1795288056277955,"pcap_cnt":4212,"event_type":"dns","src_ip":"192.168.1.100","src_port":60512,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":61012,"rrname":"maravatudur.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:19.996610+0100","flow_id":1178590882247691,"pcap_cnt":2967,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49818,"proto":"UDP","dns":{"type":"answer","id":18531,"rcode":"NXDOMAIN","rrname":"qeguxylevus.eu"}}
{"timestamp":"2017-12-12T18:33:21.337922+0100","flow_id":65318179383298,"pcap_cnt":3592,"event_type":"dns","src_ip":"192.168.1.100","src_port":56700,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47422,"rrname":"qedakalyned.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.936428+0100","flow_id":1795288056277955,"pcap_cnt":4213,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60512,"proto":"UDP","dns":{"type":"answer","id":61012,"rcode":"NXDOMAIN","rrname":"maravatudur.eu"}}
{"timestamp":"2017-12-12T18:33:21.484871+0100","flow_id":1671741174801651,"pcap_cnt":3663,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52206,"proto":"UDP","dns":{"type":"answer","id":11168,"rcode":"NXDOMAIN","rrname":"disovyhityp.eu"}}
{"timestamp":"2017-12-12T18:33:21.338225+0100","flow_id":65318179383298,"pcap_cnt":3593,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56700,"proto":"UDP","dns":{"type":"answer","id":47422,"rcode":"NXDOMAIN","rrname":"qedakalyned.eu"}}
{"timestamp":"2017-12-12T18:33:21.062782+0100","flow_id":21417171219477,"pcap_cnt":3459,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63374,"proto":"UDP","dns":{"type":"answer","id":47868,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:21.484871+0100","flow_id":1671741174801651,"pcap_cnt":3663,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52206,"proto":"UDP","dns":{"type":"answer","id":11168,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:21.326070+0100","flow_id":2152393112315890,"pcap_cnt":3581,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53022,"proto":"UDP","dns":{"type":"answer","id":17173,"rcode":"NXDOMAIN","rrname":"purebupycug.eu"}}
{"timestamp":"2017-12-12T18:33:22.226394+0100","flow_id":1670463421770098,"pcap_cnt":3957,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58990,"proto":"UDP","dns":{"type":"answer","id":17021,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":595}}
{"timestamp":"2017-12-12T18:33:22.325642+0100","flow_id":1003721289037588,"pcap_cnt":4009,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64421,"proto":"UDP","dns":{"type":"answer","id":11070,"rcode":"NXDOMAIN","rrname":"vocuzikubal.eu"}}
{"timestamp":"2017-12-12T18:33:22.168050+0100","flow_id":664517655798558,"pcap_cnt":3937,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59990,"proto":"UDP","dns":{"type":"answer","id":51430,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:20.907555+0100","flow_id":769037833279112,"pcap_cnt":3385,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59830,"proto":"UDP","dns":{"type":"answer","id":43016,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:22.325642+0100","flow_id":1003721289037588,"pcap_cnt":4009,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64421,"proto":"UDP","dns":{"type":"answer","id":11070,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":595}}
{"timestamp":"2017-12-12T18:33:22.317311+0100","flow_id":1514830987188095,"pcap_cnt":4002,"event_type":"dns","src_ip":"192.168.1.100","src_port":64199,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":54581,"rrname":"nozogikirar.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.083190+0100","flow_id":715578375246061,"pcap_cnt":4756,"event_type":"dns","src_ip":"192.168.1.100","src_port":52230,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31924,"rrname":"jecygyrogec.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:22.171975+0100","flow_id":2084468204675015,"pcap_cnt":3938,"event_type":"dns","src_ip":"192.168.1.100","src_port":58578,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59782,"rrname":"rynafivyvol.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.426375+0100","flow_id":1346676575011207,"pcap_cnt":3636,"event_type":"dns","src_ip":"192.168.1.100","src_port":63422,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7648,"rrname":"xuderadezuv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.381381+0100","flow_id":1933654723055804,"pcap_cnt":4027,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56097,"proto":"UDP","dns":{"type":"answer","id":45634,"rcode":"NXDOMAIN","rrname":"dikoniwudim.eu"}}
{"timestamp":"2017-12-12T18:33:22.317636+0100","flow_id":1514830987188095,"pcap_cnt":4003,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64199,"proto":"UDP","dns":{"type":"answer","id":54581,"rcode":"NXDOMAIN","rrname":"nozogikirar.eu"}}
{"timestamp":"2017-12-12T18:33:22.239096+0100","flow_id":500711899178488,"pcap_cnt":3964,"event_type":"dns","src_ip":"192.168.1.100","src_port":59103,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29715,"rrname":"tunupegirec.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.317636+0100","flow_id":1514830987188095,"pcap_cnt":4003,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64199,"proto":"UDP","dns":{"type":"answer","id":54581,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":595}}
{"timestamp":"2017-12-12T18:33:20.560247+0100","flow_id":1358996688637047,"pcap_cnt":3240,"event_type":"dns","src_ip":"192.168.1.100","src_port":62663,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29531,"rrname":"rylodoqakal.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.426680+0100","flow_id":1346676575011207,"pcap_cnt":3637,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63422,"proto":"UDP","dns":{"type":"answer","id":7648,"rcode":"NXDOMAIN","rrname":"xuderadezuv.eu"}}
{"timestamp":"2017-12-12T18:33:20.264619+0100","flow_id":1210075140065440,"pcap_cnt":3099,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63400,"proto":"UDP","dns":{"type":"answer","id":59311,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:21.426680+0100","flow_id":1346676575011207,"pcap_cnt":3637,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63422,"proto":"UDP","dns":{"type":"answer","id":7648,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:22.239478+0100","flow_id":500711899178488,"pcap_cnt":3965,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59103,"proto":"UDP","dns":{"type":"answer","id":29715,"rcode":"NXDOMAIN","rrname":"tunupegirec.eu"}}
{"timestamp":"2017-12-12T18:33:20.560528+0100","flow_id":1358996688637047,"pcap_cnt":3241,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62663,"proto":"UDP","dns":{"type":"answer","id":29531,"rcode":"NXDOMAIN","rrname":"rylodoqakal.eu"}}
{"timestamp":"2017-12-12T18:33:21.317561+0100","flow_id":1683891637311255,"pcap_cnt":3573,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58582,"proto":"UDP","dns":{"type":"answer","id":33615,"rcode":"NXDOMAIN","rrname":"xuqonerekij.eu"}}
{"timestamp":"2017-12-12T18:33:20.893193+0100","flow_id":704104370315529,"pcap_cnt":3374,"event_type":"dns","src_ip":"192.168.1.100","src_port":60582,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":134,"rrname":"xutufojisyl.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.278932+0100","flow_id":824730674282900,"pcap_cnt":3110,"event_type":"dns","src_ip":"192.168.1.100","src_port":52597,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4603,"rrname":"qetityluruj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.764533+0100","flow_id":1996642566122101,"pcap_cnt":4416,"event_type":"dns","src_ip":"192.168.1.100","src_port":56870,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13264,"rrname":"puzigagacal.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.325218+0100","flow_id":1571992706872640,"pcap_cnt":3579,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62403,"proto":"UDP","dns":{"type":"answer","id":52022,"rcode":"NXDOMAIN","rrname":"rydufupipug.eu"}}
{"timestamp":"2017-12-12T18:33:20.279195+0100","flow_id":824730674282900,"pcap_cnt":3111,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52597,"proto":"UDP","dns":{"type":"answer","id":4603,"rcode":"NXDOMAIN","rrname":"qetityluruj.eu"}}
{"timestamp":"2017-12-12T18:33:21.228633+0100","flow_id":2162411123604484,"pcap_cnt":3543,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63850,"proto":"UDP","dns":{"type":"answer","id":61514,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:20.279195+0100","flow_id":824730674282900,"pcap_cnt":3111,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52597,"proto":"UDP","dns":{"type":"answer","id":4603,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:20.630567+0100","flow_id":827567500205529,"pcap_cnt":3275,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54582,"proto":"UDP","dns":{"type":"answer","id":46666,"rcode":"NXDOMAIN","rrname":"nopuputyboh.eu"}}
{"timestamp":"2017-12-12T18:33:28.495603+0100","flow_id":369060414525427,"pcap_cnt":5424,"event_type":"dns","src_ip":"192.168.1.100","src_port":63437,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23,"rrname":"fotinosuwir.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.630567+0100","flow_id":827567500205529,"pcap_cnt":3275,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54582,"proto":"UDP","dns":{"type":"answer","id":46666,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":589}}
{"timestamp":"2017-12-12T18:33:20.536709+0100","flow_id":57271558090885,"pcap_cnt":3232,"event_type":"dns","src_ip":"192.168.1.100","src_port":61349,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37864,"rrname":"dirugihofug.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.286231+0100","flow_id":539630745574629,"pcap_cnt":4659,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60926,"proto":"UDP","dns":{"type":"answer","id":37403,"rcode":"NXDOMAIN","rrname":"fogokozazit.eu"}}
{"timestamp":"2017-12-12T18:33:25.474048+0100","flow_id":2102223599647680,"pcap_cnt":4308,"event_type":"dns","src_ip":"192.168.1.100","src_port":51501,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43256,"rrname":"xudosorihug.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.996610+0100","flow_id":1178590882247691,"pcap_cnt":2967,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49818,"proto":"UDP","dns":{"type":"answer","id":18531,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:22.485787+0100","flow_id":604446096779357,"pcap_cnt":4069,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57114,"proto":"UDP","dns":{"type":"answer","id":53987,"rcode":"NXDOMAIN","rrname":"tunujolavez.eu"}}
{"timestamp":"2017-12-12T18:33:22.936428+0100","flow_id":1795288056277955,"pcap_cnt":4213,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60512,"proto":"UDP","dns":{"type":"answer","id":61012,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:22.485787+0100","flow_id":604446096779357,"pcap_cnt":4069,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57114,"proto":"UDP","dns":{"type":"answer","id":53987,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":553}}
{"timestamp":"2017-12-12T18:33:21.338225+0100","flow_id":65318179383298,"pcap_cnt":3593,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56700,"proto":"UDP","dns":{"type":"answer","id":47422,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:21.487217+0100","flow_id":1985256607543089,"pcap_cnt":3664,"event_type":"dns","src_ip":"192.168.1.100","src_port":51890,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":58849,"rrname":"dirixabirok.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.073421+0100","flow_id":251541518884557,"pcap_cnt":3464,"event_type":"dns","src_ip":"192.168.1.100","src_port":51455,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50329,"rrname":"rylunupumit.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.326070+0100","flow_id":2152393112315890,"pcap_cnt":3581,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53022,"proto":"UDP","dns":{"type":"answer","id":17173,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:22.503776+0100","flow_id":2230009613955040,"pcap_cnt":4076,"event_type":"dns","src_ip":"192.168.1.100","src_port":60301,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41034,"rrname":"kepymexihak.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.683827+0100","flow_id":1332239042375475,"pcap_cnt":3298,"event_type":"dns","src_ip":"192.168.1.100","src_port":64662,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":52724,"rrname":"gaturuzuqyx.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.535970+0100","flow_id":510832989449369,"pcap_cnt":3231,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58876,"proto":"UDP","dns":{"type":"answer","id":3341,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:22.864344+0100","flow_id":457090063806261,"pcap_cnt":4185,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49436,"proto":"UDP","dns":{"type":"answer","id":24665,"rcode":"NXDOMAIN","rrname":"lyvitexemod.eu"}}
{"timestamp":"2017-12-12T18:33:22.465448+0100","flow_id":812646783916584,"pcap_cnt":4064,"event_type":"dns","src_ip":"192.168.1.100","src_port":52945,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33821,"rrname":"divywysigud.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.610423+0100","flow_id":1173993119830135,"pcap_cnt":3260,"event_type":"dns","src_ip":"192.168.1.100","src_port":60384,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":16910,"rrname":"kevajerajoq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.083474+0100","flow_id":715578375246061,"pcap_cnt":4757,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52230,"proto":"UDP","dns":{"type":"answer","id":31924,"rcode":"NXDOMAIN","rrname":"jecygyrogec.eu"}}
{"timestamp":"2017-12-12T18:33:22.381381+0100","flow_id":1933654723055804,"pcap_cnt":4027,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56097,"proto":"UDP","dns":{"type":"answer","id":45634,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":553}}
{"timestamp":"2017-12-12T18:33:17.352379+0100","flow_id":1909566398419620,"pcap_cnt":2471,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63808,"proto":"UDP","dns":{"type":"answer","id":59319,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:27.678711+0100","flow_id":1682130701081115,"pcap_cnt":5039,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62421,"proto":"UDP","dns":{"type":"answer","id":29172,"rcode":"NXDOMAIN","rrname":"marefomecef.eu"}}
{"timestamp":"2017-12-12T18:33:22.456683+0100","flow_id":1181640309274603,"pcap_cnt":4050,"event_type":"dns","src_ip":"192.168.1.100","src_port":59433,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18788,"rrname":"volebatijub.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.181650+0100","flow_id":465518936835474,"pcap_cnt":2372,"event_type":"dns","src_ip":"192.168.1.100","src_port":49753,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11029,"rrname":"ryhuzilywax.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.398170+0100","flow_id":33891903738714,"pcap_cnt":4032,"event_type":"dns","src_ip":"192.168.1.100","src_port":50554,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64599,"rrname":"jepororyrih.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.456954+0100","flow_id":1181640309274603,"pcap_cnt":4051,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59433,"proto":"UDP","dns":{"type":"answer","id":18788,"rcode":"NXDOMAIN","rrname":"volebatijub.eu"}}
{"timestamp":"2017-12-12T18:33:20.381354+0100","flow_id":1230426842649002,"pcap_cnt":3156,"event_type":"dns","src_ip":"192.168.1.100","src_port":62115,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18345,"rrname":"nozubacezyb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.398462+0100","flow_id":33891903738714,"pcap_cnt":4033,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50554,"proto":"UDP","dns":{"type":"answer","id":64599,"rcode":"NXDOMAIN","rrname":"jepororyrih.eu"}}
{"timestamp":"2017-12-12T18:33:20.381634+0100","flow_id":1230426842649002,"pcap_cnt":3157,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62115,"proto":"UDP","dns":{"type":"answer","id":18345,"rcode":"NXDOMAIN","rrname":"nozubacezyb.eu"}}
{"timestamp":"2017-12-12T18:33:22.239478+0100","flow_id":500711899178488,"pcap_cnt":3965,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59103,"proto":"UDP","dns":{"type":"answer","id":29715,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":595}}
{"timestamp":"2017-12-12T18:33:20.381634+0100","flow_id":1230426842649002,"pcap_cnt":3157,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62115,"proto":"UDP","dns":{"type":"answer","id":18345,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:20.560528+0100","flow_id":1358996688637047,"pcap_cnt":3241,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62663,"proto":"UDP","dns":{"type":"answer","id":29531,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:22.716517+0100","flow_id":1248396985954021,"pcap_cnt":4132,"event_type":"dns","src_ip":"192.168.1.100","src_port":59494,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43671,"rrname":"kezapyjolek.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.317561+0100","flow_id":1683891637311255,"pcap_cnt":3573,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58582,"proto":"UDP","dns":{"type":"answer","id":33615,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:20.599803+0100","flow_id":513781484496635,"pcap_cnt":3256,"event_type":"dns","src_ip":"192.168.1.100","src_port":62462,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4003,"rrname":"jeniceripoj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.301873+0100","flow_id":1078412917643761,"pcap_cnt":3125,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57661,"proto":"UDP","dns":{"type":"answer","id":53968,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":589}}
{"timestamp":"2017-12-12T18:33:20.893516+0100","flow_id":704104370315529,"pcap_cnt":3375,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60582,"proto":"UDP","dns":{"type":"answer","id":134,"rcode":"NXDOMAIN","rrname":"xutufojisyl.eu"}}
{"timestamp":"2017-12-12T18:33:21.325218+0100","flow_id":1571992706872640,"pcap_cnt":3579,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62403,"proto":"UDP","dns":{"type":"answer","id":52022,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:20.349437+0100","flow_id":2175811421492477,"pcap_cnt":3144,"event_type":"dns","src_ip":"192.168.1.100","src_port":59132,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":21060,"rrname":"jefogixuqyn.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.675475+0100","flow_id":114076795883155,"pcap_cnt":4388,"event_type":"dns","src_ip":"192.168.1.100","src_port":65165,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9700,"rrname":"vofomifyrex.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.249734+0100","flow_id":1713889836322320,"pcap_cnt":3091,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57234,"proto":"UDP","dns":{"type":"answer","id":40400,"rcode":"NXDOMAIN","rrname":"qequroquweb.eu"}}
{"timestamp":"2017-12-12T18:33:21.355697+0100","flow_id":1091901262490993,"pcap_cnt":3602,"event_type":"dns","src_ip":"192.168.1.100","src_port":54940,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60936,"rrname":"pumocelexec.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.675805+0100","flow_id":114076795883155,"pcap_cnt":4389,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65165,"proto":"UDP","dns":{"type":"answer","id":9700,"rcode":"NXDOMAIN","rrname":"vofomifyrex.eu"}}
{"timestamp":"2017-12-12T18:33:20.852366+0100","flow_id":1657423901229454,"pcap_cnt":3352,"event_type":"dns","src_ip":"192.168.1.100","src_port":58490,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64975,"rrname":"pumytugofup.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.356047+0100","flow_id":1091901262490993,"pcap_cnt":3603,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54940,"proto":"UDP","dns":{"type":"answer","id":60936,"rcode":"NXDOMAIN","rrname":"pumocelexec.eu"}}
{"timestamp":"2017-12-12T18:33:25.494856+0100","flow_id":1077534597155903,"pcap_cnt":4333,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62598,"proto":"UDP","dns":{"type":"answer","id":31776,"rcode":"NXDOMAIN","rrname":"dirynozebot.eu"}}
{"timestamp":"2017-12-12T18:33:20.852694+0100","flow_id":1657423901229454,"pcap_cnt":3353,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58490,"proto":"UDP","dns":{"type":"answer","id":64975,"rcode":"NXDOMAIN","rrname":"pumytugofup.eu"}}
{"timestamp":"2017-12-12T18:33:25.494856+0100","flow_id":1077534597155903,"pcap_cnt":4333,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62598,"proto":"UDP","dns":{"type":"answer","id":31776,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:25.474302+0100","flow_id":2102223599647680,"pcap_cnt":4309,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51501,"proto":"UDP","dns":{"type":"answer","id":43256,"rcode":"NXDOMAIN","rrname":"xudosorihug.eu"}}
{"timestamp":"2017-12-12T18:33:20.088136+0100","flow_id":769039980845128,"pcap_cnt":3000,"event_type":"dns","src_ip":"192.168.1.100","src_port":56706,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59396,"rrname":"ryhekoputag.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.474302+0100","flow_id":2102223599647680,"pcap_cnt":4309,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51501,"proto":"UDP","dns":{"type":"answer","id":43256,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:20.177016+0100","flow_id":1264565390193186,"pcap_cnt":3057,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57218,"proto":"UDP","dns":{"type":"answer","id":13349,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:22.528562+0100","flow_id":1590914183648200,"pcap_cnt":4078,"event_type":"dns","src_ip":"192.168.1.100","src_port":64053,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2060,"rrname":"cinepycusaw.eu","rrtype":"A","tx_id":2}}
{"timestamp":"2017-12-12T18:33:25.330733+0100","flow_id":1681419883842541,"pcap_cnt":4234,"event_type":"dns","src_ip":"192.168.1.100","src_port":49781,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33989,"rrname":"qetuluvolos.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.452612+0100","flow_id":479995124312068,"pcap_cnt":3186,"event_type":"dns","src_ip":"192.168.1.100","src_port":50282,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5470,"rrname":"kefypadofiw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.411863+0100","flow_id":647990622326342,"pcap_cnt":3630,"event_type":"dns","src_ip":"192.168.1.100","src_port":50644,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18800,"rrname":"qekuxovuqal.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:21.487504+0100","flow_id":1985256607543089,"pcap_cnt":3665,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51890,"proto":"UDP","dns":{"type":"answer","id":58849,"rcode":"NXDOMAIN","rrname":"dirixabirok.eu"}}
{"timestamp":"2017-12-12T18:33:21.520125+0100","flow_id":469676465450941,"pcap_cnt":3682,"event_type":"dns","src_ip":"192.168.1.100","src_port":60419,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":3599,"rrname":"vopazumosoh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.330986+0100","flow_id":1681419883842541,"pcap_cnt":4235,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49781,"proto":"UDP","dns":{"type":"answer","id":33989,"rcode":"NXDOMAIN","rrname":"qetuluvolos.eu"}}
{"timestamp":"2017-12-12T18:33:20.452904+0100","flow_id":479995124312068,"pcap_cnt":3187,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50282,"proto":"UDP","dns":{"type":"answer","id":5470,"rcode":"NXDOMAIN","rrname":"kefypadofiw.eu"}}
{"timestamp":"2017-12-12T18:33:25.330986+0100","flow_id":1681419883842541,"pcap_cnt":4235,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49781,"proto":"UDP","dns":{"type":"answer","id":33989,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:22.864344+0100","flow_id":457090063806261,"pcap_cnt":4185,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49436,"proto":"UDP","dns":{"type":"answer","id":24665,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:22.172269+0100","flow_id":2084468204675015,"pcap_cnt":3939,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58578,"proto":"UDP","dns":{"type":"answer","id":59782,"rcode":"NXDOMAIN","rrname":"rynafivyvol.eu"}}
{"timestamp":"2017-12-12T18:33:20.610807+0100","flow_id":1173993119830135,"pcap_cnt":3261,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60384,"proto":"UDP","dns":{"type":"answer","id":16910,"rcode":"NXDOMAIN","rrname":"kevajerajoq.eu"}}
{"timestamp":"2017-12-12T18:33:22.172269+0100","flow_id":2084468204675015,"pcap_cnt":3939,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58578,"proto":"UDP","dns":{"type":"answer","id":59782,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:22.465771+0100","flow_id":812646783916584,"pcap_cnt":4065,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52945,"proto":"UDP","dns":{"type":"answer","id":33821,"rcode":"NXDOMAIN","rrname":"divywysigud.eu"}}
{"timestamp":"2017-12-12T18:33:20.610807+0100","flow_id":1173993119830135,"pcap_cnt":3261,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60384,"proto":"UDP","dns":{"type":"answer","id":16910,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:27.083474+0100","flow_id":715578375246061,"pcap_cnt":4757,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52230,"proto":"UDP","dns":{"type":"answer","id":31924,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:22.212703+0100","flow_id":2196309153038047,"pcap_cnt":3952,"event_type":"dns","src_ip":"192.168.1.100","src_port":56442,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30180,"rrname":"nofypafiqev.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.465771+0100","flow_id":812646783916584,"pcap_cnt":4065,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52945,"proto":"UDP","dns":{"type":"answer","id":33821,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":553}}
{"timestamp":"2017-12-12T18:33:17.680060+0100","flow_id":973194808615036,"pcap_cnt":2652,"event_type":"dns","src_ip":"192.168.1.100","src_port":54736,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":22387,"rrname":"norupamaxur.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.104130+0100","flow_id":1969401736107714,"pcap_cnt":4580,"event_type":"dns","src_ip":"192.168.1.100","src_port":52396,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35213,"rrname":"rycuheqojyk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.181925+0100","flow_id":465518936835474,"pcap_cnt":2373,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49753,"proto":"UDP","dns":{"type":"answer","id":11029,"rcode":"NXDOMAIN","rrname":"ryhuzilywax.eu"}}
{"timestamp":"2017-12-12T18:33:22.456954+0100","flow_id":1181640309274603,"pcap_cnt":4051,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59433,"proto":"UDP","dns":{"type":"answer","id":18788,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":553}}
{"timestamp":"2017-12-12T18:33:21.449185+0100","flow_id":288087395654305,"pcap_cnt":3646,"event_type":"dns","src_ip":"192.168.1.100","src_port":51917,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26985,"rrname":"tufapovakak.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.181925+0100","flow_id":465518936835474,"pcap_cnt":2373,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49753,"proto":"UDP","dns":{"type":"answer","id":11029,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:20.498263+0100","flow_id":856816227490391,"pcap_cnt":3210,"event_type":"dns","src_ip":"192.168.1.100","src_port":64942,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":56937,"rrname":"ciqehefitij.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.716844+0100","flow_id":1248396985954021,"pcap_cnt":4133,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59494,"proto":"UDP","dns":{"type":"answer","id":43671,"rcode":"NXDOMAIN","rrname":"kezapyjolek.eu"}}
{"timestamp":"2017-12-12T18:33:21.449489+0100","flow_id":288087395654305,"pcap_cnt":3647,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51917,"proto":"UDP","dns":{"type":"answer","id":26985,"rcode":"NXDOMAIN","rrname":"tufapovakak.eu"}}
{"timestamp":"2017-12-12T18:33:22.716844+0100","flow_id":1248396985954021,"pcap_cnt":4133,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59494,"proto":"UDP","dns":{"type":"answer","id":43671,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:20.600089+0100","flow_id":513781484496635,"pcap_cnt":3257,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62462,"proto":"UDP","dns":{"type":"answer","id":4003,"rcode":"NXDOMAIN","rrname":"jeniceripoj.eu"}}
{"timestamp":"2017-12-12T18:33:21.449489+0100","flow_id":288087395654305,"pcap_cnt":3647,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51917,"proto":"UDP","dns":{"type":"answer","id":26985,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:25.764880+0100","flow_id":1996642566122101,"pcap_cnt":4417,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56870,"proto":"UDP","dns":{"type":"answer","id":13264,"rcode":"NXDOMAIN","rrname":"puzigagacal.eu"}}
{"timestamp":"2017-12-12T18:33:20.349776+0100","flow_id":2175811421492477,"pcap_cnt":3145,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59132,"proto":"UDP","dns":{"type":"answer","id":21060,"rcode":"NXDOMAIN","rrname":"jefogixuqyn.eu"}}
{"timestamp":"2017-12-12T18:33:21.347642+0100","flow_id":428257948290554,"pcap_cnt":3598,"event_type":"dns","src_ip":"192.168.1.100","src_port":50037,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33305,"rrname":"tuwiqelages.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.495864+0100","flow_id":369060414525427,"pcap_cnt":5425,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63437,"proto":"UDP","dns":{"type":"answer","id":23,"rcode":"NXDOMAIN","rrname":"fotinosuwir.eu"}}
{"timestamp":"2017-12-12T18:33:20.249734+0100","flow_id":1713889836322320,"pcap_cnt":3091,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57234,"proto":"UDP","dns":{"type":"answer","id":40400,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:28.495864+0100","flow_id":369060414525427,"pcap_cnt":5425,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63437,"proto":"UDP","dns":{"type":"answer","id":23,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:21.347902+0100","flow_id":428257948290554,"pcap_cnt":3599,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50037,"proto":"UDP","dns":{"type":"answer","id":33305,"rcode":"NXDOMAIN","rrname":"tuwiqelages.eu"}}
{"timestamp":"2017-12-12T18:33:21.356047+0100","flow_id":1091901262490993,"pcap_cnt":3603,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54940,"proto":"UDP","dns":{"type":"answer","id":60936,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:20.289941+0100","flow_id":1910324460547221,"pcap_cnt":3120,"event_type":"dns","src_ip":"192.168.1.100","src_port":62249,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30423,"rrname":"dixotuzipuh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.536967+0100","flow_id":57271558090885,"pcap_cnt":3233,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61349,"proto":"UDP","dns":{"type":"answer","id":37864,"rcode":"NXDOMAIN","rrname":"dirugihofug.eu"}}
{"timestamp":"2017-12-12T18:33:20.852694+0100","flow_id":1657423901229454,"pcap_cnt":3353,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58490,"proto":"UDP","dns":{"type":"answer","id":64975,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:25.740469+0100","flow_id":2136742251809909,"pcap_cnt":4414,"event_type":"dns","src_ip":"192.168.1.100","src_port":61472,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":16936,"rrname":"tucyzogojat.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.683763+0100","flow_id":1310695486746355,"pcap_cnt":4392,"event_type":"dns","src_ip":"192.168.1.100","src_port":61147,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9779,"rrname":"nopexifigep.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.088429+0100","flow_id":769039980845128,"pcap_cnt":3001,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56706,"proto":"UDP","dns":{"type":"answer","id":59396,"rcode":"NXDOMAIN","rrname":"ryhekoputag.eu"}}
{"timestamp":"2017-12-12T18:33:22.528839+0100","flow_id":1590914183648200,"pcap_cnt":4079,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64053,"proto":"UDP","dns":{"type":"answer","id":2060,"rcode":"NXDOMAIN","rrname":"cinepycusaw.eu"}}
{"timestamp":"2017-12-12T18:33:22.504019+0100","flow_id":2230009613955040,"pcap_cnt":4077,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60301,"proto":"UDP","dns":{"type":"answer","id":41034,"rcode":"NXDOMAIN","rrname":"kepymexihak.eu"}}
{"timestamp":"2017-12-12T18:33:20.088429+0100","flow_id":769039980845128,"pcap_cnt":3001,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56706,"proto":"UDP","dns":{"type":"answer","id":59396,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:22.528839+0100","flow_id":1590914183648200,"pcap_cnt":4079,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64053,"proto":"UDP","dns":{"type":"answer","id":2060,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":553}}
{"timestamp":"2017-12-12T18:33:22.504019+0100","flow_id":2230009613955040,"pcap_cnt":4077,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60301,"proto":"UDP","dns":{"type":"answer","id":41034,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":553}}
{"timestamp":"2017-12-12T18:33:20.684186+0100","flow_id":1332239042375475,"pcap_cnt":3299,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64662,"proto":"UDP","dns":{"type":"answer","id":52724,"rcode":"NXDOMAIN","rrname":"gaturuzuqyx.eu"}}
{"timestamp":"2017-12-12T18:33:21.520504+0100","flow_id":469676465450941,"pcap_cnt":3683,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60419,"proto":"UDP","dns":{"type":"answer","id":3599,"rcode":"NXDOMAIN","rrname":"vopazumosoh.eu"}}
{"timestamp":"2017-12-12T18:33:22.610269+0100","flow_id":54071807594461,"pcap_cnt":4104,"event_type":"dns","src_ip":"192.168.1.100","src_port":54822,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":61192,"rrname":"puregivytoh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.452904+0100","flow_id":479995124312068,"pcap_cnt":3187,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50282,"proto":"UDP","dns":{"type":"answer","id":5470,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:25.335163+0100","flow_id":78383470157115,"pcap_cnt":4240,"event_type":"dns","src_ip":"192.168.1.100","src_port":53918,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":58065,"rrname":"lymosudyqym.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.678711+0100","flow_id":1682130701081115,"pcap_cnt":5039,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62421,"proto":"UDP","dns":{"type":"answer","id":29172,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:22.610568+0100","flow_id":54071807594461,"pcap_cnt":4105,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54822,"proto":"UDP","dns":{"type":"answer","id":61192,"rcode":"NXDOMAIN","rrname":"puregivytoh.eu"}}
{"timestamp":"2017-12-12T18:33:20.846871+0100","flow_id":368274435009559,"pcap_cnt":3350,"event_type":"dns","src_ip":"192.168.1.100","src_port":58166,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18789,"rrname":"tuwaguguwux.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.335414+0100","flow_id":78383470157115,"pcap_cnt":4241,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53918,"proto":"UDP","dns":{"type":"answer","id":58065,"rcode":"NXDOMAIN","rrname":"lymosudyqym.eu"}}
{"timestamp":"2017-12-12T18:33:27.402038+0100","flow_id":645776567378550,"pcap_cnt":4924,"event_type":"dns","src_ip":"192.168.1.100","src_port":55885,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51680,"rrname":"makymykakic.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.335414+0100","flow_id":78383470157115,"pcap_cnt":4241,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53918,"proto":"UDP","dns":{"type":"answer","id":58065,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:22.398462+0100","flow_id":33891903738714,"pcap_cnt":4033,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50554,"proto":"UDP","dns":{"type":"answer","id":64599,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":553}}
{"timestamp":"2017-12-12T18:33:17.680304+0100","flow_id":973194808615036,"pcap_cnt":2653,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54736,"proto":"UDP","dns":{"type":"answer","id":22387,"rcode":"NXDOMAIN","rrname":"norupamaxur.eu"}}
{"timestamp":"2017-12-12T18:33:25.379463+0100","flow_id":1977549289015879,"pcap_cnt":4250,"event_type":"dns","src_ip":"192.168.1.100","src_port":58998,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45978,"rrname":"gaherobusit.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.104464+0100","flow_id":1969401736107714,"pcap_cnt":4581,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52396,"proto":"UDP","dns":{"type":"answer","id":35213,"rcode":"NXDOMAIN","rrname":"rycuheqojyk.eu"}}
{"timestamp":"2017-12-12T18:33:17.680304+0100","flow_id":973194808615036,"pcap_cnt":2653,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54736,"proto":"UDP","dns":{"type":"answer","id":22387,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:22.881693+0100","flow_id":283717266469917,"pcap_cnt":4190,"event_type":"dns","src_ip":"192.168.1.100","src_port":57948,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13393,"rrname":"vojugycavov.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.104464+0100","flow_id":1969401736107714,"pcap_cnt":4581,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52396,"proto":"UDP","dns":{"type":"answer","id":35213,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:25.379713+0100","flow_id":1977549289015879,"pcap_cnt":4251,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58998,"proto":"UDP","dns":{"type":"answer","id":45978,"rcode":"NXDOMAIN","rrname":"gaherobusit.eu"}}
{"timestamp":"2017-12-12T18:33:21.336084+0100","flow_id":1329659914559700,"pcap_cnt":3590,"event_type":"dns","src_ip":"192.168.1.100","src_port":53436,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63163,"rrname":"nozitytogim.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.498538+0100","flow_id":856816227490391,"pcap_cnt":3211,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64942,"proto":"UDP","dns":{"type":"answer","id":56937,"rcode":"NXDOMAIN","rrname":"ciqehefitij.eu"}}
{"timestamp":"2017-12-12T18:33:26.198541+0100","flow_id":1548202882904807,"pcap_cnt":4620,"event_type":"dns","src_ip":"192.168.1.100","src_port":58232,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44816,"rrname":"kemuxurohym.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:20.600089+0100","flow_id":513781484496635,"pcap_cnt":3257,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62462,"proto":"UDP","dns":{"type":"answer","id":4003,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:20.498538+0100","flow_id":856816227490391,"pcap_cnt":3211,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64942,"proto":"UDP","dns":{"type":"answer","id":56937,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:22.938137+0100","flow_id":1116232252280985,"pcap_cnt":4216,"event_type":"dns","src_ip":"192.168.1.100","src_port":56465,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25903,"rrname":"nopiwatyqul.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.198801+0100","flow_id":1548202882904807,"pcap_cnt":4621,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58232,"proto":"UDP","dns":{"type":"answer","id":44816,"rcode":"NXDOMAIN","rrname":"kemuxurohym.eu"}}
{"timestamp":"2017-12-12T18:33:20.886802+0100","flow_id":2141883327350802,"pcap_cnt":3366,"event_type":"dns","src_ip":"192.168.1.100","src_port":49878,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25314,"rrname":"galefihituz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.938393+0100","flow_id":1116232252280985,"pcap_cnt":4217,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56465,"proto":"UDP","dns":{"type":"answer","id":25903,"rcode":"NXDOMAIN","rrname":"nopiwatyqul.eu"}}
{"timestamp":"2017-12-12T18:33:26.198801+0100","flow_id":1548202882904807,"pcap_cnt":4621,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58232,"proto":"UDP","dns":{"type":"answer","id":44816,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:26.286231+0100","flow_id":539630745574629,"pcap_cnt":4659,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60926,"proto":"UDP","dns":{"type":"answer","id":37403,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:20.887068+0100","flow_id":2141883327350802,"pcap_cnt":3367,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49878,"proto":"UDP","dns":{"type":"answer","id":25314,"rcode":"NXDOMAIN","rrname":"galefihituz.eu"}}
{"timestamp":"2017-12-12T18:33:28.509037+0100","flow_id":716488907265060,"pcap_cnt":5430,"event_type":"dns","src_ip":"192.168.1.100","src_port":65264,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":20463,"rrname":"tulacavosad.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:26.367990+0100","flow_id":1005971852139894,"pcap_cnt":4704,"event_type":"dns","src_ip":"192.168.1.100","src_port":54117,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":22302,"rrname":"rydyvigecot.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.107286+0100","flow_id":477113201697558,"pcap_cnt":4776,"event_type":"dns","src_ip":"192.168.1.100","src_port":57649,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":32484,"rrname":"cidufitojex.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.828030+0100","flow_id":1509457982158936,"pcap_cnt":3792,"event_type":"dns","src_ip":"192.168.1.100","src_port":64147,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1872,"rrname":"jefudidiryl.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:28.509349+0100","flow_id":716488907265060,"pcap_cnt":5431,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65264,"proto":"UDP","dns":{"type":"answer","id":20463,"rcode":"NXDOMAIN","rrname":"tulacavosad.eu"}}
{"timestamp":"2017-12-12T18:33:20.290227+0100","flow_id":1910324460547221,"pcap_cnt":3121,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62249,"proto":"UDP","dns":{"type":"answer","id":30423,"rcode":"NXDOMAIN","rrname":"dixotuzipuh.eu"}}
{"timestamp":"2017-12-12T18:33:28.509349+0100","flow_id":716488907265060,"pcap_cnt":5431,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65264,"proto":"UDP","dns":{"type":"answer","id":20463,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:27.107527+0100","flow_id":477113201697558,"pcap_cnt":4777,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57649,"proto":"UDP","dns":{"type":"answer","id":32484,"rcode":"NXDOMAIN","rrname":"cidufitojex.eu"}}
{"timestamp":"2017-12-12T18:33:21.828272+0100","flow_id":1509457982158936,"pcap_cnt":3793,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64147,"proto":"UDP","dns":{"type":"answer","id":1872,"rcode":"NXDOMAIN","rrname":"jefudidiryl.eu"}}
{"timestamp":"2017-12-12T18:33:21.487504+0100","flow_id":1985256607543089,"pcap_cnt":3665,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51890,"proto":"UDP","dns":{"type":"answer","id":58849,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:25.684123+0100","flow_id":1310695486746355,"pcap_cnt":4393,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61147,"proto":"UDP","dns":{"type":"answer","id":9779,"rcode":"NXDOMAIN","rrname":"nopexifigep.eu"}}
{"timestamp":"2017-12-12T18:33:25.740785+0100","flow_id":2136742251809909,"pcap_cnt":4415,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61472,"proto":"UDP","dns":{"type":"answer","id":16936,"rcode":"NXDOMAIN","rrname":"tucyzogojat.eu"}}
{"timestamp":"2017-12-12T18:33:21.412125+0100","flow_id":647990622326342,"pcap_cnt":3631,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50644,"proto":"UDP","dns":{"type":"answer","id":18800,"rcode":"NXDOMAIN","rrname":"qekuxovuqal.eu"}}
{"timestamp":"2017-12-12T18:33:25.740785+0100","flow_id":2136742251809909,"pcap_cnt":4415,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61472,"proto":"UDP","dns":{"type":"answer","id":16936,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:20.684186+0100","flow_id":1332239042375475,"pcap_cnt":3299,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64662,"proto":"UDP","dns":{"type":"answer","id":52724,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":589}}
{"timestamp":"2017-12-12T18:33:21.412125+0100","flow_id":647990622326342,"pcap_cnt":3631,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50644,"proto":"UDP","dns":{"type":"answer","id":18800,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:22.562564+0100","flow_id":1173430479263108,"pcap_cnt":4090,"event_type":"dns","src_ip":"192.168.1.100","src_port":52185,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25587,"rrname":"xutekidywyp.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.854098+0100","flow_id":2153505508821074,"pcap_cnt":3354,"event_type":"dns","src_ip":"192.168.1.100","src_port":50006,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33315,"rrname":"tunodavuqew.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.633404+0100","flow_id":2145662898645564,"pcap_cnt":3722,"event_type":"dns","src_ip":"192.168.1.100","src_port":64482,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":46428,"rrname":"tucijalexaj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.056117+0100","flow_id":288405223234357,"pcap_cnt":3456,"event_type":"dns","src_ip":"192.168.1.100","src_port":57328,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41113,"rrname":"cidediceleg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.213132+0100","flow_id":2196309153038047,"pcap_cnt":3953,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56442,"proto":"UDP","dns":{"type":"answer","id":30180,"rcode":"NXDOMAIN","rrname":"nofypafiqev.eu"}}
{"timestamp":"2017-12-12T18:33:21.056427+0100","flow_id":288405223234357,"pcap_cnt":3457,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57328,"proto":"UDP","dns":{"type":"answer","id":41113,"rcode":"NXDOMAIN","rrname":"cidediceleg.eu"}}
{"timestamp":"2017-12-12T18:33:22.213132+0100","flow_id":2196309153038047,"pcap_cnt":3953,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56442,"proto":"UDP","dns":{"type":"answer","id":30180,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":595}}
{"timestamp":"2017-12-12T18:33:21.056427+0100","flow_id":288405223234357,"pcap_cnt":3457,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57328,"proto":"UDP","dns":{"type":"answer","id":41113,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:27.994138+0100","flow_id":1838656489204570,"pcap_cnt":5186,"event_type":"dns","src_ip":"192.168.1.100","src_port":50576,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50024,"rrname":"vowidimajaz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.062979+0100","flow_id":2031852707771907,"pcap_cnt":3460,"event_type":"dns","src_ip":"192.168.1.100","src_port":65340,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":57073,"rrname":"vopuqicyneb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.197822+0100","flow_id":1328032121881533,"pcap_cnt":3067,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51885,"proto":"UDP","dns":{"type":"answer","id":3661,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:21.063221+0100","flow_id":2031852707771907,"pcap_cnt":3461,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65340,"proto":"UDP","dns":{"type":"answer","id":57073,"rcode":"NXDOMAIN","rrname":"vopuqicyneb.eu"}}
{"timestamp":"2017-12-12T18:33:27.402335+0100","flow_id":645776567378550,"pcap_cnt":4925,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55885,"proto":"UDP","dns":{"type":"answer","id":51680,"rcode":"NXDOMAIN","rrname":"makymykakic.eu"}}
{"timestamp":"2017-12-12T18:33:22.533947+0100","flow_id":638915356796347,"pcap_cnt":4084,"event_type":"dns","src_ip":"192.168.1.100","src_port":58896,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11899,"rrname":"makagucyraj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.290550+0100","flow_id":1162592128908535,"pcap_cnt":2412,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49839,"proto":"UDP","dns":{"type":"answer","id":17661,"rcode":"NXDOMAIN","rrname":"fokyhyhumap.eu"}}
{"timestamp":"2017-12-12T18:33:17.688427+0100","flow_id":503961038822061,"pcap_cnt":2662,"event_type":"dns","src_ip":"192.168.1.100","src_port":65488,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19773,"rrname":"pujamyqywyk.eu","rrtype":"A","tx_id":2}}
{"timestamp":"2017-12-12T18:33:17.290550+0100","flow_id":1162592128908535,"pcap_cnt":2412,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49839,"proto":"UDP","dns":{"type":"answer","id":17661,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":600}}
{"timestamp":"2017-12-12T18:33:22.534185+0100","flow_id":638915356796347,"pcap_cnt":4085,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58896,"proto":"UDP","dns":{"type":"answer","id":11899,"rcode":"NXDOMAIN","rrname":"makagucyraj.eu"}}
{"timestamp":"2017-12-12T18:33:20.893516+0100","flow_id":704104370315529,"pcap_cnt":3375,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60582,"proto":"UDP","dns":{"type":"answer","id":134,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:17.530703+0100","flow_id":598319325583631,"pcap_cnt":2564,"event_type":"dns","src_ip":"192.168.1.100","src_port":51533,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28371,"rrname":"ryhadyvigis.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.336398+0100","flow_id":1329659914559700,"pcap_cnt":3591,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53436,"proto":"UDP","dns":{"type":"answer","id":63163,"rcode":"NXDOMAIN","rrname":"nozitytogim.eu"}}
{"timestamp":"2017-12-12T18:33:21.783491+0100","flow_id":1376621086036832,"pcap_cnt":3766,"event_type":"dns","src_ip":"192.168.1.100","src_port":59398,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59425,"rrname":"tuwezovyvov.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:17.530966+0100","flow_id":598319325583631,"pcap_cnt":2565,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51533,"proto":"UDP","dns":{"type":"answer","id":28371,"rcode":"NXDOMAIN","rrname":"ryhadyvigis.eu"}}
{"timestamp":"2017-12-12T18:33:25.764880+0100","flow_id":1996642566122101,"pcap_cnt":4417,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56870,"proto":"UDP","dns":{"type":"answer","id":13264,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:17.530966+0100","flow_id":598319325583631,"pcap_cnt":2565,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51533,"proto":"UDP","dns":{"type":"answer","id":28371,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:21.783783+0100","flow_id":1376621086036832,"pcap_cnt":3767,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59398,"proto":"UDP","dns":{"type":"answer","id":59425,"rcode":"NXDOMAIN","rrname":"tuwezovyvov.eu"}}
{"timestamp":"2017-12-12T18:33:25.869268+0100","flow_id":1132581045486484,"pcap_cnt":4470,"event_type":"dns","src_ip":"192.168.1.100","src_port":61943,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29337,"rrname":"puvojyqevus.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.675805+0100","flow_id":114076795883155,"pcap_cnt":4389,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65165,"proto":"UDP","dns":{"type":"answer","id":9700,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:21.783783+0100","flow_id":1376621086036832,"pcap_cnt":3767,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59398,"proto":"UDP","dns":{"type":"answer","id":59425,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:21.347902+0100","flow_id":428257948290554,"pcap_cnt":3599,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50037,"proto":"UDP","dns":{"type":"answer","id":33305,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:22.938393+0100","flow_id":1116232252280985,"pcap_cnt":4217,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56465,"proto":"UDP","dns":{"type":"answer","id":25903,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:20.887068+0100","flow_id":2141883327350802,"pcap_cnt":3367,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49878,"proto":"UDP","dns":{"type":"answer","id":25314,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:20.536967+0100","flow_id":57271558090885,"pcap_cnt":3233,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61349,"proto":"UDP","dns":{"type":"answer","id":37864,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:21.369412+0100","flow_id":24256144581380,"pcap_cnt":3610,"event_type":"dns","src_ip":"192.168.1.100","src_port":60639,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":32460,"rrname":"jejecyxyvex.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.026993+0100","flow_id":706277623818609,"pcap_cnt":3444,"event_type":"dns","src_ip":"192.168.1.100","src_port":63506,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":20688,"rrname":"vowemytybip.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.290227+0100","flow_id":1910324460547221,"pcap_cnt":3121,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62249,"proto":"UDP","dns":{"type":"answer","id":30423,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":589}}
{"timestamp":"2017-12-12T18:33:28.812138+0100","flow_id":271169519903850,"pcap_cnt":5572,"event_type":"dns","src_ip":"192.168.1.100","src_port":53869,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47533,"rrname":"cituvafumyd.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.073731+0100","flow_id":251541518884557,"pcap_cnt":3465,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51455,"proto":"UDP","dns":{"type":"answer","id":50329,"rcode":"NXDOMAIN","rrname":"rylunupumit.eu"}}
{"timestamp":"2017-12-12T18:33:27.107527+0100","flow_id":477113201697558,"pcap_cnt":4777,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57649,"proto":"UDP","dns":{"type":"answer","id":32484,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:20.358833+0100","flow_id":236060309223857,"pcap_cnt":3150,"event_type":"dns","src_ip":"192.168.1.100","src_port":59916,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8856,"rrname":"lyrynixakyn.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.567951+0100","flow_id":1599053146671285,"pcap_cnt":3690,"event_type":"dns","src_ip":"192.168.1.100","src_port":60785,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63670,"rrname":"kevacijopet.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:20.108921+0100","flow_id":40957124847993,"pcap_cnt":3028,"event_type":"dns","src_ip":"192.168.1.100","src_port":58152,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":20093,"rrname":"ganudasajov.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.359221+0100","flow_id":236060309223857,"pcap_cnt":3151,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59916,"proto":"UDP","dns":{"type":"answer","id":8856,"rcode":"NXDOMAIN","rrname":"lyrynixakyn.eu"}}
{"timestamp":"2017-12-12T18:33:21.568218+0100","flow_id":1599053146671285,"pcap_cnt":3691,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60785,"proto":"UDP","dns":{"type":"answer","id":63670,"rcode":"NXDOMAIN","rrname":"kevacijopet.eu"}}
{"timestamp":"2017-12-12T18:33:20.359221+0100","flow_id":236060309223857,"pcap_cnt":3151,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59916,"proto":"UDP","dns":{"type":"answer","id":8856,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:21.568218+0100","flow_id":1599053146671285,"pcap_cnt":3691,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60785,"proto":"UDP","dns":{"type":"answer","id":63670,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:20.411019+0100","flow_id":1777627150960011,"pcap_cnt":3170,"event_type":"dns","src_ip":"192.168.1.100","src_port":61600,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29392,"rrname":"galicasevor.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.453932+0100","flow_id":1791811280825644,"pcap_cnt":4292,"event_type":"dns","src_ip":"192.168.1.100","src_port":63956,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6736,"rrname":"rydekyqyquw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.633698+0100","flow_id":2145662898645564,"pcap_cnt":3723,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64482,"proto":"UDP","dns":{"type":"answer","id":46428,"rcode":"NXDOMAIN","rrname":"tucijalexaj.eu"}}
{"timestamp":"2017-12-12T18:33:20.411257+0100","flow_id":1777627150960011,"pcap_cnt":3171,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61600,"proto":"UDP","dns":{"type":"answer","id":29392,"rcode":"NXDOMAIN","rrname":"galicasevor.eu"}}
{"timestamp":"2017-12-12T18:33:22.562937+0100","flow_id":1173430479263108,"pcap_cnt":4091,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52185,"proto":"UDP","dns":{"type":"answer","id":25587,"rcode":"NXDOMAIN","rrname":"xutekidywyp.eu"}}
{"timestamp":"2017-12-12T18:33:21.633698+0100","flow_id":2145662898645564,"pcap_cnt":3723,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64482,"proto":"UDP","dns":{"type":"answer","id":46428,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:25.454160+0100","flow_id":1791811280825644,"pcap_cnt":4293,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63956,"proto":"UDP","dns":{"type":"answer","id":6736,"rcode":"NXDOMAIN","rrname":"rydekyqyquw.eu"}}
{"timestamp":"2017-12-12T18:33:22.610568+0100","flow_id":54071807594461,"pcap_cnt":4105,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54822,"proto":"UDP","dns":{"type":"answer","id":61192,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":554}}
{"timestamp":"2017-12-12T18:33:25.454160+0100","flow_id":1791811280825644,"pcap_cnt":4293,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63956,"proto":"UDP","dns":{"type":"answer","id":6736,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:20.847160+0100","flow_id":368274435009559,"pcap_cnt":3351,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58166,"proto":"UDP","dns":{"type":"answer","id":18789,"rcode":"NXDOMAIN","rrname":"tuwaguguwux.eu"}}
{"timestamp":"2017-12-12T18:33:22.349764+0100","flow_id":1866575923795524,"pcap_cnt":4016,"event_type":"dns","src_ip":"192.168.1.100","src_port":62538,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59544,"rrname":"pumawuqahun.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.847160+0100","flow_id":368274435009559,"pcap_cnt":3351,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58166,"proto":"UDP","dns":{"type":"answer","id":18789,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:27.994360+0100","flow_id":1838656489204570,"pcap_cnt":5187,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50576,"proto":"UDP","dns":{"type":"answer","id":50024,"rcode":"NXDOMAIN","rrname":"vowidimajaz.eu"}}
{"timestamp":"2017-12-12T18:33:21.063221+0100","flow_id":2031852707771907,"pcap_cnt":3461,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65340,"proto":"UDP","dns":{"type":"answer","id":57073,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:27.994360+0100","flow_id":1838656489204570,"pcap_cnt":5187,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50576,"proto":"UDP","dns":{"type":"answer","id":50024,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:20.717776+0100","flow_id":1557383375549392,"pcap_cnt":3306,"event_type":"dns","src_ip":"192.168.1.100","src_port":63673,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":12647,"rrname":"lyvufixyvet.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.323798+0100","flow_id":847266367795414,"pcap_cnt":3576,"event_type":"dns","src_ip":"192.168.1.100","src_port":55213,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":52453,"rrname":"qegelupumum.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.379713+0100","flow_id":1977549289015879,"pcap_cnt":4251,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58998,"proto":"UDP","dns":{"type":"answer","id":45978,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:17.688692+0100","flow_id":503961038822061,"pcap_cnt":2663,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65488,"proto":"UDP","dns":{"type":"answer","id":19773,"rcode":"NXDOMAIN","rrname":"pujamyqywyk.eu"}}
{"timestamp":"2017-12-12T18:33:20.718161+0100","flow_id":1557383375549392,"pcap_cnt":3307,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63673,"proto":"UDP","dns":{"type":"answer","id":12647,"rcode":"NXDOMAIN","rrname":"lyvufixyvet.eu"}}
{"timestamp":"2017-12-12T18:33:22.534185+0100","flow_id":638915356796347,"pcap_cnt":4085,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58896,"proto":"UDP","dns":{"type":"answer","id":11899,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":553}}
{"timestamp":"2017-12-12T18:33:25.402098+0100","flow_id":763413574001330,"pcap_cnt":4278,"event_type":"dns","src_ip":"192.168.1.100","src_port":54554,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19354,"rrname":"vocakemenir.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.336398+0100","flow_id":1329659914559700,"pcap_cnt":3591,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53436,"proto":"UDP","dns":{"type":"answer","id":63163,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:20.349776+0100","flow_id":2175811421492477,"pcap_cnt":3145,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59132,"proto":"UDP","dns":{"type":"answer","id":21060,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:22.630031+0100","flow_id":1137784398191887,"pcap_cnt":4110,"event_type":"dns","src_ip":"192.168.1.100","src_port":57508,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47206,"rrname":"dimutobihom.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.402373+0100","flow_id":763413574001330,"pcap_cnt":4279,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54554,"proto":"UDP","dns":{"type":"answer","id":19354,"rcode":"NXDOMAIN","rrname":"vocakemenir.eu"}}
{"timestamp":"2017-12-12T18:33:21.575304+0100","flow_id":1827635602769736,"pcap_cnt":3692,"event_type":"dns","src_ip":"192.168.1.100","src_port":62591,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41849,"rrname":"lyxyjijajel.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.497653+0100","flow_id":1771208322357237,"pcap_cnt":3208,"event_type":"dns","src_ip":"192.168.1.100","src_port":65401,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35634,"rrname":"citykimipat.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.858213+0100","flow_id":653163910994021,"pcap_cnt":4462,"event_type":"dns","src_ip":"192.168.1.100","src_port":49481,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31495,"rrname":"ryturilidom.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.841502+0100","flow_id":143931113330462,"pcap_cnt":3798,"event_type":"dns","src_ip":"192.168.1.100","src_port":64261,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":16252,"rrname":"xuqykodumyw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.368286+0100","flow_id":1005971852139894,"pcap_cnt":4705,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54117,"proto":"UDP","dns":{"type":"answer","id":22302,"rcode":"NXDOMAIN","rrname":"rydyvigecot.eu"}}
{"timestamp":"2017-12-12T18:33:25.405769+0100","flow_id":1736683228049673,"pcap_cnt":4282,"event_type":"dns","src_ip":"192.168.1.100","src_port":50692,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48672,"rrname":"qedixogazen.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.368286+0100","flow_id":1005971852139894,"pcap_cnt":4705,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54117,"proto":"UDP","dns":{"type":"answer","id":22302,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":577}}
{"timestamp":"2017-12-12T18:33:25.406036+0100","flow_id":1736683228049673,"pcap_cnt":4283,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50692,"proto":"UDP","dns":{"type":"answer","id":48672,"rcode":"NXDOMAIN","rrname":"qedixogazen.eu"}}
{"timestamp":"2017-12-12T18:33:21.369712+0100","flow_id":24256144581380,"pcap_cnt":3611,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60639,"proto":"UDP","dns":{"type":"answer","id":32460,"rcode":"NXDOMAIN","rrname":"jejecyxyvex.eu"}}
{"timestamp":"2017-12-12T18:33:25.406036+0100","flow_id":1736683228049673,"pcap_cnt":4283,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50692,"proto":"UDP","dns":{"type":"answer","id":48672,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:21.027243+0100","flow_id":706277623818609,"pcap_cnt":3445,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63506,"proto":"UDP","dns":{"type":"answer","id":20688,"rcode":"NXDOMAIN","rrname":"vowemytybip.eu"}}
{"timestamp":"2017-12-12T18:33:21.828272+0100","flow_id":1509457982158936,"pcap_cnt":3793,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64147,"proto":"UDP","dns":{"type":"answer","id":1872,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:28.812475+0100","flow_id":271169519903850,"pcap_cnt":5573,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53869,"proto":"UDP","dns":{"type":"answer","id":47533,"rcode":"NXDOMAIN","rrname":"cituvafumyd.eu"}}
{"timestamp":"2017-12-12T18:33:21.073731+0100","flow_id":251541518884557,"pcap_cnt":3465,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51455,"proto":"UDP","dns":{"type":"answer","id":50329,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:25.545384+0100","flow_id":541823326311016,"pcap_cnt":4358,"event_type":"dns","src_ip":"192.168.1.100","src_port":50350,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13667,"rrname":"rylicepyryf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.812475+0100","flow_id":271169519903850,"pcap_cnt":5573,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53869,"proto":"UDP","dns":{"type":"answer","id":47533,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:21.520504+0100","flow_id":469676465450941,"pcap_cnt":3683,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60419,"proto":"UDP","dns":{"type":"answer","id":3599,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:21.164319+0100","flow_id":1638180300358111,"pcap_cnt":3508,"event_type":"dns","src_ip":"192.168.1.100","src_port":53757,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62702,"rrname":"cihyfafexuw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.109186+0100","flow_id":40957124847993,"pcap_cnt":3029,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58152,"proto":"UDP","dns":{"type":"answer","id":20093,"rcode":"NXDOMAIN","rrname":"ganudasajov.eu"}}
{"timestamp":"2017-12-12T18:33:21.587219+0100","flow_id":28686403368403,"pcap_cnt":3698,"event_type":"dns","src_ip":"192.168.1.100","src_port":64349,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41290,"rrname":"gatifowyciv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.000440+0100","flow_id":107307927208376,"pcap_cnt":3852,"event_type":"dns","src_ip":"192.168.1.100","src_port":60657,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":21848,"rrname":"lykiwaryvuk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.164583+0100","flow_id":1638180300358111,"pcap_cnt":3509,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53757,"proto":"UDP","dns":{"type":"answer","id":62702,"rcode":"NXDOMAIN","rrname":"cihyfafexuw.eu"}}
{"timestamp":"2017-12-12T18:33:20.411257+0100","flow_id":1777627150960011,"pcap_cnt":3171,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61600,"proto":"UDP","dns":{"type":"answer","id":29392,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:21.164583+0100","flow_id":1638180300358111,"pcap_cnt":3509,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53757,"proto":"UDP","dns":{"type":"answer","id":62702,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:21.587462+0100","flow_id":28686403368403,"pcap_cnt":3699,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64349,"proto":"UDP","dns":{"type":"answer","id":41290,"rcode":"NXDOMAIN","rrname":"gatifowyciv.eu"}}
{"timestamp":"2017-12-12T18:33:22.595852+0100","flow_id":974756029536140,"pcap_cnt":4098,"event_type":"dns","src_ip":"192.168.1.100","src_port":50131,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36497,"rrname":"qegytuvufoq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.045607+0100","flow_id":1379767150621223,"pcap_cnt":3876,"event_type":"dns","src_ip":"192.168.1.100","src_port":64724,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60717,"rrname":"xudoxijiwef.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.458145+0100","flow_id":1278871926603169,"pcap_cnt":4298,"event_type":"dns","src_ip":"192.168.1.100","src_port":60539,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":10895,"rrname":"dimevuwevuj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.596093+0100","flow_id":974756029536140,"pcap_cnt":4099,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50131,"proto":"UDP","dns":{"type":"answer","id":36497,"rcode":"NXDOMAIN","rrname":"qegytuvufoq.eu"}}
{"timestamp":"2017-12-12T18:33:27.402335+0100","flow_id":645776567378550,"pcap_cnt":4925,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55885,"proto":"UDP","dns":{"type":"answer","id":51680,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:22.045903+0100","flow_id":1379767150621223,"pcap_cnt":3877,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64724,"proto":"UDP","dns":{"type":"answer","id":60717,"rcode":"NXDOMAIN","rrname":"xudoxijiwef.eu"}}
{"timestamp":"2017-12-12T18:33:22.350037+0100","flow_id":1866575923795524,"pcap_cnt":4017,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62538,"proto":"UDP","dns":{"type":"answer","id":59544,"rcode":"NXDOMAIN","rrname":"pumawuqahun.eu"}}
{"timestamp":"2017-12-12T18:33:22.045903+0100","flow_id":1379767150621223,"pcap_cnt":3877,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64724,"proto":"UDP","dns":{"type":"answer","id":60717,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:22.881906+0100","flow_id":283717266469917,"pcap_cnt":4191,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57948,"proto":"UDP","dns":{"type":"answer","id":13393,"rcode":"NXDOMAIN","rrname":"vojugycavov.eu"}}
{"timestamp":"2017-12-12T18:33:27.981048+0100","flow_id":807387596113290,"pcap_cnt":5176,"event_type":"dns","src_ip":"192.168.1.100","src_port":56281,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64117,"rrname":"ganenihynug.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:28.173194+0100","flow_id":437449178784906,"pcap_cnt":5270,"event_type":"dns","src_ip":"192.168.1.100","src_port":62295,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6046,"rrname":"nofidocyner.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.881906+0100","flow_id":283717266469917,"pcap_cnt":4191,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57948,"proto":"UDP","dns":{"type":"answer","id":13393,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:22.047271+0100","flow_id":2202579805321383,"pcap_cnt":3878,"event_type":"dns","src_ip":"192.168.1.100","src_port":49311,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51950,"rrname":"lygumujycen.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.952830+0100","flow_id":1063301075208702,"pcap_cnt":3406,"event_type":"dns","src_ip":"192.168.1.100","src_port":51121,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":55432,"rrname":"jeloperajov.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.718161+0100","flow_id":1557383375549392,"pcap_cnt":3307,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63673,"proto":"UDP","dns":{"type":"answer","id":12647,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:22.931837+0100","flow_id":979914285266941,"pcap_cnt":4210,"event_type":"dns","src_ip":"192.168.1.100","src_port":58870,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44786,"rrname":"rynudepebur.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.953091+0100","flow_id":1063301075208702,"pcap_cnt":3407,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51121,"proto":"UDP","dns":{"type":"answer","id":55432,"rcode":"NXDOMAIN","rrname":"jeloperajov.eu"}}
{"timestamp":"2017-12-12T18:33:20.882484+0100","flow_id":1914999531376612,"pcap_cnt":3362,"event_type":"dns","src_ip":"192.168.1.100","src_port":61253,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45922,"rrname":"divinuheluz.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:25.869601+0100","flow_id":1132581045486484,"pcap_cnt":4471,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61943,"proto":"UDP","dns":{"type":"answer","id":29337,"rcode":"NXDOMAIN","rrname":"puvojyqevus.eu"}}
{"timestamp":"2017-12-12T18:33:25.402373+0100","flow_id":763413574001330,"pcap_cnt":4279,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54554,"proto":"UDP","dns":{"type":"answer","id":19354,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:25.869601+0100","flow_id":1132581045486484,"pcap_cnt":4471,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61943,"proto":"UDP","dns":{"type":"answer","id":29337,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:20.882734+0100","flow_id":1914999531376612,"pcap_cnt":3363,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61253,"proto":"UDP","dns":{"type":"answer","id":45922,"rcode":"NXDOMAIN","rrname":"divinuheluz.eu"}}
{"timestamp":"2017-12-12T18:33:21.575587+0100","flow_id":1827635602769736,"pcap_cnt":3693,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62591,"proto":"UDP","dns":{"type":"answer","id":41849,"rcode":"NXDOMAIN","rrname":"lyxyjijajel.eu"}}
{"timestamp":"2017-12-12T18:33:20.497984+0100","flow_id":1771208322357237,"pcap_cnt":3209,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65401,"proto":"UDP","dns":{"type":"answer","id":35634,"rcode":"NXDOMAIN","rrname":"citykimipat.eu"}}
{"timestamp":"2017-12-12T18:33:20.882734+0100","flow_id":1914999531376612,"pcap_cnt":3363,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61253,"proto":"UDP","dns":{"type":"answer","id":45922,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:21.575587+0100","flow_id":1827635602769736,"pcap_cnt":3693,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62591,"proto":"UDP","dns":{"type":"answer","id":41849,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:20.897276+0100","flow_id":853650836599036,"pcap_cnt":3378,"event_type":"dns","src_ip":"192.168.1.100","src_port":59816,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2649,"rrname":"vonabakyvyk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.369712+0100","flow_id":24256144581380,"pcap_cnt":3611,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60639,"proto":"UDP","dns":{"type":"answer","id":32460,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:21.027243+0100","flow_id":706277623818609,"pcap_cnt":3445,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63506,"proto":"UDP","dns":{"type":"answer","id":20688,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:20.897559+0100","flow_id":853650836599036,"pcap_cnt":3379,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59816,"proto":"UDP","dns":{"type":"answer","id":2649,"rcode":"NXDOMAIN","rrname":"vonabakyvyk.eu"}}
{"timestamp":"2017-12-12T18:33:21.850357+0100","flow_id":1410244238506421,"pcap_cnt":3800,"event_type":"dns","src_ip":"192.168.1.100","src_port":57707,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45498,"rrname":"lyravodezyl.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.897559+0100","flow_id":853650836599036,"pcap_cnt":3379,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59816,"proto":"UDP","dns":{"type":"answer","id":2649,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:27.182111+0100","flow_id":330208140314463,"pcap_cnt":4814,"event_type":"dns","src_ip":"192.168.1.100","src_port":65262,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29993,"rrname":"marixecoguv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.162274+0100","flow_id":1304033992538594,"pcap_cnt":4612,"event_type":"dns","src_ip":"192.168.1.100","src_port":63731,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":15515,"rrname":"cihevykupoc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.182409+0100","flow_id":330208140314463,"pcap_cnt":4815,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65262,"proto":"UDP","dns":{"type":"answer","id":29993,"rcode":"NXDOMAIN","rrname":"marixecoguv.eu"}}
{"timestamp":"2017-12-12T18:33:29.384199+0100","flow_id":1752091423530183,"pcap_cnt":5840,"event_type":"dns","src_ip":"192.168.1.100","src_port":53637,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62091,"rrname":"jewucidafyb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.162529+0100","flow_id":1304033992538594,"pcap_cnt":4613,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63731,"proto":"UDP","dns":{"type":"answer","id":15515,"rcode":"NXDOMAIN","rrname":"cihevykupoc.eu"}}
{"timestamp":"2017-12-12T18:33:20.109186+0100","flow_id":40957124847993,"pcap_cnt":3029,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58152,"proto":"UDP","dns":{"type":"answer","id":20093,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:26.162529+0100","flow_id":1304033992538594,"pcap_cnt":4613,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63731,"proto":"UDP","dns":{"type":"answer","id":15515,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:29.384442+0100","flow_id":1752091423530183,"pcap_cnt":5841,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53637,"proto":"UDP","dns":{"type":"answer","id":62091,"rcode":"NXDOMAIN","rrname":"jewucidafyb.eu"}}
{"timestamp":"2017-12-12T18:33:22.562937+0100","flow_id":1173430479263108,"pcap_cnt":4091,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52185,"proto":"UDP","dns":{"type":"answer","id":25587,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":554}}
{"timestamp":"2017-12-12T18:33:20.162511+0100","flow_id":982894992456399,"pcap_cnt":3052,"event_type":"dns","src_ip":"192.168.1.100","src_port":59710,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4665,"rrname":"mamasufexix.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.367552+0100","flow_id":258104228944832,"pcap_cnt":3608,"event_type":"dns","src_ip":"192.168.1.100","src_port":49259,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18382,"rrname":"foxusyzosex.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.794942+0100","flow_id":43441763524926,"pcap_cnt":4154,"event_type":"dns","src_ip":"192.168.1.100","src_port":62061,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18716,"rrname":"voworemoziv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.162794+0100","flow_id":982894992456399,"pcap_cnt":3053,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59710,"proto":"UDP","dns":{"type":"answer","id":4665,"rcode":"NXDOMAIN","rrname":"mamasufexix.eu"}}
{"timestamp":"2017-12-12T18:33:21.587462+0100","flow_id":28686403368403,"pcap_cnt":3699,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64349,"proto":"UDP","dns":{"type":"answer","id":41290,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:20.162794+0100","flow_id":982894992456399,"pcap_cnt":3053,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59710,"proto":"UDP","dns":{"type":"answer","id":4665,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:21.367817+0100","flow_id":258104228944832,"pcap_cnt":3609,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49259,"proto":"UDP","dns":{"type":"answer","id":18382,"rcode":"NXDOMAIN","rrname":"foxusyzosex.eu"}}
{"timestamp":"2017-12-12T18:33:22.596093+0100","flow_id":974756029536140,"pcap_cnt":4099,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50131,"proto":"UDP","dns":{"type":"answer","id":36497,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":554}}
{"timestamp":"2017-12-12T18:33:25.458516+0100","flow_id":1278871926603169,"pcap_cnt":4299,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60539,"proto":"UDP","dns":{"type":"answer","id":10895,"rcode":"NXDOMAIN","rrname":"dimevuwevuj.eu"}}
{"timestamp":"2017-12-12T18:33:22.350037+0100","flow_id":1866575923795524,"pcap_cnt":4017,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62538,"proto":"UDP","dns":{"type":"answer","id":59544,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:21.324081+0100","flow_id":847266367795414,"pcap_cnt":3577,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55213,"proto":"UDP","dns":{"type":"answer","id":52453,"rcode":"NXDOMAIN","rrname":"qegelupumum.eu"}}
{"timestamp":"2017-12-12T18:33:25.458516+0100","flow_id":1278871926603169,"pcap_cnt":4299,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60539,"proto":"UDP","dns":{"type":"answer","id":10895,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:21.324081+0100","flow_id":847266367795414,"pcap_cnt":3577,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55213,"proto":"UDP","dns":{"type":"answer","id":52453,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:20.563778+0100","flow_id":986386800876098,"pcap_cnt":3242,"event_type":"dns","src_ip":"192.168.1.100","src_port":53200,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7143,"rrname":"tujeqoqybar.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.363923+0100","flow_id":702457250418067,"pcap_cnt":3606,"event_type":"dns","src_ip":"192.168.1.100","src_port":64830,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8521,"rrname":"divejezumes.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.686840+0100","flow_id":138122169776888,"pcap_cnt":2658,"event_type":"dns","src_ip":"192.168.1.100","src_port":59306,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29494,"rrname":"tulipeqevyw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.047550+0100","flow_id":2202579805321383,"pcap_cnt":3879,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49311,"proto":"UDP","dns":{"type":"answer","id":51950,"rcode":"NXDOMAIN","rrname":"lygumujycen.eu"}}
{"timestamp":"2017-12-12T18:33:22.630305+0100","flow_id":1137784398191887,"pcap_cnt":4111,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57508,"proto":"UDP","dns":{"type":"answer","id":47206,"rcode":"NXDOMAIN","rrname":"dimutobihom.eu"}}
{"timestamp":"2017-12-12T18:33:22.932164+0100","flow_id":979914285266941,"pcap_cnt":4211,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58870,"proto":"UDP","dns":{"type":"answer","id":44786,"rcode":"NXDOMAIN","rrname":"rynudepebur.eu"}}
{"timestamp":"2017-12-12T18:33:20.953091+0100","flow_id":1063301075208702,"pcap_cnt":3407,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51121,"proto":"UDP","dns":{"type":"answer","id":55432,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:22.630305+0100","flow_id":1137784398191887,"pcap_cnt":4111,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57508,"proto":"UDP","dns":{"type":"answer","id":47206,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":554}}
{"timestamp":"2017-12-12T18:33:20.649513+0100","flow_id":1902733104496865,"pcap_cnt":3282,"event_type":"dns","src_ip":"192.168.1.100","src_port":53537,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48926,"rrname":"noretekyvuv.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:26.029640+0100","flow_id":1087552606983321,"pcap_cnt":4542,"event_type":"dns","src_ip":"192.168.1.100","src_port":51957,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25185,"rrname":"pupucuvymup.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:22.724874+0100","flow_id":1817849519804298,"pcap_cnt":4134,"event_type":"dns","src_ip":"192.168.1.100","src_port":53238,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31093,"rrname":"lykemujebeq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.959327+0100","flow_id":1215789594092383,"pcap_cnt":3416,"event_type":"dns","src_ip":"192.168.1.100","src_port":53884,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8197,"rrname":"rydacoqybob.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.649797+0100","flow_id":1902733104496865,"pcap_cnt":3283,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53537,"proto":"UDP","dns":{"type":"answer","id":48926,"rcode":"NXDOMAIN","rrname":"noretekyvuv.eu"}}
{"timestamp":"2017-12-12T18:33:26.029914+0100","flow_id":1087552606983321,"pcap_cnt":4543,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51957,"proto":"UDP","dns":{"type":"answer","id":25185,"rcode":"NXDOMAIN","rrname":"pupucuvymup.eu"}}
{"timestamp":"2017-12-12T18:33:20.649797+0100","flow_id":1902733104496865,"pcap_cnt":3283,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53537,"proto":"UDP","dns":{"type":"answer","id":48926,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:20.959600+0100","flow_id":1215789594092383,"pcap_cnt":3417,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53884,"proto":"UDP","dns":{"type":"answer","id":8197,"rcode":"NXDOMAIN","rrname":"rydacoqybob.eu"}}
{"timestamp":"2017-12-12T18:33:21.590465+0100","flow_id":871816400798337,"pcap_cnt":3700,"event_type":"dns","src_ip":"192.168.1.100","src_port":55926,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38891,"rrname":"cihaqokiwel.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.959600+0100","flow_id":1215789594092383,"pcap_cnt":3417,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53884,"proto":"UDP","dns":{"type":"answer","id":8197,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:20.651178+0100","flow_id":1018210361077674,"pcap_cnt":3284,"event_type":"dns","src_ip":"192.168.1.100","src_port":59063,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17765,"rrname":"mamunekuryd.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.128018+0100","flow_id":2039641630962706,"pcap_cnt":3492,"event_type":"dns","src_ip":"192.168.1.100","src_port":58576,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":55455,"rrname":"disytisycil.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.616171+0100","flow_id":1154027964425963,"pcap_cnt":3714,"event_type":"dns","src_ip":"192.168.1.100","src_port":56360,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37512,"rrname":"fodylowahif.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.962080+0100","flow_id":1605613710781984,"pcap_cnt":3420,"event_type":"dns","src_ip":"192.168.1.100","src_port":62633,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34014,"rrname":"qegiqiqakof.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.651452+0100","flow_id":1018210361077674,"pcap_cnt":3285,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59063,"proto":"UDP","dns":{"type":"answer","id":17765,"rcode":"NXDOMAIN","rrname":"mamunekuryd.eu"}}
{"timestamp":"2017-12-12T18:33:25.545720+0100","flow_id":541823326311016,"pcap_cnt":4359,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50350,"proto":"UDP","dns":{"type":"answer","id":13667,"rcode":"NXDOMAIN","rrname":"rylicepyryf.eu"}}
{"timestamp":"2017-12-12T18:33:20.651452+0100","flow_id":1018210361077674,"pcap_cnt":3285,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59063,"proto":"UDP","dns":{"type":"answer","id":17765,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:25.545720+0100","flow_id":541823326311016,"pcap_cnt":4359,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50350,"proto":"UDP","dns":{"type":"answer","id":13667,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:20.854370+0100","flow_id":2153505508821074,"pcap_cnt":3355,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50006,"proto":"UDP","dns":{"type":"answer","id":33315,"rcode":"NXDOMAIN","rrname":"tunodavuqew.eu"}}
{"timestamp":"2017-12-12T18:33:20.845234+0100","flow_id":1291078221892368,"pcap_cnt":3348,"event_type":"dns","src_ip":"192.168.1.100","src_port":53175,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44820,"rrname":"qetevavahew.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:26.316035+0100","flow_id":1378491545604739,"pcap_cnt":4670,"event_type":"dns","src_ip":"192.168.1.100","src_port":63092,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4108,"rrname":"jepuqoxupit.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.854370+0100","flow_id":2153505508821074,"pcap_cnt":3355,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50006,"proto":"UDP","dns":{"type":"answer","id":33315,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:20.845571+0100","flow_id":1291078221892368,"pcap_cnt":3349,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53175,"proto":"UDP","dns":{"type":"answer","id":44820,"rcode":"NXDOMAIN","rrname":"qetevavahew.eu"}}
{"timestamp":"2017-12-12T18:33:29.384442+0100","flow_id":1752091423530183,"pcap_cnt":5841,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53637,"proto":"UDP","dns":{"type":"answer","id":62091,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:20.845571+0100","flow_id":1291078221892368,"pcap_cnt":3349,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53175,"proto":"UDP","dns":{"type":"answer","id":44820,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:22.865829+0100","flow_id":504665416545829,"pcap_cnt":4186,"event_type":"dns","src_ip":"192.168.1.100","src_port":59044,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":46374,"rrname":"cilyzycojod.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.954277+0100","flow_id":1608405439516581,"pcap_cnt":3408,"event_type":"dns","src_ip":"192.168.1.100","src_port":58930,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37486,"rrname":"gacuhawipod.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.514948+0100","flow_id":578998416038788,"pcap_cnt":5906,"event_type":"dns","src_ip":"192.168.1.100","src_port":64857,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51580,"rrname":"fogefobunik.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.866163+0100","flow_id":504665416545829,"pcap_cnt":4187,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59044,"proto":"UDP","dns":{"type":"answer","id":46374,"rcode":"NXDOMAIN","rrname":"cilyzycojod.eu"}}
{"timestamp":"2017-12-12T18:33:20.401302+0100","flow_id":1814074243424150,"pcap_cnt":3168,"event_type":"dns","src_ip":"192.168.1.100","src_port":58038,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60651,"rrname":"pumojopymol.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.367817+0100","flow_id":258104228944832,"pcap_cnt":3609,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49259,"proto":"UDP","dns":{"type":"answer","id":18382,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:21.968766+0100","flow_id":253330372806718,"pcap_cnt":3840,"event_type":"dns","src_ip":"192.168.1.100","src_port":63139,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2553,"rrname":"pupoliqotul.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.688692+0100","flow_id":503961038822061,"pcap_cnt":2663,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65488,"proto":"UDP","dns":{"type":"answer","id":19773,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:21.818098+0100","flow_id":599863366613938,"pcap_cnt":3782,"event_type":"dns","src_ip":"192.168.1.100","src_port":58875,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35712,"rrname":"masafytunux.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.969145+0100","flow_id":253330372806718,"pcap_cnt":3841,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63139,"proto":"UDP","dns":{"type":"answer","id":2553,"rcode":"NXDOMAIN","rrname":"pupoliqotul.eu"}}
{"timestamp":"2017-12-12T18:33:22.706170+0100","flow_id":2203975669696122,"pcap_cnt":4128,"event_type":"dns","src_ip":"192.168.1.100","src_port":58393,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34711,"rrname":"jecijyjudew.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.969145+0100","flow_id":253330372806718,"pcap_cnt":3841,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63139,"proto":"UDP","dns":{"type":"answer","id":2553,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":595}}
{"timestamp":"2017-12-12T18:33:21.818357+0100","flow_id":599863366613938,"pcap_cnt":3783,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58875,"proto":"UDP","dns":{"type":"answer","id":35712,"rcode":"NXDOMAIN","rrname":"masafytunux.eu"}}
{"timestamp":"2017-12-12T18:33:25.460148+0100","flow_id":241482705732980,"pcap_cnt":4300,"event_type":"dns","src_ip":"192.168.1.100","src_port":58669,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19041,"rrname":"fobykuwyruq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.818357+0100","flow_id":599863366613938,"pcap_cnt":3783,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58875,"proto":"UDP","dns":{"type":"answer","id":35712,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:20.564027+0100","flow_id":986386800876098,"pcap_cnt":3243,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53200,"proto":"UDP","dns":{"type":"answer","id":7143,"rcode":"NXDOMAIN","rrname":"tujeqoqybar.eu"}}
{"timestamp":"2017-12-12T18:33:21.364186+0100","flow_id":702457250418067,"pcap_cnt":3607,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64830,"proto":"UDP","dns":{"type":"answer","id":8521,"rcode":"NXDOMAIN","rrname":"divejezumes.eu"}}
{"timestamp":"2017-12-12T18:33:25.460423+0100","flow_id":241482705732980,"pcap_cnt":4301,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58669,"proto":"UDP","dns":{"type":"answer","id":19041,"rcode":"NXDOMAIN","rrname":"fobykuwyruq.eu"}}
{"timestamp":"2017-12-12T18:33:25.858528+0100","flow_id":653163910994021,"pcap_cnt":4463,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49481,"proto":"UDP","dns":{"type":"answer","id":31495,"rcode":"NXDOMAIN","rrname":"ryturilidom.eu"}}
{"timestamp":"2017-12-12T18:33:22.932164+0100","flow_id":979914285266941,"pcap_cnt":4211,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58870,"proto":"UDP","dns":{"type":"answer","id":44786,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:17.687070+0100","flow_id":138122169776888,"pcap_cnt":2659,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59306,"proto":"UDP","dns":{"type":"answer","id":29494,"rcode":"NXDOMAIN","rrname":"tulipeqevyw.eu"}}
{"timestamp":"2017-12-12T18:33:25.858528+0100","flow_id":653163910994021,"pcap_cnt":4463,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49481,"proto":"UDP","dns":{"type":"answer","id":31495,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:25.782174+0100","flow_id":1348044522385246,"pcap_cnt":4424,"event_type":"dns","src_ip":"192.168.1.100","src_port":58468,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42250,"rrname":"lyvevonifun.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.497984+0100","flow_id":1771208322357237,"pcap_cnt":3209,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65401,"proto":"UDP","dns":{"type":"answer","id":35634,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:25.935662+0100","flow_id":128164288612078,"pcap_cnt":4494,"event_type":"dns","src_ip":"192.168.1.100","src_port":64432,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60027,"rrname":"galavozaxog.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.782408+0100","flow_id":1348044522385246,"pcap_cnt":4425,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58468,"proto":"UDP","dns":{"type":"answer","id":42250,"rcode":"NXDOMAIN","rrname":"lyvevonifun.eu"}}
{"timestamp":"2017-12-12T18:33:26.029914+0100","flow_id":1087552606983321,"pcap_cnt":4543,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51957,"proto":"UDP","dns":{"type":"answer","id":25185,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:20.628643+0100","flow_id":1367051899803555,"pcap_cnt":3272,"event_type":"dns","src_ip":"192.168.1.100","src_port":64375,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":54370,"rrname":"marimutitom.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.383064+0100","flow_id":1389196751263832,"pcap_cnt":3618,"event_type":"dns","src_ip":"192.168.1.100","src_port":53316,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47804,"rrname":"kefyjuxiwap.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.684123+0100","flow_id":1310695486746355,"pcap_cnt":4393,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61147,"proto":"UDP","dns":{"type":"answer","id":9779,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:20.628944+0100","flow_id":1367051899803555,"pcap_cnt":3273,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64375,"proto":"UDP","dns":{"type":"answer","id":54370,"rcode":"NXDOMAIN","rrname":"marimutitom.eu"}}
{"timestamp":"2017-12-12T18:33:21.590726+0100","flow_id":871816400798337,"pcap_cnt":3701,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55926,"proto":"UDP","dns":{"type":"answer","id":38891,"rcode":"NXDOMAIN","rrname":"cihaqokiwel.eu"}}
{"timestamp":"2017-12-12T18:33:21.850688+0100","flow_id":1410244238506421,"pcap_cnt":3801,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57707,"proto":"UDP","dns":{"type":"answer","id":45498,"rcode":"NXDOMAIN","rrname":"lyravodezyl.eu"}}
{"timestamp":"2017-12-12T18:33:21.616435+0100","flow_id":1154027964425963,"pcap_cnt":3715,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56360,"proto":"UDP","dns":{"type":"answer","id":37512,"rcode":"NXDOMAIN","rrname":"fodylowahif.eu"}}
{"timestamp":"2017-12-12T18:33:25.805759+0100","flow_id":376282401819519,"pcap_cnt":4438,"event_type":"dns","src_ip":"192.168.1.100","src_port":56088,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":24443,"rrname":"masijemaxud.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.850688+0100","flow_id":1410244238506421,"pcap_cnt":3801,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57707,"proto":"UDP","dns":{"type":"answer","id":45498,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:21.616435+0100","flow_id":1154027964425963,"pcap_cnt":3715,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56360,"proto":"UDP","dns":{"type":"answer","id":37512,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:25.848675+0100","flow_id":1270696456352547,"pcap_cnt":4452,"event_type":"dns","src_ip":"192.168.1.100","src_port":60286,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38401,"rrname":"ryqyqequsud.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.000789+0100","flow_id":107307927208376,"pcap_cnt":3853,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60657,"proto":"UDP","dns":{"type":"answer","id":21848,"rcode":"NXDOMAIN","rrname":"lykiwaryvuk.eu"}}
{"timestamp":"2017-12-12T18:33:22.010727+0100","flow_id":795806217152999,"pcap_cnt":3860,"event_type":"dns","src_ip":"192.168.1.100","src_port":64193,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1052,"rrname":"gacucuhumeg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.848961+0100","flow_id":1270696456352547,"pcap_cnt":4453,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60286,"proto":"UDP","dns":{"type":"answer","id":38401,"rcode":"NXDOMAIN","rrname":"ryqyqequsud.eu"}}
{"timestamp":"2017-12-12T18:33:21.040814+0100","flow_id":2123614684028782,"pcap_cnt":3448,"event_type":"dns","src_ip":"192.168.1.100","src_port":62076,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":52813,"rrname":"lykuvuxureg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.848961+0100","flow_id":1270696456352547,"pcap_cnt":4453,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60286,"proto":"UDP","dns":{"type":"answer","id":38401,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:22.795230+0100","flow_id":43441763524926,"pcap_cnt":4155,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62061,"proto":"UDP","dns":{"type":"answer","id":18716,"rcode":"NXDOMAIN","rrname":"voworemoziv.eu"}}
{"timestamp":"2017-12-12T18:33:20.942206+0100","flow_id":1087681457053822,"pcap_cnt":3398,"event_type":"dns","src_ip":"192.168.1.100","src_port":56614,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33303,"rrname":"xuqesunipam.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.515161+0100","flow_id":578998416038788,"pcap_cnt":5907,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64857,"proto":"UDP","dns":{"type":"answer","id":51580,"rcode":"NXDOMAIN","rrname":"fogefobunik.eu"}}
{"timestamp":"2017-12-12T18:33:22.795230+0100","flow_id":43441763524926,"pcap_cnt":4155,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62061,"proto":"UDP","dns":{"type":"answer","id":18716,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:22.866163+0100","flow_id":504665416545829,"pcap_cnt":4187,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59044,"proto":"UDP","dns":{"type":"answer","id":46374,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:29.515161+0100","flow_id":578998416038788,"pcap_cnt":5907,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64857,"proto":"UDP","dns":{"type":"answer","id":51580,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:27.981338+0100","flow_id":807387596113290,"pcap_cnt":5177,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56281,"proto":"UDP","dns":{"type":"answer","id":64117,"rcode":"NXDOMAIN","rrname":"ganenihynug.eu"}}
{"timestamp":"2017-12-12T18:33:22.882924+0100","flow_id":1400290651830508,"pcap_cnt":4192,"event_type":"dns","src_ip":"192.168.1.100","src_port":60232,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48787,"rrname":"nofotycywos.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.173502+0100","flow_id":437449178784906,"pcap_cnt":5271,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62295,"proto":"UDP","dns":{"type":"answer","id":6046,"rcode":"NXDOMAIN","rrname":"nofidocyner.eu"}}
{"timestamp":"2017-12-12T18:33:29.600495+0100","flow_id":1084017849349239,"pcap_cnt":5942,"event_type":"dns","src_ip":"192.168.1.100","src_port":51162,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25664,"rrname":"rytukuqunun.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:22.706462+0100","flow_id":2203975669696122,"pcap_cnt":4129,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58393,"proto":"UDP","dns":{"type":"answer","id":34711,"rcode":"NXDOMAIN","rrname":"jecijyjudew.eu"}}
{"timestamp":"2017-12-12T18:33:22.883256+0100","flow_id":1400290651830508,"pcap_cnt":4193,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60232,"proto":"UDP","dns":{"type":"answer","id":48787,"rcode":"NXDOMAIN","rrname":"nofotycywos.eu"}}
{"timestamp":"2017-12-12T18:33:20.564027+0100","flow_id":986386800876098,"pcap_cnt":3243,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53200,"proto":"UDP","dns":{"type":"answer","id":7143,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:22.883256+0100","flow_id":1400290651830508,"pcap_cnt":4193,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60232,"proto":"UDP","dns":{"type":"answer","id":48787,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:21.996209+0100","flow_id":1283467541054066,"pcap_cnt":3848,"event_type":"dns","src_ip":"192.168.1.100","src_port":56297,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47726,"rrname":"cidykatafuj.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:21.364186+0100","flow_id":702457250418067,"pcap_cnt":3607,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64830,"proto":"UDP","dns":{"type":"answer","id":8521,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:20.932605+0100","flow_id":711629152991997,"pcap_cnt":3392,"event_type":"dns","src_ip":"192.168.1.100","src_port":60987,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37746,"rrname":"jefyqynofaj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.563679+0100","flow_id":763413574001330,"pcap_cnt":4360,"event_type":"dns","src_ip":"192.168.1.100","src_port":54554,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50652,"rrname":"tujajepifyv.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:17.687070+0100","flow_id":138122169776888,"pcap_cnt":2659,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59306,"proto":"UDP","dns":{"type":"answer","id":29494,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:26.416738+0100","flow_id":463586202115042,"pcap_cnt":4736,"event_type":"dns","src_ip":"192.168.1.100","src_port":57054,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59958,"rrname":"novixamymyf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.563969+0100","flow_id":763413574001330,"pcap_cnt":4361,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54554,"proto":"UDP","dns":{"type":"answer","id":50652,"rcode":"NXDOMAIN","rrname":"tujajepifyv.eu"}}
{"timestamp":"2017-12-12T18:33:17.783166+0100","flow_id":1370124948730686,"pcap_cnt":2708,"event_type":"dns","src_ip":"192.168.1.100","src_port":52509,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9104,"rrname":"xubysaxywil.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.725143+0100","flow_id":1817849519804298,"pcap_cnt":4135,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53238,"proto":"UDP","dns":{"type":"answer","id":31093,"rcode":"NXDOMAIN","rrname":"lykemujebeq.eu"}}
{"timestamp":"2017-12-12T18:33:21.145931+0100","flow_id":522880372783627,"pcap_cnt":3498,"event_type":"dns","src_ip":"192.168.1.100","src_port":58138,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":10293,"rrname":"kemipynunap.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.935976+0100","flow_id":128164288612078,"pcap_cnt":4495,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64432,"proto":"UDP","dns":{"type":"answer","id":60027,"rcode":"NXDOMAIN","rrname":"galavozaxog.eu"}}
{"timestamp":"2017-12-12T18:33:25.782408+0100","flow_id":1348044522385246,"pcap_cnt":4425,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58468,"proto":"UDP","dns":{"type":"answer","id":42250,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:26.109904+0100","flow_id":329404981357904,"pcap_cnt":4582,"event_type":"dns","src_ip":"192.168.1.100","src_port":57650,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":55012,"rrname":"tulipeqevyw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.725143+0100","flow_id":1817849519804298,"pcap_cnt":4135,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53238,"proto":"UDP","dns":{"type":"answer","id":31093,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:25.935976+0100","flow_id":128164288612078,"pcap_cnt":4495,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64432,"proto":"UDP","dns":{"type":"answer","id":60027,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:21.590726+0100","flow_id":871816400798337,"pcap_cnt":3701,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55926,"proto":"UDP","dns":{"type":"answer","id":38891,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:21.128267+0100","flow_id":2039641630962706,"pcap_cnt":3493,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58576,"proto":"UDP","dns":{"type":"answer","id":55455,"rcode":"NXDOMAIN","rrname":"disytisycil.eu"}}
{"timestamp":"2017-12-12T18:33:26.110196+0100","flow_id":329404981357904,"pcap_cnt":4583,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57650,"proto":"UDP","dns":{"type":"answer","id":55012,"rcode":"NXDOMAIN","rrname":"tulipeqevyw.eu"}}
{"timestamp":"2017-12-12T18:33:20.962324+0100","flow_id":1605613710781984,"pcap_cnt":3421,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62633,"proto":"UDP","dns":{"type":"answer","id":34014,"rcode":"NXDOMAIN","rrname":"qegiqiqakof.eu"}}
{"timestamp":"2017-12-12T18:33:21.128267+0100","flow_id":2039641630962706,"pcap_cnt":3493,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58576,"proto":"UDP","dns":{"type":"answer","id":55455,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:22.161705+0100","flow_id":1582648520767401,"pcap_cnt":3930,"event_type":"dns","src_ip":"192.168.1.100","src_port":60945,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28543,"rrname":"vofogucyxoz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.545531+0100","flow_id":1233025297830651,"pcap_cnt":3236,"event_type":"dns","src_ip":"192.168.1.100","src_port":62551,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6716,"rrname":"ganenihynug.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.000789+0100","flow_id":107307927208376,"pcap_cnt":3853,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60657,"proto":"UDP","dns":{"type":"answer","id":21848,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:26.316291+0100","flow_id":1378491545604739,"pcap_cnt":4671,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63092,"proto":"UDP","dns":{"type":"answer","id":4108,"rcode":"NXDOMAIN","rrname":"jepuqoxupit.eu"}}
{"timestamp":"2017-12-12T18:33:22.011067+0100","flow_id":795806217152999,"pcap_cnt":3861,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64193,"proto":"UDP","dns":{"type":"answer","id":1052,"rcode":"NXDOMAIN","rrname":"gacucuhumeg.eu"}}
{"timestamp":"2017-12-12T18:33:20.954540+0100","flow_id":1608405439516581,"pcap_cnt":3409,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58930,"proto":"UDP","dns":{"type":"answer","id":37486,"rcode":"NXDOMAIN","rrname":"gacuhawipod.eu"}}
{"timestamp":"2017-12-12T18:33:21.041138+0100","flow_id":2123614684028782,"pcap_cnt":3449,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62076,"proto":"UDP","dns":{"type":"answer","id":52813,"rcode":"NXDOMAIN","rrname":"lykuvuxureg.eu"}}
{"timestamp":"2017-12-12T18:33:20.545799+0100","flow_id":1233025297830651,"pcap_cnt":3237,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62551,"proto":"UDP","dns":{"type":"answer","id":6716,"rcode":"NXDOMAIN","rrname":"ganenihynug.eu"}}
{"timestamp":"2017-12-12T18:33:20.401621+0100","flow_id":1814074243424150,"pcap_cnt":3169,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58038,"proto":"UDP","dns":{"type":"answer","id":60651,"rcode":"NXDOMAIN","rrname":"pumojopymol.eu"}}
{"timestamp":"2017-12-12T18:33:20.942481+0100","flow_id":1087681457053822,"pcap_cnt":3399,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56614,"proto":"UDP","dns":{"type":"answer","id":33303,"rcode":"NXDOMAIN","rrname":"xuqesunipam.eu"}}
{"timestamp":"2017-12-12T18:33:20.545799+0100","flow_id":1233025297830651,"pcap_cnt":3237,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62551,"proto":"UDP","dns":{"type":"answer","id":6716,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:25.455399+0100","flow_id":1035420295361255,"pcap_cnt":4294,"event_type":"dns","src_ip":"192.168.1.100","src_port":61112,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60155,"rrname":"tupudyqusuj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.981338+0100","flow_id":807387596113290,"pcap_cnt":5177,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56281,"proto":"UDP","dns":{"type":"answer","id":64117,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:20.626413+0100","flow_id":524080816099053,"pcap_cnt":3268,"event_type":"dns","src_ip":"192.168.1.100","src_port":62269,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14929,"rrname":"vofejutalom.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.455662+0100","flow_id":1035420295361255,"pcap_cnt":4295,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61112,"proto":"UDP","dns":{"type":"answer","id":60155,"rcode":"NXDOMAIN","rrname":"tupudyqusuj.eu"}}
{"timestamp":"2017-12-12T18:33:22.047550+0100","flow_id":2202579805321383,"pcap_cnt":3879,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49311,"proto":"UDP","dns":{"type":"answer","id":51950,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:25.455662+0100","flow_id":1035420295361255,"pcap_cnt":4295,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61112,"proto":"UDP","dns":{"type":"answer","id":60155,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:22.706462+0100","flow_id":2203975669696122,"pcap_cnt":4129,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58393,"proto":"UDP","dns":{"type":"answer","id":34711,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:29.600761+0100","flow_id":1084017849349239,"pcap_cnt":5943,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51162,"proto":"UDP","dns":{"type":"answer","id":25664,"rcode":"NXDOMAIN","rrname":"rytukuqunun.eu"}}
{"timestamp":"2017-12-12T18:33:22.462071+0100","flow_id":2002812286405879,"pcap_cnt":4060,"event_type":"dns","src_ip":"192.168.1.100","src_port":58907,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":39456,"rrname":"tuwikypabud.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.331104+0100","flow_id":938558045359456,"pcap_cnt":4236,"event_type":"dns","src_ip":"192.168.1.100","src_port":53995,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8474,"rrname":"ryqofuvenoc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.841884+0100","flow_id":143931113330462,"pcap_cnt":3799,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64261,"proto":"UDP","dns":{"type":"answer","id":16252,"rcode":"NXDOMAIN","rrname":"xuqykodumyw.eu"}}
{"timestamp":"2017-12-12T18:33:21.996488+0100","flow_id":1283467541054066,"pcap_cnt":3849,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56297,"proto":"UDP","dns":{"type":"answer","id":47726,"rcode":"NXDOMAIN","rrname":"cidykatafuj.eu"}}
{"timestamp":"2017-12-12T18:33:25.331348+0100","flow_id":938558045359456,"pcap_cnt":4237,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53995,"proto":"UDP","dns":{"type":"answer","id":8474,"rcode":"NXDOMAIN","rrname":"ryqofuvenoc.eu"}}
{"timestamp":"2017-12-12T18:33:21.396801+0100","flow_id":1618144277892609,"pcap_cnt":3622,"event_type":"dns","src_ip":"192.168.1.100","src_port":57321,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1614,"rrname":"vonujicitat.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.932886+0100","flow_id":711629152991997,"pcap_cnt":3393,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60987,"proto":"UDP","dns":{"type":"answer","id":37746,"rcode":"NXDOMAIN","rrname":"jefyqynofaj.eu"}}
{"timestamp":"2017-12-12T18:33:26.417031+0100","flow_id":463586202115042,"pcap_cnt":4737,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57054,"proto":"UDP","dns":{"type":"answer","id":59958,"rcode":"NXDOMAIN","rrname":"novixamymyf.eu"}}
{"timestamp":"2017-12-12T18:33:21.397163+0100","flow_id":1618144277892609,"pcap_cnt":3623,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57321,"proto":"UDP","dns":{"type":"answer","id":1614,"rcode":"NXDOMAIN","rrname":"vonujicitat.eu"}}
{"timestamp":"2017-12-12T18:33:17.783412+0100","flow_id":1370124948730686,"pcap_cnt":2709,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52509,"proto":"UDP","dns":{"type":"answer","id":9104,"rcode":"NXDOMAIN","rrname":"xubysaxywil.eu"}}
{"timestamp":"2017-12-12T18:33:21.146268+0100","flow_id":522880372783627,"pcap_cnt":3499,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58138,"proto":"UDP","dns":{"type":"answer","id":10293,"rcode":"NXDOMAIN","rrname":"kemipynunap.eu"}}
{"timestamp":"2017-12-12T18:33:17.783412+0100","flow_id":1370124948730686,"pcap_cnt":2709,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52509,"proto":"UDP","dns":{"type":"answer","id":9104,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:21.146268+0100","flow_id":522880372783627,"pcap_cnt":3499,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58138,"proto":"UDP","dns":{"type":"answer","id":10293,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:27.182409+0100","flow_id":330208140314463,"pcap_cnt":4815,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65262,"proto":"UDP","dns":{"type":"answer","id":29993,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:26.121838+0100","flow_id":260758518280596,"pcap_cnt":4588,"event_type":"dns","src_ip":"192.168.1.100","src_port":54504,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49646,"rrname":"pufobogyqan.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:21.481540+0100","flow_id":1569512363219204,"pcap_cnt":3660,"event_type":"dns","src_ip":"192.168.1.100","src_port":59240,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18565,"rrname":"ganepebeloj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.819852+0100","flow_id":1119436297896588,"pcap_cnt":4160,"event_type":"dns","src_ip":"192.168.1.100","src_port":52210,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":46969,"rrname":"rycypolavag.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.806022+0100","flow_id":376282401819519,"pcap_cnt":4439,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56088,"proto":"UDP","dns":{"type":"answer","id":24443,"rcode":"NXDOMAIN","rrname":"masijemaxud.eu"}}
{"timestamp":"2017-12-12T18:33:27.444148+0100","flow_id":922759004895224,"pcap_cnt":4950,"event_type":"dns","src_ip":"192.168.1.100","src_port":64084,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":57078,"rrname":"gacypizohut.eu","rrtype":"A","tx_id":2}}
{"timestamp":"2017-12-12T18:33:26.122171+0100","flow_id":260758518280596,"pcap_cnt":4589,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54504,"proto":"UDP","dns":{"type":"answer","id":49646,"rcode":"NXDOMAIN","rrname":"pufobogyqan.eu"}}
{"timestamp":"2017-12-12T18:33:25.806022+0100","flow_id":376282401819519,"pcap_cnt":4439,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56088,"proto":"UDP","dns":{"type":"answer","id":24443,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:26.122171+0100","flow_id":260758518280596,"pcap_cnt":4589,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54504,"proto":"UDP","dns":{"type":"answer","id":49646,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":577}}
{"timestamp":"2017-12-12T18:33:27.444525+0100","flow_id":922759004895224,"pcap_cnt":4951,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64084,"proto":"UDP","dns":{"type":"answer","id":57078,"rcode":"NXDOMAIN","rrname":"gacypizohut.eu"}}
{"timestamp":"2017-12-12T18:33:22.162065+0100","flow_id":1582648520767401,"pcap_cnt":3931,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60945,"proto":"UDP","dns":{"type":"answer","id":28543,"rcode":"NXDOMAIN","rrname":"vofogucyxoz.eu"}}
{"timestamp":"2017-12-12T18:33:27.444525+0100","flow_id":922759004895224,"pcap_cnt":4951,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64084,"proto":"UDP","dns":{"type":"answer","id":57078,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:25.852043+0100","flow_id":877831502757963,"pcap_cnt":4456,"event_type":"dns","src_ip":"192.168.1.100","src_port":62319,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19656,"rrname":"nojibukojoj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.143324+0100","flow_id":1061684020391900,"pcap_cnt":4604,"event_type":"dns","src_ip":"192.168.1.100","src_port":49424,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48726,"rrname":"jenabejurov.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.871052+0100","flow_id":2242973972908684,"pcap_cnt":4472,"event_type":"dns","src_ip":"192.168.1.100","src_port":51347,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49589,"rrname":"dixesywyruc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.011067+0100","flow_id":795806217152999,"pcap_cnt":3861,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64193,"proto":"UDP","dns":{"type":"answer","id":1052,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:20.954540+0100","flow_id":1608405439516581,"pcap_cnt":3409,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58930,"proto":"UDP","dns":{"type":"answer","id":37486,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:21.041138+0100","flow_id":2123614684028782,"pcap_cnt":3449,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62076,"proto":"UDP","dns":{"type":"answer","id":52813,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:17.918829+0100","flow_id":502208694912301,"pcap_cnt":2784,"event_type":"dns","src_ip":"192.168.1.100","src_port":65258,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27603,"rrname":"dimewohokol.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.871338+0100","flow_id":2242973972908684,"pcap_cnt":4473,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51347,"proto":"UDP","dns":{"type":"answer","id":49589,"rcode":"NXDOMAIN","rrname":"dixesywyruc.eu"}}
{"timestamp":"2017-12-12T18:33:20.942481+0100","flow_id":1087681457053822,"pcap_cnt":3399,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56614,"proto":"UDP","dns":{"type":"answer","id":33303,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:21.135954+0100","flow_id":6571616072158,"pcap_cnt":3496,"event_type":"dns","src_ip":"192.168.1.100","src_port":53454,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60973,"rrname":"jewujenezac.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:17.919071+0100","flow_id":502208694912301,"pcap_cnt":2785,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65258,"proto":"UDP","dns":{"type":"answer","id":27603,"rcode":"NXDOMAIN","rrname":"dimewohokol.eu"}}
{"timestamp":"2017-12-12T18:33:28.173502+0100","flow_id":437449178784906,"pcap_cnt":5271,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62295,"proto":"UDP","dns":{"type":"answer","id":6046,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:20.626731+0100","flow_id":524080816099053,"pcap_cnt":3269,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62269,"proto":"UDP","dns":{"type":"answer","id":14929,"rcode":"NXDOMAIN","rrname":"vofejutalom.eu"}}
{"timestamp":"2017-12-12T18:33:17.919071+0100","flow_id":502208694912301,"pcap_cnt":2785,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65258,"proto":"UDP","dns":{"type":"answer","id":27603,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:20.964282+0100","flow_id":566375506556602,"pcap_cnt":3422,"event_type":"dns","src_ip":"192.168.1.100","src_port":55499,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4863,"rrname":"ryhevelynyj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.460423+0100","flow_id":241482705732980,"pcap_cnt":4301,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58669,"proto":"UDP","dns":{"type":"answer","id":19041,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:28.203002+0100","flow_id":186348210755834,"pcap_cnt":5286,"event_type":"dns","src_ip":"192.168.1.100","src_port":61576,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47942,"rrname":"lymigadybiv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.626731+0100","flow_id":524080816099053,"pcap_cnt":3269,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62269,"proto":"UDP","dns":{"type":"answer","id":14929,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:22.462327+0100","flow_id":2002812286405879,"pcap_cnt":4061,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58907,"proto":"UDP","dns":{"type":"answer","id":39456,"rcode":"NXDOMAIN","rrname":"tuwikypabud.eu"}}
{"timestamp":"2017-12-12T18:33:21.841884+0100","flow_id":143931113330462,"pcap_cnt":3799,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64261,"proto":"UDP","dns":{"type":"answer","id":16252,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:21.996488+0100","flow_id":1283467541054066,"pcap_cnt":3849,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56297,"proto":"UDP","dns":{"type":"answer","id":47726,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:28.203267+0100","flow_id":186348210755834,"pcap_cnt":5287,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61576,"proto":"UDP","dns":{"type":"answer","id":47942,"rcode":"NXDOMAIN","rrname":"lymigadybiv.eu"}}
{"timestamp":"2017-12-12T18:33:25.331348+0100","flow_id":938558045359456,"pcap_cnt":4237,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53995,"proto":"UDP","dns":{"type":"answer","id":8474,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:20.932886+0100","flow_id":711629152991997,"pcap_cnt":3393,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60987,"proto":"UDP","dns":{"type":"answer","id":37746,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:22.227392+0100","flow_id":127691842025536,"pcap_cnt":3958,"event_type":"dns","src_ip":"192.168.1.100","src_port":56365,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":10665,"rrname":"jepobanagij.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.387831+0100","flow_id":897996374272759,"pcap_cnt":4262,"event_type":"dns","src_ip":"192.168.1.100","src_port":49871,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60602,"rrname":"cicucifokym.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.628944+0100","flow_id":1367051899803555,"pcap_cnt":3273,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64375,"proto":"UDP","dns":{"type":"answer","id":54370,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":589}}
{"timestamp":"2017-12-12T18:33:21.079161+0100","flow_id":1522639237625145,"pcap_cnt":3466,"event_type":"dns","src_ip":"192.168.1.100","src_port":52617,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38736,"rrname":"mamajocahab.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.002894+0100","flow_id":483897102437198,"pcap_cnt":4514,"event_type":"dns","src_ip":"192.168.1.100","src_port":50082,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64971,"rrname":"dimigesupew.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.481807+0100","flow_id":1569512363219204,"pcap_cnt":3661,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59240,"proto":"UDP","dns":{"type":"answer","id":18565,"rcode":"NXDOMAIN","rrname":"ganepebeloj.eu"}}
{"timestamp":"2017-12-12T18:33:26.110196+0100","flow_id":329404981357904,"pcap_cnt":4583,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57650,"proto":"UDP","dns":{"type":"answer","id":55012,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:20.772920+0100","flow_id":1385674878012216,"pcap_cnt":3326,"event_type":"dns","src_ip":"192.168.1.100","src_port":51195,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59921,"rrname":"masawocipel.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.820126+0100","flow_id":1119436297896588,"pcap_cnt":4161,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52210,"proto":"UDP","dns":{"type":"answer","id":46969,"rcode":"NXDOMAIN","rrname":"rycypolavag.eu"}}
{"timestamp":"2017-12-12T18:33:20.962324+0100","flow_id":1605613710781984,"pcap_cnt":3421,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62633,"proto":"UDP","dns":{"type":"answer","id":34014,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:22.820126+0100","flow_id":1119436297896588,"pcap_cnt":4161,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52210,"proto":"UDP","dns":{"type":"answer","id":46969,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:26.316291+0100","flow_id":1378491545604739,"pcap_cnt":4671,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63092,"proto":"UDP","dns":{"type":"answer","id":4108,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:22.162065+0100","flow_id":1582648520767401,"pcap_cnt":3931,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60945,"proto":"UDP","dns":{"type":"answer","id":28543,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:22.458530+0100","flow_id":964978536546082,"pcap_cnt":4054,"event_type":"dns","src_ip":"192.168.1.100","src_port":55528,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33514,"rrname":"magofetequb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.393661+0100","flow_id":1437177978683837,"pcap_cnt":4722,"event_type":"dns","src_ip":"192.168.1.100","src_port":58240,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2003,"rrname":"jejopiniduh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.555266+0100","flow_id":1416766146705666,"pcap_cnt":4996,"event_type":"dns","src_ip":"192.168.1.100","src_port":63952,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":15439,"rrname":"disenybuqyj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.852288+0100","flow_id":877831502757963,"pcap_cnt":4457,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62319,"proto":"UDP","dns":{"type":"answer","id":19656,"rcode":"NXDOMAIN","rrname":"nojibukojoj.eu"}}
{"timestamp":"2017-12-12T18:33:22.458795+0100","flow_id":964978536546082,"pcap_cnt":4055,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55528,"proto":"UDP","dns":{"type":"answer","id":33514,"rcode":"NXDOMAIN","rrname":"magofetequb.eu"}}
{"timestamp":"2017-12-12T18:33:20.401621+0100","flow_id":1814074243424150,"pcap_cnt":3169,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58038,"proto":"UDP","dns":{"type":"answer","id":60651,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:27.555670+0100","flow_id":1416766146705666,"pcap_cnt":4997,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63952,"proto":"UDP","dns":{"type":"answer","id":15439,"rcode":"NXDOMAIN","rrname":"disenybuqyj.eu"}}
{"timestamp":"2017-12-12T18:33:22.458795+0100","flow_id":964978536546082,"pcap_cnt":4055,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55528,"proto":"UDP","dns":{"type":"answer","id":33514,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":553}}
{"timestamp":"2017-12-12T18:33:21.163054+0100","flow_id":2049706886790382,"pcap_cnt":3506,"event_type":"dns","src_ip":"192.168.1.100","src_port":63760,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40281,"rrname":"xukeladoguk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.555670+0100","flow_id":1416766146705666,"pcap_cnt":4997,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63952,"proto":"UDP","dns":{"type":"answer","id":15439,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:20.509784+0100","flow_id":2204555490150232,"pcap_cnt":3214,"event_type":"dns","src_ip":"192.168.1.100","src_port":54161,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2210,"rrname":"nomawimecat.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.698185+0100","flow_id":1115448421099337,"pcap_cnt":5046,"event_type":"dns","src_ip":"192.168.1.100","src_port":56151,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2103,"rrname":"lyvoxajohul.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.009736+0100","flow_id":234731017348616,"pcap_cnt":5200,"event_type":"dns","src_ip":"192.168.1.100","src_port":65095,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25882,"rrname":"pufucaqurak.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.136236+0100","flow_id":6571616072158,"pcap_cnt":3497,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53454,"proto":"UDP","dns":{"type":"answer","id":60973,"rcode":"NXDOMAIN","rrname":"jewujenezac.eu"}}
{"timestamp":"2017-12-12T18:33:20.510082+0100","flow_id":2204555490150232,"pcap_cnt":3215,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54161,"proto":"UDP","dns":{"type":"answer","id":2210,"rcode":"NXDOMAIN","rrname":"nomawimecat.eu"}}
{"timestamp":"2017-12-12T18:33:29.600761+0100","flow_id":1084017849349239,"pcap_cnt":5943,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51162,"proto":"UDP","dns":{"type":"answer","id":25664,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:19.742036+0100","flow_id":376572310987320,"pcap_cnt":2848,"event_type":"dns","src_ip":"192.168.1.100","src_port":63787,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":12486,"rrname":"mamylotifat.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:28.010043+0100","flow_id":234731017348616,"pcap_cnt":5201,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65095,"proto":"UDP","dns":{"type":"answer","id":25882,"rcode":"NXDOMAIN","rrname":"pufucaqurak.eu"}}
{"timestamp":"2017-12-12T18:33:29.669543+0100","flow_id":314325350854692,"pcap_cnt":5978,"event_type":"dns","src_ip":"192.168.1.100","src_port":52643,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27998,"rrname":"vojacikigep.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:25.563969+0100","flow_id":763413574001330,"pcap_cnt":4361,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54554,"proto":"UDP","dns":{"type":"answer","id":50652,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:19.742276+0100","flow_id":376572310987320,"pcap_cnt":2849,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63787,"proto":"UDP","dns":{"type":"answer","id":12486,"rcode":"NXDOMAIN","rrname":"mamylotifat.eu"}}
{"timestamp":"2017-12-12T18:33:29.669773+0100","flow_id":314325350854692,"pcap_cnt":5979,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52643,"proto":"UDP","dns":{"type":"answer","id":27998,"rcode":"NXDOMAIN","rrname":"vojacikigep.eu"}}
{"timestamp":"2017-12-12T18:33:20.656407+0100","flow_id":1753850211979613,"pcap_cnt":3286,"event_type":"dns","src_ip":"192.168.1.100","src_port":60410,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30034,"rrname":"qebolelofyc.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:29.669773+0100","flow_id":314325350854692,"pcap_cnt":5979,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52643,"proto":"UDP","dns":{"type":"answer","id":27998,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":546}}
{"timestamp":"2017-12-12T18:33:25.818770+0100","flow_id":581358500281938,"pcap_cnt":4442,"event_type":"dns","src_ip":"192.168.1.100","src_port":50783,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44322,"rrname":"keretejuraw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:30.053751+0100","flow_id":708929766740471,"pcap_cnt":6100,"event_type":"dns","src_ip":"192.168.1.100","src_port":54065,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":3353,"rrname":"foqaqehacew.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.383383+0100","flow_id":1389196751263832,"pcap_cnt":3619,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53316,"proto":"UDP","dns":{"type":"answer","id":47804,"rcode":"NXDOMAIN","rrname":"kefyjuxiwap.eu"}}
{"timestamp":"2017-12-12T18:33:20.656692+0100","flow_id":1753850211979613,"pcap_cnt":3287,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60410,"proto":"UDP","dns":{"type":"answer","id":30034,"rcode":"NXDOMAIN","rrname":"qebolelofyc.eu"}}
{"timestamp":"2017-12-12T18:33:21.383383+0100","flow_id":1389196751263832,"pcap_cnt":3619,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53316,"proto":"UDP","dns":{"type":"answer","id":47804,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:25.819100+0100","flow_id":581358500281938,"pcap_cnt":4443,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50783,"proto":"UDP","dns":{"type":"answer","id":44322,"rcode":"NXDOMAIN","rrname":"keretejuraw.eu"}}
{"timestamp":"2017-12-12T18:33:20.656692+0100","flow_id":1753850211979613,"pcap_cnt":3287,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60410,"proto":"UDP","dns":{"type":"answer","id":30034,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:25.388043+0100","flow_id":897996374272759,"pcap_cnt":4263,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49871,"proto":"UDP","dns":{"type":"answer","id":60602,"rcode":"NXDOMAIN","rrname":"cicucifokym.eu"}}
{"timestamp":"2017-12-12T18:33:25.819100+0100","flow_id":581358500281938,"pcap_cnt":4443,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50783,"proto":"UDP","dns":{"type":"answer","id":44322,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:25.388043+0100","flow_id":897996374272759,"pcap_cnt":4263,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49871,"proto":"UDP","dns":{"type":"answer","id":60602,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:20.712558+0100","flow_id":1619125677907822,"pcap_cnt":3304,"event_type":"dns","src_ip":"192.168.1.100","src_port":59740,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45442,"rrname":"rynyhipexon.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.003154+0100","flow_id":483897102437198,"pcap_cnt":4515,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50082,"proto":"UDP","dns":{"type":"answer","id":64971,"rcode":"NXDOMAIN","rrname":"dimigesupew.eu"}}
{"timestamp":"2017-12-12T18:33:26.027843+0100","flow_id":279370759826627,"pcap_cnt":4538,"event_type":"dns","src_ip":"192.168.1.100","src_port":57386,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17489,"rrname":"tufyquvaxic.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.713063+0100","flow_id":1619125677907822,"pcap_cnt":3305,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59740,"proto":"UDP","dns":{"type":"answer","id":45442,"rcode":"NXDOMAIN","rrname":"rynyhipexon.eu"}}
{"timestamp":"2017-12-12T18:33:26.247600+0100","flow_id":1551632414721840,"pcap_cnt":4642,"event_type":"dns","src_ip":"192.168.1.100","src_port":59351,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":61364,"rrname":"rynikulokop.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.773219+0100","flow_id":1385674878012216,"pcap_cnt":3327,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51195,"proto":"UDP","dns":{"type":"answer","id":59921,"rcode":"NXDOMAIN","rrname":"masawocipel.eu"}}
{"timestamp":"2017-12-12T18:33:21.209832+0100","flow_id":940370521306024,"pcap_cnt":3534,"event_type":"dns","src_ip":"192.168.1.100","src_port":54385,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60475,"rrname":"masuximakot.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.247892+0100","flow_id":1551632414721840,"pcap_cnt":4643,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59351,"proto":"UDP","dns":{"type":"answer","id":61364,"rcode":"NXDOMAIN","rrname":"rynikulokop.eu"}}
{"timestamp":"2017-12-12T18:33:21.096674+0100","flow_id":857310148786594,"pcap_cnt":3474,"event_type":"dns","src_ip":"192.168.1.100","src_port":64371,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1481,"rrname":"tulacavosad.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.904937+0100","flow_id":1890331387940585,"pcap_cnt":4200,"event_type":"dns","src_ip":"192.168.1.100","src_port":57451,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1794,"rrname":"gaquviwyrup.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.461205+0100","flow_id":918766835861909,"pcap_cnt":4058,"event_type":"dns","src_ip":"192.168.1.100","src_port":59603,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":21869,"rrname":"rytuvepokuv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.247892+0100","flow_id":1551632414721840,"pcap_cnt":4643,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59351,"proto":"UDP","dns":{"type":"answer","id":61364,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:21.210129+0100","flow_id":940370521306024,"pcap_cnt":3535,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54385,"proto":"UDP","dns":{"type":"answer","id":60475,"rcode":"NXDOMAIN","rrname":"masuximakot.eu"}}
{"timestamp":"2017-12-12T18:33:21.097013+0100","flow_id":857310148786594,"pcap_cnt":3475,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64371,"proto":"UDP","dns":{"type":"answer","id":1481,"rcode":"NXDOMAIN","rrname":"tulacavosad.eu"}}
{"timestamp":"2017-12-12T18:33:22.461486+0100","flow_id":918766835861909,"pcap_cnt":4059,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59603,"proto":"UDP","dns":{"type":"answer","id":21869,"rcode":"NXDOMAIN","rrname":"rytuvepokuv.eu"}}
{"timestamp":"2017-12-12T18:33:26.378966+0100","flow_id":1134161593550934,"pcap_cnt":4714,"event_type":"dns","src_ip":"192.168.1.100","src_port":50958,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44672,"rrname":"rytecyvaxuj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.871338+0100","flow_id":2242973972908684,"pcap_cnt":4473,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51347,"proto":"UDP","dns":{"type":"answer","id":49589,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:22.320742+0100","flow_id":816967521068262,"pcap_cnt":4004,"event_type":"dns","src_ip":"192.168.1.100","src_port":54622,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49575,"rrname":"makatokagal.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.379251+0100","flow_id":1134161593550934,"pcap_cnt":4715,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50958,"proto":"UDP","dns":{"type":"answer","id":44672,"rcode":"NXDOMAIN","rrname":"rytecyvaxuj.eu"}}
{"timestamp":"2017-12-12T18:33:27.698561+0100","flow_id":1115448421099337,"pcap_cnt":5047,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56151,"proto":"UDP","dns":{"type":"answer","id":2103,"rcode":"NXDOMAIN","rrname":"lyvoxajohul.eu"}}
{"timestamp":"2017-12-12T18:33:25.462357+0100","flow_id":956427256794645,"pcap_cnt":4302,"event_type":"dns","src_ip":"192.168.1.100","src_port":54681,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45073,"rrname":"jelaqirozum.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.136236+0100","flow_id":6571616072158,"pcap_cnt":3497,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53454,"proto":"UDP","dns":{"type":"answer","id":60973,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:20.510082+0100","flow_id":2204555490150232,"pcap_cnt":3215,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54161,"proto":"UDP","dns":{"type":"answer","id":2210,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:21.259807+0100","flow_id":1782678032611039,"pcap_cnt":3558,"event_type":"dns","src_ip":"192.168.1.100","src_port":61900,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35339,"rrname":"voledokuwev.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.462675+0100","flow_id":956427256794645,"pcap_cnt":4303,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54681,"proto":"UDP","dns":{"type":"answer","id":45073,"rcode":"NXDOMAIN","rrname":"jelaqirozum.eu"}}
{"timestamp":"2017-12-12T18:33:20.964587+0100","flow_id":566375506556602,"pcap_cnt":3423,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55499,"proto":"UDP","dns":{"type":"answer","id":4863,"rcode":"NXDOMAIN","rrname":"ryhevelynyj.eu"}}
{"timestamp":"2017-12-12T18:33:21.260085+0100","flow_id":1782678032611039,"pcap_cnt":3559,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61900,"proto":"UDP","dns":{"type":"answer","id":35339,"rcode":"NXDOMAIN","rrname":"voledokuwev.eu"}}
{"timestamp":"2017-12-12T18:33:25.486114+0100","flow_id":2223661652470498,"pcap_cnt":4316,"event_type":"dns","src_ip":"192.168.1.100","src_port":58746,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47622,"rrname":"ciqanukaxas.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.964587+0100","flow_id":566375506556602,"pcap_cnt":3423,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55499,"proto":"UDP","dns":{"type":"answer","id":4863,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:22.462327+0100","flow_id":2002812286405879,"pcap_cnt":4061,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58907,"proto":"UDP","dns":{"type":"answer","id":39456,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":553}}
{"timestamp":"2017-12-12T18:33:25.486383+0100","flow_id":2223661652470498,"pcap_cnt":4317,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58746,"proto":"UDP","dns":{"type":"answer","id":47622,"rcode":"NXDOMAIN","rrname":"ciqanukaxas.eu"}}
{"timestamp":"2017-12-12T18:33:21.376289+0100","flow_id":1684492932726241,"pcap_cnt":3614,"event_type":"dns","src_ip":"192.168.1.100","src_port":60485,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":12601,"rrname":"lysisuxofaz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.486383+0100","flow_id":2223661652470498,"pcap_cnt":4317,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58746,"proto":"UDP","dns":{"type":"answer","id":47622,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:22.623653+0100","flow_id":328805833147429,"pcap_cnt":4106,"event_type":"dns","src_ip":"192.168.1.100","src_port":50930,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6584,"rrname":"fobonobaxog.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.376603+0100","flow_id":1684492932726241,"pcap_cnt":3615,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60485,"proto":"UDP","dns":{"type":"answer","id":12601,"rcode":"NXDOMAIN","rrname":"lysisuxofaz.eu"}}
{"timestamp":"2017-12-12T18:33:21.397163+0100","flow_id":1618144277892609,"pcap_cnt":3623,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57321,"proto":"UDP","dns":{"type":"answer","id":1614,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:22.623932+0100","flow_id":328805833147429,"pcap_cnt":4107,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50930,"proto":"UDP","dns":{"type":"answer","id":6584,"rcode":"NXDOMAIN","rrname":"fobonobaxog.eu"}}
{"timestamp":"2017-12-12T18:33:30.053993+0100","flow_id":708929766740471,"pcap_cnt":6101,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54065,"proto":"UDP","dns":{"type":"answer","id":3353,"rcode":"NXDOMAIN","rrname":"foqaqehacew.eu"}}
{"timestamp":"2017-12-12T18:33:21.706285+0100","flow_id":2154078887069421,"pcap_cnt":3746,"event_type":"dns","src_ip":"192.168.1.100","src_port":53701,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26217,"rrname":"xuxoferyvuc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.925165+0100","flow_id":2175036179684845,"pcap_cnt":2788,"event_type":"dns","src_ip":"192.168.1.100","src_port":56939,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50085,"rrname":"gacokahurol.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.079448+0100","flow_id":1522639237625145,"pcap_cnt":3467,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52617,"proto":"UDP","dns":{"type":"answer","id":38736,"rcode":"NXDOMAIN","rrname":"mamajocahab.eu"}}
{"timestamp":"2017-12-12T18:33:21.706575+0100","flow_id":2154078887069421,"pcap_cnt":3747,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53701,"proto":"UDP","dns":{"type":"answer","id":26217,"rcode":"NXDOMAIN","rrname":"xuxoferyvuc.eu"}}
{"timestamp":"2017-12-12T18:33:21.481807+0100","flow_id":1569512363219204,"pcap_cnt":3661,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59240,"proto":"UDP","dns":{"type":"answer","id":18565,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:21.079448+0100","flow_id":1522639237625145,"pcap_cnt":3467,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52617,"proto":"UDP","dns":{"type":"answer","id":38736,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:26.003154+0100","flow_id":483897102437198,"pcap_cnt":4515,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50082,"proto":"UDP","dns":{"type":"answer","id":64971,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:20.713063+0100","flow_id":1619125677907822,"pcap_cnt":3305,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59740,"proto":"UDP","dns":{"type":"answer","id":45442,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:21.397485+0100","flow_id":1550023949095085,"pcap_cnt":3624,"event_type":"dns","src_ip":"192.168.1.100","src_port":58204,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64456,"rrname":"ciqycicunaz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.028183+0100","flow_id":279370759826627,"pcap_cnt":4539,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57386,"proto":"UDP","dns":{"type":"answer","id":17489,"rcode":"NXDOMAIN","rrname":"tufyquvaxic.eu"}}
{"timestamp":"2017-12-12T18:33:20.773219+0100","flow_id":1385674878012216,"pcap_cnt":3327,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51195,"proto":"UDP","dns":{"type":"answer","id":59921,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:21.397777+0100","flow_id":1550023949095085,"pcap_cnt":3625,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58204,"proto":"UDP","dns":{"type":"answer","id":64456,"rcode":"NXDOMAIN","rrname":"ciqycicunaz.eu"}}
{"timestamp":"2017-12-12T18:33:22.077764+0100","flow_id":2231854302375876,"pcap_cnt":3894,"event_type":"dns","src_ip":"192.168.1.100","src_port":53059,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":24289,"rrname":"rylupalyxad.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.397777+0100","flow_id":1550023949095085,"pcap_cnt":3625,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58204,"proto":"UDP","dns":{"type":"answer","id":64456,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:22.905231+0100","flow_id":1890331387940585,"pcap_cnt":4201,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57451,"proto":"UDP","dns":{"type":"answer","id":1794,"rcode":"NXDOMAIN","rrname":"gaquviwyrup.eu"}}
{"timestamp":"2017-12-12T18:33:21.823677+0100","flow_id":146170938757501,"pcap_cnt":3784,"event_type":"dns","src_ip":"192.168.1.100","src_port":64002,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59938,"rrname":"puvedupuquz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.905231+0100","flow_id":1890331387940585,"pcap_cnt":4201,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57451,"proto":"UDP","dns":{"type":"answer","id":1794,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:22.659375+0100","flow_id":1173127684034479,"pcap_cnt":4116,"event_type":"dns","src_ip":"192.168.1.100","src_port":58850,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26119,"rrname":"gacezobeqon.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.824025+0100","flow_id":146170938757501,"pcap_cnt":3785,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64002,"proto":"UDP","dns":{"type":"answer","id":59938,"rcode":"NXDOMAIN","rrname":"puvedupuquz.eu"}}
{"timestamp":"2017-12-12T18:33:21.097013+0100","flow_id":857310148786594,"pcap_cnt":3475,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64371,"proto":"UDP","dns":{"type":"answer","id":1481,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:22.461486+0100","flow_id":918766835861909,"pcap_cnt":4059,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59603,"proto":"UDP","dns":{"type":"answer","id":21869,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":553}}
{"timestamp":"2017-12-12T18:33:21.163341+0100","flow_id":2049706886790382,"pcap_cnt":3507,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63760,"proto":"UDP","dns":{"type":"answer","id":40281,"rcode":"NXDOMAIN","rrname":"xukeladoguk.eu"}}
{"timestamp":"2017-12-12T18:33:21.247103+0100","flow_id":892717857742728,"pcap_cnt":3552,"event_type":"dns","src_ip":"192.168.1.100","src_port":60430,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26158,"rrname":"xubuvojajyb.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:26.128896+0100","flow_id":1168854191896448,"pcap_cnt":4592,"event_type":"dns","src_ip":"192.168.1.100","src_port":51805,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38884,"rrname":"gaqirahebof.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.682152+0100","flow_id":1915955162802344,"pcap_cnt":4124,"event_type":"dns","src_ip":"192.168.1.100","src_port":59393,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60079,"rrname":"foqaqehacew.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.247397+0100","flow_id":892717857742728,"pcap_cnt":3553,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60430,"proto":"UDP","dns":{"type":"answer","id":26158,"rcode":"NXDOMAIN","rrname":"xubuvojajyb.eu"}}
{"timestamp":"2017-12-12T18:33:27.698561+0100","flow_id":1115448421099337,"pcap_cnt":5047,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56151,"proto":"UDP","dns":{"type":"answer","id":2103,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:21.247397+0100","flow_id":892717857742728,"pcap_cnt":3553,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60430,"proto":"UDP","dns":{"type":"answer","id":26158,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:25.378656+0100","flow_id":1452586173843232,"pcap_cnt":4248,"event_type":"dns","src_ip":"192.168.1.100","src_port":53186,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28529,"rrname":"fokafobeqix.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.775676+0100","flow_id":1807648972396028,"pcap_cnt":3328,"event_type":"dns","src_ip":"192.168.1.100","src_port":51845,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49859,"rrname":"nofidocyner.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.260085+0100","flow_id":1782678032611039,"pcap_cnt":3559,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61900,"proto":"UDP","dns":{"type":"answer","id":35339,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:28.152392+0100","flow_id":2241760644846408,"pcap_cnt":5260,"event_type":"dns","src_ip":"192.168.1.100","src_port":60368,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":54279,"rrname":"puzomipipin.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.742276+0100","flow_id":376572310987320,"pcap_cnt":2849,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63787,"proto":"UDP","dns":{"type":"answer","id":12486,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:21.340151+0100","flow_id":1916869990756535,"pcap_cnt":3594,"event_type":"dns","src_ip":"192.168.1.100","src_port":61305,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":46781,"rrname":"cinazetybiq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.152712+0100","flow_id":2241760644846408,"pcap_cnt":5261,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60368,"proto":"UDP","dns":{"type":"answer","id":54279,"rcode":"NXDOMAIN","rrname":"puzomipipin.eu"}}
{"timestamp":"2017-12-12T18:33:26.417031+0100","flow_id":463586202115042,"pcap_cnt":4737,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57054,"proto":"UDP","dns":{"type":"answer","id":59958,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":577}}
{"timestamp":"2017-12-12T18:33:28.152712+0100","flow_id":2241760644846408,"pcap_cnt":5261,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60368,"proto":"UDP","dns":{"type":"answer","id":54279,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:21.929266+0100","flow_id":1428950968511986,"pcap_cnt":3822,"event_type":"dns","src_ip":"192.168.1.100","src_port":57197,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":157,"rrname":"tupycegubej.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.321066+0100","flow_id":1858917996801623,"pcap_cnt":4886,"event_type":"dns","src_ip":"192.168.1.100","src_port":51902,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18300,"rrname":"tuwaraqidek.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:28.407403+0100","flow_id":161793882732395,"pcap_cnt":5384,"event_type":"dns","src_ip":"192.168.1.100","src_port":64223,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38431,"rrname":"citapytakic.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.457870+0100","flow_id":1570126543584398,"pcap_cnt":3650,"event_type":"dns","src_ip":"192.168.1.100","src_port":49253,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":65208,"rrname":"rylakegodyc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.929891+0100","flow_id":1428950968511986,"pcap_cnt":3823,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57197,"proto":"UDP","dns":{"type":"answer","id":157,"rcode":"NXDOMAIN","rrname":"tupycegubej.eu"}}
{"timestamp":"2017-12-12T18:33:30.053993+0100","flow_id":708929766740471,"pcap_cnt":6101,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54065,"proto":"UDP","dns":{"type":"answer","id":3353,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:28.407681+0100","flow_id":161793882732395,"pcap_cnt":5385,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64223,"proto":"UDP","dns":{"type":"answer","id":38431,"rcode":"NXDOMAIN","rrname":"citapytakic.eu"}}
{"timestamp":"2017-12-12T18:33:21.929891+0100","flow_id":1428950968511986,"pcap_cnt":3823,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57197,"proto":"UDP","dns":{"type":"answer","id":157,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:25.855045+0100","flow_id":668249983104874,"pcap_cnt":4458,"event_type":"dns","src_ip":"192.168.1.100","src_port":63901,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53833,"rrname":"magalukacom.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:17.925410+0100","flow_id":2175036179684845,"pcap_cnt":2789,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56939,"proto":"UDP","dns":{"type":"answer","id":50085,"rcode":"NXDOMAIN","rrname":"gacokahurol.eu"}}
{"timestamp":"2017-12-12T18:33:30.055348+0100","flow_id":125278070954036,"pcap_cnt":6102,"event_type":"dns","src_ip":"192.168.1.100","src_port":49914,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44742,"rrname":"ganycyhywek.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.311202+0100","flow_id":1645984256016290,"pcap_cnt":3994,"event_type":"dns","src_ip":"192.168.1.100","src_port":49464,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":20733,"rrname":"jefamyjejat.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.855294+0100","flow_id":668249983104874,"pcap_cnt":4459,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63901,"proto":"UDP","dns":{"type":"answer","id":53833,"rcode":"NXDOMAIN","rrname":"magalukacom.eu"}}
{"timestamp":"2017-12-12T18:33:26.263647+0100","flow_id":1581776642639327,"pcap_cnt":4650,"event_type":"dns","src_ip":"192.168.1.100","src_port":58632,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30579,"rrname":"puvutaputeb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.143557+0100","flow_id":1061684020391900,"pcap_cnt":4605,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49424,"proto":"UDP","dns":{"type":"answer","id":48726,"rcode":"NXDOMAIN","rrname":"jenabejurov.eu"}}
{"timestamp":"2017-12-12T18:33:25.855294+0100","flow_id":668249983104874,"pcap_cnt":4459,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63901,"proto":"UDP","dns":{"type":"answer","id":53833,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:22.311484+0100","flow_id":1645984256016290,"pcap_cnt":3995,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49464,"proto":"UDP","dns":{"type":"answer","id":20733,"rcode":"NXDOMAIN","rrname":"jefamyjejat.eu"}}
{"timestamp":"2017-12-12T18:33:26.028183+0100","flow_id":279370759826627,"pcap_cnt":4539,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57386,"proto":"UDP","dns":{"type":"answer","id":17489,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:20.865535+0100","flow_id":2096955821929727,"pcap_cnt":3356,"event_type":"dns","src_ip":"192.168.1.100","src_port":55771,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":56465,"rrname":"ryqukavecek.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.311484+0100","flow_id":1645984256016290,"pcap_cnt":3995,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49464,"proto":"UDP","dns":{"type":"answer","id":20733,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":595}}
{"timestamp":"2017-12-12T18:33:27.105385+0100","flow_id":699792223607721,"pcap_cnt":4774,"event_type":"dns","src_ip":"192.168.1.100","src_port":64863,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":65290,"rrname":"xugelurisep.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.210129+0100","flow_id":940370521306024,"pcap_cnt":3535,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54385,"proto":"UDP","dns":{"type":"answer","id":60475,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:22.324582+0100","flow_id":746205786086023,"pcap_cnt":4006,"event_type":"dns","src_ip":"192.168.1.100","src_port":50948,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9756,"rrname":"lyrugujiqat.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:22.659692+0100","flow_id":1173127684034479,"pcap_cnt":4117,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58850,"proto":"UDP","dns":{"type":"answer","id":26119,"rcode":"NXDOMAIN","rrname":"gacezobeqon.eu"}}
{"timestamp":"2017-12-12T18:33:22.324860+0100","flow_id":746205786086023,"pcap_cnt":4007,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50948,"proto":"UDP","dns":{"type":"answer","id":9756,"rcode":"NXDOMAIN","rrname":"lyrugujiqat.eu"}}
{"timestamp":"2017-12-12T18:33:22.829902+0100","flow_id":229714495187406,"pcap_cnt":4164,"event_type":"dns","src_ip":"192.168.1.100","src_port":60629,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59925,"rrname":"qexofyqihid.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.163341+0100","flow_id":2049706886790382,"pcap_cnt":3507,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63760,"proto":"UDP","dns":{"type":"answer","id":40281,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:26.379251+0100","flow_id":1134161593550934,"pcap_cnt":4715,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50958,"proto":"UDP","dns":{"type":"answer","id":44672,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":577}}
{"timestamp":"2017-12-12T18:33:22.830170+0100","flow_id":229714495187406,"pcap_cnt":4165,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60629,"proto":"UDP","dns":{"type":"answer","id":59925,"rcode":"NXDOMAIN","rrname":"qexofyqihid.eu"}}
{"timestamp":"2017-12-12T18:33:22.321017+0100","flow_id":816967521068262,"pcap_cnt":4005,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54622,"proto":"UDP","dns":{"type":"answer","id":49575,"rcode":"NXDOMAIN","rrname":"makatokagal.eu"}}
{"timestamp":"2017-12-12T18:33:22.830170+0100","flow_id":229714495187406,"pcap_cnt":4165,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60629,"proto":"UDP","dns":{"type":"answer","id":59925,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:22.321017+0100","flow_id":816967521068262,"pcap_cnt":4005,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54622,"proto":"UDP","dns":{"type":"answer","id":49575,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":596}}
{"timestamp":"2017-12-12T18:33:22.682413+0100","flow_id":1915955162802344,"pcap_cnt":4125,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59393,"proto":"UDP","dns":{"type":"answer","id":60079,"rcode":"NXDOMAIN","rrname":"foqaqehacew.eu"}}
{"timestamp":"2017-12-12T18:33:25.462675+0100","flow_id":956427256794645,"pcap_cnt":4303,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54681,"proto":"UDP","dns":{"type":"answer","id":45073,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:22.340210+0100","flow_id":145801571610866,"pcap_cnt":4012,"event_type":"dns","src_ip":"192.168.1.100","src_port":57477,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":24416,"rrname":"galodiwosuf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.378927+0100","flow_id":1452586173843232,"pcap_cnt":4249,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53186,"proto":"UDP","dns":{"type":"answer","id":28529,"rcode":"NXDOMAIN","rrname":"fokafobeqix.eu"}}
{"timestamp":"2017-12-12T18:33:25.487014+0100","flow_id":444673313566310,"pcap_cnt":4318,"event_type":"dns","src_ip":"192.168.1.100","src_port":57346,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50968,"rrname":"vonezukemac.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.378927+0100","flow_id":1452586173843232,"pcap_cnt":4249,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53186,"proto":"UDP","dns":{"type":"answer","id":28529,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:20.775943+0100","flow_id":1807648972396028,"pcap_cnt":3329,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51845,"proto":"UDP","dns":{"type":"answer","id":49859,"rcode":"NXDOMAIN","rrname":"nofidocyner.eu"}}
{"timestamp":"2017-12-12T18:33:19.787279+0100","flow_id":15193763414863,"pcap_cnt":2870,"event_type":"dns","src_ip":"192.168.1.100","src_port":56265,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33334,"rrname":"jewokedokaw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.340441+0100","flow_id":1916869990756535,"pcap_cnt":3595,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61305,"proto":"UDP","dns":{"type":"answer","id":46781,"rcode":"NXDOMAIN","rrname":"cinazetybiq.eu"}}
{"timestamp":"2017-12-12T18:33:25.792063+0100","flow_id":2096857038001663,"pcap_cnt":4428,"event_type":"dns","src_ip":"192.168.1.100","src_port":62291,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":39451,"rrname":"fogynahidal.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.787580+0100","flow_id":15193763414863,"pcap_cnt":2871,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56265,"proto":"UDP","dns":{"type":"answer","id":33334,"rcode":"NXDOMAIN","rrname":"jewokedokaw.eu"}}
{"timestamp":"2017-12-12T18:33:22.227662+0100","flow_id":127691842025536,"pcap_cnt":3959,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56365,"proto":"UDP","dns":{"type":"answer","id":10665,"rcode":"NXDOMAIN","rrname":"jepobanagij.eu"}}
{"timestamp":"2017-12-12T18:33:19.787580+0100","flow_id":15193763414863,"pcap_cnt":2871,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56265,"proto":"UDP","dns":{"type":"answer","id":33334,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:27.321317+0100","flow_id":1858917996801623,"pcap_cnt":4887,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51902,"proto":"UDP","dns":{"type":"answer","id":18300,"rcode":"NXDOMAIN","rrname":"tuwaraqidek.eu"}}
{"timestamp":"2017-12-12T18:33:22.227662+0100","flow_id":127691842025536,"pcap_cnt":3959,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56365,"proto":"UDP","dns":{"type":"answer","id":10665,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":595}}
{"timestamp":"2017-12-12T18:33:19.796938+0100","flow_id":2023159693781258,"pcap_cnt":2884,"event_type":"dns","src_ip":"192.168.1.100","src_port":51758,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":20175,"rrname":"cilakyfaloq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.321317+0100","flow_id":1858917996801623,"pcap_cnt":4887,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51902,"proto":"UDP","dns":{"type":"answer","id":18300,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:21.458111+0100","flow_id":1570126543584398,"pcap_cnt":3651,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49253,"proto":"UDP","dns":{"type":"answer","id":65208,"rcode":"NXDOMAIN","rrname":"rylakegodyc.eu"}}
{"timestamp":"2017-12-12T18:33:22.336376+0100","flow_id":1414842001007096,"pcap_cnt":4010,"event_type":"dns","src_ip":"192.168.1.100","src_port":53777,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14449,"rrname":"qegynolyzow.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.458111+0100","flow_id":1570126543584398,"pcap_cnt":3651,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49253,"proto":"UDP","dns":{"type":"answer","id":65208,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:28.407681+0100","flow_id":161793882732395,"pcap_cnt":5385,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64223,"proto":"UDP","dns":{"type":"answer","id":38431,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:22.336730+0100","flow_id":1414842001007096,"pcap_cnt":4011,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53777,"proto":"UDP","dns":{"type":"answer","id":14449,"rcode":"NXDOMAIN","rrname":"qegynolyzow.eu"}}
{"timestamp":"2017-12-12T18:33:21.502318+0100","flow_id":1841194814515758,"pcap_cnt":3670,"event_type":"dns","src_ip":"192.168.1.100","src_port":63741,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64346,"rrname":"gaquduhexet.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.462319+0100","flow_id":874719798693359,"pcap_cnt":3654,"event_type":"dns","src_ip":"192.168.1.100","src_port":52444,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":61857,"rrname":"pupymavyvow.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.432857+0100","flow_id":1115448421099337,"pcap_cnt":5394,"event_type":"dns","src_ip":"192.168.1.100","src_port":56151,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49867,"rrname":"nomuxytirix.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:30.055603+0100","flow_id":125278070954036,"pcap_cnt":6103,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49914,"proto":"UDP","dns":{"type":"answer","id":44742,"rcode":"NXDOMAIN","rrname":"ganycyhywek.eu"}}
{"timestamp":"2017-12-12T18:33:26.393943+0100","flow_id":1437177978683837,"pcap_cnt":4723,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58240,"proto":"UDP","dns":{"type":"answer","id":2003,"rcode":"NXDOMAIN","rrname":"jejopiniduh.eu"}}
{"timestamp":"2017-12-12T18:33:20.964855+0100","flow_id":878381258291447,"pcap_cnt":3424,"event_type":"dns","src_ip":"192.168.1.100","src_port":51544,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59887,"rrname":"tufukelityq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.433168+0100","flow_id":1115448421099337,"pcap_cnt":5395,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56151,"proto":"UDP","dns":{"type":"answer","id":49867,"rcode":"NXDOMAIN","rrname":"nomuxytirix.eu"}}
{"timestamp":"2017-12-12T18:33:26.143557+0100","flow_id":1061684020391900,"pcap_cnt":4605,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49424,"proto":"UDP","dns":{"type":"answer","id":48726,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:26.264005+0100","flow_id":1581776642639327,"pcap_cnt":4651,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58632,"proto":"UDP","dns":{"type":"answer","id":30579,"rcode":"NXDOMAIN","rrname":"puvutaputeb.eu"}}
{"timestamp":"2017-12-12T18:33:26.393943+0100","flow_id":1437177978683837,"pcap_cnt":4723,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58240,"proto":"UDP","dns":{"type":"answer","id":2003,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":577}}
{"timestamp":"2017-12-12T18:33:26.264005+0100","flow_id":1581776642639327,"pcap_cnt":4651,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58632,"proto":"UDP","dns":{"type":"answer","id":30579,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:26.165510+0100","flow_id":1077180262418054,"pcap_cnt":4614,"event_type":"dns","src_ip":"192.168.1.100","src_port":51234,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25886,"rrname":"vofukykojos.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.164246+0100","flow_id":2167425498317206,"pcap_cnt":4802,"event_type":"dns","src_ip":"192.168.1.100","src_port":59988,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27942,"rrname":"mamylotifat.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.105657+0100","flow_id":699792223607721,"pcap_cnt":4775,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64863,"proto":"UDP","dns":{"type":"answer","id":65290,"rcode":"NXDOMAIN","rrname":"xugelurisep.eu"}}
{"timestamp":"2017-12-12T18:33:20.865838+0100","flow_id":2096955821929727,"pcap_cnt":3357,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55771,"proto":"UDP","dns":{"type":"answer","id":56465,"rcode":"NXDOMAIN","rrname":"ryqukavecek.eu"}}
{"timestamp":"2017-12-12T18:33:21.224936+0100","flow_id":843493238992552,"pcap_cnt":3538,"event_type":"dns","src_ip":"192.168.1.100","src_port":64520,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47830,"rrname":"ryqepiqiror.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.165798+0100","flow_id":1077180262418054,"pcap_cnt":4615,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51234,"proto":"UDP","dns":{"type":"answer","id":25886,"rcode":"NXDOMAIN","rrname":"vofukykojos.eu"}}
{"timestamp":"2017-12-12T18:33:27.164485+0100","flow_id":2167425498317206,"pcap_cnt":4803,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59988,"proto":"UDP","dns":{"type":"answer","id":27942,"rcode":"NXDOMAIN","rrname":"mamylotifat.eu"}}
{"timestamp":"2017-12-12T18:33:22.324860+0100","flow_id":746205786086023,"pcap_cnt":4007,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50948,"proto":"UDP","dns":{"type":"answer","id":9756,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":595}}
{"timestamp":"2017-12-12T18:33:21.194757+0100","flow_id":2120419228383429,"pcap_cnt":3526,"event_type":"dns","src_ip":"192.168.1.100","src_port":51930,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25625,"rrname":"dikofuhybym.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.164485+0100","flow_id":2167425498317206,"pcap_cnt":4803,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59988,"proto":"UDP","dns":{"type":"answer","id":27942,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:21.225240+0100","flow_id":843493238992552,"pcap_cnt":3539,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64520,"proto":"UDP","dns":{"type":"answer","id":47830,"rcode":"NXDOMAIN","rrname":"ryqepiqiror.eu"}}
{"timestamp":"2017-12-12T18:33:25.584744+0100","flow_id":143931113330462,"pcap_cnt":4364,"event_type":"dns","src_ip":"192.168.1.100","src_port":64261,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45392,"rrname":"xugefexojow.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:25.781107+0100","flow_id":1569469413845811,"pcap_cnt":4422,"event_type":"dns","src_ip":"192.168.1.100","src_port":55200,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":56747,"rrname":"kemawonywig.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.195019+0100","flow_id":2120419228383429,"pcap_cnt":3527,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51930,"proto":"UDP","dns":{"type":"answer","id":25625,"rcode":"NXDOMAIN","rrname":"dikofuhybym.eu"}}
{"timestamp":"2017-12-12T18:33:22.682413+0100","flow_id":1915955162802344,"pcap_cnt":4125,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59393,"proto":"UDP","dns":{"type":"answer","id":60079,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:21.195019+0100","flow_id":2120419228383429,"pcap_cnt":3527,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51930,"proto":"UDP","dns":{"type":"answer","id":25625,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:21.273146+0100","flow_id":2228933724547834,"pcap_cnt":3560,"event_type":"dns","src_ip":"192.168.1.100","src_port":65253,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51034,"rrname":"fokytowipiw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.010043+0100","flow_id":234731017348616,"pcap_cnt":5201,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65095,"proto":"UDP","dns":{"type":"answer","id":25882,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:25.781403+0100","flow_id":1569469413845811,"pcap_cnt":4423,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55200,"proto":"UDP","dns":{"type":"answer","id":56747,"rcode":"NXDOMAIN","rrname":"kemawonywig.eu"}}
{"timestamp":"2017-12-12T18:33:25.407953+0100","flow_id":946392065718673,"pcap_cnt":4284,"event_type":"dns","src_ip":"192.168.1.100","src_port":65334,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":20336,"rrname":"nozydemutik.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.730338+0100","flow_id":294628630799586,"pcap_cnt":3754,"event_type":"dns","src_ip":"192.168.1.100","src_port":50207,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60553,"rrname":"nojaxicyxon.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.781403+0100","flow_id":1569469413845811,"pcap_cnt":4423,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55200,"proto":"UDP","dns":{"type":"answer","id":56747,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:28.318648+0100","flow_id":2142349331848376,"pcap_cnt":5338,"event_type":"dns","src_ip":"192.168.1.100","src_port":49593,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17954,"rrname":"galefihituz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.775943+0100","flow_id":1807648972396028,"pcap_cnt":3329,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51845,"proto":"UDP","dns":{"type":"answer","id":49859,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:21.340441+0100","flow_id":1916869990756535,"pcap_cnt":3595,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61305,"proto":"UDP","dns":{"type":"answer","id":46781,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:25.885428+0100","flow_id":362188466651828,"pcap_cnt":4478,"event_type":"dns","src_ip":"192.168.1.100","src_port":53501,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9250,"rrname":"gahocuwalyc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.152461+0100","flow_id":1217090969228173,"pcap_cnt":3500,"event_type":"dns","src_ip":"192.168.1.100","src_port":61107,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29838,"rrname":"lyvamynipox.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.623932+0100","flow_id":328805833147429,"pcap_cnt":4107,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50930,"proto":"UDP","dns":{"type":"answer","id":6584,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":554}}
{"timestamp":"2017-12-12T18:33:21.152749+0100","flow_id":1217090969228173,"pcap_cnt":3501,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61107,"proto":"UDP","dns":{"type":"answer","id":29838,"rcode":"NXDOMAIN","rrname":"lyvamynipox.eu"}}
{"timestamp":"2017-12-12T18:33:25.885735+0100","flow_id":362188466651828,"pcap_cnt":4479,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53501,"proto":"UDP","dns":{"type":"answer","id":9250,"rcode":"NXDOMAIN","rrname":"gahocuwalyc.eu"}}
{"timestamp":"2017-12-12T18:33:21.152749+0100","flow_id":1217090969228173,"pcap_cnt":3501,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61107,"proto":"UDP","dns":{"type":"answer","id":29838,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:22.673657+0100","flow_id":1404506162218873,"pcap_cnt":4120,"event_type":"dns","src_ip":"192.168.1.100","src_port":63608,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":21588,"rrname":"pupujeguper.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.639079+0100","flow_id":338415822422119,"pcap_cnt":3726,"event_type":"dns","src_ip":"192.168.1.100","src_port":59386,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":21973,"rrname":"jewararuqid.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:17.925410+0100","flow_id":2175036179684845,"pcap_cnt":2789,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56939,"proto":"UDP","dns":{"type":"answer","id":50085,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:22.673920+0100","flow_id":1404506162218873,"pcap_cnt":4121,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63608,"proto":"UDP","dns":{"type":"answer","id":21588,"rcode":"NXDOMAIN","rrname":"pupujeguper.eu"}}
{"timestamp":"2017-12-12T18:33:21.639345+0100","flow_id":338415822422119,"pcap_cnt":3727,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59386,"proto":"UDP","dns":{"type":"answer","id":21973,"rcode":"NXDOMAIN","rrname":"jewararuqid.eu"}}
{"timestamp":"2017-12-12T18:33:19.732463+0100","flow_id":723371592519654,"pcap_cnt":2844,"event_type":"dns","src_ip":"192.168.1.100","src_port":50760,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11654,"rrname":"jenujoxojug.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:22.673920+0100","flow_id":1404506162218873,"pcap_cnt":4121,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63608,"proto":"UDP","dns":{"type":"answer","id":21588,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:21.502627+0100","flow_id":1841194814515758,"pcap_cnt":3671,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63741,"proto":"UDP","dns":{"type":"answer","id":64346,"rcode":"NXDOMAIN","rrname":"gaquduhexet.eu"}}
{"timestamp":"2017-12-12T18:33:22.674563+0100","flow_id":861364597967619,"pcap_cnt":4122,"event_type":"dns","src_ip":"192.168.1.100","src_port":56171,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":939,"rrname":"dirosehijel.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.852288+0100","flow_id":877831502757963,"pcap_cnt":4457,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62319,"proto":"UDP","dns":{"type":"answer","id":19656,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:21.502627+0100","flow_id":1841194814515758,"pcap_cnt":3671,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63741,"proto":"UDP","dns":{"type":"answer","id":64346,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:22.674821+0100","flow_id":861364597967619,"pcap_cnt":4123,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56171,"proto":"UDP","dns":{"type":"answer","id":939,"rcode":"NXDOMAIN","rrname":"dirosehijel.eu"}}
{"timestamp":"2017-12-12T18:33:20.965268+0100","flow_id":878381258291447,"pcap_cnt":3425,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51544,"proto":"UDP","dns":{"type":"answer","id":59887,"rcode":"NXDOMAIN","rrname":"tufukelityq.eu"}}
{"timestamp":"2017-12-12T18:33:27.173712+0100","flow_id":291963604018832,"pcap_cnt":4810,"event_type":"dns","src_ip":"192.168.1.100","src_port":63435,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26098,"rrname":"xukuxaxidub.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.126564+0100","flow_id":1770428786208356,"pcap_cnt":4590,"event_type":"dns","src_ip":"192.168.1.100","src_port":63526,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":57377,"rrname":"pujamyqywyk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.965268+0100","flow_id":878381258291447,"pcap_cnt":3425,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51544,"proto":"UDP","dns":{"type":"answer","id":59887,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:25.624479+0100","flow_id":1617257367439199,"pcap_cnt":4376,"event_type":"dns","src_ip":"192.168.1.100","src_port":51368,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30320,"rrname":"jenupydaces.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.317638+0100","flow_id":684025398614214,"pcap_cnt":4672,"event_type":"dns","src_ip":"192.168.1.100","src_port":51986,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14559,"rrname":"lyrelydevac.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.624741+0100","flow_id":1617257367439199,"pcap_cnt":4377,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51368,"proto":"UDP","dns":{"type":"answer","id":30320,"rcode":"NXDOMAIN","rrname":"jenupydaces.eu"}}
{"timestamp":"2017-12-12T18:33:27.105657+0100","flow_id":699792223607721,"pcap_cnt":4775,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64863,"proto":"UDP","dns":{"type":"answer","id":65290,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:26.317877+0100","flow_id":684025398614214,"pcap_cnt":4673,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51986,"proto":"UDP","dns":{"type":"answer","id":14559,"rcode":"NXDOMAIN","rrname":"lyrelydevac.eu"}}
{"timestamp":"2017-12-12T18:33:22.659692+0100","flow_id":1173127684034479,"pcap_cnt":4117,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58850,"proto":"UDP","dns":{"type":"answer","id":26119,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:27.548415+0100","flow_id":408043685109311,"pcap_cnt":4990,"event_type":"dns","src_ip":"192.168.1.100","src_port":58824,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63010,"rrname":"rylyzevipyw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.129196+0100","flow_id":1168854191896448,"pcap_cnt":4593,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51805,"proto":"UDP","dns":{"type":"answer","id":38884,"rcode":"NXDOMAIN","rrname":"gaqirahebof.eu"}}
{"timestamp":"2017-12-12T18:33:25.535758+0100","flow_id":1041564246027470,"pcap_cnt":4350,"event_type":"dns","src_ip":"192.168.1.100","src_port":53993,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4547,"rrname":"jeceraxaxol.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.548722+0100","flow_id":408043685109311,"pcap_cnt":4991,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58824,"proto":"UDP","dns":{"type":"answer","id":63010,"rcode":"NXDOMAIN","rrname":"rylyzevipyw.eu"}}
{"timestamp":"2017-12-12T18:33:26.129196+0100","flow_id":1168854191896448,"pcap_cnt":4593,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51805,"proto":"UDP","dns":{"type":"answer","id":38884,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:21.225240+0100","flow_id":843493238992552,"pcap_cnt":3539,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64520,"proto":"UDP","dns":{"type":"answer","id":47830,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:25.536007+0100","flow_id":1041564246027470,"pcap_cnt":4351,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53993,"proto":"UDP","dns":{"type":"answer","id":4547,"rcode":"NXDOMAIN","rrname":"jeceraxaxol.eu"}}
{"timestamp":"2017-12-12T18:33:26.293140+0100","flow_id":1884550362200340,"pcap_cnt":4660,"event_type":"dns","src_ip":"192.168.1.100","src_port":60380,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45559,"rrname":"gahyfesyqad.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.536007+0100","flow_id":1041564246027470,"pcap_cnt":4351,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53993,"proto":"UDP","dns":{"type":"answer","id":4547,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:28.203267+0100","flow_id":186348210755834,"pcap_cnt":5287,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61576,"proto":"UDP","dns":{"type":"answer","id":47942,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:26.293386+0100","flow_id":1884550362200340,"pcap_cnt":4661,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60380,"proto":"UDP","dns":{"type":"answer","id":45559,"rcode":"NXDOMAIN","rrname":"gahyfesyqad.eu"}}
{"timestamp":"2017-12-12T18:33:25.487268+0100","flow_id":444673313566310,"pcap_cnt":4319,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57346,"proto":"UDP","dns":{"type":"answer","id":50968,"rcode":"NXDOMAIN","rrname":"vonezukemac.eu"}}
{"timestamp":"2017-12-12T18:33:21.273495+0100","flow_id":2228933724547834,"pcap_cnt":3561,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65253,"proto":"UDP","dns":{"type":"answer","id":51034,"rcode":"NXDOMAIN","rrname":"fokytowipiw.eu"}}
{"timestamp":"2017-12-12T18:33:25.408185+0100","flow_id":946392065718673,"pcap_cnt":4285,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65334,"proto":"UDP","dns":{"type":"answer","id":20336,"rcode":"NXDOMAIN","rrname":"nozydemutik.eu"}}
{"timestamp":"2017-12-12T18:33:21.273495+0100","flow_id":2228933724547834,"pcap_cnt":3561,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65253,"proto":"UDP","dns":{"type":"answer","id":51034,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:21.376603+0100","flow_id":1684492932726241,"pcap_cnt":3615,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60485,"proto":"UDP","dns":{"type":"answer","id":12601,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:25.408185+0100","flow_id":946392065718673,"pcap_cnt":4285,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65334,"proto":"UDP","dns":{"type":"answer","id":20336,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:21.730676+0100","flow_id":294628630799586,"pcap_cnt":3755,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50207,"proto":"UDP","dns":{"type":"answer","id":60553,"rcode":"NXDOMAIN","rrname":"nojaxicyxon.eu"}}
{"timestamp":"2017-12-12T18:33:21.369916+0100","flow_id":1177525730518268,"pcap_cnt":3612,"event_type":"dns","src_ip":"192.168.1.100","src_port":60046,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59035,"rrname":"jelybodybuf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.495512+0100","flow_id":2233782742912920,"pcap_cnt":4334,"event_type":"dns","src_ip":"192.168.1.100","src_port":55984,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43238,"rrname":"jejomejoled.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.318920+0100","flow_id":2142349331848376,"pcap_cnt":5339,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49593,"proto":"UDP","dns":{"type":"answer","id":17954,"rcode":"NXDOMAIN","rrname":"galefihituz.eu"}}
{"timestamp":"2017-12-12T18:33:21.430358+0100","flow_id":1296642353500438,"pcap_cnt":3638,"event_type":"dns","src_ip":"192.168.1.100","src_port":60032,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19394,"rrname":"cituvafumyd.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.495742+0100","flow_id":2233782742912920,"pcap_cnt":4335,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55984,"proto":"UDP","dns":{"type":"answer","id":43238,"rcode":"NXDOMAIN","rrname":"jejomejoled.eu"}}
{"timestamp":"2017-12-12T18:33:21.706575+0100","flow_id":2154078887069421,"pcap_cnt":3747,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53701,"proto":"UDP","dns":{"type":"answer","id":26217,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:21.430639+0100","flow_id":1296642353500438,"pcap_cnt":3639,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60032,"proto":"UDP","dns":{"type":"answer","id":19394,"rcode":"NXDOMAIN","rrname":"cituvafumyd.eu"}}
{"timestamp":"2017-12-12T18:33:27.681593+0100","flow_id":1638397196592761,"pcap_cnt":5040,"event_type":"dns","src_ip":"192.168.1.100","src_port":54973,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":15263,"rrname":"rynovaqidef.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.885735+0100","flow_id":362188466651828,"pcap_cnt":4479,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53501,"proto":"UDP","dns":{"type":"answer","id":9250,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:21.797720+0100","flow_id":31162451962904,"pcap_cnt":3772,"event_type":"dns","src_ip":"192.168.1.100","src_port":51335,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18025,"rrname":"foxanabelod.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.681904+0100","flow_id":1638397196592761,"pcap_cnt":5041,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54973,"proto":"UDP","dns":{"type":"answer","id":15263,"rcode":"NXDOMAIN","rrname":"rynovaqidef.eu"}}
{"timestamp":"2017-12-12T18:33:21.238030+0100","flow_id":1076868876968398,"pcap_cnt":3548,"event_type":"dns","src_ip":"192.168.1.100","src_port":60702,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53937,"rrname":"puvixoqezor.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.462600+0100","flow_id":874719798693359,"pcap_cnt":3655,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52444,"proto":"UDP","dns":{"type":"answer","id":61857,"rcode":"NXDOMAIN","rrname":"pupymavyvow.eu"}}
{"timestamp":"2017-12-12T18:33:27.681904+0100","flow_id":1638397196592761,"pcap_cnt":5041,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54973,"proto":"UDP","dns":{"type":"answer","id":15263,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:30.055603+0100","flow_id":125278070954036,"pcap_cnt":6103,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49914,"proto":"UDP","dns":{"type":"answer","id":44742,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:28.433168+0100","flow_id":1115448421099337,"pcap_cnt":5395,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56151,"proto":"UDP","dns":{"type":"answer","id":49867,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:19.732709+0100","flow_id":723371592519654,"pcap_cnt":2845,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50760,"proto":"UDP","dns":{"type":"answer","id":11654,"rcode":"NXDOMAIN","rrname":"jenujoxojug.eu"}}
{"timestamp":"2017-12-12T18:33:21.238405+0100","flow_id":1076868876968398,"pcap_cnt":3549,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60702,"proto":"UDP","dns":{"type":"answer","id":53937,"rcode":"NXDOMAIN","rrname":"puvixoqezor.eu"}}
{"timestamp":"2017-12-12T18:33:22.674821+0100","flow_id":861364597967619,"pcap_cnt":4123,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56171,"proto":"UDP","dns":{"type":"answer","id":939,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:21.594397+0100","flow_id":1528967871926749,"pcap_cnt":3702,"event_type":"dns","src_ip":"192.168.1.100","src_port":60726,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11152,"rrname":"ryceziqofig.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.631905+0100","flow_id":876871576468545,"pcap_cnt":5494,"event_type":"dns","src_ip":"192.168.1.100","src_port":53198,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14636,"rrname":"fogaruhityg.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:27.174037+0100","flow_id":291963604018832,"pcap_cnt":4811,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63435,"proto":"UDP","dns":{"type":"answer","id":26098,"rcode":"NXDOMAIN","rrname":"xukuxaxidub.eu"}}
{"timestamp":"2017-12-12T18:33:22.835597+0100","flow_id":1332367891546125,"pcap_cnt":4170,"event_type":"dns","src_ip":"192.168.1.100","src_port":61343,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17600,"rrname":"digegazolan.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.632173+0100","flow_id":876871576468545,"pcap_cnt":5495,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53198,"proto":"UDP","dns":{"type":"answer","id":14636,"rcode":"NXDOMAIN","rrname":"fogaruhityg.eu"}}
{"timestamp":"2017-12-12T18:33:27.174037+0100","flow_id":291963604018832,"pcap_cnt":4811,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63435,"proto":"UDP","dns":{"type":"answer","id":26098,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:28.632173+0100","flow_id":876871576468545,"pcap_cnt":5495,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53198,"proto":"UDP","dns":{"type":"answer","id":14636,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:20.865838+0100","flow_id":2096955821929727,"pcap_cnt":3357,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55771,"proto":"UDP","dns":{"type":"answer","id":56465,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:27.587692+0100","flow_id":1474419640235948,"pcap_cnt":5004,"event_type":"dns","src_ip":"192.168.1.100","src_port":51988,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":56098,"rrname":"jenerunybem.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.697621+0100","flow_id":922759004895224,"pcap_cnt":5518,"event_type":"dns","src_ip":"192.168.1.100","src_port":64084,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":52960,"rrname":"jefozaryciw.eu","rrtype":"A","tx_id":3}}
{"timestamp":"2017-12-12T18:33:27.345001+0100","flow_id":483059583022930,"pcap_cnt":4896,"event_type":"dns","src_ip":"192.168.1.100","src_port":56798,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2521,"rrname":"fokisohurif.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:27.587992+0100","flow_id":1474419640235948,"pcap_cnt":5005,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51988,"proto":"UDP","dns":{"type":"answer","id":56098,"rcode":"NXDOMAIN","rrname":"jenerunybem.eu"}}
{"timestamp":"2017-12-12T18:33:28.697890+0100","flow_id":922759004895224,"pcap_cnt":5519,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64084,"proto":"UDP","dns":{"type":"answer","id":52960,"rcode":"NXDOMAIN","rrname":"jefozaryciw.eu"}}
{"timestamp":"2017-12-12T18:33:25.584969+0100","flow_id":143931113330462,"pcap_cnt":4365,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64261,"proto":"UDP","dns":{"type":"answer","id":45392,"rcode":"NXDOMAIN","rrname":"xugefexojow.eu"}}
{"timestamp":"2017-12-12T18:33:27.587992+0100","flow_id":1474419640235948,"pcap_cnt":5005,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51988,"proto":"UDP","dns":{"type":"answer","id":56098,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:28.697890+0100","flow_id":922759004895224,"pcap_cnt":5519,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64084,"proto":"UDP","dns":{"type":"answer","id":52960,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:25.584969+0100","flow_id":143931113330462,"pcap_cnt":4365,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64261,"proto":"UDP","dns":{"type":"answer","id":45392,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:25.604623+0100","flow_id":1591972894947791,"pcap_cnt":4370,"event_type":"dns","src_ip":"192.168.1.100","src_port":65268,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51185,"rrname":"fotoxysupyd.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.293386+0100","flow_id":1884550362200340,"pcap_cnt":4661,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60380,"proto":"UDP","dns":{"type":"answer","id":45559,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:28.246167+0100","flow_id":1126430652547479,"pcap_cnt":5308,"event_type":"dns","src_ip":"192.168.1.100","src_port":61596,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33922,"rrname":"kepicynezam.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.365934+0100","flow_id":778259128751470,"pcap_cnt":5828,"event_type":"dns","src_ip":"192.168.1.100","src_port":58057,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47870,"rrname":"qebukypahyh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.487268+0100","flow_id":444673313566310,"pcap_cnt":4319,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57346,"proto":"UDP","dns":{"type":"answer","id":50968,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:25.792357+0100","flow_id":2096857038001663,"pcap_cnt":4429,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62291,"proto":"UDP","dns":{"type":"answer","id":39451,"rcode":"NXDOMAIN","rrname":"fogynahidal.eu"}}
{"timestamp":"2017-12-12T18:33:27.156978+0100","flow_id":215543250904370,"pcap_cnt":4792,"event_type":"dns","src_ip":"192.168.1.100","src_port":51879,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":20901,"rrname":"gaqecizupun.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.366206+0100","flow_id":778259128751470,"pcap_cnt":5829,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58057,"proto":"UDP","dns":{"type":"answer","id":47870,"rcode":"NXDOMAIN","rrname":"qebukypahyh.eu"}}
{"timestamp":"2017-12-12T18:33:28.318920+0100","flow_id":2142349331848376,"pcap_cnt":5339,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49593,"proto":"UDP","dns":{"type":"answer","id":17954,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:29.366206+0100","flow_id":778259128751470,"pcap_cnt":5829,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58057,"proto":"UDP","dns":{"type":"answer","id":47870,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:27.157322+0100","flow_id":215543250904370,"pcap_cnt":4793,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51879,"proto":"UDP","dns":{"type":"answer","id":20901,"rcode":"NXDOMAIN","rrname":"gaqecizupun.eu"}}
{"timestamp":"2017-12-12T18:33:21.430639+0100","flow_id":1296642353500438,"pcap_cnt":3639,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60032,"proto":"UDP","dns":{"type":"answer","id":19394,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:29.432639+0100","flow_id":520939048114687,"pcap_cnt":5872,"event_type":"dns","src_ip":"192.168.1.100","src_port":61643,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2463,"rrname":"disugezejac.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.336730+0100","flow_id":1414842001007096,"pcap_cnt":4011,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53777,"proto":"UDP","dns":{"type":"answer","id":14449,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":595}}
{"timestamp":"2017-12-12T18:33:25.889264+0100","flow_id":1127620358279600,"pcap_cnt":4482,"event_type":"dns","src_ip":"192.168.1.100","src_port":51328,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":58283,"rrname":"jefejurenyp.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.798019+0100","flow_id":31162451962904,"pcap_cnt":3773,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51335,"proto":"UDP","dns":{"type":"answer","id":18025,"rcode":"NXDOMAIN","rrname":"foxanabelod.eu"}}
{"timestamp":"2017-12-12T18:33:29.432885+0100","flow_id":520939048114687,"pcap_cnt":5873,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61643,"proto":"UDP","dns":{"type":"answer","id":2463,"rcode":"NXDOMAIN","rrname":"disugezejac.eu"}}
{"timestamp":"2017-12-12T18:33:21.462600+0100","flow_id":874719798693359,"pcap_cnt":3655,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52444,"proto":"UDP","dns":{"type":"answer","id":61857,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:27.821445+0100","flow_id":1182134230506493,"pcap_cnt":5100,"event_type":"dns","src_ip":"192.168.1.100","src_port":49223,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51135,"rrname":"tuwucopexot.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:25.889587+0100","flow_id":1127620358279600,"pcap_cnt":4483,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51328,"proto":"UDP","dns":{"type":"answer","id":58283,"rcode":"NXDOMAIN","rrname":"jefejurenyp.eu"}}
{"timestamp":"2017-12-12T18:33:29.432885+0100","flow_id":520939048114687,"pcap_cnt":5873,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61643,"proto":"UDP","dns":{"type":"answer","id":2463,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:19.732709+0100","flow_id":723371592519654,"pcap_cnt":2845,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50760,"proto":"UDP","dns":{"type":"answer","id":11654,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:21.238405+0100","flow_id":1076868876968398,"pcap_cnt":3549,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60702,"proto":"UDP","dns":{"type":"answer","id":53937,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:27.821738+0100","flow_id":1182134230506493,"pcap_cnt":5101,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49223,"proto":"UDP","dns":{"type":"answer","id":51135,"rcode":"NXDOMAIN","rrname":"tuwucopexot.eu"}}
{"timestamp":"2017-12-12T18:33:21.824025+0100","flow_id":146170938757501,"pcap_cnt":3785,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64002,"proto":"UDP","dns":{"type":"answer","id":59938,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:21.594676+0100","flow_id":1528967871926749,"pcap_cnt":3703,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60726,"proto":"UDP","dns":{"type":"answer","id":11152,"rcode":"NXDOMAIN","rrname":"ryceziqofig.eu"}}
{"timestamp":"2017-12-12T18:33:25.624741+0100","flow_id":1617257367439199,"pcap_cnt":4377,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51368,"proto":"UDP","dns":{"type":"answer","id":30320,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:21.931200+0100","flow_id":478567047705984,"pcap_cnt":3824,"event_type":"dns","src_ip":"192.168.1.100","src_port":51186,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37373,"rrname":"purijygirem.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.317877+0100","flow_id":684025398614214,"pcap_cnt":4673,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51986,"proto":"UDP","dns":{"type":"answer","id":14559,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:26.349301+0100","flow_id":314817124914293,"pcap_cnt":4690,"event_type":"dns","src_ip":"192.168.1.100","src_port":54843,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13583,"rrname":"purodogidot.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.165798+0100","flow_id":1077180262418054,"pcap_cnt":4615,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51234,"proto":"UDP","dns":{"type":"answer","id":25886,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:26.319191+0100","flow_id":1201998454513367,"pcap_cnt":4676,"event_type":"dns","src_ip":"192.168.1.100","src_port":60933,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36508,"rrname":"lymajaxecir.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.349631+0100","flow_id":314817124914293,"pcap_cnt":4691,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54843,"proto":"UDP","dns":{"type":"answer","id":13583,"rcode":"NXDOMAIN","rrname":"purodogidot.eu"}}
{"timestamp":"2017-12-12T18:33:26.319424+0100","flow_id":1201998454513367,"pcap_cnt":4677,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60933,"proto":"UDP","dns":{"type":"answer","id":36508,"rcode":"NXDOMAIN","rrname":"lymajaxecir.eu"}}
{"timestamp":"2017-12-12T18:33:20.960577+0100","flow_id":35354340010049,"pcap_cnt":3418,"event_type":"dns","src_ip":"192.168.1.100","src_port":56072,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":56995,"rrname":"tupyjoqirof.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.349631+0100","flow_id":314817124914293,"pcap_cnt":4691,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54843,"proto":"UDP","dns":{"type":"answer","id":13583,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":577}}
{"timestamp":"2017-12-12T18:33:22.340551+0100","flow_id":145801571610866,"pcap_cnt":4013,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57477,"proto":"UDP","dns":{"type":"answer","id":24416,"rcode":"NXDOMAIN","rrname":"galodiwosuf.eu"}}
{"timestamp":"2017-12-12T18:33:27.345327+0100","flow_id":483059583022930,"pcap_cnt":4897,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56798,"proto":"UDP","dns":{"type":"answer","id":2521,"rcode":"NXDOMAIN","rrname":"fokisohurif.eu"}}
{"timestamp":"2017-12-12T18:33:26.387131+0100","flow_id":2051134963771451,"pcap_cnt":4716,"event_type":"dns","src_ip":"192.168.1.100","src_port":58798,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":61334,"rrname":"foxyxubecuh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.345327+0100","flow_id":483059583022930,"pcap_cnt":4897,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56798,"proto":"UDP","dns":{"type":"answer","id":2521,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:25.402859+0100","flow_id":797139804693931,"pcap_cnt":4280,"event_type":"dns","src_ip":"192.168.1.100","src_port":63149,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9451,"rrname":"tuwypagupeb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.599932+0100","flow_id":2038795522746236,"pcap_cnt":5008,"event_type":"dns","src_ip":"192.168.1.100","src_port":53585,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":57010,"rrname":"mamasufexix.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.704844+0100","flow_id":1458036487340364,"pcap_cnt":4394,"event_type":"dns","src_ip":"192.168.1.100","src_port":61622,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62414,"rrname":"mamyfycoliq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.480422+0100","flow_id":140417830048934,"pcap_cnt":3658,"event_type":"dns","src_ip":"192.168.1.100","src_port":57772,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":10928,"rrname":"pufuwygybyx.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.604898+0100","flow_id":1591972894947791,"pcap_cnt":4371,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65268,"proto":"UDP","dns":{"type":"answer","id":51185,"rcode":"NXDOMAIN","rrname":"fotoxysupyd.eu"}}
{"timestamp":"2017-12-12T18:33:21.730676+0100","flow_id":294628630799586,"pcap_cnt":3755,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50207,"proto":"UDP","dns":{"type":"answer","id":60553,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:21.480710+0100","flow_id":140417830048934,"pcap_cnt":3659,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57772,"proto":"UDP","dns":{"type":"answer","id":10928,"rcode":"NXDOMAIN","rrname":"pufuwygybyx.eu"}}
{"timestamp":"2017-12-12T18:33:25.792357+0100","flow_id":2096857038001663,"pcap_cnt":4429,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62291,"proto":"UDP","dns":{"type":"answer","id":39451,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:21.370158+0100","flow_id":1177525730518268,"pcap_cnt":3613,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60046,"proto":"UDP","dns":{"type":"answer","id":59035,"rcode":"NXDOMAIN","rrname":"jelybodybuf.eu"}}
{"timestamp":"2017-12-12T18:33:26.013809+0100","flow_id":650024289973745,"pcap_cnt":4526,"event_type":"dns","src_ip":"192.168.1.100","src_port":53694,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60081,"rrname":"jeluzydyqej.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.370158+0100","flow_id":1177525730518268,"pcap_cnt":3613,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60046,"proto":"UDP","dns":{"type":"answer","id":59035,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:25.495742+0100","flow_id":2233782742912920,"pcap_cnt":4335,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55984,"proto":"UDP","dns":{"type":"answer","id":43238,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:26.014023+0100","flow_id":650024289973745,"pcap_cnt":4527,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53694,"proto":"UDP","dns":{"type":"answer","id":60081,"rcode":"NXDOMAIN","rrname":"jeluzydyqej.eu"}}
{"timestamp":"2017-12-12T18:33:28.580646+0100","flow_id":1155314307619878,"pcap_cnt":5470,"event_type":"dns","src_ip":"192.168.1.100","src_port":62056,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45920,"rrname":"qetohiqyvoz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.157322+0100","flow_id":215543250904370,"pcap_cnt":4793,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51879,"proto":"UDP","dns":{"type":"answer","id":20901,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:25.766470+0100","flow_id":428728247497222,"pcap_cnt":4418,"event_type":"dns","src_ip":"192.168.1.100","src_port":55652,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":20968,"rrname":"dikatahyqar.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.639345+0100","flow_id":338415822422119,"pcap_cnt":3727,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59386,"proto":"UDP","dns":{"type":"answer","id":21973,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:28.580892+0100","flow_id":1155314307619878,"pcap_cnt":5471,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62056,"proto":"UDP","dns":{"type":"answer","id":45920,"rcode":"NXDOMAIN","rrname":"qetohiqyvoz.eu"}}
{"timestamp":"2017-12-12T18:33:21.684595+0100","flow_id":254165743923763,"pcap_cnt":3738,"event_type":"dns","src_ip":"192.168.1.100","src_port":56918,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41549,"rrname":"lyvularekud.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.580892+0100","flow_id":1155314307619878,"pcap_cnt":5471,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62056,"proto":"UDP","dns":{"type":"answer","id":45920,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:21.798019+0100","flow_id":31162451962904,"pcap_cnt":3773,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51335,"proto":"UDP","dns":{"type":"answer","id":18025,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:31.621833+0100","flow_id":445751350754569,"pcap_cnt":6412,"event_type":"dns","src_ip":"192.168.1.100","src_port":58449,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":24811,"rrname":"puvojyqevus.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.684882+0100","flow_id":254165743923763,"pcap_cnt":3739,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56918,"proto":"UDP","dns":{"type":"answer","id":41549,"rcode":"NXDOMAIN","rrname":"lyvularekud.eu"}}
{"timestamp":"2017-12-12T18:33:28.681653+0100","flow_id":2078148160677557,"pcap_cnt":5510,"event_type":"dns","src_ip":"192.168.1.100","src_port":49290,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50842,"rrname":"nojuwakofed.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.889587+0100","flow_id":1127620358279600,"pcap_cnt":4483,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51328,"proto":"UDP","dns":{"type":"answer","id":58283,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:21.100161+0100","flow_id":1137041368778561,"pcap_cnt":3476,"event_type":"dns","src_ip":"192.168.1.100","src_port":64275,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62045,"rrname":"pufagipajit.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.017904+0100","flow_id":1887881109325296,"pcap_cnt":4530,"event_type":"dns","src_ip":"192.168.1.100","src_port":51151,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50163,"rrname":"kejogydideq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.126886+0100","flow_id":1770428786208356,"pcap_cnt":4591,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63526,"proto":"UDP","dns":{"type":"answer","id":57377,"rcode":"NXDOMAIN","rrname":"pujamyqywyk.eu"}}
{"timestamp":"2017-12-12T18:33:21.100431+0100","flow_id":1137041368778561,"pcap_cnt":3477,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64275,"proto":"UDP","dns":{"type":"answer","id":62045,"rcode":"NXDOMAIN","rrname":"pufagipajit.eu"}}
{"timestamp":"2017-12-12T18:33:29.445960+0100","flow_id":2197058624793750,"pcap_cnt":5888,"event_type":"dns","src_ip":"192.168.1.100","src_port":62512,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25018,"rrname":"tucyroviwir.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:26.126886+0100","flow_id":1770428786208356,"pcap_cnt":4591,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63526,"proto":"UDP","dns":{"type":"answer","id":57377,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:27.821738+0100","flow_id":1182134230506493,"pcap_cnt":5101,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49223,"proto":"UDP","dns":{"type":"answer","id":51135,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:21.813067+0100","flow_id":794345928222731,"pcap_cnt":3778,"event_type":"dns","src_ip":"192.168.1.100","src_port":57934,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47414,"rrname":"dixuwusodut.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.446180+0100","flow_id":2197058624793750,"pcap_cnt":5889,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62512,"proto":"UDP","dns":{"type":"answer","id":25018,"rcode":"NXDOMAIN","rrname":"tucyroviwir.eu"}}
{"timestamp":"2017-12-12T18:33:21.594676+0100","flow_id":1528967871926749,"pcap_cnt":3703,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60726,"proto":"UDP","dns":{"type":"answer","id":11152,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:29.446180+0100","flow_id":2197058624793750,"pcap_cnt":5889,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62512,"proto":"UDP","dns":{"type":"answer","id":25018,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:21.931558+0100","flow_id":478567047705984,"pcap_cnt":3825,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51186,"proto":"UDP","dns":{"type":"answer","id":37373,"rcode":"NXDOMAIN","rrname":"purijygirem.eu"}}
{"timestamp":"2017-12-12T18:33:27.092336+0100","flow_id":683567984634032,"pcap_cnt":4762,"event_type":"dns","src_ip":"192.168.1.100","src_port":52243,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35224,"rrname":"ryloqulebih.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.247062+0100","flow_id":679603729777942,"pcap_cnt":4640,"event_type":"dns","src_ip":"192.168.1.100","src_port":50161,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1009,"rrname":"ryqozapaleb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.092609+0100","flow_id":683567984634032,"pcap_cnt":4763,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52243,"proto":"UDP","dns":{"type":"answer","id":35224,"rcode":"NXDOMAIN","rrname":"ryloqulebih.eu"}}
{"timestamp":"2017-12-12T18:33:26.319424+0100","flow_id":1201998454513367,"pcap_cnt":4677,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60933,"proto":"UDP","dns":{"type":"answer","id":36508,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:27.092609+0100","flow_id":683567984634032,"pcap_cnt":4763,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52243,"proto":"UDP","dns":{"type":"answer","id":35224,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:22.340551+0100","flow_id":145801571610866,"pcap_cnt":4013,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57477,"proto":"UDP","dns":{"type":"answer","id":24416,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:27.183086+0100","flow_id":684025398614214,"pcap_cnt":4816,"event_type":"dns","src_ip":"192.168.1.100","src_port":51986,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6838,"rrname":"vofapacebuv.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:20.960819+0100","flow_id":35354340010049,"pcap_cnt":3419,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56072,"proto":"UDP","dns":{"type":"answer","id":56995,"rcode":"NXDOMAIN","rrname":"tupyjoqirof.eu"}}
{"timestamp":"2017-12-12T18:33:21.283795+0100","flow_id":467254103856275,"pcap_cnt":3564,"event_type":"dns","src_ip":"192.168.1.100","src_port":50584,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7642,"rrname":"jefozaryciw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.496110+0100","flow_id":1304033992538594,"pcap_cnt":4966,"event_type":"dns","src_ip":"192.168.1.100","src_port":63731,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1970,"rrname":"ganudasajov.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:26.387429+0100","flow_id":2051134963771451,"pcap_cnt":4717,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58798,"proto":"UDP","dns":{"type":"answer","id":61334,"rcode":"NXDOMAIN","rrname":"foxyxubecuh.eu"}}
{"timestamp":"2017-12-12T18:33:25.403125+0100","flow_id":797139804693931,"pcap_cnt":4281,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63149,"proto":"UDP","dns":{"type":"answer","id":9451,"rcode":"NXDOMAIN","rrname":"tuwypagupeb.eu"}}
{"timestamp":"2017-12-12T18:33:27.600317+0100","flow_id":2038795522746236,"pcap_cnt":5009,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53585,"proto":"UDP","dns":{"type":"answer","id":57010,"rcode":"NXDOMAIN","rrname":"mamasufexix.eu"}}
{"timestamp":"2017-12-12T18:33:25.705197+0100","flow_id":1458036487340364,"pcap_cnt":4395,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61622,"proto":"UDP","dns":{"type":"answer","id":62414,"rcode":"NXDOMAIN","rrname":"mamyfycoliq.eu"}}
{"timestamp":"2017-12-12T18:33:19.797217+0100","flow_id":2023159693781258,"pcap_cnt":2885,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51758,"proto":"UDP","dns":{"type":"answer","id":20175,"rcode":"NXDOMAIN","rrname":"cilakyfaloq.eu"}}
{"timestamp":"2017-12-12T18:33:25.705197+0100","flow_id":1458036487340364,"pcap_cnt":4395,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61622,"proto":"UDP","dns":{"type":"answer","id":62414,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:19.797217+0100","flow_id":2023159693781258,"pcap_cnt":2885,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51758,"proto":"UDP","dns":{"type":"answer","id":20175,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:21.830892+0100","flow_id":1312690498809260,"pcap_cnt":3794,"event_type":"dns","src_ip":"192.168.1.100","src_port":51428,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40161,"rrname":"kepiwodagyr.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.000199+0100","flow_id":681545054945479,"pcap_cnt":4508,"event_type":"dns","src_ip":"192.168.1.100","src_port":58595,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36230,"rrname":"rydopapifel.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.246401+0100","flow_id":1126430652547479,"pcap_cnt":5309,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61596,"proto":"UDP","dns":{"type":"answer","id":33922,"rcode":"NXDOMAIN","rrname":"kepicynezam.eu"}}
{"timestamp":"2017-12-12T18:33:21.831208+0100","flow_id":1312690498809260,"pcap_cnt":3795,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51428,"proto":"UDP","dns":{"type":"answer","id":40161,"rcode":"NXDOMAIN","rrname":"kepiwodagyr.eu"}}
{"timestamp":"2017-12-12T18:33:26.014023+0100","flow_id":650024289973745,"pcap_cnt":4527,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53694,"proto":"UDP","dns":{"type":"answer","id":60081,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:28.246401+0100","flow_id":1126430652547479,"pcap_cnt":5309,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61596,"proto":"UDP","dns":{"type":"answer","id":33922,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:21.690580+0100","flow_id":1177525730518268,"pcap_cnt":3740,"event_type":"dns","src_ip":"192.168.1.100","src_port":60046,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25276,"rrname":"kerumyxofah.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:27.233697+0100","flow_id":1491938811810017,"pcap_cnt":4834,"event_type":"dns","src_ip":"192.168.1.100","src_port":58949,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19957,"rrname":"qeqohevazud.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.690871+0100","flow_id":1177525730518268,"pcap_cnt":3741,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60046,"proto":"UDP","dns":{"type":"answer","id":25276,"rcode":"NXDOMAIN","rrname":"kerumyxofah.eu"}}
{"timestamp":"2017-12-12T18:33:22.430823+0100","flow_id":772366433161959,"pcap_cnt":4040,"event_type":"dns","src_ip":"192.168.1.100","src_port":57919,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":731,"rrname":"xubifaremin.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.078013+0100","flow_id":2231854302375876,"pcap_cnt":3895,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53059,"proto":"UDP","dns":{"type":"answer","id":24289,"rcode":"NXDOMAIN","rrname":"rylupalyxad.eu"}}
{"timestamp":"2017-12-12T18:33:21.880162+0100","flow_id":2102882876878370,"pcap_cnt":3810,"event_type":"dns","src_ip":"192.168.1.100","src_port":64119,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":56890,"rrname":"qegosegodej.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.684882+0100","flow_id":254165743923763,"pcap_cnt":3739,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56918,"proto":"UDP","dns":{"type":"answer","id":41549,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:31.622085+0100","flow_id":445751350754569,"pcap_cnt":6413,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58449,"proto":"UDP","dns":{"type":"answer","id":24811,"rcode":"NXDOMAIN","rrname":"puvojyqevus.eu"}}
{"timestamp":"2017-12-12T18:33:21.880547+0100","flow_id":2102882876878370,"pcap_cnt":3811,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64119,"proto":"UDP","dns":{"type":"answer","id":56890,"rcode":"NXDOMAIN","rrname":"qegosegodej.eu"}}
{"timestamp":"2017-12-12T18:33:28.681988+0100","flow_id":2078148160677557,"pcap_cnt":5511,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49290,"proto":"UDP","dns":{"type":"answer","id":50842,"rcode":"NXDOMAIN","rrname":"nojuwakofed.eu"}}
{"timestamp":"2017-12-12T18:33:21.880547+0100","flow_id":2102882876878370,"pcap_cnt":3811,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64119,"proto":"UDP","dns":{"type":"answer","id":56890,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:21.527761+0100","flow_id":2086879828708753,"pcap_cnt":3684,"event_type":"dns","src_ip":"192.168.1.100","src_port":56787,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47373,"rrname":"mamitumyvig.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.100431+0100","flow_id":1137041368778561,"pcap_cnt":3477,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64275,"proto":"UDP","dns":{"type":"answer","id":62045,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:26.018177+0100","flow_id":1887881109325296,"pcap_cnt":4531,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51151,"proto":"UDP","dns":{"type":"answer","id":50163,"rcode":"NXDOMAIN","rrname":"kejogydideq.eu"}}
{"timestamp":"2017-12-12T18:33:21.528087+0100","flow_id":2086879828708753,"pcap_cnt":3685,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56787,"proto":"UDP","dns":{"type":"answer","id":47373,"rcode":"NXDOMAIN","rrname":"mamitumyvig.eu"}}
{"timestamp":"2017-12-12T18:33:21.111856+0100","flow_id":593281329247472,"pcap_cnt":3482,"event_type":"dns","src_ip":"192.168.1.100","src_port":59805,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":46352,"rrname":"pujejavakav.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.295829+0100","flow_id":1464558395229077,"pcap_cnt":4662,"event_type":"dns","src_ip":"192.168.1.100","src_port":56185,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64489,"rrname":"jefiredisav.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.528087+0100","flow_id":2086879828708753,"pcap_cnt":3685,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56787,"proto":"UDP","dns":{"type":"answer","id":47373,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:27.850314+0100","flow_id":8474287667594,"pcap_cnt":5120,"event_type":"dns","src_ip":"192.168.1.100","src_port":63658,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19643,"rrname":"cinafocuryb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.813385+0100","flow_id":794345928222731,"pcap_cnt":3779,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57934,"proto":"UDP","dns":{"type":"answer","id":47414,"rcode":"NXDOMAIN","rrname":"dixuwusodut.eu"}}
{"timestamp":"2017-12-12T18:33:21.931558+0100","flow_id":478567047705984,"pcap_cnt":3825,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51186,"proto":"UDP","dns":{"type":"answer","id":37373,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:29.616009+0100","flow_id":1309855820899913,"pcap_cnt":5954,"event_type":"dns","src_ip":"192.168.1.100","src_port":65451,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45790,"rrname":"vocuzikubal.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.143585+0100","flow_id":2171477799612641,"pcap_cnt":3922,"event_type":"dns","src_ip":"192.168.1.100","src_port":55534,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62233,"rrname":"lyvesiduneb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.548722+0100","flow_id":408043685109311,"pcap_cnt":4991,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58824,"proto":"UDP","dns":{"type":"answer","id":63010,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:29.616322+0100","flow_id":1309855820899913,"pcap_cnt":5955,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65451,"proto":"UDP","dns":{"type":"answer","id":45790,"rcode":"NXDOMAIN","rrname":"vocuzikubal.eu"}}
{"timestamp":"2017-12-12T18:33:22.143908+0100","flow_id":2171477799612641,"pcap_cnt":3923,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55534,"proto":"UDP","dns":{"type":"answer","id":62233,"rcode":"NXDOMAIN","rrname":"lyvesiduneb.eu"}}
{"timestamp":"2017-12-12T18:33:28.521662+0100","flow_id":699792223607721,"pcap_cnt":5434,"event_type":"dns","src_ip":"192.168.1.100","src_port":64863,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49423,"rrname":"digusebyvad.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:22.143908+0100","flow_id":2171477799612641,"pcap_cnt":3923,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55534,"proto":"UDP","dns":{"type":"answer","id":62233,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:22.797235+0100","flow_id":1592672974416435,"pcap_cnt":4156,"event_type":"dns","src_ip":"192.168.1.100","src_port":53051,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33401,"rrname":"tulimolywan.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.521947+0100","flow_id":699792223607721,"pcap_cnt":5435,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64863,"proto":"UDP","dns":{"type":"answer","id":49423,"rcode":"NXDOMAIN","rrname":"digusebyvad.eu"}}
{"timestamp":"2017-12-12T18:33:27.183341+0100","flow_id":684025398614214,"pcap_cnt":4817,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51986,"proto":"UDP","dns":{"type":"answer","id":6838,"rcode":"NXDOMAIN","rrname":"vofapacebuv.eu"}}
{"timestamp":"2017-12-12T18:33:22.797494+0100","flow_id":1592672974416435,"pcap_cnt":4157,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53051,"proto":"UDP","dns":{"type":"answer","id":33401,"rcode":"NXDOMAIN","rrname":"tulimolywan.eu"}}
{"timestamp":"2017-12-12T18:33:26.387429+0100","flow_id":2051134963771451,"pcap_cnt":4717,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58798,"proto":"UDP","dns":{"type":"answer","id":61334,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":577}}
{"timestamp":"2017-12-12T18:33:27.183341+0100","flow_id":684025398614214,"pcap_cnt":4817,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51986,"proto":"UDP","dns":{"type":"answer","id":6838,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:21.284118+0100","flow_id":467254103856275,"pcap_cnt":3565,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50584,"proto":"UDP","dns":{"type":"answer","id":7642,"rcode":"NXDOMAIN","rrname":"jefozaryciw.eu"}}
{"timestamp":"2017-12-12T18:33:27.496416+0100","flow_id":1304033992538594,"pcap_cnt":4967,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63731,"proto":"UDP","dns":{"type":"answer","id":1970,"rcode":"NXDOMAIN","rrname":"ganudasajov.eu"}}
{"timestamp":"2017-12-12T18:33:21.284118+0100","flow_id":467254103856275,"pcap_cnt":3565,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50584,"proto":"UDP","dns":{"type":"answer","id":7642,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:25.403125+0100","flow_id":797139804693931,"pcap_cnt":4281,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63149,"proto":"UDP","dns":{"type":"answer","id":9451,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:27.496416+0100","flow_id":1304033992538594,"pcap_cnt":4967,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63731,"proto":"UDP","dns":{"type":"answer","id":1970,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:21.480710+0100","flow_id":140417830048934,"pcap_cnt":3659,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57772,"proto":"UDP","dns":{"type":"answer","id":10928,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:25.480597+0100","flow_id":1825732931056946,"pcap_cnt":4310,"event_type":"dns","src_ip":"192.168.1.100","src_port":58318,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19202,"rrname":"kefaxyjebav.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:27.641901+0100","flow_id":333216764906349,"pcap_cnt":5026,"event_type":"dns","src_ip":"192.168.1.100","src_port":61922,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":15901,"rrname":"nopolomojen.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.737652+0100","flow_id":575334808633716,"pcap_cnt":4412,"event_type":"dns","src_ip":"192.168.1.100","src_port":64069,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":22675,"rrname":"gatykibojig.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.595932+0100","flow_id":457145898309596,"pcap_cnt":3704,"event_type":"dns","src_ip":"192.168.1.100","src_port":62074,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33162,"rrname":"vofecokoder.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.480887+0100","flow_id":1825732931056946,"pcap_cnt":4311,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58318,"proto":"UDP","dns":{"type":"answer","id":19202,"rcode":"NXDOMAIN","rrname":"kefaxyjebav.eu"}}
{"timestamp":"2017-12-12T18:33:21.596196+0100","flow_id":457145898309596,"pcap_cnt":3705,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62074,"proto":"UDP","dns":{"type":"answer","id":33162,"rcode":"NXDOMAIN","rrname":"vofecokoder.eu"}}
{"timestamp":"2017-12-12T18:33:21.831208+0100","flow_id":1312690498809260,"pcap_cnt":3795,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51428,"proto":"UDP","dns":{"type":"answer","id":40161,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:21.596196+0100","flow_id":457145898309596,"pcap_cnt":3705,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62074,"proto":"UDP","dns":{"type":"answer","id":33162,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:28.247098+0100","flow_id":445420638094650,"pcap_cnt":5310,"event_type":"dns","src_ip":"192.168.1.100","src_port":62357,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29046,"rrname":"lyrojunynah.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.613413+0100","flow_id":1969506962463781,"pcap_cnt":3712,"event_type":"dns","src_ip":"192.168.1.100","src_port":49391,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28421,"rrname":"pujotiqunif.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.071159+0100","flow_id":1302142059156983,"pcap_cnt":3888,"event_type":"dns","src_ip":"192.168.1.100","src_port":62931,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29268,"rrname":"mavaxokitad.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.233976+0100","flow_id":1491938811810017,"pcap_cnt":4835,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58949,"proto":"UDP","dns":{"type":"answer","id":19957,"rcode":"NXDOMAIN","rrname":"qeqohevazud.eu"}}
{"timestamp":"2017-12-12T18:33:21.690871+0100","flow_id":1177525730518268,"pcap_cnt":3741,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60046,"proto":"UDP","dns":{"type":"answer","id":25276,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:28.247330+0100","flow_id":445420638094650,"pcap_cnt":5311,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62357,"proto":"UDP","dns":{"type":"answer","id":29046,"rcode":"NXDOMAIN","rrname":"lyrojunynah.eu"}}
{"timestamp":"2017-12-12T18:33:22.071434+0100","flow_id":1302142059156983,"pcap_cnt":3889,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62931,"proto":"UDP","dns":{"type":"answer","id":29268,"rcode":"NXDOMAIN","rrname":"mavaxokitad.eu"}}
{"timestamp":"2017-12-12T18:33:22.078013+0100","flow_id":2231854302375876,"pcap_cnt":3895,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53059,"proto":"UDP","dns":{"type":"answer","id":24289,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:21.802026+0100","flow_id":1142553959283946,"pcap_cnt":3774,"event_type":"dns","src_ip":"192.168.1.100","src_port":51433,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1264,"rrname":"qetyrypopup.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.824624+0100","flow_id":1038626488161584,"pcap_cnt":3786,"event_type":"dns","src_ip":"192.168.1.100","src_port":63939,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44385,"rrname":"ryqivypahux.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.681988+0100","flow_id":2078148160677557,"pcap_cnt":5511,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49290,"proto":"UDP","dns":{"type":"answer","id":50842,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:21.824909+0100","flow_id":1038626488161584,"pcap_cnt":3787,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63939,"proto":"UDP","dns":{"type":"answer","id":44385,"rcode":"NXDOMAIN","rrname":"ryqivypahux.eu"}}
{"timestamp":"2017-12-12T18:33:26.018177+0100","flow_id":1887881109325296,"pcap_cnt":4531,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51151,"proto":"UDP","dns":{"type":"answer","id":50163,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:22.835885+0100","flow_id":1332367891546125,"pcap_cnt":4171,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61343,"proto":"UDP","dns":{"type":"answer","id":17600,"rcode":"NXDOMAIN","rrname":"digegazolan.eu"}}
{"timestamp":"2017-12-12T18:33:21.112115+0100","flow_id":593281329247472,"pcap_cnt":3483,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59805,"proto":"UDP","dns":{"type":"answer","id":46352,"rcode":"NXDOMAIN","rrname":"pujejavakav.eu"}}
{"timestamp":"2017-12-12T18:33:22.835885+0100","flow_id":1332367891546125,"pcap_cnt":4171,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61343,"proto":"UDP","dns":{"type":"answer","id":17600,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:26.092840+0100","flow_id":2041726837877416,"pcap_cnt":4574,"event_type":"dns","src_ip":"192.168.1.100","src_port":49536,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11439,"rrname":"mamomamymyl.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.112115+0100","flow_id":593281329247472,"pcap_cnt":3483,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59805,"proto":"UDP","dns":{"type":"answer","id":46352,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:26.296085+0100","flow_id":1464558395229077,"pcap_cnt":4663,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56185,"proto":"UDP","dns":{"type":"answer","id":64489,"rcode":"NXDOMAIN","rrname":"jefiredisav.eu"}}
{"timestamp":"2017-12-12T18:33:22.967280+0100","flow_id":2013893302076016,"pcap_cnt":4228,"event_type":"dns","src_ip":"192.168.1.100","src_port":49263,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63623,"rrname":"gadaqusupyj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.974003+0100","flow_id":631175825710259,"pcap_cnt":3844,"event_type":"dns","src_ip":"192.168.1.100","src_port":53854,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18976,"rrname":"fobyqyhezem.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.247317+0100","flow_id":679603729777942,"pcap_cnt":4641,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50161,"proto":"UDP","dns":{"type":"answer","id":1009,"rcode":"NXDOMAIN","rrname":"ryqozapaleb.eu"}}
{"timestamp":"2017-12-12T18:33:26.296085+0100","flow_id":1464558395229077,"pcap_cnt":4663,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56185,"proto":"UDP","dns":{"type":"answer","id":64489,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:22.967515+0100","flow_id":2013893302076016,"pcap_cnt":4229,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49263,"proto":"UDP","dns":{"type":"answer","id":63623,"rcode":"NXDOMAIN","rrname":"gadaqusupyj.eu"}}
{"timestamp":"2017-12-12T18:33:20.960819+0100","flow_id":35354340010049,"pcap_cnt":3419,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56072,"proto":"UDP","dns":{"type":"answer","id":56995,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:22.967515+0100","flow_id":2013893302076016,"pcap_cnt":4229,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49263,"proto":"UDP","dns":{"type":"answer","id":63623,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:28.521947+0100","flow_id":699792223607721,"pcap_cnt":5435,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64863,"proto":"UDP","dns":{"type":"answer","id":49423,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:22.797494+0100","flow_id":1592672974416435,"pcap_cnt":4157,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53051,"proto":"UDP","dns":{"type":"answer","id":33401,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:25.604898+0100","flow_id":1591972894947791,"pcap_cnt":4371,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65268,"proto":"UDP","dns":{"type":"answer","id":51185,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:27.103368+0100","flow_id":453372769965000,"pcap_cnt":4770,"event_type":"dns","src_ip":"192.168.1.100","src_port":49920,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63744,"rrname":"tujaculurim.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.295215+0100","flow_id":649115904475439,"pcap_cnt":4876,"event_type":"dns","src_ip":"192.168.1.100","src_port":55917,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":24166,"rrname":"volugomymet.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.580186+0100","flow_id":941667601930842,"pcap_cnt":5468,"event_type":"dns","src_ip":"192.168.1.100","src_port":61121,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":55324,"rrname":"vofirefumuj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.340622+0100","flow_id":583252580840078,"pcap_cnt":4242,"event_type":"dns","src_ip":"192.168.1.100","src_port":51846,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":55217,"rrname":"puvybivihox.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:19.825643+0100","flow_id":1090378694945394,"pcap_cnt":2896,"event_type":"dns","src_ip":"192.168.1.100","src_port":62965,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62554,"rrname":"dikegybecys.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:28.580461+0100","flow_id":941667601930842,"pcap_cnt":5469,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61121,"proto":"UDP","dns":{"type":"answer","id":55324,"rcode":"NXDOMAIN","rrname":"vofirefumuj.eu"}}
{"timestamp":"2017-12-12T18:33:25.340850+0100","flow_id":583252580840078,"pcap_cnt":4243,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51846,"proto":"UDP","dns":{"type":"answer","id":55217,"rcode":"NXDOMAIN","rrname":"puvybivihox.eu"}}
{"timestamp":"2017-12-12T18:33:25.738016+0100","flow_id":575334808633716,"pcap_cnt":4413,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64069,"proto":"UDP","dns":{"type":"answer","id":22675,"rcode":"NXDOMAIN","rrname":"gatykibojig.eu"}}
{"timestamp":"2017-12-12T18:33:19.825872+0100","flow_id":1090378694945394,"pcap_cnt":2897,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62965,"proto":"UDP","dns":{"type":"answer","id":62554,"rcode":"NXDOMAIN","rrname":"dikegybecys.eu"}}
{"timestamp":"2017-12-12T18:33:25.480887+0100","flow_id":1825732931056946,"pcap_cnt":4311,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58318,"proto":"UDP","dns":{"type":"answer","id":19202,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:21.722457+0100","flow_id":1560112827270681,"pcap_cnt":3752,"event_type":"dns","src_ip":"192.168.1.100","src_port":52583,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":46374,"rrname":"cileretirus.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.986413+0100","flow_id":1964322937179437,"pcap_cnt":4504,"event_type":"dns","src_ip":"192.168.1.100","src_port":61592,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":32076,"rrname":"lysowaxojib.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.766771+0100","flow_id":428728247497222,"pcap_cnt":4419,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55652,"proto":"UDP","dns":{"type":"answer","id":20968,"rcode":"NXDOMAIN","rrname":"dikatahyqar.eu"}}
{"timestamp":"2017-12-12T18:33:21.722751+0100","flow_id":1560112827270681,"pcap_cnt":3753,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52583,"proto":"UDP","dns":{"type":"answer","id":46374,"rcode":"NXDOMAIN","rrname":"cileretirus.eu"}}
{"timestamp":"2017-12-12T18:33:21.613673+0100","flow_id":1969506962463781,"pcap_cnt":3713,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49391,"proto":"UDP","dns":{"type":"answer","id":28421,"rcode":"NXDOMAIN","rrname":"pujotiqunif.eu"}}
{"timestamp":"2017-12-12T18:33:25.986726+0100","flow_id":1964322937179437,"pcap_cnt":4505,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61592,"proto":"UDP","dns":{"type":"answer","id":32076,"rcode":"NXDOMAIN","rrname":"lysowaxojib.eu"}}
{"timestamp":"2017-12-12T18:33:27.233976+0100","flow_id":1491938811810017,"pcap_cnt":4835,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58949,"proto":"UDP","dns":{"type":"answer","id":19957,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:25.986726+0100","flow_id":1964322937179437,"pcap_cnt":4505,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61592,"proto":"UDP","dns":{"type":"answer","id":32076,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:28.247330+0100","flow_id":445420638094650,"pcap_cnt":5311,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62357,"proto":"UDP","dns":{"type":"answer","id":29046,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:27.236901+0100","flow_id":1411897801284965,"pcap_cnt":4840,"event_type":"dns","src_ip":"192.168.1.100","src_port":63415,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63349,"rrname":"puzoxyvojyc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.014340+0100","flow_id":335791597697028,"pcap_cnt":4528,"event_type":"dns","src_ip":"192.168.1.100","src_port":63597,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42286,"rrname":"xutevexecif.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.962842+0100","flow_id":1811460755927322,"pcap_cnt":3834,"event_type":"dns","src_ip":"192.168.1.100","src_port":56566,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9210,"rrname":"ryhyruqeliz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.095152+0100","flow_id":1569961187242928,"pcap_cnt":3010,"event_type":"dns","src_ip":"192.168.1.100","src_port":56923,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13665,"rrname":"citonocebyl.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.133304+0100","flow_id":763748581247160,"pcap_cnt":3918,"event_type":"dns","src_ip":"192.168.1.100","src_port":63561,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34135,"rrname":"jewucidafyb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.963277+0100","flow_id":1811460755927322,"pcap_cnt":3835,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56566,"proto":"UDP","dns":{"type":"answer","id":9210,"rcode":"NXDOMAIN","rrname":"ryhyruqeliz.eu"}}
{"timestamp":"2017-12-12T18:33:28.682288+0100","flow_id":1516263359146288,"pcap_cnt":5512,"event_type":"dns","src_ip":"192.168.1.100","src_port":51071,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14383,"rrname":"gahunawahik.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.963277+0100","flow_id":1811460755927322,"pcap_cnt":3835,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56566,"proto":"UDP","dns":{"type":"answer","id":9210,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:21.824909+0100","flow_id":1038626488161584,"pcap_cnt":3787,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63939,"proto":"UDP","dns":{"type":"answer","id":44385,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:21.885686+0100","flow_id":2241361212441526,"pcap_cnt":3814,"event_type":"dns","src_ip":"192.168.1.100","src_port":58597,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":57836,"rrname":"rydeqegekeq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.850580+0100","flow_id":8474287667594,"pcap_cnt":5121,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63658,"proto":"UDP","dns":{"type":"answer","id":19643,"rcode":"NXDOMAIN","rrname":"cinafocuryb.eu"}}
{"timestamp":"2017-12-12T18:33:21.813385+0100","flow_id":794345928222731,"pcap_cnt":3779,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57934,"proto":"UDP","dns":{"type":"answer","id":47414,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:28.682611+0100","flow_id":1516263359146288,"pcap_cnt":5513,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51071,"proto":"UDP","dns":{"type":"answer","id":14383,"rcode":"NXDOMAIN","rrname":"gahunawahik.eu"}}
{"timestamp":"2017-12-12T18:33:21.886204+0100","flow_id":2241361212441526,"pcap_cnt":3815,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58597,"proto":"UDP","dns":{"type":"answer","id":57836,"rcode":"NXDOMAIN","rrname":"rydeqegekeq.eu"}}
{"timestamp":"2017-12-12T18:33:21.936144+0100","flow_id":1761280505497808,"pcap_cnt":3826,"event_type":"dns","src_ip":"192.168.1.100","src_port":57855,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33685,"rrname":"vonerymekix.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.682611+0100","flow_id":1516263359146288,"pcap_cnt":5513,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51071,"proto":"UDP","dns":{"type":"answer","id":14383,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:21.886204+0100","flow_id":2241361212441526,"pcap_cnt":3815,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58597,"proto":"UDP","dns":{"type":"answer","id":57836,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:22.150327+0100","flow_id":1141647721253687,"pcap_cnt":3928,"event_type":"dns","src_ip":"192.168.1.100","src_port":61699,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":10632,"rrname":"xuxuqodopef.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.247317+0100","flow_id":679603729777942,"pcap_cnt":4641,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50161,"proto":"UDP","dns":{"type":"answer","id":1009,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:21.974338+0100","flow_id":631175825710259,"pcap_cnt":3845,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53854,"proto":"UDP","dns":{"type":"answer","id":18976,"rcode":"NXDOMAIN","rrname":"fobyqyhezem.eu"}}
{"timestamp":"2017-12-12T18:33:21.943611+0100","flow_id":86043544086011,"pcap_cnt":3828,"event_type":"dns","src_ip":"192.168.1.100","src_port":51539,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38392,"rrname":"novubymyvip.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.150612+0100","flow_id":1141647721253687,"pcap_cnt":3929,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61699,"proto":"UDP","dns":{"type":"answer","id":10632,"rcode":"NXDOMAIN","rrname":"xuxuqodopef.eu"}}
{"timestamp":"2017-12-12T18:33:21.974338+0100","flow_id":631175825710259,"pcap_cnt":3845,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53854,"proto":"UDP","dns":{"type":"answer","id":18976,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:22.150612+0100","flow_id":1141647721253687,"pcap_cnt":3929,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61699,"proto":"UDP","dns":{"type":"answer","id":10632,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:25.979677+0100","flow_id":722104577897028,"pcap_cnt":4500,"event_type":"dns","src_ip":"192.168.1.100","src_port":64545,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4156,"rrname":"kefidaxupif.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:21.489614+0100","flow_id":448665485408398,"pcap_cnt":3666,"event_type":"dns","src_ip":"192.168.1.100","src_port":57220,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45919,"rrname":"foqahabofoq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.117079+0100","flow_id":1328833132200055,"pcap_cnt":3910,"event_type":"dns","src_ip":"192.168.1.100","src_port":64453,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43635,"rrname":"digijusekyg.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:26.000448+0100","flow_id":681545054945479,"pcap_cnt":4509,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58595,"proto":"UDP","dns":{"type":"answer","id":36230,"rcode":"NXDOMAIN","rrname":"rydopapifel.eu"}}
{"timestamp":"2017-12-12T18:33:25.979990+0100","flow_id":722104577897028,"pcap_cnt":4501,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64545,"proto":"UDP","dns":{"type":"answer","id":4156,"rcode":"NXDOMAIN","rrname":"kefidaxupif.eu"}}
{"timestamp":"2017-12-12T18:33:26.000448+0100","flow_id":681545054945479,"pcap_cnt":4509,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58595,"proto":"UDP","dns":{"type":"answer","id":36230,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:27.295458+0100","flow_id":649115904475439,"pcap_cnt":4877,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55917,"proto":"UDP","dns":{"type":"answer","id":24166,"rcode":"NXDOMAIN","rrname":"volugomymet.eu"}}
{"timestamp":"2017-12-12T18:33:28.580461+0100","flow_id":941667601930842,"pcap_cnt":5469,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61121,"proto":"UDP","dns":{"type":"answer","id":55324,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:26.001437+0100","flow_id":2243401321951431,"pcap_cnt":4512,"event_type":"dns","src_ip":"192.168.1.100","src_port":63770,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27548,"rrname":"vonodecidid.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:25.340850+0100","flow_id":583252580840078,"pcap_cnt":4243,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51846,"proto":"UDP","dns":{"type":"answer","id":55217,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:19.825872+0100","flow_id":1090378694945394,"pcap_cnt":2897,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62965,"proto":"UDP","dns":{"type":"answer","id":62554,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:28.656543+0100","flow_id":1300039673054367,"pcap_cnt":5508,"event_type":"dns","src_ip":"192.168.1.100","src_port":61572,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":184,"rrname":"voledokuwev.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.001705+0100","flow_id":2243401321951431,"pcap_cnt":4513,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63770,"proto":"UDP","dns":{"type":"answer","id":27548,"rcode":"NXDOMAIN","rrname":"vonodecidid.eu"}}
{"timestamp":"2017-12-12T18:33:25.492887+0100","flow_id":230171909391703,"pcap_cnt":4328,"event_type":"dns","src_ip":"192.168.1.100","src_port":54043,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45110,"rrname":"tufigolidat.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.766771+0100","flow_id":428728247497222,"pcap_cnt":4419,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55652,"proto":"UDP","dns":{"type":"answer","id":20968,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:21.613673+0100","flow_id":1969506962463781,"pcap_cnt":3713,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49391,"proto":"UDP","dns":{"type":"answer","id":28421,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:25.493124+0100","flow_id":230171909391703,"pcap_cnt":4329,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54043,"proto":"UDP","dns":{"type":"answer","id":45110,"rcode":"NXDOMAIN","rrname":"tufigolidat.eu"}}
{"timestamp":"2017-12-12T18:33:25.769414+0100","flow_id":2184510878104966,"pcap_cnt":4420,"event_type":"dns","src_ip":"192.168.1.100","src_port":61936,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63275,"rrname":"jewidonevin.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.926571+0100","flow_id":1648483926877035,"pcap_cnt":3818,"event_type":"dns","src_ip":"192.168.1.100","src_port":57523,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":57516,"rrname":"ciqofymosip.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.622085+0100","flow_id":445751350754569,"pcap_cnt":6413,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58449,"proto":"UDP","dns":{"type":"answer","id":24811,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":569}}
{"timestamp":"2017-12-12T18:33:25.769722+0100","flow_id":2184510878104966,"pcap_cnt":4421,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61936,"proto":"UDP","dns":{"type":"answer","id":63275,"rcode":"NXDOMAIN","rrname":"jewidonevin.eu"}}
{"timestamp":"2017-12-12T18:33:21.802366+0100","flow_id":1142553959283946,"pcap_cnt":3775,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51433,"proto":"UDP","dns":{"type":"answer","id":1264,"rcode":"NXDOMAIN","rrname":"qetyrypopup.eu"}}
{"timestamp":"2017-12-12T18:33:21.927104+0100","flow_id":1648483926877035,"pcap_cnt":3819,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57523,"proto":"UDP","dns":{"type":"answer","id":57516,"rcode":"NXDOMAIN","rrname":"ciqofymosip.eu"}}
{"timestamp":"2017-12-12T18:33:21.802366+0100","flow_id":1142553959283946,"pcap_cnt":3775,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51433,"proto":"UDP","dns":{"type":"answer","id":1264,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:27.237214+0100","flow_id":1411897801284965,"pcap_cnt":4841,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63415,"proto":"UDP","dns":{"type":"answer","id":63349,"rcode":"NXDOMAIN","rrname":"puzoxyvojyc.eu"}}
{"timestamp":"2017-12-12T18:33:21.927104+0100","flow_id":1648483926877035,"pcap_cnt":3819,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57523,"proto":"UDP","dns":{"type":"answer","id":57516,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:22.133615+0100","flow_id":763748581247160,"pcap_cnt":3919,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63561,"proto":"UDP","dns":{"type":"answer","id":34135,"rcode":"NXDOMAIN","rrname":"jewucidafyb.eu"}}
{"timestamp":"2017-12-12T18:33:22.012690+0100","flow_id":461887542276498,"pcap_cnt":3862,"event_type":"dns","src_ip":"192.168.1.100","src_port":60137,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":24659,"rrname":"jecekorosuk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.059417+0100","flow_id":959115906181145,"pcap_cnt":3884,"event_type":"dns","src_ip":"192.168.1.100","src_port":50654,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":52669,"rrname":"vowypikelaf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.012946+0100","flow_id":461887542276498,"pcap_cnt":3863,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60137,"proto":"UDP","dns":{"type":"answer","id":24659,"rcode":"NXDOMAIN","rrname":"jecekorosuk.eu"}}
{"timestamp":"2017-12-12T18:33:21.195978+0100","flow_id":1424443400387978,"pcap_cnt":3528,"event_type":"dns","src_ip":"192.168.1.100","src_port":62845,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":52073,"rrname":"fogaruhityg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.012946+0100","flow_id":461887542276498,"pcap_cnt":3863,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60137,"proto":"UDP","dns":{"type":"answer","id":24659,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:22.059772+0100","flow_id":959115906181145,"pcap_cnt":3885,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50654,"proto":"UDP","dns":{"type":"answer","id":52669,"rcode":"NXDOMAIN","rrname":"vowypikelaf.eu"}}
{"timestamp":"2017-12-12T18:33:27.850580+0100","flow_id":8474287667594,"pcap_cnt":5121,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63658,"proto":"UDP","dns":{"type":"answer","id":19643,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:22.081479+0100","flow_id":373187876545536,"pcap_cnt":3896,"event_type":"dns","src_ip":"192.168.1.100","src_port":57201,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":55002,"rrname":"pufexalopas.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:21.936511+0100","flow_id":1761280505497808,"pcap_cnt":3827,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57855,"proto":"UDP","dns":{"type":"answer","id":33685,"rcode":"NXDOMAIN","rrname":"vonerymekix.eu"}}
{"timestamp":"2017-12-12T18:33:28.712270+0100","flow_id":558760530075214,"pcap_cnt":5526,"event_type":"dns","src_ip":"192.168.1.100","src_port":59923,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28074,"rrname":"xuqonerekij.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.936511+0100","flow_id":1761280505497808,"pcap_cnt":3827,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57855,"proto":"UDP","dns":{"type":"answer","id":33685,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:22.081753+0100","flow_id":373187876545536,"pcap_cnt":3897,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57201,"proto":"UDP","dns":{"type":"answer","id":55002,"rcode":"NXDOMAIN","rrname":"pufexalopas.eu"}}
{"timestamp":"2017-12-12T18:33:21.007313+0100","flow_id":892217495461009,"pcap_cnt":3436,"event_type":"dns","src_ip":"192.168.1.100","src_port":57491,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59837,"rrname":"direwyzexem.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.993317+0100","flow_id":1061063397287973,"pcap_cnt":3846,"event_type":"dns","src_ip":"192.168.1.100","src_port":63723,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1933,"rrname":"xugavariruq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.394699+0100","flow_id":1853897180513739,"pcap_cnt":4272,"event_type":"dns","src_ip":"192.168.1.100","src_port":58517,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5877,"rrname":"divoxehaceb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.326003+0100","flow_id":755435671291160,"pcap_cnt":4682,"event_type":"dns","src_ip":"192.168.1.100","src_port":49276,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":184,"rrname":"makififupap.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:21.007637+0100","flow_id":892217495461009,"pcap_cnt":3437,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57491,"proto":"UDP","dns":{"type":"answer","id":59837,"rcode":"NXDOMAIN","rrname":"direwyzexem.eu"}}
{"timestamp":"2017-12-12T18:33:21.944013+0100","flow_id":86043544086011,"pcap_cnt":3829,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51539,"proto":"UDP","dns":{"type":"answer","id":38392,"rcode":"NXDOMAIN","rrname":"novubymyvip.eu"}}
{"timestamp":"2017-12-12T18:33:22.255770+0100","flow_id":2038333813483290,"pcap_cnt":3970,"event_type":"dns","src_ip":"192.168.1.100","src_port":50998,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":58826,"rrname":"dixexehyzex.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.103695+0100","flow_id":453372769965000,"pcap_cnt":4771,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49920,"proto":"UDP","dns":{"type":"answer","id":63744,"rcode":"NXDOMAIN","rrname":"tujaculurim.eu"}}
{"timestamp":"2017-12-12T18:33:22.117362+0100","flow_id":1328833132200055,"pcap_cnt":3911,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64453,"proto":"UDP","dns":{"type":"answer","id":43635,"rcode":"NXDOMAIN","rrname":"digijusekyg.eu"}}
{"timestamp":"2017-12-12T18:33:21.489962+0100","flow_id":448665485408398,"pcap_cnt":3667,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57220,"proto":"UDP","dns":{"type":"answer","id":45919,"rcode":"NXDOMAIN","rrname":"foqahabofoq.eu"}}
{"timestamp":"2017-12-12T18:33:25.979990+0100","flow_id":722104577897028,"pcap_cnt":4501,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64545,"proto":"UDP","dns":{"type":"answer","id":4156,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:27.295458+0100","flow_id":649115904475439,"pcap_cnt":4877,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55917,"proto":"UDP","dns":{"type":"answer","id":24166,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:25.738016+0100","flow_id":575334808633716,"pcap_cnt":4413,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64069,"proto":"UDP","dns":{"type":"answer","id":22675,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:26.044016+0100","flow_id":734291548351472,"pcap_cnt":4548,"event_type":"dns","src_ip":"192.168.1.100","src_port":63247,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26087,"rrname":"dirojubusux.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.722751+0100","flow_id":1560112827270681,"pcap_cnt":3753,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52583,"proto":"UDP","dns":{"type":"answer","id":46374,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:19.897523+0100","flow_id":566255247405555,"pcap_cnt":2920,"event_type":"dns","src_ip":"192.168.1.100","src_port":56876,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":65084,"rrname":"xuboninogyt.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.001705+0100","flow_id":2243401321951431,"pcap_cnt":4513,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63770,"proto":"UDP","dns":{"type":"answer","id":27548,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:26.044276+0100","flow_id":734291548351472,"pcap_cnt":4549,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63247,"proto":"UDP","dns":{"type":"answer","id":26087,"rcode":"NXDOMAIN","rrname":"dirojubusux.eu"}}
{"timestamp":"2017-12-12T18:33:19.897816+0100","flow_id":566255247405555,"pcap_cnt":2921,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56876,"proto":"UDP","dns":{"type":"answer","id":65084,"rcode":"NXDOMAIN","rrname":"xuboninogyt.eu"}}
{"timestamp":"2017-12-12T18:33:22.431104+0100","flow_id":772366433161959,"pcap_cnt":4041,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57919,"proto":"UDP","dns":{"type":"answer","id":731,"rcode":"NXDOMAIN","rrname":"xubifaremin.eu"}}
{"timestamp":"2017-12-12T18:33:25.493124+0100","flow_id":230171909391703,"pcap_cnt":4329,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54043,"proto":"UDP","dns":{"type":"answer","id":45110,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:22.431104+0100","flow_id":772366433161959,"pcap_cnt":4041,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57919,"proto":"UDP","dns":{"type":"answer","id":731,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":553}}
{"timestamp":"2017-12-12T18:33:28.592068+0100","flow_id":24943339768004,"pcap_cnt":5476,"event_type":"dns","src_ip":"192.168.1.100","src_port":65260,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":54131,"rrname":"xukeladoguk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.647367+0100","flow_id":799117637181639,"pcap_cnt":4382,"event_type":"dns","src_ip":"192.168.1.100","src_port":57567,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38074,"rrname":"lyxaxududes.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.769722+0100","flow_id":2184510878104966,"pcap_cnt":4421,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61936,"proto":"UDP","dns":{"type":"answer","id":63275,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:22.488274+0100","flow_id":107866272985938,"pcap_cnt":4070,"event_type":"dns","src_ip":"192.168.1.100","src_port":56104,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26024,"rrname":"puvopalywet.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.647668+0100","flow_id":799117637181639,"pcap_cnt":4383,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57567,"proto":"UDP","dns":{"type":"answer","id":38074,"rcode":"NXDOMAIN","rrname":"lyxaxududes.eu"}}
{"timestamp":"2017-12-12T18:33:28.592296+0100","flow_id":24943339768004,"pcap_cnt":5477,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65260,"proto":"UDP","dns":{"type":"answer","id":54131,"rcode":"NXDOMAIN","rrname":"xukeladoguk.eu"}}
{"timestamp":"2017-12-12T18:33:31.694571+0100","flow_id":133575947819307,"pcap_cnt":6440,"event_type":"dns","src_ip":"192.168.1.100","src_port":58557,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51589,"rrname":"foxirozigon.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.095368+0100","flow_id":1569961187242928,"pcap_cnt":3011,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56923,"proto":"UDP","dns":{"type":"answer","id":13665,"rcode":"NXDOMAIN","rrname":"citonocebyl.eu"}}
{"timestamp":"2017-12-12T18:33:27.237214+0100","flow_id":1411897801284965,"pcap_cnt":4841,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63415,"proto":"UDP","dns":{"type":"answer","id":63349,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:22.133615+0100","flow_id":763748581247160,"pcap_cnt":3919,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63561,"proto":"UDP","dns":{"type":"answer","id":34135,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:22.043580+0100","flow_id":1689664073411132,"pcap_cnt":3874,"event_type":"dns","src_ip":"192.168.1.100","src_port":49864,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":52183,"rrname":"rycodypycym.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.694892+0100","flow_id":133575947819307,"pcap_cnt":6441,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58557,"proto":"UDP","dns":{"type":"answer","id":51589,"rcode":"NXDOMAIN","rrname":"foxirozigon.eu"}}
{"timestamp":"2017-12-12T18:33:22.002557+0100","flow_id":1588897698155005,"pcap_cnt":3854,"event_type":"dns","src_ip":"192.168.1.100","src_port":63993,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17246,"rrname":"ganovowuqur.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.247718+0100","flow_id":1182185770436518,"pcap_cnt":4850,"event_type":"dns","src_ip":"192.168.1.100","src_port":59078,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53458,"rrname":"jepazunalyx.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.616322+0100","flow_id":1309855820899913,"pcap_cnt":5955,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65451,"proto":"UDP","dns":{"type":"answer","id":45790,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:22.059772+0100","flow_id":959115906181145,"pcap_cnt":3885,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50654,"proto":"UDP","dns":{"type":"answer","id":52669,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:21.196266+0100","flow_id":1424443400387978,"pcap_cnt":3529,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62845,"proto":"UDP","dns":{"type":"answer","id":52073,"rcode":"NXDOMAIN","rrname":"fogaruhityg.eu"}}
{"timestamp":"2017-12-12T18:33:27.290351+0100","flow_id":1339186152435247,"pcap_cnt":4874,"event_type":"dns","src_ip":"192.168.1.100","src_port":61801,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48149,"rrname":"puvacigakog.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.426313+0100","flow_id":1783949343228233,"pcap_cnt":4740,"event_type":"dns","src_ip":"192.168.1.100","src_port":53333,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4828,"rrname":"qeketaqojyf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.918265+0100","flow_id":1954214731776761,"pcap_cnt":5148,"event_type":"dns","src_ip":"192.168.1.100","src_port":52988,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36988,"rrname":"dimyfebidec.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.081753+0100","flow_id":373187876545536,"pcap_cnt":3897,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57201,"proto":"UDP","dns":{"type":"answer","id":55002,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:27.290703+0100","flow_id":1339186152435247,"pcap_cnt":4875,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61801,"proto":"UDP","dns":{"type":"answer","id":48149,"rcode":"NXDOMAIN","rrname":"puvacigakog.eu"}}
{"timestamp":"2017-12-12T18:33:26.426585+0100","flow_id":1783949343228233,"pcap_cnt":4741,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53333,"proto":"UDP","dns":{"type":"answer","id":4828,"rcode":"NXDOMAIN","rrname":"qeketaqojyf.eu"}}
{"timestamp":"2017-12-12T18:33:27.918605+0100","flow_id":1954214731776761,"pcap_cnt":5149,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52988,"proto":"UDP","dns":{"type":"answer","id":36988,"rcode":"NXDOMAIN","rrname":"dimyfebidec.eu"}}
{"timestamp":"2017-12-12T18:33:26.426585+0100","flow_id":1783949343228233,"pcap_cnt":4741,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53333,"proto":"UDP","dns":{"type":"answer","id":4828,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":577}}
{"timestamp":"2017-12-12T18:33:27.918605+0100","flow_id":1954214731776761,"pcap_cnt":5149,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52988,"proto":"UDP","dns":{"type":"answer","id":36988,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:27.642172+0100","flow_id":333216764906349,"pcap_cnt":5027,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61922,"proto":"UDP","dns":{"type":"answer","id":15901,"rcode":"NXDOMAIN","rrname":"nopolomojen.eu"}}
{"timestamp":"2017-12-12T18:33:21.944013+0100","flow_id":86043544086011,"pcap_cnt":3829,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51539,"proto":"UDP","dns":{"type":"answer","id":38392,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:27.642172+0100","flow_id":333216764906349,"pcap_cnt":5027,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61922,"proto":"UDP","dns":{"type":"answer","id":15901,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:22.256098+0100","flow_id":2038333813483290,"pcap_cnt":3971,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50998,"proto":"UDP","dns":{"type":"answer","id":58826,"rcode":"NXDOMAIN","rrname":"dixexehyzex.eu"}}
{"timestamp":"2017-12-12T18:33:22.117362+0100","flow_id":1328833132200055,"pcap_cnt":3911,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64453,"proto":"UDP","dns":{"type":"answer","id":43635,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:27.767737+0100","flow_id":2624542193401,"pcap_cnt":5082,"event_type":"dns","src_ip":"192.168.1.100","src_port":65513,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31544,"rrname":"lymevyrajas.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.489962+0100","flow_id":448665485408398,"pcap_cnt":3667,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57220,"proto":"UDP","dns":{"type":"answer","id":45919,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:26.046354+0100","flow_id":1132634732672274,"pcap_cnt":4552,"event_type":"dns","src_ip":"192.168.1.100","src_port":60627,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5895,"rrname":"ganuqibevux.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.205482+0100","flow_id":986386800876098,"pcap_cnt":3950,"event_type":"dns","src_ip":"192.168.1.100","src_port":53200,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23026,"rrname":"fogefobunik.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:21.506421+0100","flow_id":1988050483788341,"pcap_cnt":3672,"event_type":"dns","src_ip":"192.168.1.100","src_port":63231,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19248,"rrname":"jecumenunoq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.760427+0100","flow_id":1125015460354667,"pcap_cnt":3762,"event_type":"dns","src_ip":"192.168.1.100","src_port":56446,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27948,"rrname":"rytonovejof.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.656795+0100","flow_id":1300039673054367,"pcap_cnt":5509,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61572,"proto":"UDP","dns":{"type":"answer","id":184,"rcode":"NXDOMAIN","rrname":"voledokuwev.eu"}}
{"timestamp":"2017-12-12T18:33:26.044276+0100","flow_id":734291548351472,"pcap_cnt":4549,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63247,"proto":"UDP","dns":{"type":"answer","id":26087,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:28.656795+0100","flow_id":1300039673054367,"pcap_cnt":5509,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61572,"proto":"UDP","dns":{"type":"answer","id":184,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:26.133717+0100","flow_id":2096857038001663,"pcap_cnt":4594,"event_type":"dns","src_ip":"192.168.1.100","src_port":62291,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11090,"rrname":"digyxywifyq.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:26.046817+0100","flow_id":289092418320097,"pcap_cnt":4554,"event_type":"dns","src_ip":"192.168.1.100","src_port":53328,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":21619,"rrname":"jecocinywut.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.071434+0100","flow_id":1302142059156983,"pcap_cnt":3889,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62931,"proto":"UDP","dns":{"type":"answer","id":29268,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:26.014584+0100","flow_id":335791597697028,"pcap_cnt":4529,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63597,"proto":"UDP","dns":{"type":"answer","id":42286,"rcode":"NXDOMAIN","rrname":"xutevexecif.eu"}}
{"timestamp":"2017-12-12T18:33:26.133967+0100","flow_id":2096857038001663,"pcap_cnt":4595,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62291,"proto":"UDP","dns":{"type":"answer","id":11090,"rcode":"NXDOMAIN","rrname":"digyxywifyq.eu"}}
{"timestamp":"2017-12-12T18:33:25.647668+0100","flow_id":799117637181639,"pcap_cnt":4383,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57567,"proto":"UDP","dns":{"type":"answer","id":38074,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:22.085450+0100","flow_id":787089581034954,"pcap_cnt":3898,"event_type":"dns","src_ip":"192.168.1.100","src_port":50812,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36568,"rrname":"disugezejac.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.133967+0100","flow_id":2096857038001663,"pcap_cnt":4595,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62291,"proto":"UDP","dns":{"type":"answer","id":11090,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:25.799416+0100","flow_id":603773934580408,"pcap_cnt":4436,"event_type":"dns","src_ip":"192.168.1.100","src_port":49838,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41934,"rrname":"nofucemihub.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.862054+0100","flow_id":478094601561958,"pcap_cnt":4466,"event_type":"dns","src_ip":"192.168.1.100","src_port":53469,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31185,"rrname":"pumelilebon.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.095368+0100","flow_id":1569961187242928,"pcap_cnt":3011,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56923,"proto":"UDP","dns":{"type":"answer","id":13665,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:26.142275+0100","flow_id":1540968010886083,"pcap_cnt":4602,"event_type":"dns","src_ip":"192.168.1.100","src_port":55310,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":39964,"rrname":"kevylejigod.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.093129+0100","flow_id":2041726837877416,"pcap_cnt":4575,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49536,"proto":"UDP","dns":{"type":"answer","id":11439,"rcode":"NXDOMAIN","rrname":"mamomamymyl.eu"}}
{"timestamp":"2017-12-12T18:33:25.799658+0100","flow_id":603773934580408,"pcap_cnt":4437,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49838,"proto":"UDP","dns":{"type":"answer","id":41934,"rcode":"NXDOMAIN","rrname":"nofucemihub.eu"}}
{"timestamp":"2017-12-12T18:33:22.346550+0100","flow_id":1423524277406134,"pcap_cnt":4014,"event_type":"dns","src_ip":"192.168.1.100","src_port":58986,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50808,"rrname":"jejeqorekuv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.486804+0100","flow_id":924341703306644,"pcap_cnt":3202,"event_type":"dns","src_ip":"192.168.1.100","src_port":61916,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51393,"rrname":"lygowunezep.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.142516+0100","flow_id":1540968010886083,"pcap_cnt":4603,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55310,"proto":"UDP","dns":{"type":"answer","id":39964,"rcode":"NXDOMAIN","rrname":"kevylejigod.eu"}}
{"timestamp":"2017-12-12T18:33:22.002841+0100","flow_id":1588897698155005,"pcap_cnt":3855,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63993,"proto":"UDP","dns":{"type":"answer","id":17246,"rcode":"NXDOMAIN","rrname":"ganovowuqur.eu"}}
{"timestamp":"2017-12-12T18:33:26.142516+0100","flow_id":1540968010886083,"pcap_cnt":4603,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55310,"proto":"UDP","dns":{"type":"answer","id":39964,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:22.346892+0100","flow_id":1423524277406134,"pcap_cnt":4015,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58986,"proto":"UDP","dns":{"type":"answer","id":50808,"rcode":"NXDOMAIN","rrname":"jejeqorekuv.eu"}}
{"timestamp":"2017-12-12T18:33:20.487058+0100","flow_id":924341703306644,"pcap_cnt":3203,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61916,"proto":"UDP","dns":{"type":"answer","id":51393,"rcode":"NXDOMAIN","rrname":"lygowunezep.eu"}}
{"timestamp":"2017-12-12T18:33:27.396773+0100","flow_id":1708231215959020,"pcap_cnt":4922,"event_type":"dns","src_ip":"192.168.1.100","src_port":59571,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":32857,"rrname":"cinycekecid.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:22.346892+0100","flow_id":1423524277406134,"pcap_cnt":4015,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58986,"proto":"UDP","dns":{"type":"answer","id":50808,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:28.712555+0100","flow_id":558760530075214,"pcap_cnt":5527,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59923,"proto":"UDP","dns":{"type":"answer","id":28074,"rcode":"NXDOMAIN","rrname":"xuqonerekij.eu"}}
{"timestamp":"2017-12-12T18:33:27.600317+0100","flow_id":2038795522746236,"pcap_cnt":5009,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53585,"proto":"UDP","dns":{"type":"answer","id":57010,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:21.993656+0100","flow_id":1061063397287973,"pcap_cnt":3847,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63723,"proto":"UDP","dns":{"type":"answer","id":1933,"rcode":"NXDOMAIN","rrname":"xugavariruq.eu"}}
{"timestamp":"2017-12-12T18:33:21.007637+0100","flow_id":892217495461009,"pcap_cnt":3437,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57491,"proto":"UDP","dns":{"type":"answer","id":59837,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:21.993656+0100","flow_id":1061063397287973,"pcap_cnt":3847,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63723,"proto":"UDP","dns":{"type":"answer","id":1933,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:27.655171+0100","flow_id":2066042795327299,"pcap_cnt":5032,"event_type":"dns","src_ip":"192.168.1.100","src_port":49342,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4896,"rrname":"fodixohofiz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.326315+0100","flow_id":755435671291160,"pcap_cnt":4683,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49276,"proto":"UDP","dns":{"type":"answer","id":184,"rcode":"NXDOMAIN","rrname":"makififupap.eu"}}
{"timestamp":"2017-12-12T18:33:25.394983+0100","flow_id":1853897180513739,"pcap_cnt":4273,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58517,"proto":"UDP","dns":{"type":"answer","id":5877,"rcode":"NXDOMAIN","rrname":"divoxehaceb.eu"}}
{"timestamp":"2017-12-12T18:33:22.051876+0100","flow_id":1357021003827876,"pcap_cnt":3880,"event_type":"dns","src_ip":"192.168.1.100","src_port":53505,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":450,"rrname":"citahikodab.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.394983+0100","flow_id":1853897180513739,"pcap_cnt":4273,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58517,"proto":"UDP","dns":{"type":"answer","id":5877,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:27.103695+0100","flow_id":453372769965000,"pcap_cnt":4771,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49920,"proto":"UDP","dns":{"type":"answer","id":63744,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:22.052173+0100","flow_id":1357021003827876,"pcap_cnt":3881,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53505,"proto":"UDP","dns":{"type":"answer","id":450,"rcode":"NXDOMAIN","rrname":"citahikodab.eu"}}
{"timestamp":"2017-12-12T18:33:22.312756+0100","flow_id":1046088993916340,"pcap_cnt":3998,"event_type":"dns","src_ip":"192.168.1.100","src_port":52289,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13855,"rrname":"kepyxujycaz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.052173+0100","flow_id":1357021003827876,"pcap_cnt":3881,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53505,"proto":"UDP","dns":{"type":"answer","id":450,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:22.256098+0100","flow_id":2038333813483290,"pcap_cnt":3971,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50998,"proto":"UDP","dns":{"type":"answer","id":58826,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":595}}
{"timestamp":"2017-12-12T18:33:25.718998+0100","flow_id":566953180002454,"pcap_cnt":4402,"event_type":"dns","src_ip":"192.168.1.100","src_port":53594,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2048,"rrname":"tulekuvigij.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.753053+0100","flow_id":886249638821277,"pcap_cnt":5072,"event_type":"dns","src_ip":"192.168.1.100","src_port":63511,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":15384,"rrname":"qetityluruj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.945101+0100","flow_id":816971816004557,"pcap_cnt":4220,"event_type":"dns","src_ip":"192.168.1.100","src_port":59361,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":58144,"rrname":"tucoqepyryk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.386992+0100","flow_id":1719922118027184,"pcap_cnt":4028,"event_type":"dns","src_ip":"192.168.1.100","src_port":53733,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34331,"rrname":"fogeliwokih.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.046604+0100","flow_id":1132634732672274,"pcap_cnt":4553,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60627,"proto":"UDP","dns":{"type":"answer","id":5895,"rcode":"NXDOMAIN","rrname":"ganuqibevux.eu"}}
{"timestamp":"2017-12-12T18:33:22.945403+0100","flow_id":816971816004557,"pcap_cnt":4221,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59361,"proto":"UDP","dns":{"type":"answer","id":58144,"rcode":"NXDOMAIN","rrname":"tucoqepyryk.eu"}}
{"timestamp":"2017-12-12T18:33:21.506693+0100","flow_id":1988050483788341,"pcap_cnt":3673,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63231,"proto":"UDP","dns":{"type":"answer","id":19248,"rcode":"NXDOMAIN","rrname":"jecumenunoq.eu"}}
{"timestamp":"2017-12-12T18:33:26.046604+0100","flow_id":1132634732672274,"pcap_cnt":4553,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60627,"proto":"UDP","dns":{"type":"answer","id":5895,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:22.387352+0100","flow_id":1719922118027184,"pcap_cnt":4029,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53733,"proto":"UDP","dns":{"type":"answer","id":34331,"rcode":"NXDOMAIN","rrname":"fogeliwokih.eu"}}
{"timestamp":"2017-12-12T18:33:28.923499+0100","flow_id":1878365609400171,"pcap_cnt":5632,"event_type":"dns","src_ip":"192.168.1.100","src_port":57552,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":32506,"rrname":"norygumekon.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.387352+0100","flow_id":1719922118027184,"pcap_cnt":4029,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53733,"proto":"UDP","dns":{"type":"answer","id":34331,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":553}}
{"timestamp":"2017-12-12T18:33:26.048656+0100","flow_id":1779302188629520,"pcap_cnt":4556,"event_type":"dns","src_ip":"192.168.1.100","src_port":59881,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43555,"rrname":"kezajonifuz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.014584+0100","flow_id":335791597697028,"pcap_cnt":4529,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63597,"proto":"UDP","dns":{"type":"answer","id":42286,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:28.923781+0100","flow_id":1878365609400171,"pcap_cnt":5633,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57552,"proto":"UDP","dns":{"type":"answer","id":32506,"rcode":"NXDOMAIN","rrname":"norygumekon.eu"}}
{"timestamp":"2017-12-12T18:33:22.085762+0100","flow_id":787089581034954,"pcap_cnt":3899,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50812,"proto":"UDP","dns":{"type":"answer","id":36568,"rcode":"NXDOMAIN","rrname":"disugezejac.eu"}}
{"timestamp":"2017-12-12T18:33:25.862367+0100","flow_id":478094601561958,"pcap_cnt":4467,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53469,"proto":"UDP","dns":{"type":"answer","id":31185,"rcode":"NXDOMAIN","rrname":"pumelilebon.eu"}}
{"timestamp":"2017-12-12T18:33:22.085762+0100","flow_id":787089581034954,"pcap_cnt":3899,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50812,"proto":"UDP","dns":{"type":"answer","id":36568,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:26.093129+0100","flow_id":2041726837877416,"pcap_cnt":4575,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49536,"proto":"UDP","dns":{"type":"answer","id":11439,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:25.862367+0100","flow_id":478094601561958,"pcap_cnt":4467,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53469,"proto":"UDP","dns":{"type":"answer","id":31185,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:22.043872+0100","flow_id":1689664073411132,"pcap_cnt":3875,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49864,"proto":"UDP","dns":{"type":"answer","id":52183,"rcode":"NXDOMAIN","rrname":"rycodypycym.eu"}}
{"timestamp":"2017-12-12T18:33:22.093337+0100","flow_id":1222685164203161,"pcap_cnt":3900,"event_type":"dns","src_ip":"192.168.1.100","src_port":56740,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27459,"rrname":"jenyzexodop.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.377482+0100","flow_id":759672657592970,"pcap_cnt":4712,"event_type":"dns","src_ip":"192.168.1.100","src_port":53910,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26041,"rrname":"volocecaluk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.703576+0100","flow_id":849813283912792,"pcap_cnt":5994,"event_type":"dns","src_ip":"192.168.1.100","src_port":51591,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13921,"rrname":"dixemazufel.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.196266+0100","flow_id":1424443400387978,"pcap_cnt":3529,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62845,"proto":"UDP","dns":{"type":"answer","id":52073,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:22.002841+0100","flow_id":1588897698155005,"pcap_cnt":3855,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63993,"proto":"UDP","dns":{"type":"answer","id":17246,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:29.703918+0100","flow_id":849813283912792,"pcap_cnt":5995,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51591,"proto":"UDP","dns":{"type":"answer","id":13921,"rcode":"NXDOMAIN","rrname":"dixemazufel.eu"}}
{"timestamp":"2017-12-12T18:33:20.487058+0100","flow_id":924341703306644,"pcap_cnt":3203,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61916,"proto":"UDP","dns":{"type":"answer","id":51393,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:22.775659+0100","flow_id":1270245484582379,"pcap_cnt":4148,"event_type":"dns","src_ip":"192.168.1.100","src_port":50335,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9528,"rrname":"xudylenyrob.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.397020+0100","flow_id":1708231215959020,"pcap_cnt":4923,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59571,"proto":"UDP","dns":{"type":"answer","id":32857,"rcode":"NXDOMAIN","rrname":"cinycekecid.eu"}}
{"timestamp":"2017-12-12T18:33:22.775927+0100","flow_id":1270245484582379,"pcap_cnt":4149,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50335,"proto":"UDP","dns":{"type":"answer","id":9528,"rcode":"NXDOMAIN","rrname":"xudylenyrob.eu"}}
{"timestamp":"2017-12-12T18:33:28.712555+0100","flow_id":558760530075214,"pcap_cnt":5527,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59923,"proto":"UDP","dns":{"type":"answer","id":28074,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:27.290703+0100","flow_id":1339186152435247,"pcap_cnt":4875,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61801,"proto":"UDP","dns":{"type":"answer","id":48149,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:22.308284+0100","flow_id":507998311199804,"pcap_cnt":3990,"event_type":"dns","src_ip":"192.168.1.100","src_port":55021,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":39380,"rrname":"qedevuqelug.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.767718+0100","flow_id":1875425704326886,"pcap_cnt":5548,"event_type":"dns","src_ip":"192.168.1.100","src_port":53499,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4532,"rrname":"dimulisuqun.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.825721+0100","flow_id":1862210089215480,"pcap_cnt":5106,"event_type":"dns","src_ip":"192.168.1.100","src_port":60989,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":12335,"rrname":"foxyqosajol.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:26.326315+0100","flow_id":755435671291160,"pcap_cnt":4683,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49276,"proto":"UDP","dns":{"type":"answer","id":184,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:22.308540+0100","flow_id":507998311199804,"pcap_cnt":3991,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55021,"proto":"UDP","dns":{"type":"answer","id":39380,"rcode":"NXDOMAIN","rrname":"qedevuqelug.eu"}}
{"timestamp":"2017-12-12T18:33:27.825990+0100","flow_id":1862210089215480,"pcap_cnt":5107,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60989,"proto":"UDP","dns":{"type":"answer","id":12335,"rcode":"NXDOMAIN","rrname":"foxyqosajol.eu"}}
{"timestamp":"2017-12-12T18:33:22.308540+0100","flow_id":507998311199804,"pcap_cnt":3991,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55021,"proto":"UDP","dns":{"type":"answer","id":39380,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":595}}
{"timestamp":"2017-12-12T18:33:27.994939+0100","flow_id":1695382822661755,"pcap_cnt":5188,"event_type":"dns","src_ip":"192.168.1.100","src_port":57484,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23113,"rrname":"kezigojohuf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.108103+0100","flow_id":723755993638471,"pcap_cnt":4778,"event_type":"dns","src_ip":"192.168.1.100","src_port":51840,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59932,"rrname":"foqinywenec.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.464323+0100","flow_id":394473735591363,"pcap_cnt":4062,"event_type":"dns","src_ip":"192.168.1.100","src_port":65413,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9327,"rrname":"pumadypyruv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.856660+0100","flow_id":713735833086022,"pcap_cnt":4460,"event_type":"dns","src_ip":"192.168.1.100","src_port":53297,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19730,"rrname":"qedefulywoh.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:22.313026+0100","flow_id":1046088993916340,"pcap_cnt":3999,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52289,"proto":"UDP","dns":{"type":"answer","id":13855,"rcode":"NXDOMAIN","rrname":"kepyxujycaz.eu"}}
{"timestamp":"2017-12-12T18:33:27.108335+0100","flow_id":723755993638471,"pcap_cnt":4779,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51840,"proto":"UDP","dns":{"type":"answer","id":59932,"rcode":"NXDOMAIN","rrname":"foqinywenec.eu"}}
{"timestamp":"2017-12-12T18:33:25.719286+0100","flow_id":566953180002454,"pcap_cnt":4403,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53594,"proto":"UDP","dns":{"type":"answer","id":2048,"rcode":"NXDOMAIN","rrname":"tulekuvigij.eu"}}
{"timestamp":"2017-12-12T18:33:25.856883+0100","flow_id":713735833086022,"pcap_cnt":4461,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53297,"proto":"UDP","dns":{"type":"answer","id":19730,"rcode":"NXDOMAIN","rrname":"qedefulywoh.eu"}}
{"timestamp":"2017-12-12T18:33:22.205761+0100","flow_id":986386800876098,"pcap_cnt":3951,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53200,"proto":"UDP","dns":{"type":"answer","id":23026,"rcode":"NXDOMAIN","rrname":"fogefobunik.eu"}}
{"timestamp":"2017-12-12T18:33:27.753333+0100","flow_id":886249638821277,"pcap_cnt":5073,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63511,"proto":"UDP","dns":{"type":"answer","id":15384,"rcode":"NXDOMAIN","rrname":"qetityluruj.eu"}}
{"timestamp":"2017-12-12T18:33:21.760832+0100","flow_id":1125015460354667,"pcap_cnt":3763,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56446,"proto":"UDP","dns":{"type":"answer","id":27948,"rcode":"NXDOMAIN","rrname":"rytonovejof.eu"}}
{"timestamp":"2017-12-12T18:33:19.897816+0100","flow_id":566255247405555,"pcap_cnt":2921,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56876,"proto":"UDP","dns":{"type":"answer","id":65084,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:21.506693+0100","flow_id":1988050483788341,"pcap_cnt":3673,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63231,"proto":"UDP","dns":{"type":"answer","id":19248,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:22.945403+0100","flow_id":816971816004557,"pcap_cnt":4221,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59361,"proto":"UDP","dns":{"type":"answer","id":58144,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:28.592296+0100","flow_id":24943339768004,"pcap_cnt":5477,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65260,"proto":"UDP","dns":{"type":"answer","id":54131,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:21.607239+0100","flow_id":1835768123311111,"pcap_cnt":3708,"event_type":"dns","src_ip":"192.168.1.100","src_port":61469,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14062,"rrname":"marosokubew.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.488529+0100","flow_id":107866272985938,"pcap_cnt":4071,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56104,"proto":"UDP","dns":{"type":"answer","id":26024,"rcode":"NXDOMAIN","rrname":"puvopalywet.eu"}}
{"timestamp":"2017-12-12T18:33:21.607530+0100","flow_id":1835768123311111,"pcap_cnt":3709,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61469,"proto":"UDP","dns":{"type":"answer","id":14062,"rcode":"NXDOMAIN","rrname":"marosokubew.eu"}}
{"timestamp":"2017-12-12T18:33:22.749438+0100","flow_id":329366326374270,"pcap_cnt":4146,"event_type":"dns","src_ip":"192.168.1.100","src_port":64046,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29297,"rrname":"norumikemem.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.488529+0100","flow_id":107866272985938,"pcap_cnt":4071,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56104,"proto":"UDP","dns":{"type":"answer","id":26024,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":553}}
{"timestamp":"2017-12-12T18:33:21.607530+0100","flow_id":1835768123311111,"pcap_cnt":3709,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61469,"proto":"UDP","dns":{"type":"answer","id":14062,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:28.923781+0100","flow_id":1878365609400171,"pcap_cnt":5633,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57552,"proto":"UDP","dns":{"type":"answer","id":32506,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:26.033247+0100","flow_id":2005984119433072,"pcap_cnt":4544,"event_type":"dns","src_ip":"192.168.1.100","src_port":59836,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60174,"rrname":"gacenysacew.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:25.799658+0100","flow_id":603773934580408,"pcap_cnt":4437,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49838,"proto":"UDP","dns":{"type":"answer","id":41934,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:21.752207+0100","flow_id":1194512326163023,"pcap_cnt":3758,"event_type":"dns","src_ip":"192.168.1.100","src_port":54888,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43388,"rrname":"qedutivosob.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.059799+0100","flow_id":270604731804055,"pcap_cnt":5680,"event_type":"dns","src_ip":"192.168.1.100","src_port":59134,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":56962,"rrname":"kerumyxofah.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.033556+0100","flow_id":2005984119433072,"pcap_cnt":4545,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59836,"proto":"UDP","dns":{"type":"answer","id":60174,"rcode":"NXDOMAIN","rrname":"gacenysacew.eu"}}
{"timestamp":"2017-12-12T18:33:26.377793+0100","flow_id":759672657592970,"pcap_cnt":4713,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53910,"proto":"UDP","dns":{"type":"answer","id":26041,"rcode":"NXDOMAIN","rrname":"volocecaluk.eu"}}
{"timestamp":"2017-12-12T18:33:22.093661+0100","flow_id":1222685164203161,"pcap_cnt":3901,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56740,"proto":"UDP","dns":{"type":"answer","id":27459,"rcode":"NXDOMAIN","rrname":"jenyzexodop.eu"}}
{"timestamp":"2017-12-12T18:33:22.162679+0100","flow_id":355621461457783,"pcap_cnt":3932,"event_type":"dns","src_ip":"192.168.1.100","src_port":63089,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42821,"rrname":"nopetucumot.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.377793+0100","flow_id":759672657592970,"pcap_cnt":4713,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53910,"proto":"UDP","dns":{"type":"answer","id":26041,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":577}}
{"timestamp":"2017-12-12T18:33:22.575759+0100","flow_id":1162441805449487,"pcap_cnt":4094,"event_type":"dns","src_ip":"192.168.1.100","src_port":63494,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":52706,"rrname":"voniqofolyt.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.529522+0100","flow_id":1405481119650930,"pcap_cnt":3224,"event_type":"dns","src_ip":"192.168.1.100","src_port":56116,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34388,"rrname":"maxaxyfumim.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.163032+0100","flow_id":355621461457783,"pcap_cnt":3933,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63089,"proto":"UDP","dns":{"type":"answer","id":42821,"rcode":"NXDOMAIN","rrname":"nopetucumot.eu"}}
{"timestamp":"2017-12-12T18:33:22.576049+0100","flow_id":1162441805449487,"pcap_cnt":4095,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63494,"proto":"UDP","dns":{"type":"answer","id":52706,"rcode":"NXDOMAIN","rrname":"voniqofolyt.eu"}}
{"timestamp":"2017-12-12T18:33:22.163032+0100","flow_id":355621461457783,"pcap_cnt":3933,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63089,"proto":"UDP","dns":{"type":"answer","id":42821,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:22.775927+0100","flow_id":1270245484582379,"pcap_cnt":4149,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50335,"proto":"UDP","dns":{"type":"answer","id":9528,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:21.051831+0100","flow_id":1259505918790263,"pcap_cnt":3454,"event_type":"dns","src_ip":"192.168.1.100","src_port":51242,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7429,"rrname":"mavogutogip.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.655453+0100","flow_id":2066042795327299,"pcap_cnt":5033,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49342,"proto":"UDP","dns":{"type":"answer","id":4896,"rcode":"NXDOMAIN","rrname":"fodixohofiz.eu"}}
{"timestamp":"2017-12-12T18:33:22.833554+0100","flow_id":1890799539370002,"pcap_cnt":4166,"event_type":"dns","src_ip":"192.168.1.100","src_port":50761,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51943,"rrname":"fodutazenaf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.170467+0100","flow_id":61341040089571,"pcap_cnt":4808,"event_type":"dns","src_ip":"192.168.1.100","src_port":50469,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36431,"rrname":"tulyboputal.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.655453+0100","flow_id":2066042795327299,"pcap_cnt":5033,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49342,"proto":"UDP","dns":{"type":"answer","id":4896,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:27.825990+0100","flow_id":1862210089215480,"pcap_cnt":5107,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60989,"proto":"UDP","dns":{"type":"answer","id":12335,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:27.768119+0100","flow_id":2624542193401,"pcap_cnt":5083,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65513,"proto":"UDP","dns":{"type":"answer","id":31544,"rcode":"NXDOMAIN","rrname":"lymevyrajas.eu"}}
{"timestamp":"2017-12-12T18:33:27.170758+0100","flow_id":61341040089571,"pcap_cnt":4809,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50469,"proto":"UDP","dns":{"type":"answer","id":36431,"rcode":"NXDOMAIN","rrname":"tulyboputal.eu"}}
{"timestamp":"2017-12-12T18:33:27.768119+0100","flow_id":2624542193401,"pcap_cnt":5083,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65513,"proto":"UDP","dns":{"type":"answer","id":31544,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:22.464631+0100","flow_id":394473735591363,"pcap_cnt":4063,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65413,"proto":"UDP","dns":{"type":"answer","id":9327,"rcode":"NXDOMAIN","rrname":"pumadypyruv.eu"}}
{"timestamp":"2017-12-12T18:33:27.170758+0100","flow_id":61341040089571,"pcap_cnt":4809,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50469,"proto":"UDP","dns":{"type":"answer","id":36431,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:22.313026+0100","flow_id":1046088993916340,"pcap_cnt":3999,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52289,"proto":"UDP","dns":{"type":"answer","id":13855,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":595}}
{"timestamp":"2017-12-12T18:33:27.814726+0100","flow_id":391868838276742,"pcap_cnt":5098,"event_type":"dns","src_ip":"192.168.1.100","src_port":52582,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17839,"rrname":"gahuzuzecyg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.719286+0100","flow_id":566953180002454,"pcap_cnt":4403,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53594,"proto":"UDP","dns":{"type":"answer","id":2048,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:25.856883+0100","flow_id":713735833086022,"pcap_cnt":4461,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53297,"proto":"UDP","dns":{"type":"answer","id":19730,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:27.815058+0100","flow_id":391868838276742,"pcap_cnt":5099,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52582,"proto":"UDP","dns":{"type":"answer","id":17839,"rcode":"NXDOMAIN","rrname":"gahuzuzecyg.eu"}}
{"timestamp":"2017-12-12T18:33:22.205761+0100","flow_id":986386800876098,"pcap_cnt":3951,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53200,"proto":"UDP","dns":{"type":"answer","id":23026,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":595}}
{"timestamp":"2017-12-12T18:33:25.888320+0100","flow_id":128282400230912,"pcap_cnt":4480,"event_type":"dns","src_ip":"192.168.1.100","src_port":55750,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35493,"rrname":"lyrimirohyp.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.753333+0100","flow_id":886249638821277,"pcap_cnt":5073,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63511,"proto":"UDP","dns":{"type":"answer","id":15384,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:26.047076+0100","flow_id":289092418320097,"pcap_cnt":4555,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53328,"proto":"UDP","dns":{"type":"answer","id":21619,"rcode":"NXDOMAIN","rrname":"jecocinywut.eu"}}
{"timestamp":"2017-12-12T18:33:22.230521+0100","flow_id":1212491059332217,"pcap_cnt":3962,"event_type":"dns","src_ip":"192.168.1.100","src_port":51033,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45421,"rrname":"masimafoded.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.047076+0100","flow_id":289092418320097,"pcap_cnt":4555,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53328,"proto":"UDP","dns":{"type":"answer","id":21619,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:27.947533+0100","flow_id":2037180615062861,"pcap_cnt":5160,"event_type":"dns","src_ip":"192.168.1.100","src_port":59635,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":24459,"rrname":"qekyhugisih.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.654176+0100","flow_id":2242641113185120,"pcap_cnt":5506,"event_type":"dns","src_ip":"192.168.1.100","src_port":57854,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6450,"rrname":"cicokokyvyf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.234219+0100","flow_id":1817241782227691,"pcap_cnt":4634,"event_type":"dns","src_ip":"192.168.1.100","src_port":56161,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5500,"rrname":"nofagoteveg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.048897+0100","flow_id":1779302188629520,"pcap_cnt":4557,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59881,"proto":"UDP","dns":{"type":"answer","id":43555,"rcode":"NXDOMAIN","rrname":"kezajonifuz.eu"}}
{"timestamp":"2017-12-12T18:33:27.947815+0100","flow_id":2037180615062861,"pcap_cnt":5161,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59635,"proto":"UDP","dns":{"type":"answer","id":24459,"rcode":"NXDOMAIN","rrname":"qekyhugisih.eu"}}
{"timestamp":"2017-12-12T18:33:31.694892+0100","flow_id":133575947819307,"pcap_cnt":6441,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58557,"proto":"UDP","dns":{"type":"answer","id":51589,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:27.947815+0100","flow_id":2037180615062861,"pcap_cnt":5161,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59635,"proto":"UDP","dns":{"type":"answer","id":24459,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:26.048897+0100","flow_id":1779302188629520,"pcap_cnt":4557,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59881,"proto":"UDP","dns":{"type":"answer","id":43555,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:28.654418+0100","flow_id":2242641113185120,"pcap_cnt":5507,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57854,"proto":"UDP","dns":{"type":"answer","id":6450,"rcode":"NXDOMAIN","rrname":"cicokokyvyf.eu"}}
{"timestamp":"2017-12-12T18:33:28.050947+0100","flow_id":549575742506755,"pcap_cnt":5216,"event_type":"dns","src_ip":"192.168.1.100","src_port":59391,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42553,"rrname":"noretekyvuv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.817687+0100","flow_id":1025760914274839,"pcap_cnt":6498,"event_type":"dns","src_ip":"192.168.1.100","src_port":53357,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4551,"rrname":"tulipeqevyw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.364661+0100","flow_id":1070959002292341,"pcap_cnt":4702,"event_type":"dns","src_ip":"192.168.1.100","src_port":53790,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63158,"rrname":"jeledajifor.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.247965+0100","flow_id":1182185770436518,"pcap_cnt":4851,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59078,"proto":"UDP","dns":{"type":"answer","id":53458,"rcode":"NXDOMAIN","rrname":"jepazunalyx.eu"}}
{"timestamp":"2017-12-12T18:33:31.817951+0100","flow_id":1025760914274839,"pcap_cnt":6499,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53357,"proto":"UDP","dns":{"type":"answer","id":4551,"rcode":"NXDOMAIN","rrname":"tulipeqevyw.eu"}}
{"timestamp":"2017-12-12T18:33:25.822531+0100","flow_id":1587888381070595,"pcap_cnt":4444,"event_type":"dns","src_ip":"192.168.1.100","src_port":53210,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30116,"rrname":"lymunyjigak.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.817951+0100","flow_id":1025760914274839,"pcap_cnt":6499,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53357,"proto":"UDP","dns":{"type":"answer","id":4551,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:21.752473+0100","flow_id":1194512326163023,"pcap_cnt":3759,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54888,"proto":"UDP","dns":{"type":"answer","id":43388,"rcode":"NXDOMAIN","rrname":"qedutivosob.eu"}}
{"timestamp":"2017-12-12T18:33:29.060071+0100","flow_id":270604731804055,"pcap_cnt":5681,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59134,"proto":"UDP","dns":{"type":"answer","id":56962,"rcode":"NXDOMAIN","rrname":"kerumyxofah.eu"}}
{"timestamp":"2017-12-12T18:33:21.752473+0100","flow_id":1194512326163023,"pcap_cnt":3759,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54888,"proto":"UDP","dns":{"type":"answer","id":43388,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:22.093661+0100","flow_id":1222685164203161,"pcap_cnt":3901,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56740,"proto":"UDP","dns":{"type":"answer","id":27459,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:21.341845+0100","flow_id":594415200581461,"pcap_cnt":3596,"event_type":"dns","src_ip":"192.168.1.100","src_port":62727,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17423,"rrname":"rytydelitec.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.964717+0100","flow_id":1628939678234733,"pcap_cnt":3836,"event_type":"dns","src_ip":"192.168.1.100","src_port":58678,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4826,"rrname":"tufibiqunit.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.109701+0100","flow_id":2137927662939269,"pcap_cnt":4780,"event_type":"dns","src_ip":"192.168.1.100","src_port":50853,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45117,"rrname":"ganazywutes.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.199350+0100","flow_id":1424514267351734,"pcap_cnt":3946,"event_type":"dns","src_ip":"192.168.1.100","src_port":53434,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44975,"rrname":"vojajofyced.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.965079+0100","flow_id":1628939678234733,"pcap_cnt":3837,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58678,"proto":"UDP","dns":{"type":"answer","id":4826,"rcode":"NXDOMAIN","rrname":"tufibiqunit.eu"}}
{"timestamp":"2017-12-12T18:33:22.576049+0100","flow_id":1162441805449487,"pcap_cnt":4095,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63494,"proto":"UDP","dns":{"type":"answer","id":52706,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":553}}
{"timestamp":"2017-12-12T18:33:28.767952+0100","flow_id":1875425704326886,"pcap_cnt":5549,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53499,"proto":"UDP","dns":{"type":"answer","id":4532,"rcode":"NXDOMAIN","rrname":"dimulisuqun.eu"}}
{"timestamp":"2017-12-12T18:33:22.634291+0100","flow_id":60608747842995,"pcap_cnt":4112,"event_type":"dns","src_ip":"192.168.1.100","src_port":49908,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27142,"rrname":"qekusagigyz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.965079+0100","flow_id":1628939678234733,"pcap_cnt":3837,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58678,"proto":"UDP","dns":{"type":"answer","id":4826,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:21.052116+0100","flow_id":1259505918790263,"pcap_cnt":3455,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51242,"proto":"UDP","dns":{"type":"answer","id":7429,"rcode":"NXDOMAIN","rrname":"mavogutogip.eu"}}
{"timestamp":"2017-12-12T18:33:22.833841+0100","flow_id":1890799539370002,"pcap_cnt":4167,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50761,"proto":"UDP","dns":{"type":"answer","id":51943,"rcode":"NXDOMAIN","rrname":"fodutazenaf.eu"}}
{"timestamp":"2017-12-12T18:33:22.856595+0100","flow_id":1669930846130707,"pcap_cnt":4182,"event_type":"dns","src_ip":"192.168.1.100","src_port":51693,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59467,"rrname":"kemygexaxab.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.634571+0100","flow_id":60608747842995,"pcap_cnt":4113,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49908,"proto":"UDP","dns":{"type":"answer","id":27142,"rcode":"NXDOMAIN","rrname":"qekusagigyz.eu"}}
{"timestamp":"2017-12-12T18:33:27.870432+0100","flow_id":135135020237937,"pcap_cnt":5126,"event_type":"dns","src_ip":"192.168.1.100","src_port":59051,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63610,"rrname":"makolacynyd.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:22.634571+0100","flow_id":60608747842995,"pcap_cnt":4113,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49908,"proto":"UDP","dns":{"type":"answer","id":27142,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:27.282161+0100","flow_id":606389569801777,"pcap_cnt":4872,"event_type":"dns","src_ip":"192.168.1.100","src_port":61967,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25516,"rrname":"cicezomaxyz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.856833+0100","flow_id":1669930846130707,"pcap_cnt":4183,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51693,"proto":"UDP","dns":{"type":"answer","id":59467,"rcode":"NXDOMAIN","rrname":"kemygexaxab.eu"}}
{"timestamp":"2017-12-12T18:33:22.899054+0100","flow_id":383796446935022,"pcap_cnt":4198,"event_type":"dns","src_ip":"192.168.1.100","src_port":57779,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7233,"rrname":"fotyriwavix.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.356686+0100","flow_id":1485653125469443,"pcap_cnt":4022,"event_type":"dns","src_ip":"192.168.1.100","src_port":63144,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38764,"rrname":"vofozymufok.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:27.815058+0100","flow_id":391868838276742,"pcap_cnt":5099,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52582,"proto":"UDP","dns":{"type":"answer","id":17839,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:22.899348+0100","flow_id":383796446935022,"pcap_cnt":4199,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57779,"proto":"UDP","dns":{"type":"answer","id":7233,"rcode":"NXDOMAIN","rrname":"fotyriwavix.eu"}}
{"timestamp":"2017-12-12T18:33:21.760832+0100","flow_id":1125015460354667,"pcap_cnt":3763,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56446,"proto":"UDP","dns":{"type":"answer","id":27948,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:22.356946+0100","flow_id":1485653125469443,"pcap_cnt":4023,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63144,"proto":"UDP","dns":{"type":"answer","id":38764,"rcode":"NXDOMAIN","rrname":"vofozymufok.eu"}}
{"timestamp":"2017-12-12T18:33:25.888608+0100","flow_id":128282400230912,"pcap_cnt":4481,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55750,"proto":"UDP","dns":{"type":"answer","id":35493,"rcode":"NXDOMAIN","rrname":"lyrimirohyp.eu"}}
{"timestamp":"2017-12-12T18:33:22.356946+0100","flow_id":1485653125469443,"pcap_cnt":4023,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63144,"proto":"UDP","dns":{"type":"answer","id":38764,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":553}}
{"timestamp":"2017-12-12T18:33:25.484063+0100","flow_id":37624230535903,"pcap_cnt":4314,"event_type":"dns","src_ip":"192.168.1.100","src_port":63873,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":52730,"rrname":"xutityjigac.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.004671+0100","flow_id":944386315784767,"pcap_cnt":3856,"event_type":"dns","src_ip":"192.168.1.100","src_port":63858,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60189,"rrname":"kezydorekuw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.230777+0100","flow_id":1212491059332217,"pcap_cnt":3963,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51033,"proto":"UDP","dns":{"type":"answer","id":45421,"rcode":"NXDOMAIN","rrname":"masimafoded.eu"}}
{"timestamp":"2017-12-12T18:33:26.234536+0100","flow_id":1817241782227691,"pcap_cnt":4635,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56161,"proto":"UDP","dns":{"type":"answer","id":5500,"rcode":"NXDOMAIN","rrname":"nofagoteveg.eu"}}
{"timestamp":"2017-12-12T18:33:22.749690+0100","flow_id":329366326374270,"pcap_cnt":4147,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64046,"proto":"UDP","dns":{"type":"answer","id":29297,"rcode":"NXDOMAIN","rrname":"norumikemem.eu"}}
{"timestamp":"2017-12-12T18:33:26.116790+0100","flow_id":1777088132991030,"pcap_cnt":4586,"event_type":"dns","src_ip":"192.168.1.100","src_port":56644,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43966,"rrname":"rylefogohan.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.484410+0100","flow_id":37624230535903,"pcap_cnt":4315,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63873,"proto":"UDP","dns":{"type":"answer","id":52730,"rcode":"NXDOMAIN","rrname":"xutityjigac.eu"}}
{"timestamp":"2017-12-12T18:33:22.749690+0100","flow_id":329366326374270,"pcap_cnt":4147,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64046,"proto":"UDP","dns":{"type":"answer","id":29297,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:25.484410+0100","flow_id":37624230535903,"pcap_cnt":4315,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63873,"proto":"UDP","dns":{"type":"answer","id":52730,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:26.117070+0100","flow_id":1777088132991030,"pcap_cnt":4587,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56644,"proto":"UDP","dns":{"type":"answer","id":43966,"rcode":"NXDOMAIN","rrname":"rylefogohan.eu"}}
{"timestamp":"2017-12-12T18:33:26.364902+0100","flow_id":1070959002292341,"pcap_cnt":4703,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53790,"proto":"UDP","dns":{"type":"answer","id":63158,"rcode":"NXDOMAIN","rrname":"jeledajifor.eu"}}
{"timestamp":"2017-12-12T18:33:27.247965+0100","flow_id":1182185770436518,"pcap_cnt":4851,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59078,"proto":"UDP","dns":{"type":"answer","id":53458,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:26.117070+0100","flow_id":1777088132991030,"pcap_cnt":4587,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56644,"proto":"UDP","dns":{"type":"answer","id":43966,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":577}}
{"timestamp":"2017-12-12T18:33:26.364902+0100","flow_id":1070959002292341,"pcap_cnt":4703,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53790,"proto":"UDP","dns":{"type":"answer","id":63158,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:31.831359+0100","flow_id":377890867490687,"pcap_cnt":6506,"event_type":"dns","src_ip":"192.168.1.100","src_port":52195,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":46980,"rrname":"qeguhapyrer.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.703918+0100","flow_id":849813283912792,"pcap_cnt":5995,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51591,"proto":"UDP","dns":{"type":"answer","id":13921,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":546}}
{"timestamp":"2017-12-12T18:33:26.204285+0100","flow_id":295393135304189,"pcap_cnt":4624,"event_type":"dns","src_ip":"192.168.1.100","src_port":59575,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38795,"rrname":"lyvoguraxeh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.529838+0100","flow_id":1405481119650930,"pcap_cnt":3225,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56116,"proto":"UDP","dns":{"type":"answer","id":34388,"rcode":"NXDOMAIN","rrname":"maxaxyfumim.eu"}}
{"timestamp":"2017-12-12T18:33:27.627163+0100","flow_id":293965058773467,"pcap_cnt":5020,"event_type":"dns","src_ip":"192.168.1.100","src_port":54777,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":20719,"rrname":"vofubimipeg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.342086+0100","flow_id":594415200581461,"pcap_cnt":3597,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62727,"proto":"UDP","dns":{"type":"answer","id":17423,"rcode":"NXDOMAIN","rrname":"rytydelitec.eu"}}
{"timestamp":"2017-12-12T18:33:22.199649+0100","flow_id":1424514267351734,"pcap_cnt":3947,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53434,"proto":"UDP","dns":{"type":"answer","id":44975,"rcode":"NXDOMAIN","rrname":"vojajofyced.eu"}}
{"timestamp":"2017-12-12T18:33:27.110523+0100","flow_id":456258987995067,"pcap_cnt":4782,"event_type":"dns","src_ip":"192.168.1.100","src_port":61914,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6235,"rrname":"voporitevet.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.199649+0100","flow_id":1424514267351734,"pcap_cnt":3947,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53434,"proto":"UDP","dns":{"type":"answer","id":44975,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":595}}
{"timestamp":"2017-12-12T18:33:28.767952+0100","flow_id":1875425704326886,"pcap_cnt":5549,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53499,"proto":"UDP","dns":{"type":"answer","id":4532,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:22.855451+0100","flow_id":1894871168322971,"pcap_cnt":4180,"event_type":"dns","src_ip":"192.168.1.100","src_port":49895,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25113,"rrname":"xuxanexusov.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.110773+0100","flow_id":456258987995067,"pcap_cnt":4783,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61914,"proto":"UDP","dns":{"type":"answer","id":6235,"rcode":"NXDOMAIN","rrname":"voporitevet.eu"}}
{"timestamp":"2017-12-12T18:33:27.762524+0100","flow_id":1868972515893916,"pcap_cnt":5076,"event_type":"dns","src_ip":"192.168.1.100","src_port":53936,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43254,"rrname":"ryqanylofuq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.052116+0100","flow_id":1259505918790263,"pcap_cnt":3455,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51242,"proto":"UDP","dns":{"type":"answer","id":7429,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:27.995181+0100","flow_id":1695382822661755,"pcap_cnt":5189,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57484,"proto":"UDP","dns":{"type":"answer","id":23113,"rcode":"NXDOMAIN","rrname":"kezigojohuf.eu"}}
{"timestamp":"2017-12-12T18:33:22.833841+0100","flow_id":1890799539370002,"pcap_cnt":4167,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50761,"proto":"UDP","dns":{"type":"answer","id":51943,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:27.995181+0100","flow_id":1695382822661755,"pcap_cnt":5189,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57484,"proto":"UDP","dns":{"type":"answer","id":23113,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:27.108335+0100","flow_id":723755993638471,"pcap_cnt":4779,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51840,"proto":"UDP","dns":{"type":"answer","id":59932,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:27.870822+0100","flow_id":135135020237937,"pcap_cnt":5127,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59051,"proto":"UDP","dns":{"type":"answer","id":63610,"rcode":"NXDOMAIN","rrname":"makolacynyd.eu"}}
{"timestamp":"2017-12-12T18:33:27.281645+0100","flow_id":1635903964647638,"pcap_cnt":4870,"event_type":"dns","src_ip":"192.168.1.100","src_port":57634,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":65066,"rrname":"xuboninogyt.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:27.870822+0100","flow_id":135135020237937,"pcap_cnt":5127,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59051,"proto":"UDP","dns":{"type":"answer","id":63610,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:26.114470+0100","flow_id":2114101331803942,"pcap_cnt":4584,"event_type":"dns","src_ip":"192.168.1.100","src_port":62766,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9046,"rrname":"tujurogacag.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.828636+0100","flow_id":220671441872092,"pcap_cnt":5110,"event_type":"dns","src_ip":"192.168.1.100","src_port":65159,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":56879,"rrname":"ryteqipogoz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.941209+0100","flow_id":1627670515768473,"pcap_cnt":5156,"event_type":"dns","src_ip":"192.168.1.100","src_port":52778,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1960,"rrname":"jelekynurep.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.899348+0100","flow_id":383796446935022,"pcap_cnt":4199,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57779,"proto":"UDP","dns":{"type":"answer","id":7233,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:26.114747+0100","flow_id":2114101331803942,"pcap_cnt":4585,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62766,"proto":"UDP","dns":{"type":"answer","id":9046,"rcode":"NXDOMAIN","rrname":"tujurogacag.eu"}}
{"timestamp":"2017-12-12T18:33:27.941609+0100","flow_id":1627670515768473,"pcap_cnt":5157,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52778,"proto":"UDP","dns":{"type":"answer","id":1960,"rcode":"NXDOMAIN","rrname":"jelekynurep.eu"}}
{"timestamp":"2017-12-12T18:33:25.391708+0100","flow_id":664738847914524,"pcap_cnt":4268,"event_type":"dns","src_ip":"192.168.1.100","src_port":54810,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":16930,"rrname":"magymofigeg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.941609+0100","flow_id":1627670515768473,"pcap_cnt":5157,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52778,"proto":"UDP","dns":{"type":"answer","id":1960,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:22.397147+0100","flow_id":863879301304155,"pcap_cnt":4030,"event_type":"dns","src_ip":"192.168.1.100","src_port":50424,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33478,"rrname":"digivehusyd.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.005041+0100","flow_id":944386315784767,"pcap_cnt":3857,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63858,"proto":"UDP","dns":{"type":"answer","id":60189,"rcode":"NXDOMAIN","rrname":"kezydorekuw.eu"}}
{"timestamp":"2017-12-12T18:33:25.392054+0100","flow_id":664738847914524,"pcap_cnt":4269,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54810,"proto":"UDP","dns":{"type":"answer","id":16930,"rcode":"NXDOMAIN","rrname":"magymofigeg.eu"}}
{"timestamp":"2017-12-12T18:33:22.005041+0100","flow_id":944386315784767,"pcap_cnt":3857,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63858,"proto":"UDP","dns":{"type":"answer","id":60189,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:26.234536+0100","flow_id":1817241782227691,"pcap_cnt":4635,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56161,"proto":"UDP","dns":{"type":"answer","id":5500,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:28.051239+0100","flow_id":549575742506755,"pcap_cnt":5217,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59391,"proto":"UDP","dns":{"type":"answer","id":42553,"rcode":"NXDOMAIN","rrname":"noretekyvuv.eu"}}
{"timestamp":"2017-12-12T18:33:22.043872+0100","flow_id":1689664073411132,"pcap_cnt":3875,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49864,"proto":"UDP","dns":{"type":"answer","id":52183,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:28.051239+0100","flow_id":549575742506755,"pcap_cnt":5217,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59391,"proto":"UDP","dns":{"type":"answer","id":42553,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:25.381729+0100","flow_id":1295922946757409,"pcap_cnt":4254,"event_type":"dns","src_ip":"192.168.1.100","src_port":61743,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42973,"rrname":"kepolonavit.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.489767+0100","flow_id":161731605526823,"pcap_cnt":4324,"event_type":"dns","src_ip":"192.168.1.100","src_port":64916,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33705,"rrname":"qekenilacap.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.822794+0100","flow_id":1587888381070595,"pcap_cnt":4445,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53210,"proto":"UDP","dns":{"type":"answer","id":30116,"rcode":"NXDOMAIN","rrname":"lymunyjigak.eu"}}
{"timestamp":"2017-12-12T18:33:29.060071+0100","flow_id":270604731804055,"pcap_cnt":5681,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59134,"proto":"UDP","dns":{"type":"answer","id":56962,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:25.822794+0100","flow_id":1587888381070595,"pcap_cnt":4445,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53210,"proto":"UDP","dns":{"type":"answer","id":30116,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:27.397020+0100","flow_id":1708231215959020,"pcap_cnt":4923,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59571,"proto":"UDP","dns":{"type":"answer","id":32857,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:27.307982+0100","flow_id":690429193677720,"pcap_cnt":4880,"event_type":"dns","src_ip":"192.168.1.100","src_port":59631,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":20524,"rrname":"maganomojer.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:30.221806+0100","flow_id":1099093185815150,"pcap_cnt":6162,"event_type":"dns","src_ip":"192.168.1.100","src_port":49510,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1817,"rrname":"gatonazytab.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.204594+0100","flow_id":295393135304189,"pcap_cnt":4625,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59575,"proto":"UDP","dns":{"type":"answer","id":38795,"rcode":"NXDOMAIN","rrname":"lyvoguraxeh.eu"}}
{"timestamp":"2017-12-12T18:33:27.621686+0100","flow_id":120278727711765,"pcap_cnt":5018,"event_type":"dns","src_ip":"192.168.1.100","src_port":62478,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7796,"rrname":"cihyrimymen.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:27.109979+0100","flow_id":2137927662939269,"pcap_cnt":4781,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50853,"proto":"UDP","dns":{"type":"answer","id":45117,"rcode":"NXDOMAIN","rrname":"ganazywutes.eu"}}
{"timestamp":"2017-12-12T18:33:20.529838+0100","flow_id":1405481119650930,"pcap_cnt":3225,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56116,"proto":"UDP","dns":{"type":"answer","id":34388,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:27.109979+0100","flow_id":2137927662939269,"pcap_cnt":4781,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50853,"proto":"UDP","dns":{"type":"answer","id":45117,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:27.621964+0100","flow_id":120278727711765,"pcap_cnt":5019,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62478,"proto":"UDP","dns":{"type":"answer","id":7796,"rcode":"NXDOMAIN","rrname":"cihyrimymen.eu"}}
{"timestamp":"2017-12-12T18:33:22.585991+0100","flow_id":663222724260103,"pcap_cnt":4096,"event_type":"dns","src_ip":"192.168.1.100","src_port":62266,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41612,"rrname":"novacofebyz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.810921+0100","flow_id":286504700108713,"pcap_cnt":3338,"event_type":"dns","src_ip":"192.168.1.100","src_port":56960,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31787,"rrname":"voluzefexus.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.110773+0100","flow_id":456258987995067,"pcap_cnt":4783,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61914,"proto":"UDP","dns":{"type":"answer","id":6235,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:22.855654+0100","flow_id":1894871168322971,"pcap_cnt":4181,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49895,"proto":"UDP","dns":{"type":"answer","id":25113,"rcode":"NXDOMAIN","rrname":"xuxanexusov.eu"}}
{"timestamp":"2017-12-12T18:33:20.811206+0100","flow_id":286504700108713,"pcap_cnt":3339,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56960,"proto":"UDP","dns":{"type":"answer","id":31787,"rcode":"NXDOMAIN","rrname":"voluzefexus.eu"}}
{"timestamp":"2017-12-12T18:33:27.229091+0100","flow_id":1773954953984241,"pcap_cnt":4832,"event_type":"dns","src_ip":"192.168.1.100","src_port":51683,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19054,"rrname":"lyvywyduroq.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:21.103542+0100","flow_id":693154351256694,"pcap_cnt":3478,"event_type":"dns","src_ip":"192.168.1.100","src_port":56827,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40984,"rrname":"fotinosuwir.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.762814+0100","flow_id":1868972515893916,"pcap_cnt":5077,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53936,"proto":"UDP","dns":{"type":"answer","id":43254,"rcode":"NXDOMAIN","rrname":"ryqanylofuq.eu"}}
{"timestamp":"2017-12-12T18:33:27.229379+0100","flow_id":1773954953984241,"pcap_cnt":4833,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51683,"proto":"UDP","dns":{"type":"answer","id":19054,"rcode":"NXDOMAIN","rrname":"lyvywyduroq.eu"}}
{"timestamp":"2017-12-12T18:33:22.964776+0100","flow_id":2235719772977320,"pcap_cnt":4226,"event_type":"dns","src_ip":"192.168.1.100","src_port":49582,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":12189,"rrname":"fogisysemyq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.762814+0100","flow_id":1868972515893916,"pcap_cnt":5077,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53936,"proto":"UDP","dns":{"type":"answer","id":43254,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:22.856833+0100","flow_id":1669930846130707,"pcap_cnt":4183,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51693,"proto":"UDP","dns":{"type":"answer","id":59467,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:27.282001+0100","flow_id":1635903964647638,"pcap_cnt":4871,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57634,"proto":"UDP","dns":{"type":"answer","id":65066,"rcode":"NXDOMAIN","rrname":"xuboninogyt.eu"}}
{"timestamp":"2017-12-12T18:33:28.296181+0100","flow_id":2017269146748149,"pcap_cnt":5330,"event_type":"dns","src_ip":"192.168.1.100","src_port":50097,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45568,"rrname":"vococumecan.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.024270+0100","flow_id":620938771062478,"pcap_cnt":2982,"event_type":"dns","src_ip":"192.168.1.100","src_port":51214,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1179,"rrname":"xutyrurojah.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.329401+0100","flow_id":278687859934905,"pcap_cnt":4232,"event_type":"dns","src_ip":"192.168.1.100","src_port":52505,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38592,"rrname":"kerijudacyj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.828955+0100","flow_id":220671441872092,"pcap_cnt":5111,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65159,"proto":"UDP","dns":{"type":"answer","id":56879,"rcode":"NXDOMAIN","rrname":"ryteqipogoz.eu"}}
{"timestamp":"2017-12-12T18:33:28.296421+0100","flow_id":2017269146748149,"pcap_cnt":5331,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50097,"proto":"UDP","dns":{"type":"answer","id":45568,"rcode":"NXDOMAIN","rrname":"vococumecan.eu"}}
{"timestamp":"2017-12-12T18:33:22.230777+0100","flow_id":1212491059332217,"pcap_cnt":3963,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51033,"proto":"UDP","dns":{"type":"answer","id":45421,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":595}}
{"timestamp":"2017-12-12T18:33:27.828955+0100","flow_id":220671441872092,"pcap_cnt":5111,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65159,"proto":"UDP","dns":{"type":"answer","id":56879,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:27.988458+0100","flow_id":2020024368174378,"pcap_cnt":5182,"event_type":"dns","src_ip":"192.168.1.100","src_port":63303,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51061,"rrname":"xudevunymex.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.843433+0100","flow_id":704162352520873,"pcap_cnt":4176,"event_type":"dns","src_ip":"192.168.1.100","src_port":54424,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":263,"rrname":"jewezexigaf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.397437+0100","flow_id":863879301304155,"pcap_cnt":4031,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50424,"proto":"UDP","dns":{"type":"answer","id":33478,"rcode":"NXDOMAIN","rrname":"digivehusyd.eu"}}
{"timestamp":"2017-12-12T18:33:27.988734+0100","flow_id":2020024368174378,"pcap_cnt":5183,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63303,"proto":"UDP","dns":{"type":"answer","id":51061,"rcode":"NXDOMAIN","rrname":"xudevunymex.eu"}}
{"timestamp":"2017-12-12T18:33:22.397437+0100","flow_id":863879301304155,"pcap_cnt":4031,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50424,"proto":"UDP","dns":{"type":"answer","id":33478,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":553}}
{"timestamp":"2017-12-12T18:33:22.140605+0100","flow_id":2111139951551805,"pcap_cnt":3920,"event_type":"dns","src_ip":"192.168.1.100","src_port":50915,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27859,"rrname":"kemojidezyf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.988734+0100","flow_id":2020024368174378,"pcap_cnt":5183,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63303,"proto":"UDP","dns":{"type":"answer","id":51061,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:26.403043+0100","flow_id":1144392205608547,"pcap_cnt":4726,"event_type":"dns","src_ip":"192.168.1.100","src_port":54795,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25055,"rrname":"kefeminalyn.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.835133+0100","flow_id":1129428539326013,"pcap_cnt":4168,"event_type":"dns","src_ip":"192.168.1.100","src_port":51453,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42205,"rrname":"gatonazytab.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.992347+0100","flow_id":438703309136987,"pcap_cnt":5184,"event_type":"dns","src_ip":"192.168.1.100","src_port":65517,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36610,"rrname":"citykimipat.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.403318+0100","flow_id":1144392205608547,"pcap_cnt":4727,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54795,"proto":"UDP","dns":{"type":"answer","id":25055,"rcode":"NXDOMAIN","rrname":"kefeminalyn.eu"}}
{"timestamp":"2017-12-12T18:33:22.835412+0100","flow_id":1129428539326013,"pcap_cnt":4169,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51453,"proto":"UDP","dns":{"type":"answer","id":42205,"rcode":"NXDOMAIN","rrname":"gatonazytab.eu"}}
{"timestamp":"2017-12-12T18:33:29.118187+0100","flow_id":398800915647915,"pcap_cnt":5712,"event_type":"dns","src_ip":"192.168.1.100","src_port":55951,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51480,"rrname":"cileretirus.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.838691+0100","flow_id":2133864623135749,"pcap_cnt":4448,"event_type":"dns","src_ip":"192.168.1.100","src_port":59192,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":663,"rrname":"qetaseqyquv.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:31.831686+0100","flow_id":377890867490687,"pcap_cnt":6507,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52195,"proto":"UDP","dns":{"type":"answer","id":46980,"rcode":"NXDOMAIN","rrname":"qeguhapyrer.eu"}}
{"timestamp":"2017-12-12T18:33:29.118529+0100","flow_id":398800915647915,"pcap_cnt":5713,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55951,"proto":"UDP","dns":{"type":"answer","id":51480,"rcode":"NXDOMAIN","rrname":"cileretirus.eu"}}
{"timestamp":"2017-12-12T18:33:26.204594+0100","flow_id":295393135304189,"pcap_cnt":4625,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59575,"proto":"UDP","dns":{"type":"answer","id":38795,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:29.118529+0100","flow_id":398800915647915,"pcap_cnt":5713,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55951,"proto":"UDP","dns":{"type":"answer","id":51480,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:27.627505+0100","flow_id":293965058773467,"pcap_cnt":5021,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54777,"proto":"UDP","dns":{"type":"answer","id":20719,"rcode":"NXDOMAIN","rrname":"vofubimipeg.eu"}}
{"timestamp":"2017-12-12T18:33:26.405594+0100","flow_id":2216927143800922,"pcap_cnt":4728,"event_type":"dns","src_ip":"192.168.1.100","src_port":62057,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53465,"rrname":"xutohonutyn.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.187005+0100","flow_id":1274201149921917,"pcap_cnt":5748,"event_type":"dns","src_ip":"192.168.1.100","src_port":60903,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9684,"rrname":"cinidofopyk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.621964+0100","flow_id":120278727711765,"pcap_cnt":5019,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62478,"proto":"UDP","dns":{"type":"answer","id":7796,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:27.627505+0100","flow_id":293965058773467,"pcap_cnt":5021,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54777,"proto":"UDP","dns":{"type":"answer","id":20719,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:27.166225+0100","flow_id":1573259722590545,"pcap_cnt":4806,"event_type":"dns","src_ip":"192.168.1.100","src_port":61498,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29530,"rrname":"rycaropynar.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.758322+0100","flow_id":1413527741370930,"pcap_cnt":5074,"event_type":"dns","src_ip":"192.168.1.100","src_port":51265,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":46511,"rrname":"magijityboz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.464631+0100","flow_id":394473735591363,"pcap_cnt":4063,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65413,"proto":"UDP","dns":{"type":"answer","id":9327,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":553}}
{"timestamp":"2017-12-12T18:33:27.877848+0100","flow_id":202224557319448,"pcap_cnt":5128,"event_type":"dns","src_ip":"192.168.1.100","src_port":60049,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34252,"rrname":"qegefavipev.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.811206+0100","flow_id":286504700108713,"pcap_cnt":3339,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56960,"proto":"UDP","dns":{"type":"answer","id":31787,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:27.758648+0100","flow_id":1413527741370930,"pcap_cnt":5075,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51265,"proto":"UDP","dns":{"type":"answer","id":46511,"rcode":"NXDOMAIN","rrname":"magijityboz.eu"}}
{"timestamp":"2017-12-12T18:33:21.103815+0100","flow_id":693154351256694,"pcap_cnt":3479,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56827,"proto":"UDP","dns":{"type":"answer","id":40984,"rcode":"NXDOMAIN","rrname":"fotinosuwir.eu"}}
{"timestamp":"2017-12-12T18:33:27.758648+0100","flow_id":1413527741370930,"pcap_cnt":5075,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51265,"proto":"UDP","dns":{"type":"answer","id":46511,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:27.878135+0100","flow_id":202224557319448,"pcap_cnt":5129,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60049,"proto":"UDP","dns":{"type":"answer","id":34252,"rcode":"NXDOMAIN","rrname":"qegefavipev.eu"}}
{"timestamp":"2017-12-12T18:33:21.103815+0100","flow_id":693154351256694,"pcap_cnt":3479,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56827,"proto":"UDP","dns":{"type":"answer","id":40984,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:27.878135+0100","flow_id":202224557319448,"pcap_cnt":5129,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60049,"proto":"UDP","dns":{"type":"answer","id":34252,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:25.888608+0100","flow_id":128282400230912,"pcap_cnt":4481,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55750,"proto":"UDP","dns":{"type":"answer","id":35493,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:27.282001+0100","flow_id":1635903964647638,"pcap_cnt":4871,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57634,"proto":"UDP","dns":{"type":"answer","id":65066,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:26.114747+0100","flow_id":2114101331803942,"pcap_cnt":4585,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62766,"proto":"UDP","dns":{"type":"answer","id":9046,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":577}}
{"timestamp":"2017-12-12T18:33:28.296421+0100","flow_id":2017269146748149,"pcap_cnt":5331,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50097,"proto":"UDP","dns":{"type":"answer","id":45568,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:26.318478+0100","flow_id":2050157858708494,"pcap_cnt":4674,"event_type":"dns","src_ip":"192.168.1.100","src_port":50343,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42858,"rrname":"vocebufazap.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.024535+0100","flow_id":620938771062478,"pcap_cnt":2983,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51214,"proto":"UDP","dns":{"type":"answer","id":1179,"rcode":"NXDOMAIN","rrname":"xutyrurojah.eu"}}
{"timestamp":"2017-12-12T18:33:28.341857+0100","flow_id":1586501106808673,"pcap_cnt":5352,"event_type":"dns","src_ip":"192.168.1.100","src_port":63554,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47814,"rrname":"lyselojumyr.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.654418+0100","flow_id":2242641113185120,"pcap_cnt":5507,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57854,"proto":"UDP","dns":{"type":"answer","id":6450,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:28.342120+0100","flow_id":1586501106808673,"pcap_cnt":5353,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63554,"proto":"UDP","dns":{"type":"answer","id":47814,"rcode":"NXDOMAIN","rrname":"lyselojumyr.eu"}}
{"timestamp":"2017-12-12T18:33:27.830433+0100","flow_id":2226266550283233,"pcap_cnt":5112,"event_type":"dns","src_ip":"192.168.1.100","src_port":54866,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4868,"rrname":"jefogixuqyn.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.301690+0100","flow_id":1857938744580730,"pcap_cnt":3986,"event_type":"dns","src_ip":"192.168.1.100","src_port":59238,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30069,"rrname":"rytukuqunun.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.843672+0100","flow_id":704162352520873,"pcap_cnt":4177,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54424,"proto":"UDP","dns":{"type":"answer","id":263,"rcode":"NXDOMAIN","rrname":"jewezexigaf.eu"}}
{"timestamp":"2017-12-12T18:33:26.033556+0100","flow_id":2005984119433072,"pcap_cnt":4545,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59836,"proto":"UDP","dns":{"type":"answer","id":60174,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:22.301952+0100","flow_id":1857938744580730,"pcap_cnt":3987,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59238,"proto":"UDP","dns":{"type":"answer","id":30069,"rcode":"NXDOMAIN","rrname":"rytukuqunun.eu"}}
{"timestamp":"2017-12-12T18:33:22.193189+0100","flow_id":685243021587109,"pcap_cnt":3944,"event_type":"dns","src_ip":"192.168.1.100","src_port":54166,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9653,"rrname":"cilicofahev.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.140938+0100","flow_id":2111139951551805,"pcap_cnt":3921,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50915,"proto":"UDP","dns":{"type":"answer","id":27859,"rcode":"NXDOMAIN","rrname":"kemojidezyf.eu"}}
{"timestamp":"2017-12-12T18:33:28.844179+0100","flow_id":1132265365627283,"pcap_cnt":5588,"event_type":"dns","src_ip":"192.168.1.100","src_port":53986,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33830,"rrname":"ciqycicunaz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.265573+0100","flow_id":790302216818021,"pcap_cnt":4652,"event_type":"dns","src_ip":"192.168.1.100","src_port":56320,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62560,"rrname":"dikuvizigiz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.490016+0100","flow_id":161731605526823,"pcap_cnt":4325,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64916,"proto":"UDP","dns":{"type":"answer","id":33705,"rcode":"NXDOMAIN","rrname":"qekenilacap.eu"}}
{"timestamp":"2017-12-12T18:33:22.193603+0100","flow_id":685243021587109,"pcap_cnt":3945,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54166,"proto":"UDP","dns":{"type":"answer","id":9653,"rcode":"NXDOMAIN","rrname":"cilicofahev.eu"}}
{"timestamp":"2017-12-12T18:33:26.403318+0100","flow_id":1144392205608547,"pcap_cnt":4727,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54795,"proto":"UDP","dns":{"type":"answer","id":25055,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":577}}
{"timestamp":"2017-12-12T18:33:22.193603+0100","flow_id":685243021587109,"pcap_cnt":3945,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54166,"proto":"UDP","dns":{"type":"answer","id":9653,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":595}}
{"timestamp":"2017-12-12T18:33:31.831686+0100","flow_id":377890867490687,"pcap_cnt":6507,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52195,"proto":"UDP","dns":{"type":"answer","id":46980,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:27.114678+0100","flow_id":611300864933878,"pcap_cnt":4784,"event_type":"dns","src_ip":"192.168.1.100","src_port":50983,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31409,"rrname":"pufyjulogih.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.217353+0100","flow_id":1031812522086765,"pcap_cnt":3954,"event_type":"dns","src_ip":"192.168.1.100","src_port":60099,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47890,"rrname":"gadurabotiw.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:21.342086+0100","flow_id":594415200581461,"pcap_cnt":3597,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62727,"proto":"UDP","dns":{"type":"answer","id":17423,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:27.114938+0100","flow_id":611300864933878,"pcap_cnt":4785,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50983,"proto":"UDP","dns":{"type":"answer","id":31409,"rcode":"NXDOMAIN","rrname":"pufyjulogih.eu"}}
{"timestamp":"2017-12-12T18:33:26.405845+0100","flow_id":2216927143800922,"pcap_cnt":4729,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62057,"proto":"UDP","dns":{"type":"answer","id":53465,"rcode":"NXDOMAIN","rrname":"xutohonutyn.eu"}}
{"timestamp":"2017-12-12T18:33:27.114938+0100","flow_id":611300864933878,"pcap_cnt":4785,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50983,"proto":"UDP","dns":{"type":"answer","id":31409,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:29.187321+0100","flow_id":1274201149921917,"pcap_cnt":5749,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60903,"proto":"UDP","dns":{"type":"answer","id":9684,"rcode":"NXDOMAIN","rrname":"cinidofopyk.eu"}}
{"timestamp":"2017-12-12T18:33:22.586297+0100","flow_id":663222724260103,"pcap_cnt":4097,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62266,"proto":"UDP","dns":{"type":"answer","id":41612,"rcode":"NXDOMAIN","rrname":"novacofebyz.eu"}}
{"timestamp":"2017-12-12T18:33:22.855654+0100","flow_id":1894871168322971,"pcap_cnt":4181,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49895,"proto":"UDP","dns":{"type":"answer","id":25113,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:28.081597+0100","flow_id":1068437855738611,"pcap_cnt":5234,"event_type":"dns","src_ip":"192.168.1.100","src_port":54201,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25456,"rrname":"digalyzohyx.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:27.166491+0100","flow_id":1573259722590545,"pcap_cnt":4807,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61498,"proto":"UDP","dns":{"type":"answer","id":29530,"rcode":"NXDOMAIN","rrname":"rycaropynar.eu"}}
{"timestamp":"2017-12-12T18:33:27.229379+0100","flow_id":1773954953984241,"pcap_cnt":4833,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51683,"proto":"UDP","dns":{"type":"answer","id":19054,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:21.131929+0100","flow_id":1935514443776857,"pcap_cnt":3494,"event_type":"dns","src_ip":"192.168.1.100","src_port":65126,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7610,"rrname":"gatecebofas.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.282412+0100","flow_id":606389569801777,"pcap_cnt":4873,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61967,"proto":"UDP","dns":{"type":"answer","id":25516,"rcode":"NXDOMAIN","rrname":"cicezomaxyz.eu"}}
{"timestamp":"2017-12-12T18:33:27.578256+0100","flow_id":385323308143312,"pcap_cnt":5000,"event_type":"dns","src_ip":"192.168.1.100","src_port":59779,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":12996,"rrname":"fotulybidyq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.965172+0100","flow_id":2235719772977320,"pcap_cnt":4227,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49582,"proto":"UDP","dns":{"type":"answer","id":12189,"rcode":"NXDOMAIN","rrname":"fogisysemyq.eu"}}
{"timestamp":"2017-12-12T18:33:21.132191+0100","flow_id":1935514443776857,"pcap_cnt":3495,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65126,"proto":"UDP","dns":{"type":"answer","id":7610,"rcode":"NXDOMAIN","rrname":"gatecebofas.eu"}}
{"timestamp":"2017-12-12T18:33:27.775450+0100","flow_id":1893447387043098,"pcap_cnt":5084,"event_type":"dns","src_ip":"192.168.1.100","src_port":56031,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26820,"rrname":"tunyzylazuj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.075700+0100","flow_id":1827611980867508,"pcap_cnt":5226,"event_type":"dns","src_ip":"192.168.1.100","src_port":55472,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26932,"rrname":"qebolelofyc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.203347+0100","flow_id":1157234157492819,"pcap_cnt":3532,"event_type":"dns","src_ip":"192.168.1.100","src_port":60073,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33666,"rrname":"nofemumodoz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.545600+0100","flow_id":661530507432768,"pcap_cnt":4988,"event_type":"dns","src_ip":"192.168.1.100","src_port":51201,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":16892,"rrname":"cidaqyfynos.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.775786+0100","flow_id":1893447387043098,"pcap_cnt":5085,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56031,"proto":"UDP","dns":{"type":"answer","id":26820,"rcode":"NXDOMAIN","rrname":"tunyzylazuj.eu"}}
{"timestamp":"2017-12-12T18:33:21.203603+0100","flow_id":1157234157492819,"pcap_cnt":3533,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60073,"proto":"UDP","dns":{"type":"answer","id":33666,"rcode":"NXDOMAIN","rrname":"nofemumodoz.eu"}}
{"timestamp":"2017-12-12T18:33:26.318721+0100","flow_id":2050157858708494,"pcap_cnt":4675,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50343,"proto":"UDP","dns":{"type":"answer","id":42858,"rcode":"NXDOMAIN","rrname":"vocebufazap.eu"}}
{"timestamp":"2017-12-12T18:33:20.024535+0100","flow_id":620938771062478,"pcap_cnt":2983,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51214,"proto":"UDP","dns":{"type":"answer","id":1179,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:28.342120+0100","flow_id":1586501106808673,"pcap_cnt":5353,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63554,"proto":"UDP","dns":{"type":"answer","id":47814,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:25.392054+0100","flow_id":664738847914524,"pcap_cnt":4269,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54810,"proto":"UDP","dns":{"type":"answer","id":16930,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:20.307746+0100","flow_id":499374016737826,"pcap_cnt":3128,"event_type":"dns","src_ip":"192.168.1.100","src_port":64077,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27537,"rrname":"volaqutodox.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.830675+0100","flow_id":2226266550283233,"pcap_cnt":5113,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54866,"proto":"UDP","dns":{"type":"answer","id":4868,"rcode":"NXDOMAIN","rrname":"jefogixuqyn.eu"}}
{"timestamp":"2017-12-12T18:33:20.308007+0100","flow_id":499374016737826,"pcap_cnt":3129,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64077,"proto":"UDP","dns":{"type":"answer","id":27537,"rcode":"NXDOMAIN","rrname":"volaqutodox.eu"}}
{"timestamp":"2017-12-12T18:33:27.830675+0100","flow_id":2226266550283233,"pcap_cnt":5113,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54866,"proto":"UDP","dns":{"type":"answer","id":4868,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:20.308007+0100","flow_id":499374016737826,"pcap_cnt":3129,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64077,"proto":"UDP","dns":{"type":"answer","id":27537,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:25.381972+0100","flow_id":1295922946757409,"pcap_cnt":4255,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61743,"proto":"UDP","dns":{"type":"answer","id":42973,"rcode":"NXDOMAIN","rrname":"kepolonavit.eu"}}
{"timestamp":"2017-12-12T18:33:27.992618+0100","flow_id":438703309136987,"pcap_cnt":5185,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65517,"proto":"UDP","dns":{"type":"answer","id":36610,"rcode":"NXDOMAIN","rrname":"citykimipat.eu"}}
{"timestamp":"2017-12-12T18:33:25.381972+0100","flow_id":1295922946757409,"pcap_cnt":4255,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61743,"proto":"UDP","dns":{"type":"answer","id":42973,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:22.835412+0100","flow_id":1129428539326013,"pcap_cnt":4169,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51453,"proto":"UDP","dns":{"type":"answer","id":42205,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:28.844445+0100","flow_id":1132265365627283,"pcap_cnt":5589,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53986,"proto":"UDP","dns":{"type":"answer","id":33830,"rcode":"NXDOMAIN","rrname":"ciqycicunaz.eu"}}
{"timestamp":"2017-12-12T18:33:25.382943+0100","flow_id":1109675984934879,"pcap_cnt":4256,"event_type":"dns","src_ip":"192.168.1.100","src_port":51034,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14100,"rrname":"lyrefanyril.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.844445+0100","flow_id":1132265365627283,"pcap_cnt":5589,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53986,"proto":"UDP","dns":{"type":"answer","id":33830,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:26.265891+0100","flow_id":790302216818021,"pcap_cnt":4653,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56320,"proto":"UDP","dns":{"type":"answer","id":62560,"rcode":"NXDOMAIN","rrname":"dikuvizigiz.eu"}}
{"timestamp":"2017-12-12T18:33:27.308201+0100","flow_id":690429193677720,"pcap_cnt":4881,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59631,"proto":"UDP","dns":{"type":"answer","id":20524,"rcode":"NXDOMAIN","rrname":"maganomojer.eu"}}
{"timestamp":"2017-12-12T18:33:25.383179+0100","flow_id":1109675984934879,"pcap_cnt":4257,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51034,"proto":"UDP","dns":{"type":"answer","id":14100,"rcode":"NXDOMAIN","rrname":"lyrefanyril.eu"}}
{"timestamp":"2017-12-12T18:33:30.222117+0100","flow_id":1099093185815150,"pcap_cnt":6163,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49510,"proto":"UDP","dns":{"type":"answer","id":1817,"rcode":"NXDOMAIN","rrname":"gatonazytab.eu"}}
{"timestamp":"2017-12-12T18:33:27.308201+0100","flow_id":690429193677720,"pcap_cnt":4881,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59631,"proto":"UDP","dns":{"type":"answer","id":20524,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:26.265891+0100","flow_id":790302216818021,"pcap_cnt":4653,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56320,"proto":"UDP","dns":{"type":"answer","id":62560,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:28.802500+0100","flow_id":1641212547710660,"pcap_cnt":5566,"event_type":"dns","src_ip":"192.168.1.100","src_port":56287,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48158,"rrname":"galoqyzajep.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.640586+0100","flow_id":1225225637316170,"pcap_cnt":3728,"event_type":"dns","src_ip":"192.168.1.100","src_port":54828,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":21387,"rrname":"digenowipib.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.405845+0100","flow_id":2216927143800922,"pcap_cnt":4729,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62057,"proto":"UDP","dns":{"type":"answer","id":53465,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":577}}
{"timestamp":"2017-12-12T18:33:27.716237+0100","flow_id":2206930607533517,"pcap_cnt":5054,"event_type":"dns","src_ip":"192.168.1.100","src_port":50170,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9690,"rrname":"cilupakuquk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.640864+0100","flow_id":1225225637316170,"pcap_cnt":3729,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54828,"proto":"UDP","dns":{"type":"answer","id":21387,"rcode":"NXDOMAIN","rrname":"digenowipib.eu"}}
{"timestamp":"2017-12-12T18:33:27.235313+0100","flow_id":2152983670789937,"pcap_cnt":4838,"event_type":"dns","src_ip":"192.168.1.100","src_port":56570,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51713,"rrname":"tucumyvipys.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.640864+0100","flow_id":1225225637316170,"pcap_cnt":3729,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54828,"proto":"UDP","dns":{"type":"answer","id":21387,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:27.235607+0100","flow_id":2152983670789937,"pcap_cnt":4839,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56570,"proto":"UDP","dns":{"type":"answer","id":51713,"rcode":"NXDOMAIN","rrname":"tucumyvipys.eu"}}
{"timestamp":"2017-12-12T18:33:21.679695+0100","flow_id":919733203459855,"pcap_cnt":3736,"event_type":"dns","src_ip":"192.168.1.100","src_port":52665,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":12777,"rrname":"jepepyxiwam.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.235607+0100","flow_id":2152983670789937,"pcap_cnt":4839,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56570,"proto":"UDP","dns":{"type":"answer","id":51713,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:27.282412+0100","flow_id":606389569801777,"pcap_cnt":4873,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61967,"proto":"UDP","dns":{"type":"answer","id":25516,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:21.680003+0100","flow_id":919733203459855,"pcap_cnt":3737,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52665,"proto":"UDP","dns":{"type":"answer","id":12777,"rcode":"NXDOMAIN","rrname":"jepepyxiwam.eu"}}
{"timestamp":"2017-12-12T18:33:27.257780+0100","flow_id":1819127272959732,"pcap_cnt":4862,"event_type":"dns","src_ip":"192.168.1.100","src_port":63316,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8968,"rrname":"dikegybecys.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.680003+0100","flow_id":919733203459855,"pcap_cnt":3737,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52665,"proto":"UDP","dns":{"type":"answer","id":12777,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:22.965172+0100","flow_id":2235719772977320,"pcap_cnt":4227,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49582,"proto":"UDP","dns":{"type":"answer","id":12189,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:26.004743+0100","flow_id":1868414166736650,"pcap_cnt":4516,"event_type":"dns","src_ip":"192.168.1.100","src_port":58338,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25250,"rrname":"ciqukecywiv.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:21.840824+0100","flow_id":771041435702392,"pcap_cnt":3796,"event_type":"dns","src_ip":"192.168.1.100","src_port":54623,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53089,"rrname":"cinidofopyk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.258038+0100","flow_id":1819127272959732,"pcap_cnt":4863,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63316,"proto":"UDP","dns":{"type":"answer","id":8968,"rcode":"NXDOMAIN","rrname":"dikegybecys.eu"}}
{"timestamp":"2017-12-12T18:33:27.775786+0100","flow_id":1893447387043098,"pcap_cnt":5085,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56031,"proto":"UDP","dns":{"type":"answer","id":26820,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:27.258038+0100","flow_id":1819127272959732,"pcap_cnt":4863,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63316,"proto":"UDP","dns":{"type":"answer","id":8968,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:21.203603+0100","flow_id":1157234157492819,"pcap_cnt":3533,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60073,"proto":"UDP","dns":{"type":"answer","id":33666,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:27.823043+0100","flow_id":468428777166605,"pcap_cnt":5102,"event_type":"dns","src_ip":"192.168.1.100","src_port":52133,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":12753,"rrname":"pumojopymol.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:28.725394+0100","flow_id":542177661292946,"pcap_cnt":5532,"event_type":"dns","src_ip":"192.168.1.100","src_port":53094,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51989,"rrname":"vocygytirij.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.441705+0100","flow_id":600541971856745,"pcap_cnt":4946,"event_type":"dns","src_ip":"192.168.1.100","src_port":49740,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14608,"rrname":"fobahizipux.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.318721+0100","flow_id":2050157858708494,"pcap_cnt":4675,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50343,"proto":"UDP","dns":{"type":"answer","id":42858,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:27.823283+0100","flow_id":468428777166605,"pcap_cnt":5103,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52133,"proto":"UDP","dns":{"type":"answer","id":12753,"rcode":"NXDOMAIN","rrname":"pumojopymol.eu"}}
{"timestamp":"2017-12-12T18:33:27.442110+0100","flow_id":600541971856745,"pcap_cnt":4947,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49740,"proto":"UDP","dns":{"type":"answer","id":14608,"rcode":"NXDOMAIN","rrname":"fobahizipux.eu"}}
{"timestamp":"2017-12-12T18:33:25.653491+0100","flow_id":2144561239816371,"pcap_cnt":4384,"event_type":"dns","src_ip":"192.168.1.100","src_port":57226,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":20206,"rrname":"xukyhudokex.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.376272+0100","flow_id":504210150309328,"pcap_cnt":4710,"event_type":"dns","src_ip":"192.168.1.100","src_port":56470,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8785,"rrname":"xuqufyduras.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.442110+0100","flow_id":600541971856745,"pcap_cnt":4947,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49740,"proto":"UDP","dns":{"type":"answer","id":14608,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:20.623156+0100","flow_id":1977169184064052,"pcap_cnt":3264,"event_type":"dns","src_ip":"192.168.1.100","src_port":57235,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60583,"rrname":"lyxesyrecoj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.841003+0100","flow_id":1410446102353195,"pcap_cnt":5116,"event_type":"dns","src_ip":"192.168.1.100","src_port":49266,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53168,"rrname":"lyrynixakyn.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.140938+0100","flow_id":2111139951551805,"pcap_cnt":3921,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50915,"proto":"UDP","dns":{"type":"answer","id":27859,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:27.908586+0100","flow_id":966026508885290,"pcap_cnt":5144,"event_type":"dns","src_ip":"192.168.1.100","src_port":63304,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":21558,"rrname":"kefypadofiw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.841292+0100","flow_id":1410446102353195,"pcap_cnt":5117,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49266,"proto":"UDP","dns":{"type":"answer","id":53168,"rcode":"NXDOMAIN","rrname":"lyrynixakyn.eu"}}
{"timestamp":"2017-12-12T18:33:25.839001+0100","flow_id":2133864623135749,"pcap_cnt":4449,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59192,"proto":"UDP","dns":{"type":"answer","id":663,"rcode":"NXDOMAIN","rrname":"qetaseqyquv.eu"}}
{"timestamp":"2017-12-12T18:33:27.908846+0100","flow_id":966026508885290,"pcap_cnt":5145,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63304,"proto":"UDP","dns":{"type":"answer","id":21558,"rcode":"NXDOMAIN","rrname":"kefypadofiw.eu"}}
{"timestamp":"2017-12-12T18:33:27.841292+0100","flow_id":1410446102353195,"pcap_cnt":5117,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49266,"proto":"UDP","dns":{"type":"answer","id":53168,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:25.839001+0100","flow_id":2133864623135749,"pcap_cnt":4449,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59192,"proto":"UDP","dns":{"type":"answer","id":663,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:22.217667+0100","flow_id":1031812522086765,"pcap_cnt":3955,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60099,"proto":"UDP","dns":{"type":"answer","id":47890,"rcode":"NXDOMAIN","rrname":"gadurabotiw.eu"}}
{"timestamp":"2017-12-12T18:33:25.383179+0100","flow_id":1109675984934879,"pcap_cnt":4257,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51034,"proto":"UDP","dns":{"type":"answer","id":14100,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:26.252397+0100","flow_id":2220657322940909,"pcap_cnt":4646,"event_type":"dns","src_ip":"192.168.1.100","src_port":60759,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64313,"rrname":"masytoturen.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.903845+0100","flow_id":1193807951940261,"pcap_cnt":5136,"event_type":"dns","src_ip":"192.168.1.100","src_port":55394,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27501,"rrname":"lysumedalik.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:30.222117+0100","flow_id":1099093185815150,"pcap_cnt":6163,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49510,"proto":"UDP","dns":{"type":"answer","id":1817,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:26.252649+0100","flow_id":2220657322940909,"pcap_cnt":4647,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60759,"proto":"UDP","dns":{"type":"answer","id":64313,"rcode":"NXDOMAIN","rrname":"masytoturen.eu"}}
{"timestamp":"2017-12-12T18:33:27.904157+0100","flow_id":1193807951940261,"pcap_cnt":5137,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55394,"proto":"UDP","dns":{"type":"answer","id":27501,"rcode":"NXDOMAIN","rrname":"lysumedalik.eu"}}
{"timestamp":"2017-12-12T18:33:31.247948+0100","flow_id":325363417467020,"pcap_cnt":6230,"event_type":"dns","src_ip":"192.168.1.100","src_port":59934,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":46688,"rrname":"magymofigeg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.252649+0100","flow_id":2220657322940909,"pcap_cnt":4647,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60759,"proto":"UDP","dns":{"type":"answer","id":64313,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:28.802761+0100","flow_id":1641212547710660,"pcap_cnt":5567,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56287,"proto":"UDP","dns":{"type":"answer","id":48158,"rcode":"NXDOMAIN","rrname":"galoqyzajep.eu"}}
{"timestamp":"2017-12-12T18:33:31.248206+0100","flow_id":325363417467020,"pcap_cnt":6231,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59934,"proto":"UDP","dns":{"type":"answer","id":46688,"rcode":"NXDOMAIN","rrname":"magymofigeg.eu"}}
{"timestamp":"2017-12-12T18:33:28.802761+0100","flow_id":1641212547710660,"pcap_cnt":5567,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56287,"proto":"UDP","dns":{"type":"answer","id":48158,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:31.248206+0100","flow_id":325363417467020,"pcap_cnt":6231,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59934,"proto":"UDP","dns":{"type":"answer","id":46688,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:28.081914+0100","flow_id":1068437855738611,"pcap_cnt":5235,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54201,"proto":"UDP","dns":{"type":"answer","id":25456,"rcode":"NXDOMAIN","rrname":"digalyzohyx.eu"}}
{"timestamp":"2017-12-12T18:33:31.400499+0100","flow_id":1483183521209459,"pcap_cnt":6304,"event_type":"dns","src_ip":"192.168.1.100","src_port":56626,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":57238,"rrname":"jeceraxaxol.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.837172+0100","flow_id":882893121963572,"pcap_cnt":5582,"event_type":"dns","src_ip":"192.168.1.100","src_port":50684,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31700,"rrname":"qexiveguwys.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.578556+0100","flow_id":385323308143312,"pcap_cnt":5001,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59779,"proto":"UDP","dns":{"type":"answer","id":12996,"rcode":"NXDOMAIN","rrname":"fotulybidyq.eu"}}
{"timestamp":"2017-12-12T18:33:21.132191+0100","flow_id":1935514443776857,"pcap_cnt":3495,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65126,"proto":"UDP","dns":{"type":"answer","id":7610,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":591}}
{"timestamp":"2017-12-12T18:33:27.315795+0100","flow_id":2249059941732755,"pcap_cnt":4882,"event_type":"dns","src_ip":"192.168.1.100","src_port":56989,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59076,"rrname":"qedylaqecel.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.578556+0100","flow_id":385323308143312,"pcap_cnt":5001,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59779,"proto":"UDP","dns":{"type":"answer","id":12996,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:28.837491+0100","flow_id":882893121963572,"pcap_cnt":5583,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50684,"proto":"UDP","dns":{"type":"answer","id":31700,"rcode":"NXDOMAIN","rrname":"qexiveguwys.eu"}}
{"timestamp":"2017-12-12T18:33:27.546017+0100","flow_id":661530507432768,"pcap_cnt":4989,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51201,"proto":"UDP","dns":{"type":"answer","id":16892,"rcode":"NXDOMAIN","rrname":"cidaqyfynos.eu"}}
{"timestamp":"2017-12-12T18:33:21.621774+0100","flow_id":525098723409102,"pcap_cnt":3716,"event_type":"dns","src_ip":"192.168.1.100","src_port":61719,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50611,"rrname":"rynucalagew.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.472748+0100","flow_id":1252344061048492,"pcap_cnt":4306,"event_type":"dns","src_ip":"192.168.1.100","src_port":50799,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63307,"rrname":"lygujirupum.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.837491+0100","flow_id":882893121963572,"pcap_cnt":5583,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50684,"proto":"UDP","dns":{"type":"answer","id":31700,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:21.242761+0100","flow_id":1552938084447305,"pcap_cnt":3550,"event_type":"dns","src_ip":"192.168.1.100","src_port":52062,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1249,"rrname":"lymewijosyf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.779373+0100","flow_id":1672709690418285,"pcap_cnt":5552,"event_type":"dns","src_ip":"192.168.1.100","src_port":59127,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53529,"rrname":"fobifisoduf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.892416+0100","flow_id":1475736047754752,"pcap_cnt":5614,"event_type":"dns","src_ip":"192.168.1.100","src_port":60562,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34842,"rrname":"dirixabirok.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.823283+0100","flow_id":468428777166605,"pcap_cnt":5103,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52133,"proto":"UDP","dns":{"type":"answer","id":12753,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:21.243056+0100","flow_id":1552938084447305,"pcap_cnt":3551,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52062,"proto":"UDP","dns":{"type":"answer","id":1249,"rcode":"NXDOMAIN","rrname":"lymewijosyf.eu"}}
{"timestamp":"2017-12-12T18:33:22.843672+0100","flow_id":704162352520873,"pcap_cnt":4177,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54424,"proto":"UDP","dns":{"type":"answer","id":263,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:28.892653+0100","flow_id":1475736047754752,"pcap_cnt":5615,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60562,"proto":"UDP","dns":{"type":"answer","id":34842,"rcode":"NXDOMAIN","rrname":"dirixabirok.eu"}}
{"timestamp":"2017-12-12T18:33:26.376563+0100","flow_id":504210150309328,"pcap_cnt":4711,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56470,"proto":"UDP","dns":{"type":"answer","id":8785,"rcode":"NXDOMAIN","rrname":"xuqufyduras.eu"}}
{"timestamp":"2017-12-12T18:33:28.892653+0100","flow_id":1475736047754752,"pcap_cnt":5615,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60562,"proto":"UDP","dns":{"type":"answer","id":34842,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:27.992618+0100","flow_id":438703309136987,"pcap_cnt":5185,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65517,"proto":"UDP","dns":{"type":"answer","id":36610,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:22.921700+0100","flow_id":818593164799935,"pcap_cnt":4208,"event_type":"dns","src_ip":"192.168.1.100","src_port":58587,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13363,"rrname":"cihakotihuz.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:20.623451+0100","flow_id":1977169184064052,"pcap_cnt":3265,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57235,"proto":"UDP","dns":{"type":"answer","id":60583,"rcode":"NXDOMAIN","rrname":"lyxesyrecoj.eu"}}
{"timestamp":"2017-12-12T18:33:22.312177+0100","flow_id":440122795541361,"pcap_cnt":3996,"event_type":"dns","src_ip":"192.168.1.100","src_port":53763,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42293,"rrname":"xuqotujodaz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.623451+0100","flow_id":1977169184064052,"pcap_cnt":3265,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57235,"proto":"UDP","dns":{"type":"answer","id":60583,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:32.162857+0100","flow_id":2111185049386025,"pcap_cnt":6654,"event_type":"dns","src_ip":"192.168.1.100","src_port":49533,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":3802,"rrname":"dimewohokol.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.908846+0100","flow_id":966026508885290,"pcap_cnt":5145,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63304,"proto":"UDP","dns":{"type":"answer","id":21558,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:22.312452+0100","flow_id":440122795541361,"pcap_cnt":3997,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53763,"proto":"UDP","dns":{"type":"answer","id":42293,"rcode":"NXDOMAIN","rrname":"xuqotujodaz.eu"}}
{"timestamp":"2017-12-12T18:33:22.217667+0100","flow_id":1031812522086765,"pcap_cnt":3955,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60099,"proto":"UDP","dns":{"type":"answer","id":47890,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":595}}
{"timestamp":"2017-12-12T18:33:22.312452+0100","flow_id":440122795541361,"pcap_cnt":3997,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53763,"proto":"UDP","dns":{"type":"answer","id":42293,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":595}}
{"timestamp":"2017-12-12T18:33:28.226455+0100","flow_id":445613911602327,"pcap_cnt":5296,"event_type":"dns","src_ip":"192.168.1.100","src_port":51867,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43309,"rrname":"fokikebyvaj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.804364+0100","flow_id":126089819211276,"pcap_cnt":4158,"event_type":"dns","src_ip":"192.168.1.100","src_port":55994,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43821,"rrname":"pujoxolufag.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.226703+0100","flow_id":445613911602327,"pcap_cnt":5297,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51867,"proto":"UDP","dns":{"type":"answer","id":43309,"rcode":"NXDOMAIN","rrname":"fokikebyvaj.eu"}}
{"timestamp":"2017-12-12T18:33:25.399414+0100","flow_id":1260652675274806,"pcap_cnt":4276,"event_type":"dns","src_ip":"192.168.1.100","src_port":63549,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13433,"rrname":"pumumagojef.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.353918+0100","flow_id":321652565370494,"pcap_cnt":4692,"event_type":"dns","src_ip":"192.168.1.100","src_port":58484,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36642,"rrname":"dimewohokol.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.226703+0100","flow_id":445613911602327,"pcap_cnt":5297,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51867,"proto":"UDP","dns":{"type":"answer","id":43309,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:27.904157+0100","flow_id":1193807951940261,"pcap_cnt":5137,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55394,"proto":"UDP","dns":{"type":"answer","id":27501,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:26.354267+0100","flow_id":321652565370494,"pcap_cnt":4693,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58484,"proto":"UDP","dns":{"type":"answer","id":36642,"rcode":"NXDOMAIN","rrname":"dimewohokol.eu"}}
{"timestamp":"2017-12-12T18:33:27.253992+0100","flow_id":1289459020716700,"pcap_cnt":4858,"event_type":"dns","src_ip":"192.168.1.100","src_port":52388,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37122,"rrname":"xuxivydifoj.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:27.716497+0100","flow_id":2206930607533517,"pcap_cnt":5055,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50170,"proto":"UDP","dns":{"type":"answer","id":9690,"rcode":"NXDOMAIN","rrname":"cilupakuquk.eu"}}
{"timestamp":"2017-12-12T18:33:26.359518+0100","flow_id":1248929562131550,"pcap_cnt":4696,"event_type":"dns","src_ip":"192.168.1.100","src_port":61587,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64020,"rrname":"fobuvohevor.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.358127+0100","flow_id":1358996688637047,"pcap_cnt":4246,"event_type":"dns","src_ip":"192.168.1.100","src_port":62663,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26036,"rrname":"dixilibaxop.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:27.166491+0100","flow_id":1573259722590545,"pcap_cnt":4807,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61498,"proto":"UDP","dns":{"type":"answer","id":29530,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:27.254259+0100","flow_id":1289459020716700,"pcap_cnt":4859,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52388,"proto":"UDP","dns":{"type":"answer","id":37122,"rcode":"NXDOMAIN","rrname":"xuxivydifoj.eu"}}
{"timestamp":"2017-12-12T18:33:31.400751+0100","flow_id":1483183521209459,"pcap_cnt":6305,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56626,"proto":"UDP","dns":{"type":"answer","id":57238,"rcode":"NXDOMAIN","rrname":"jeceraxaxol.eu"}}
{"timestamp":"2017-12-12T18:33:26.359783+0100","flow_id":1248929562131550,"pcap_cnt":4697,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61587,"proto":"UDP","dns":{"type":"answer","id":64020,"rcode":"NXDOMAIN","rrname":"fobuvohevor.eu"}}
{"timestamp":"2017-12-12T18:33:21.841149+0100","flow_id":771041435702392,"pcap_cnt":3797,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54623,"proto":"UDP","dns":{"type":"answer","id":53089,"rcode":"NXDOMAIN","rrname":"cinidofopyk.eu"}}
{"timestamp":"2017-12-12T18:33:28.076011+0100","flow_id":1827611980867508,"pcap_cnt":5227,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55472,"proto":"UDP","dns":{"type":"answer","id":26932,"rcode":"NXDOMAIN","rrname":"qebolelofyc.eu"}}
{"timestamp":"2017-12-12T18:33:27.316106+0100","flow_id":2249059941732755,"pcap_cnt":4883,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56989,"proto":"UDP","dns":{"type":"answer","id":59076,"rcode":"NXDOMAIN","rrname":"qedylaqecel.eu"}}
{"timestamp":"2017-12-12T18:33:28.076011+0100","flow_id":1827611980867508,"pcap_cnt":5227,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55472,"proto":"UDP","dns":{"type":"answer","id":26932,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:27.546017+0100","flow_id":661530507432768,"pcap_cnt":4989,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51201,"proto":"UDP","dns":{"type":"answer","id":16892,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:27.316106+0100","flow_id":2249059941732755,"pcap_cnt":4883,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56989,"proto":"UDP","dns":{"type":"answer","id":59076,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:26.005040+0100","flow_id":1868414166736650,"pcap_cnt":4517,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58338,"proto":"UDP","dns":{"type":"answer","id":25250,"rcode":"NXDOMAIN","rrname":"ciqukecywiv.eu"}}
{"timestamp":"2017-12-12T18:33:27.407306+0100","flow_id":1345776779436510,"pcap_cnt":4930,"event_type":"dns","src_ip":"192.168.1.100","src_port":60696,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42047,"rrname":"maxuwitalag.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:26.005040+0100","flow_id":1868414166736650,"pcap_cnt":4517,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58338,"proto":"UDP","dns":{"type":"answer","id":25250,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:27.407599+0100","flow_id":1345776779436510,"pcap_cnt":4931,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60696,"proto":"UDP","dns":{"type":"answer","id":42047,"rcode":"NXDOMAIN","rrname":"maxuwitalag.eu"}}
{"timestamp":"2017-12-12T18:33:22.301952+0100","flow_id":1857938744580730,"pcap_cnt":3987,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59238,"proto":"UDP","dns":{"type":"answer","id":30069,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":595}}
{"timestamp":"2017-12-12T18:33:26.135232+0100","flow_id":1946496675483712,"pcap_cnt":4598,"event_type":"dns","src_ip":"192.168.1.100","src_port":64833,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26475,"rrname":"diselahidaf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.972207+0100","flow_id":366397532703723,"pcap_cnt":5170,"event_type":"dns","src_ip":"192.168.1.100","src_port":50906,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37657,"rrname":"pupexuguwun.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:22.459558+0100","flow_id":1009270386445212,"pcap_cnt":4056,"event_type":"dns","src_ip":"192.168.1.100","src_port":62322,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59783,"rrname":"qederepuduf.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:25.653757+0100","flow_id":2144561239816371,"pcap_cnt":4385,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57226,"proto":"UDP","dns":{"type":"answer","id":20206,"rcode":"NXDOMAIN","rrname":"xukyhudokex.eu"}}
{"timestamp":"2017-12-12T18:33:27.972450+0100","flow_id":366397532703723,"pcap_cnt":5171,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50906,"proto":"UDP","dns":{"type":"answer","id":37657,"rcode":"NXDOMAIN","rrname":"pupexuguwun.eu"}}
{"timestamp":"2017-12-12T18:33:25.653757+0100","flow_id":2144561239816371,"pcap_cnt":4385,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57226,"proto":"UDP","dns":{"type":"answer","id":20206,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:26.376563+0100","flow_id":504210150309328,"pcap_cnt":4711,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56470,"proto":"UDP","dns":{"type":"answer","id":8785,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":577}}
{"timestamp":"2017-12-12T18:33:28.971367+0100","flow_id":1048592960246375,"pcap_cnt":5644,"event_type":"dns","src_ip":"192.168.1.100","src_port":54365,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51084,"rrname":"kevacijopet.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.942851+0100","flow_id":726586376938243,"pcap_cnt":4496,"event_type":"dns","src_ip":"192.168.1.100","src_port":59927,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17434,"rrname":"jejykaxymob.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.253467+0100","flow_id":471482499653147,"pcap_cnt":5312,"event_type":"dns","src_ip":"192.168.1.100","src_port":59701,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":15087,"rrname":"magetyfisus.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.921975+0100","flow_id":818593164799935,"pcap_cnt":4209,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58587,"proto":"UDP","dns":{"type":"answer","id":13363,"rcode":"NXDOMAIN","rrname":"cihakotihuz.eu"}}
{"timestamp":"2017-12-12T18:33:28.971630+0100","flow_id":1048592960246375,"pcap_cnt":5645,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54365,"proto":"UDP","dns":{"type":"answer","id":51084,"rcode":"NXDOMAIN","rrname":"kevacijopet.eu"}}
{"timestamp":"2017-12-12T18:33:25.943135+0100","flow_id":726586376938243,"pcap_cnt":4497,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59927,"proto":"UDP","dns":{"type":"answer","id":17434,"rcode":"NXDOMAIN","rrname":"jejykaxymob.eu"}}
{"timestamp":"2017-12-12T18:33:28.971630+0100","flow_id":1048592960246375,"pcap_cnt":5645,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54365,"proto":"UDP","dns":{"type":"answer","id":51084,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:22.921975+0100","flow_id":818593164799935,"pcap_cnt":4209,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58587,"proto":"UDP","dns":{"type":"answer","id":13363,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:28.253739+0100","flow_id":471482499653147,"pcap_cnt":5313,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59701,"proto":"UDP","dns":{"type":"answer","id":15087,"rcode":"NXDOMAIN","rrname":"magetyfisus.eu"}}
{"timestamp":"2017-12-12T18:33:25.332753+0100","flow_id":2239505786803153,"pcap_cnt":4238,"event_type":"dns","src_ip":"192.168.1.100","src_port":65311,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44394,"rrname":"tunarivutop.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.187321+0100","flow_id":1274201149921917,"pcap_cnt":5749,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60903,"proto":"UDP","dns":{"type":"answer","id":9684,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:22.804600+0100","flow_id":126089819211276,"pcap_cnt":4159,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55994,"proto":"UDP","dns":{"type":"answer","id":43821,"rcode":"NXDOMAIN","rrname":"pujoxolufag.eu"}}
{"timestamp":"2017-12-12T18:33:25.332984+0100","flow_id":2239505786803153,"pcap_cnt":4239,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65311,"proto":"UDP","dns":{"type":"answer","id":44394,"rcode":"NXDOMAIN","rrname":"tunarivutop.eu"}}
{"timestamp":"2017-12-12T18:33:22.586297+0100","flow_id":663222724260103,"pcap_cnt":4097,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62266,"proto":"UDP","dns":{"type":"answer","id":41612,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:22.804600+0100","flow_id":126089819211276,"pcap_cnt":4159,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55994,"proto":"UDP","dns":{"type":"answer","id":43821,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:25.399662+0100","flow_id":1260652675274806,"pcap_cnt":4277,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63549,"proto":"UDP","dns":{"type":"answer","id":13433,"rcode":"NXDOMAIN","rrname":"pumumagojef.eu"}}
{"timestamp":"2017-12-12T18:33:28.595275+0100","flow_id":2086325778388299,"pcap_cnt":5478,"event_type":"dns","src_ip":"192.168.1.100","src_port":65357,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51591,"rrname":"tunymoqofol.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.587725+0100","flow_id":1602446172747725,"pcap_cnt":4366,"event_type":"dns","src_ip":"192.168.1.100","src_port":65310,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35554,"rrname":"cidyrecavok.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.976596+0100","flow_id":45591395034836,"pcap_cnt":5174,"event_type":"dns","src_ip":"192.168.1.100","src_port":64152,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49239,"rrname":"rylodoqakal.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.716497+0100","flow_id":2206930607533517,"pcap_cnt":5055,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50170,"proto":"UDP","dns":{"type":"answer","id":9690,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:28.595506+0100","flow_id":2086325778388299,"pcap_cnt":5479,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65357,"proto":"UDP","dns":{"type":"answer","id":51591,"rcode":"NXDOMAIN","rrname":"tunymoqofol.eu"}}
{"timestamp":"2017-12-12T18:33:25.587993+0100","flow_id":1602446172747725,"pcap_cnt":4367,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65310,"proto":"UDP","dns":{"type":"answer","id":35554,"rcode":"NXDOMAIN","rrname":"cidyrecavok.eu"}}
{"timestamp":"2017-12-12T18:33:28.595506+0100","flow_id":2086325778388299,"pcap_cnt":5479,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65357,"proto":"UDP","dns":{"type":"answer","id":51591,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:27.254259+0100","flow_id":1289459020716700,"pcap_cnt":4859,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52388,"proto":"UDP","dns":{"type":"answer","id":37122,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:27.194329+0100","flow_id":528792395708185,"pcap_cnt":4822,"event_type":"dns","src_ip":"192.168.1.100","src_port":55421,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":10768,"rrname":"digofasexal.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.400751+0100","flow_id":1483183521209459,"pcap_cnt":6305,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56626,"proto":"UDP","dns":{"type":"answer","id":57238,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":567}}
{"timestamp":"2017-12-12T18:33:27.906455+0100","flow_id":1879731408983255,"pcap_cnt":5140,"event_type":"dns","src_ip":"192.168.1.100","src_port":55350,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":57078,"rrname":"ciqehefitij.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.359783+0100","flow_id":1248929562131550,"pcap_cnt":4697,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61587,"proto":"UDP","dns":{"type":"answer","id":64020,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":577}}
{"timestamp":"2017-12-12T18:33:21.841149+0100","flow_id":771041435702392,"pcap_cnt":3797,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54623,"proto":"UDP","dns":{"type":"answer","id":53089,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:28.385453+0100","flow_id":137868767453613,"pcap_cnt":5374,"event_type":"dns","src_ip":"192.168.1.100","src_port":56174,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1183,"rrname":"maxifakofyk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.906718+0100","flow_id":1879731408983255,"pcap_cnt":5141,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55350,"proto":"UDP","dns":{"type":"answer","id":57078,"rcode":"NXDOMAIN","rrname":"ciqehefitij.eu"}}
{"timestamp":"2017-12-12T18:33:26.369243+0100","flow_id":2160373161960027,"pcap_cnt":4706,"event_type":"dns","src_ip":"192.168.1.100","src_port":49377,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26268,"rrname":"divamubojum.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.473010+0100","flow_id":1252344061048492,"pcap_cnt":4307,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50799,"proto":"UDP","dns":{"type":"answer","id":63307,"rcode":"NXDOMAIN","rrname":"lygujirupum.eu"}}
{"timestamp":"2017-12-12T18:33:28.385713+0100","flow_id":137868767453613,"pcap_cnt":5375,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56174,"proto":"UDP","dns":{"type":"answer","id":1183,"rcode":"NXDOMAIN","rrname":"maxifakofyk.eu"}}
{"timestamp":"2017-12-12T18:33:26.369499+0100","flow_id":2160373161960027,"pcap_cnt":4707,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49377,"proto":"UDP","dns":{"type":"answer","id":26268,"rcode":"NXDOMAIN","rrname":"divamubojum.eu"}}
{"timestamp":"2017-12-12T18:33:28.385713+0100","flow_id":137868767453613,"pcap_cnt":5375,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56174,"proto":"UDP","dns":{"type":"answer","id":1183,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:21.243056+0100","flow_id":1552938084447305,"pcap_cnt":3551,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52062,"proto":"UDP","dns":{"type":"answer","id":1249,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:29.068370+0100","flow_id":192552291076882,"pcap_cnt":5684,"event_type":"dns","src_ip":"192.168.1.100","src_port":53885,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":16028,"rrname":"fodylowahif.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.135483+0100","flow_id":1946496675483712,"pcap_cnt":4599,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64833,"proto":"UDP","dns":{"type":"answer","id":26475,"rcode":"NXDOMAIN","rrname":"diselahidaf.eu"}}
{"timestamp":"2017-12-12T18:33:25.510883+0100","flow_id":922518490041251,"pcap_cnt":4338,"event_type":"dns","src_ip":"192.168.1.100","src_port":65516,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18290,"rrname":"vowucotyqyg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.328492+0100","flow_id":665821179347756,"pcap_cnt":3586,"event_type":"dns","src_ip":"192.168.1.100","src_port":54872,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64664,"rrname":"vocygytirij.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.459813+0100","flow_id":1009270386445212,"pcap_cnt":4057,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62322,"proto":"UDP","dns":{"type":"answer","id":59783,"rcode":"NXDOMAIN","rrname":"qederepuduf.eu"}}
{"timestamp":"2017-12-12T18:33:25.490016+0100","flow_id":161731605526823,"pcap_cnt":4325,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64916,"proto":"UDP","dns":{"type":"answer","id":33705,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:21.328730+0100","flow_id":665821179347756,"pcap_cnt":3587,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54872,"proto":"UDP","dns":{"type":"answer","id":64664,"rcode":"NXDOMAIN","rrname":"vocygytirij.eu"}}
{"timestamp":"2017-12-12T18:33:27.972450+0100","flow_id":366397532703723,"pcap_cnt":5171,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50906,"proto":"UDP","dns":{"type":"answer","id":37657,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:26.395265+0100","flow_id":2119770688587777,"pcap_cnt":4724,"event_type":"dns","src_ip":"192.168.1.100","src_port":63691,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":20952,"rrname":"ciciqacidir.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:32.163162+0100","flow_id":2111185049386025,"pcap_cnt":6655,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49533,"proto":"UDP","dns":{"type":"answer","id":3802,"rcode":"NXDOMAIN","rrname":"dimewohokol.eu"}}
{"timestamp":"2017-12-12T18:33:28.294825+0100","flow_id":210404322607017,"pcap_cnt":5326,"event_type":"dns","src_ip":"192.168.1.100","src_port":52684,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7647,"rrname":"nozejimuqag.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:32.163162+0100","flow_id":2111185049386025,"pcap_cnt":6655,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49533,"proto":"UDP","dns":{"type":"answer","id":3802,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:25.943135+0100","flow_id":726586376938243,"pcap_cnt":4497,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59927,"proto":"UDP","dns":{"type":"answer","id":17434,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:28.295069+0100","flow_id":210404322607017,"pcap_cnt":5327,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52684,"proto":"UDP","dns":{"type":"answer","id":7647,"rcode":"NXDOMAIN","rrname":"nozejimuqag.eu"}}
{"timestamp":"2017-12-12T18:33:28.253739+0100","flow_id":471482499653147,"pcap_cnt":5313,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59701,"proto":"UDP","dns":{"type":"answer","id":15087,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:28.295069+0100","flow_id":210404322607017,"pcap_cnt":5327,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52684,"proto":"UDP","dns":{"type":"answer","id":7647,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:25.380957+0100","flow_id":1136455106023453,"pcap_cnt":4252,"event_type":"dns","src_ip":"192.168.1.100","src_port":64927,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18607,"rrname":"jefubonokiz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.295561+0100","flow_id":1686412783551113,"pcap_cnt":5328,"event_type":"dns","src_ip":"192.168.1.100","src_port":59048,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":3633,"rrname":"makysimodan.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.332984+0100","flow_id":2239505786803153,"pcap_cnt":4239,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65311,"proto":"UDP","dns":{"type":"answer","id":44394,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:25.381212+0100","flow_id":1136455106023453,"pcap_cnt":4253,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64927,"proto":"UDP","dns":{"type":"answer","id":18607,"rcode":"NXDOMAIN","rrname":"jefubonokiz.eu"}}
{"timestamp":"2017-12-12T18:33:25.399662+0100","flow_id":1260652675274806,"pcap_cnt":4277,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63549,"proto":"UDP","dns":{"type":"answer","id":13433,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:25.388755+0100","flow_id":708418665311891,"pcap_cnt":4264,"event_type":"dns","src_ip":"192.168.1.100","src_port":61228,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35273,"rrname":"makiwemihiw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.081914+0100","flow_id":1068437855738611,"pcap_cnt":5235,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54201,"proto":"UDP","dns":{"type":"answer","id":25456,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:25.533478+0100","flow_id":1630122941948902,"pcap_cnt":4346,"event_type":"dns","src_ip":"192.168.1.100","src_port":58953,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8300,"rrname":"qexyqapevyb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.329877+0100","flow_id":278687859934905,"pcap_cnt":4233,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52505,"proto":"UDP","dns":{"type":"answer","id":38592,"rcode":"NXDOMAIN","rrname":"kerijudacyj.eu"}}
{"timestamp":"2017-12-12T18:33:25.533757+0100","flow_id":1630122941948902,"pcap_cnt":4347,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58953,"proto":"UDP","dns":{"type":"answer","id":8300,"rcode":"NXDOMAIN","rrname":"qexyqapevyb.eu"}}
{"timestamp":"2017-12-12T18:33:25.358424+0100","flow_id":1358996688637047,"pcap_cnt":4247,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62663,"proto":"UDP","dns":{"type":"answer","id":26036,"rcode":"NXDOMAIN","rrname":"dixilibaxop.eu"}}
{"timestamp":"2017-12-12T18:33:25.587993+0100","flow_id":1602446172747725,"pcap_cnt":4367,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65310,"proto":"UDP","dns":{"type":"answer","id":35554,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:25.358424+0100","flow_id":1358996688637047,"pcap_cnt":4247,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62663,"proto":"UDP","dns":{"type":"answer","id":26036,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:28.806960+0100","flow_id":2134515311464496,"pcap_cnt":5570,"event_type":"dns","src_ip":"192.168.1.100","src_port":59276,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":16806,"rrname":"xuderadezuv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.011351+0100","flow_id":1774090245778519,"pcap_cnt":4524,"event_type":"dns","src_ip":"192.168.1.100","src_port":60770,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48166,"rrname":"maxyvycebid.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.194579+0100","flow_id":528792395708185,"pcap_cnt":4823,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55421,"proto":"UDP","dns":{"type":"answer","id":10768,"rcode":"NXDOMAIN","rrname":"digofasexal.eu"}}
{"timestamp":"2017-12-12T18:33:28.807171+0100","flow_id":2134515311464496,"pcap_cnt":5571,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59276,"proto":"UDP","dns":{"type":"answer","id":16806,"rcode":"NXDOMAIN","rrname":"xuderadezuv.eu"}}
{"timestamp":"2017-12-12T18:33:28.725664+0100","flow_id":542177661292946,"pcap_cnt":5533,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53094,"proto":"UDP","dns":{"type":"answer","id":51989,"rcode":"NXDOMAIN","rrname":"vocygytirij.eu"}}
{"timestamp":"2017-12-12T18:33:28.807171+0100","flow_id":2134515311464496,"pcap_cnt":5571,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59276,"proto":"UDP","dns":{"type":"answer","id":16806,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:21.622103+0100","flow_id":525098723409102,"pcap_cnt":3717,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61719,"proto":"UDP","dns":{"type":"answer","id":50611,"rcode":"NXDOMAIN","rrname":"rynucalagew.eu"}}
{"timestamp":"2017-12-12T18:33:27.605483+0100","flow_id":1729671694073131,"pcap_cnt":5012,"event_type":"dns","src_ip":"192.168.1.100","src_port":65465,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":58194,"rrname":"kevybunureh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.185342+0100","flow_id":2050162153870334,"pcap_cnt":5746,"event_type":"dns","src_ip":"192.168.1.100","src_port":63774,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1688,"rrname":"foxanabelod.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.906718+0100","flow_id":1879731408983255,"pcap_cnt":5141,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55350,"proto":"UDP","dns":{"type":"answer","id":57078,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:27.407599+0100","flow_id":1345776779436510,"pcap_cnt":4931,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60696,"proto":"UDP","dns":{"type":"answer","id":42047,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:29.185680+0100","flow_id":2050162153870334,"pcap_cnt":5747,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63774,"proto":"UDP","dns":{"type":"answer","id":1688,"rcode":"NXDOMAIN","rrname":"foxanabelod.eu"}}
{"timestamp":"2017-12-12T18:33:27.970114+0100","flow_id":1551080511017330,"pcap_cnt":5164,"event_type":"dns","src_ip":"192.168.1.100","src_port":59187,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11074,"rrname":"tufamugevih.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:28.779632+0100","flow_id":1672709690418285,"pcap_cnt":5553,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59127,"proto":"UDP","dns":{"type":"answer","id":53529,"rcode":"NXDOMAIN","rrname":"fobifisoduf.eu"}}
{"timestamp":"2017-12-12T18:33:26.369499+0100","flow_id":2160373161960027,"pcap_cnt":4707,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49377,"proto":"UDP","dns":{"type":"answer","id":26268,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":577}}
{"timestamp":"2017-12-12T18:33:27.970403+0100","flow_id":1551080511017330,"pcap_cnt":5165,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59187,"proto":"UDP","dns":{"type":"answer","id":11074,"rcode":"NXDOMAIN","rrname":"tufamugevih.eu"}}
{"timestamp":"2017-12-12T18:33:26.135483+0100","flow_id":1946496675483712,"pcap_cnt":4599,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64833,"proto":"UDP","dns":{"type":"answer","id":26475,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":577}}
{"timestamp":"2017-12-12T18:33:27.248733+0100","flow_id":1863797080312733,"pcap_cnt":4852,"event_type":"dns","src_ip":"192.168.1.100","src_port":63167,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":54027,"rrname":"qetekugexom.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.511165+0100","flow_id":922518490041251,"pcap_cnt":4339,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65516,"proto":"UDP","dns":{"type":"answer","id":18290,"rcode":"NXDOMAIN","rrname":"vowucotyqyg.eu"}}
{"timestamp":"2017-12-12T18:33:27.085170+0100","flow_id":867119854472370,"pcap_cnt":4758,"event_type":"dns","src_ip":"192.168.1.100","src_port":58790,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":57274,"rrname":"mavejykidij.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:20.680254+0100","flow_id":1705418013303102,"pcap_cnt":3296,"event_type":"dns","src_ip":"192.168.1.100","src_port":57798,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19447,"rrname":"fodyfuzexyp.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.085419+0100","flow_id":867119854472370,"pcap_cnt":4759,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58790,"proto":"UDP","dns":{"type":"answer","id":57274,"rcode":"NXDOMAIN","rrname":"mavejykidij.eu"}}
{"timestamp":"2017-12-12T18:33:25.830692+0100","flow_id":1790743981436132,"pcap_cnt":4446,"event_type":"dns","src_ip":"192.168.1.100","src_port":59526,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48480,"rrname":"xubolyjazaq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.085419+0100","flow_id":867119854472370,"pcap_cnt":4759,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58790,"proto":"UDP","dns":{"type":"answer","id":57274,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:20.680561+0100","flow_id":1705418013303102,"pcap_cnt":3297,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57798,"proto":"UDP","dns":{"type":"answer","id":19447,"rcode":"NXDOMAIN","rrname":"fodyfuzexyp.eu"}}
{"timestamp":"2017-12-12T18:33:27.258347+0100","flow_id":426301591122219,"pcap_cnt":4864,"event_type":"dns","src_ip":"192.168.1.100","src_port":62753,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8621,"rrname":"masovufohoh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.467250+0100","flow_id":46892769747250,"pcap_cnt":4066,"event_type":"dns","src_ip":"192.168.1.100","src_port":54970,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13999,"rrname":"galokusemus.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.830986+0100","flow_id":1790743981436132,"pcap_cnt":4447,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59526,"proto":"UDP","dns":{"type":"answer","id":48480,"rcode":"NXDOMAIN","rrname":"xubolyjazaq.eu"}}
{"timestamp":"2017-12-12T18:33:27.258661+0100","flow_id":426301591122219,"pcap_cnt":4865,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62753,"proto":"UDP","dns":{"type":"answer","id":8621,"rcode":"NXDOMAIN","rrname":"masovufohoh.eu"}}
{"timestamp":"2017-12-12T18:33:25.999107+0100","flow_id":1965495463263939,"pcap_cnt":4506,"event_type":"dns","src_ip":"192.168.1.100","src_port":58976,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4513,"rrname":"qeguhapyrer.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.258661+0100","flow_id":426301591122219,"pcap_cnt":4865,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62753,"proto":"UDP","dns":{"type":"answer","id":8621,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:29.488566+0100","flow_id":1828492448642588,"pcap_cnt":5896,"event_type":"dns","src_ip":"192.168.1.100","src_port":58050,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44421,"rrname":"vojajofyced.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:26.354267+0100","flow_id":321652565370494,"pcap_cnt":4693,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58484,"proto":"UDP","dns":{"type":"answer","id":36642,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":577}}
{"timestamp":"2017-12-12T18:33:28.295805+0100","flow_id":1686412783551113,"pcap_cnt":5329,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59048,"proto":"UDP","dns":{"type":"answer","id":3633,"rcode":"NXDOMAIN","rrname":"makysimodan.eu"}}
{"timestamp":"2017-12-12T18:33:25.381212+0100","flow_id":1136455106023453,"pcap_cnt":4253,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64927,"proto":"UDP","dns":{"type":"answer","id":18607,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:22.881283+0100","flow_id":753447102214787,"pcap_cnt":4188,"event_type":"dns","src_ip":"192.168.1.100","src_port":51421,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60559,"rrname":"masenucifoc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.295805+0100","flow_id":1686412783551113,"pcap_cnt":5329,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59048,"proto":"UDP","dns":{"type":"answer","id":3633,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:25.389045+0100","flow_id":708418665311891,"pcap_cnt":4265,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61228,"proto":"UDP","dns":{"type":"answer","id":35273,"rcode":"NXDOMAIN","rrname":"makiwemihiw.eu"}}
{"timestamp":"2017-12-12T18:33:25.439421+0100","flow_id":1275491787322493,"pcap_cnt":4286,"event_type":"dns","src_ip":"192.168.1.100","src_port":49904,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14612,"rrname":"foxehehywef.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.329877+0100","flow_id":278687859934905,"pcap_cnt":4233,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52505,"proto":"UDP","dns":{"type":"answer","id":38592,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:28.497277+0100","flow_id":12784286286614,"pcap_cnt":5426,"event_type":"dns","src_ip":"192.168.1.100","src_port":58827,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9060,"rrname":"qebysovexaf.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:27.380350+0100","flow_id":568711969230270,"pcap_cnt":4916,"event_type":"dns","src_ip":"192.168.1.100","src_port":58425,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45982,"rrname":"ciqivutevam.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.439755+0100","flow_id":1275491787322493,"pcap_cnt":4287,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49904,"proto":"UDP","dns":{"type":"answer","id":14612,"rcode":"NXDOMAIN","rrname":"foxehehywef.eu"}}
{"timestamp":"2017-12-12T18:33:28.497549+0100","flow_id":12784286286614,"pcap_cnt":5427,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58827,"proto":"UDP","dns":{"type":"answer","id":9060,"rcode":"NXDOMAIN","rrname":"qebysovexaf.eu"}}
{"timestamp":"2017-12-12T18:33:26.011664+0100","flow_id":1774090245778519,"pcap_cnt":4525,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60770,"proto":"UDP","dns":{"type":"answer","id":48166,"rcode":"NXDOMAIN","rrname":"maxyvycebid.eu"}}
{"timestamp":"2017-12-12T18:33:27.380611+0100","flow_id":568711969230270,"pcap_cnt":4917,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58425,"proto":"UDP","dns":{"type":"answer","id":45982,"rcode":"NXDOMAIN","rrname":"ciqivutevam.eu"}}
{"timestamp":"2017-12-12T18:33:26.011664+0100","flow_id":1774090245778519,"pcap_cnt":4525,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60770,"proto":"UDP","dns":{"type":"answer","id":48166,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:27.380611+0100","flow_id":568711969230270,"pcap_cnt":4917,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58425,"proto":"UDP","dns":{"type":"answer","id":45982,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:28.725664+0100","flow_id":542177661292946,"pcap_cnt":5533,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53094,"proto":"UDP","dns":{"type":"answer","id":51989,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:21.622103+0100","flow_id":525098723409102,"pcap_cnt":3717,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61719,"proto":"UDP","dns":{"type":"answer","id":50611,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:22.063440+0100","flow_id":1851191350982608,"pcap_cnt":3886,"event_type":"dns","src_ip":"192.168.1.100","src_port":55144,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42045,"rrname":"nomimokubab.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.605762+0100","flow_id":1729671694073131,"pcap_cnt":5013,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65465,"proto":"UDP","dns":{"type":"answer","id":58194,"rcode":"NXDOMAIN","rrname":"kevybunureh.eu"}}
{"timestamp":"2017-12-12T18:33:25.473010+0100","flow_id":1252344061048492,"pcap_cnt":4307,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50799,"proto":"UDP","dns":{"type":"answer","id":63307,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:27.605762+0100","flow_id":1729671694073131,"pcap_cnt":5013,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65465,"proto":"UDP","dns":{"type":"answer","id":58194,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:29.185680+0100","flow_id":2050162153870334,"pcap_cnt":5747,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63774,"proto":"UDP","dns":{"type":"answer","id":1688,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:25.487966+0100","flow_id":2038735393092126,"pcap_cnt":4320,"event_type":"dns","src_ip":"192.168.1.100","src_port":56084,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38732,"rrname":"novugukupap.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.636333+0100","flow_id":516858829059501,"pcap_cnt":5022,"event_type":"dns","src_ip":"192.168.1.100","src_port":65529,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53649,"rrname":"tulojigakit.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.970403+0100","flow_id":1551080511017330,"pcap_cnt":5165,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59187,"proto":"UDP","dns":{"type":"answer","id":11074,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:25.488201+0100","flow_id":2038735393092126,"pcap_cnt":4321,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56084,"proto":"UDP","dns":{"type":"answer","id":38732,"rcode":"NXDOMAIN","rrname":"novugukupap.eu"}}
{"timestamp":"2017-12-12T18:33:22.459813+0100","flow_id":1009270386445212,"pcap_cnt":4057,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62322,"proto":"UDP","dns":{"type":"answer","id":59783,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":553}}
{"timestamp":"2017-12-12T18:33:27.636667+0100","flow_id":516858829059501,"pcap_cnt":5023,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65529,"proto":"UDP","dns":{"type":"answer","id":53649,"rcode":"NXDOMAIN","rrname":"tulojigakit.eu"}}
{"timestamp":"2017-12-12T18:33:25.488201+0100","flow_id":2038735393092126,"pcap_cnt":4321,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56084,"proto":"UDP","dns":{"type":"answer","id":38732,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:27.636667+0100","flow_id":516858829059501,"pcap_cnt":5023,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65529,"proto":"UDP","dns":{"type":"answer","id":53649,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:28.021789+0100","flow_id":455022036289255,"pcap_cnt":5206,"event_type":"dns","src_ip":"192.168.1.100","src_port":58270,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60658,"rrname":"vopogakakud.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:27.766753+0100","flow_id":516858829059501,"pcap_cnt":5080,"event_type":"dns","src_ip":"192.168.1.100","src_port":65529,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":32686,"rrname":"nojycutalop.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:28.906435+0100","flow_id":362624406049987,"pcap_cnt":5622,"event_type":"dns","src_ip":"192.168.1.100","src_port":57819,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":16345,"rrname":"lykegynahom.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.395552+0100","flow_id":2119770688587777,"pcap_cnt":4725,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63691,"proto":"UDP","dns":{"type":"answer","id":20952,"rcode":"NXDOMAIN","rrname":"ciciqacidir.eu"}}
{"timestamp":"2017-12-12T18:33:20.680561+0100","flow_id":1705418013303102,"pcap_cnt":3297,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57798,"proto":"UDP","dns":{"type":"answer","id":19447,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":589}}
{"timestamp":"2017-12-12T18:33:29.153182+0100","flow_id":715578375246061,"pcap_cnt":5730,"event_type":"dns","src_ip":"192.168.1.100","src_port":52230,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60318,"rrname":"gahekisybyr.eu","rrtype":"A","tx_id":2}}
{"timestamp":"2017-12-12T18:33:28.906711+0100","flow_id":362624406049987,"pcap_cnt":5623,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57819,"proto":"UDP","dns":{"type":"answer","id":16345,"rcode":"NXDOMAIN","rrname":"lykegynahom.eu"}}
{"timestamp":"2017-12-12T18:33:28.271040+0100","flow_id":993853598591811,"pcap_cnt":5316,"event_type":"dns","src_ip":"192.168.1.100","src_port":56166,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":56393,"rrname":"xuqesunipam.eu","rrtype":"A","tx_id":2}}
{"timestamp":"2017-12-12T18:33:20.728915+0100","flow_id":1217526908329811,"pcap_cnt":3310,"event_type":"dns","src_ip":"192.168.1.100","src_port":56519,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60866,"rrname":"puzomipipin.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.538111+0100","flow_id":847844041242111,"pcap_cnt":4986,"event_type":"dns","src_ip":"192.168.1.100","src_port":52649,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28568,"rrname":"xugosedaloc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.153425+0100","flow_id":715578375246061,"pcap_cnt":5731,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52230,"proto":"UDP","dns":{"type":"answer","id":60318,"rcode":"NXDOMAIN","rrname":"gahekisybyr.eu"}}
{"timestamp":"2017-12-12T18:33:27.976858+0100","flow_id":45591395034836,"pcap_cnt":5175,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64152,"proto":"UDP","dns":{"type":"answer","id":49239,"rcode":"NXDOMAIN","rrname":"rylodoqakal.eu"}}
{"timestamp":"2017-12-12T18:33:29.153425+0100","flow_id":715578375246061,"pcap_cnt":5731,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52230,"proto":"UDP","dns":{"type":"answer","id":60318,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:27.976858+0100","flow_id":45591395034836,"pcap_cnt":5175,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64152,"proto":"UDP","dns":{"type":"answer","id":49239,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:28.134398+0100","flow_id":258458564168958,"pcap_cnt":5254,"event_type":"dns","src_ip":"192.168.1.100","src_port":61910,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4873,"rrname":"rynyhipexon.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.115833+0100","flow_id":1089594865534073,"pcap_cnt":5250,"event_type":"dns","src_ip":"192.168.1.100","src_port":50870,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35529,"rrname":"marimutitom.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.881542+0100","flow_id":753447102214787,"pcap_cnt":4189,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51421,"proto":"UDP","dns":{"type":"answer","id":60559,"rcode":"NXDOMAIN","rrname":"masenucifoc.eu"}}
{"timestamp":"2017-12-12T18:33:25.389045+0100","flow_id":708418665311891,"pcap_cnt":4265,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61228,"proto":"UDP","dns":{"type":"answer","id":35273,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:28.134784+0100","flow_id":258458564168958,"pcap_cnt":5255,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61910,"proto":"UDP","dns":{"type":"answer","id":4873,"rcode":"NXDOMAIN","rrname":"rynyhipexon.eu"}}
{"timestamp":"2017-12-12T18:33:22.881542+0100","flow_id":753447102214787,"pcap_cnt":4189,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51421,"proto":"UDP","dns":{"type":"answer","id":60559,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:25.392683+0100","flow_id":1483752604040683,"pcap_cnt":4270,"event_type":"dns","src_ip":"192.168.1.100","src_port":59224,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1959,"rrname":"rytahagemeg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.134784+0100","flow_id":258458564168958,"pcap_cnt":5255,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61910,"proto":"UDP","dns":{"type":"answer","id":4873,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:25.439755+0100","flow_id":1275491787322493,"pcap_cnt":4287,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49904,"proto":"UDP","dns":{"type":"answer","id":14612,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:25.492129+0100","flow_id":117620143915617,"pcap_cnt":4326,"event_type":"dns","src_ip":"192.168.1.100","src_port":51263,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63592,"rrname":"ryhuzilywax.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.194579+0100","flow_id":528792395708185,"pcap_cnt":4823,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55421,"proto":"UDP","dns":{"type":"answer","id":10768,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:28.353259+0100","flow_id":938283167671275,"pcap_cnt":5362,"event_type":"dns","src_ip":"192.168.1.100","src_port":52015,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":20202,"rrname":"lygyxeruqoc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.392996+0100","flow_id":1483752604040683,"pcap_cnt":4271,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59224,"proto":"UDP","dns":{"type":"answer","id":1959,"rcode":"NXDOMAIN","rrname":"rytahagemeg.eu"}}
{"timestamp":"2017-12-12T18:33:27.510929+0100","flow_id":1540044593023953,"pcap_cnt":4970,"event_type":"dns","src_ip":"192.168.1.100","src_port":54288,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11916,"rrname":"kezeceduwov.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.637868+0100","flow_id":1615058344328108,"pcap_cnt":5024,"event_type":"dns","src_ip":"192.168.1.100","src_port":51913,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14392,"rrname":"rycucugisix.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.741287+0100","flow_id":628386244874151,"pcap_cnt":5538,"event_type":"dns","src_ip":"192.168.1.100","src_port":53603,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38610,"rrname":"tuwiqelages.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.670885+0100","flow_id":479915667438757,"pcap_cnt":3734,"event_type":"dns","src_ip":"192.168.1.100","src_port":59006,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9984,"rrname":"gadohyzyvah.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.063771+0100","flow_id":1851191350982608,"pcap_cnt":3887,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55144,"proto":"UDP","dns":{"type":"answer","id":42045,"rcode":"NXDOMAIN","rrname":"nomimokubab.eu"}}
{"timestamp":"2017-12-12T18:33:27.511247+0100","flow_id":1540044593023953,"pcap_cnt":4971,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54288,"proto":"UDP","dns":{"type":"answer","id":11916,"rcode":"NXDOMAIN","rrname":"kezeceduwov.eu"}}
{"timestamp":"2017-12-12T18:33:27.638163+0100","flow_id":1615058344328108,"pcap_cnt":5025,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51913,"proto":"UDP","dns":{"type":"answer","id":14392,"rcode":"NXDOMAIN","rrname":"rycucugisix.eu"}}
{"timestamp":"2017-12-12T18:33:28.741548+0100","flow_id":628386244874151,"pcap_cnt":5539,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53603,"proto":"UDP","dns":{"type":"answer","id":38610,"rcode":"NXDOMAIN","rrname":"tuwiqelages.eu"}}
{"timestamp":"2017-12-12T18:33:27.511247+0100","flow_id":1540044593023953,"pcap_cnt":4971,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54288,"proto":"UDP","dns":{"type":"answer","id":11916,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:27.638163+0100","flow_id":1615058344328108,"pcap_cnt":5025,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51913,"proto":"UDP","dns":{"type":"answer","id":14392,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:28.741548+0100","flow_id":628386244874151,"pcap_cnt":5539,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53603,"proto":"UDP","dns":{"type":"answer","id":38610,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:28.001024+0100","flow_id":265384198931456,"pcap_cnt":5194,"event_type":"dns","src_ip":"192.168.1.100","src_port":55806,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33866,"rrname":"qexukoqodar.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.328730+0100","flow_id":665821179347756,"pcap_cnt":3587,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54872,"proto":"UDP","dns":{"type":"answer","id":64664,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":592}}
{"timestamp":"2017-12-12T18:33:22.974113+0100","flow_id":1196393521929505,"pcap_cnt":4230,"event_type":"dns","src_ip":"192.168.1.100","src_port":61412,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35509,"rrname":"jepycudijyq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.969513+0100","flow_id":496238691142441,"pcap_cnt":5642,"event_type":"dns","src_ip":"192.168.1.100","src_port":50323,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37814,"rrname":"qebonuqirin.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.567253+0100","flow_id":439682561320917,"pcap_cnt":3688,"event_type":"dns","src_ip":"192.168.1.100","src_port":63112,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6908,"rrname":"jenoqujumez.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.767020+0100","flow_id":516858829059501,"pcap_cnt":5081,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65529,"proto":"UDP","dns":{"type":"answer","id":32686,"rcode":"NXDOMAIN","rrname":"nojycutalop.eu"}}
{"timestamp":"2017-12-12T18:33:28.022030+0100","flow_id":455022036289255,"pcap_cnt":5207,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58270,"proto":"UDP","dns":{"type":"answer","id":60658,"rcode":"NXDOMAIN","rrname":"vopogakakud.eu"}}
{"timestamp":"2017-12-12T18:33:27.767020+0100","flow_id":516858829059501,"pcap_cnt":5081,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65529,"proto":"UDP","dns":{"type":"answer","id":32686,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:25.830986+0100","flow_id":1790743981436132,"pcap_cnt":4447,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59526,"proto":"UDP","dns":{"type":"answer","id":48480,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:21.567674+0100","flow_id":439682561320917,"pcap_cnt":3689,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63112,"proto":"UDP","dns":{"type":"answer","id":6908,"rcode":"NXDOMAIN","rrname":"jenoqujumez.eu"}}
{"timestamp":"2017-12-12T18:33:22.467568+0100","flow_id":46892769747250,"pcap_cnt":4067,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54970,"proto":"UDP","dns":{"type":"answer","id":13999,"rcode":"NXDOMAIN","rrname":"galokusemus.eu"}}
{"timestamp":"2017-12-12T18:33:28.143310+0100","flow_id":1016329165877198,"pcap_cnt":5258,"event_type":"dns","src_ip":"192.168.1.100","src_port":52447,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23620,"rrname":"tucipipumig.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.906711+0100","flow_id":362624406049987,"pcap_cnt":5623,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57819,"proto":"UDP","dns":{"type":"answer","id":16345,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:28.271289+0100","flow_id":993853598591811,"pcap_cnt":5317,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56166,"proto":"UDP","dns":{"type":"answer","id":56393,"rcode":"NXDOMAIN","rrname":"xuqesunipam.eu"}}
{"timestamp":"2017-12-12T18:33:20.729216+0100","flow_id":1217526908329811,"pcap_cnt":3311,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56519,"proto":"UDP","dns":{"type":"answer","id":60866,"rcode":"NXDOMAIN","rrname":"puzomipipin.eu"}}
{"timestamp":"2017-12-12T18:33:28.143645+0100","flow_id":1016329165877198,"pcap_cnt":5259,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52447,"proto":"UDP","dns":{"type":"answer","id":23620,"rcode":"NXDOMAIN","rrname":"tucipipumig.eu"}}
{"timestamp":"2017-12-12T18:33:26.391750+0100","flow_id":446756372382219,"pcap_cnt":4720,"event_type":"dns","src_ip":"192.168.1.100","src_port":50848,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19160,"rrname":"galuhubywum.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:28.980793+0100","flow_id":979914285266941,"pcap_cnt":5650,"event_type":"dns","src_ip":"192.168.1.100","src_port":58870,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36770,"rrname":"cihaqokiwel.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:29.350478+0100","flow_id":1024558323292430,"pcap_cnt":5810,"event_type":"dns","src_ip":"192.168.1.100","src_port":58189,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25321,"rrname":"direfiwahur.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.883456+0100","flow_id":2206930607533517,"pcap_cnt":5130,"event_type":"dns","src_ip":"192.168.1.100","src_port":50170,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30247,"rrname":"jejajaduwok.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:25.533757+0100","flow_id":1630122941948902,"pcap_cnt":4347,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58953,"proto":"UDP","dns":{"type":"answer","id":8300,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:28.981106+0100","flow_id":979914285266941,"pcap_cnt":5651,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58870,"proto":"UDP","dns":{"type":"answer","id":36770,"rcode":"NXDOMAIN","rrname":"cihaqokiwel.eu"}}
{"timestamp":"2017-12-12T18:33:25.451387+0100","flow_id":1758864586695483,"pcap_cnt":4288,"event_type":"dns","src_ip":"192.168.1.100","src_port":57697,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6158,"rrname":"galupehudev.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.981106+0100","flow_id":979914285266941,"pcap_cnt":5651,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58870,"proto":"UDP","dns":{"type":"answer","id":36770,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:25.919828+0100","flow_id":1457396537166100,"pcap_cnt":4488,"event_type":"dns","src_ip":"192.168.1.100","src_port":64145,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50949,"rrname":"divufozutog.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.752045+0100","flow_id":1229179155347885,"pcap_cnt":6466,"event_type":"dns","src_ip":"192.168.1.100","src_port":57237,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":21114,"rrname":"tufyquvaxic.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.209063+0100","flow_id":2142493213274279,"pcap_cnt":5758,"event_type":"dns","src_ip":"192.168.1.100","src_port":51281,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7577,"rrname":"makujafiqyq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.523288+0100","flow_id":822630435650584,"pcap_cnt":4342,"event_type":"dns","src_ip":"192.168.1.100","src_port":56694,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4056,"rrname":"gaciduwifuh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.190672+0100","flow_id":1850970160425168,"pcap_cnt":4618,"event_type":"dns","src_ip":"192.168.1.100","src_port":54906,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37989,"rrname":"jewemurutyj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.492386+0100","flow_id":117620143915617,"pcap_cnt":4327,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51263,"proto":"UDP","dns":{"type":"answer","id":63592,"rcode":"NXDOMAIN","rrname":"ryhuzilywax.eu"}}
{"timestamp":"2017-12-12T18:33:31.752322+0100","flow_id":1229179155347885,"pcap_cnt":6467,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57237,"proto":"UDP","dns":{"type":"answer","id":21114,"rcode":"NXDOMAIN","rrname":"tufyquvaxic.eu"}}
{"timestamp":"2017-12-12T18:33:25.492386+0100","flow_id":117620143915617,"pcap_cnt":4327,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51263,"proto":"UDP","dns":{"type":"answer","id":63592,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:27.468072+0100","flow_id":1727272954831976,"pcap_cnt":4958,"event_type":"dns","src_ip":"192.168.1.100","src_port":64225,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":3323,"rrname":"tufydopogab.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.190932+0100","flow_id":1850970160425168,"pcap_cnt":4619,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54906,"proto":"UDP","dns":{"type":"answer","id":37989,"rcode":"NXDOMAIN","rrname":"jewemurutyj.eu"}}
{"timestamp":"2017-12-12T18:33:25.538561+0100","flow_id":577370623129537,"pcap_cnt":4356,"event_type":"dns","src_ip":"192.168.1.100","src_port":56573,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48635,"rrname":"lykolexusol.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.190932+0100","flow_id":1850970160425168,"pcap_cnt":4619,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54906,"proto":"UDP","dns":{"type":"answer","id":37989,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:27.468410+0100","flow_id":1727272954831976,"pcap_cnt":4959,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64225,"proto":"UDP","dns":{"type":"answer","id":3323,"rcode":"NXDOMAIN","rrname":"tufydopogab.eu"}}
{"timestamp":"2017-12-12T18:33:27.248988+0100","flow_id":1863797080312733,"pcap_cnt":4853,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63167,"proto":"UDP","dns":{"type":"answer","id":54027,"rcode":"NXDOMAIN","rrname":"qetekugexom.eu"}}
{"timestamp":"2017-12-12T18:33:26.227012+0100","flow_id":2047817101506244,"pcap_cnt":4632,"event_type":"dns","src_ip":"192.168.1.100","src_port":53937,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17797,"rrname":"vojizitoken.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.063771+0100","flow_id":1851191350982608,"pcap_cnt":3887,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55144,"proto":"UDP","dns":{"type":"answer","id":42045,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:25.511165+0100","flow_id":922518490041251,"pcap_cnt":4339,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65516,"proto":"UDP","dns":{"type":"answer","id":18290,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:28.087080+0100","flow_id":201515887776808,"pcap_cnt":5240,"event_type":"dns","src_ip":"192.168.1.100","src_port":58224,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":46636,"rrname":"jewobuxisyt.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.174792+0100","flow_id":2248699164142280,"pcap_cnt":3940,"event_type":"dns","src_ip":"192.168.1.100","src_port":61215,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53746,"rrname":"tucyroviwir.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.001279+0100","flow_id":265384198931456,"pcap_cnt":5195,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55806,"proto":"UDP","dns":{"type":"answer","id":33866,"rcode":"NXDOMAIN","rrname":"qexukoqodar.eu"}}
{"timestamp":"2017-12-12T18:33:22.974360+0100","flow_id":1196393521929505,"pcap_cnt":4231,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61412,"proto":"UDP","dns":{"type":"answer","id":35509,"rcode":"NXDOMAIN","rrname":"jepycudijyq.eu"}}
{"timestamp":"2017-12-12T18:33:28.001279+0100","flow_id":265384198931456,"pcap_cnt":5195,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55806,"proto":"UDP","dns":{"type":"answer","id":33866,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:26.395552+0100","flow_id":2119770688587777,"pcap_cnt":4725,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63691,"proto":"UDP","dns":{"type":"answer","id":20952,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":577}}
{"timestamp":"2017-12-12T18:33:22.974360+0100","flow_id":1196393521929505,"pcap_cnt":4231,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61412,"proto":"UDP","dns":{"type":"answer","id":35509,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:28.080309+0100","flow_id":1205724338731445,"pcap_cnt":5232,"event_type":"dns","src_ip":"192.168.1.100","src_port":52399,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47771,"rrname":"pujibylityp.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.140179+0100","flow_id":2085531209376659,"pcap_cnt":4790,"event_type":"dns","src_ip":"192.168.1.100","src_port":57365,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44442,"rrname":"nomocykyqiq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.999389+0100","flow_id":1965495463263939,"pcap_cnt":4507,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58976,"proto":"UDP","dns":{"type":"answer","id":4513,"rcode":"NXDOMAIN","rrname":"qeguhapyrer.eu"}}
{"timestamp":"2017-12-12T18:33:26.250343+0100","flow_id":1766249781935330,"pcap_cnt":4644,"event_type":"dns","src_ip":"192.168.1.100","src_port":55810,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31414,"rrname":"tucadilebix.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:25.999389+0100","flow_id":1965495463263939,"pcap_cnt":4507,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58976,"proto":"UDP","dns":{"type":"answer","id":4513,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:28.080669+0100","flow_id":1205724338731445,"pcap_cnt":5233,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52399,"proto":"UDP","dns":{"type":"answer","id":47771,"rcode":"NXDOMAIN","rrname":"pujibylityp.eu"}}
{"timestamp":"2017-12-12T18:33:22.467568+0100","flow_id":46892769747250,"pcap_cnt":4067,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54970,"proto":"UDP","dns":{"type":"answer","id":13999,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":553}}
{"timestamp":"2017-12-12T18:33:29.488855+0100","flow_id":1828492448642588,"pcap_cnt":5897,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58050,"proto":"UDP","dns":{"type":"answer","id":44421,"rcode":"NXDOMAIN","rrname":"vojajofyced.eu"}}
{"timestamp":"2017-12-12T18:33:28.271289+0100","flow_id":993853598591811,"pcap_cnt":5317,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56166,"proto":"UDP","dns":{"type":"answer","id":56393,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:27.538435+0100","flow_id":847844041242111,"pcap_cnt":4987,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52649,"proto":"UDP","dns":{"type":"answer","id":28568,"rcode":"NXDOMAIN","rrname":"xugosedaloc.eu"}}
{"timestamp":"2017-12-12T18:33:22.709728+0100","flow_id":74964676039776,"pcap_cnt":4130,"event_type":"dns","src_ip":"192.168.1.100","src_port":55162,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28038,"rrname":"kejitanokon.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.454855+0100","flow_id":1392340667789511,"pcap_cnt":5408,"event_type":"dns","src_ip":"192.168.1.100","src_port":49268,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43690,"rrname":"lykuvuxureg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.116103+0100","flow_id":1089594865534073,"pcap_cnt":5251,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50870,"proto":"UDP","dns":{"type":"answer","id":35529,"rcode":"NXDOMAIN","rrname":"marimutitom.eu"}}
{"timestamp":"2017-12-12T18:33:22.710084+0100","flow_id":74964676039776,"pcap_cnt":4131,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55162,"proto":"UDP","dns":{"type":"answer","id":28038,"rcode":"NXDOMAIN","rrname":"kejitanokon.eu"}}
{"timestamp":"2017-12-12T18:33:28.455220+0100","flow_id":1392340667789511,"pcap_cnt":5409,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49268,"proto":"UDP","dns":{"type":"answer","id":43690,"rcode":"NXDOMAIN","rrname":"lykuvuxureg.eu"}}
{"timestamp":"2017-12-12T18:33:28.116103+0100","flow_id":1089594865534073,"pcap_cnt":5251,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50870,"proto":"UDP","dns":{"type":"answer","id":35529,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:28.455220+0100","flow_id":1392340667789511,"pcap_cnt":5409,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49268,"proto":"UDP","dns":{"type":"answer","id":43690,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:22.710084+0100","flow_id":74964676039776,"pcap_cnt":4131,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55162,"proto":"UDP","dns":{"type":"answer","id":28038,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:28.497549+0100","flow_id":12784286286614,"pcap_cnt":5427,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58827,"proto":"UDP","dns":{"type":"answer","id":9060,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:28.243939+0100","flow_id":1314702691449059,"pcap_cnt":5304,"event_type":"dns","src_ip":"192.168.1.100","src_port":52194,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40707,"rrname":"nojogefumuc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.734823+0100","flow_id":555674595636839,"pcap_cnt":4138,"event_type":"dns","src_ip":"192.168.1.100","src_port":51367,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":57178,"rrname":"ganycyhywek.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.920158+0100","flow_id":1457396537166100,"pcap_cnt":4489,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64145,"proto":"UDP","dns":{"type":"answer","id":50949,"rcode":"NXDOMAIN","rrname":"divufozutog.eu"}}
{"timestamp":"2017-12-12T18:33:29.209435+0100","flow_id":2142493213274279,"pcap_cnt":5759,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51281,"proto":"UDP","dns":{"type":"answer","id":7577,"rcode":"NXDOMAIN","rrname":"makujafiqyq.eu"}}
{"timestamp":"2017-12-12T18:33:25.920158+0100","flow_id":1457396537166100,"pcap_cnt":4489,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64145,"proto":"UDP","dns":{"type":"answer","id":50949,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:29.209435+0100","flow_id":2142493213274279,"pcap_cnt":5759,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51281,"proto":"UDP","dns":{"type":"answer","id":7577,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:25.523679+0100","flow_id":822630435650584,"pcap_cnt":4343,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56694,"proto":"UDP","dns":{"type":"answer","id":4056,"rcode":"NXDOMAIN","rrname":"gaciduwifuh.eu"}}
{"timestamp":"2017-12-12T18:33:29.292557+0100","flow_id":394166645913293,"pcap_cnt":5792,"event_type":"dns","src_ip":"192.168.1.100","src_port":53495,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27914,"rrname":"pupoliqotul.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.523679+0100","flow_id":822630435650584,"pcap_cnt":4343,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56694,"proto":"UDP","dns":{"type":"answer","id":4056,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:29.068611+0100","flow_id":192552291076882,"pcap_cnt":5685,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53885,"proto":"UDP","dns":{"type":"answer","id":16028,"rcode":"NXDOMAIN","rrname":"fodylowahif.eu"}}
{"timestamp":"2017-12-12T18:33:29.292837+0100","flow_id":394166645913293,"pcap_cnt":5793,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53495,"proto":"UDP","dns":{"type":"answer","id":27914,"rcode":"NXDOMAIN","rrname":"pupoliqotul.eu"}}
{"timestamp":"2017-12-12T18:33:25.530240+0100","flow_id":857814807680832,"pcap_cnt":4344,"event_type":"dns","src_ip":"192.168.1.100","src_port":56397,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":46039,"rrname":"mavasatokyf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.292837+0100","flow_id":394166645913293,"pcap_cnt":5793,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53495,"proto":"UDP","dns":{"type":"answer","id":27914,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:29.758305+0100","flow_id":2152983670789937,"pcap_cnt":6012,"event_type":"dns","src_ip":"192.168.1.100","src_port":56570,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38347,"rrname":"nojuletacuf.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:25.538825+0100","flow_id":577370623129537,"pcap_cnt":4357,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56573,"proto":"UDP","dns":{"type":"answer","id":48635,"rcode":"NXDOMAIN","rrname":"lykolexusol.eu"}}
{"timestamp":"2017-12-12T18:33:27.468410+0100","flow_id":1727272954831976,"pcap_cnt":4959,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64225,"proto":"UDP","dns":{"type":"answer","id":3323,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:27.248988+0100","flow_id":1863797080312733,"pcap_cnt":4853,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63167,"proto":"UDP","dns":{"type":"answer","id":54027,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:26.227297+0100","flow_id":2047817101506244,"pcap_cnt":4633,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53937,"proto":"UDP","dns":{"type":"answer","id":17797,"rcode":"NXDOMAIN","rrname":"vojizitoken.eu"}}
{"timestamp":"2017-12-12T18:33:25.860019+0100","flow_id":1058074100309875,"pcap_cnt":4464,"event_type":"dns","src_ip":"192.168.1.100","src_port":57093,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27265,"rrname":"tuwobiloloh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.175073+0100","flow_id":2248699164142280,"pcap_cnt":3941,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61215,"proto":"UDP","dns":{"type":"answer","id":53746,"rcode":"NXDOMAIN","rrname":"tucyroviwir.eu"}}
{"timestamp":"2017-12-12T18:33:28.087320+0100","flow_id":201515887776808,"pcap_cnt":5241,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58224,"proto":"UDP","dns":{"type":"answer","id":46636,"rcode":"NXDOMAIN","rrname":"jewobuxisyt.eu"}}
{"timestamp":"2017-12-12T18:33:22.175073+0100","flow_id":2248699164142280,"pcap_cnt":3941,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61215,"proto":"UDP","dns":{"type":"answer","id":53746,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:28.087320+0100","flow_id":201515887776808,"pcap_cnt":5241,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58224,"proto":"UDP","dns":{"type":"answer","id":46636,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:21.567674+0100","flow_id":439682561320917,"pcap_cnt":3689,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63112,"proto":"UDP","dns":{"type":"answer","id":6908,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:27.140524+0100","flow_id":2085531209376659,"pcap_cnt":4791,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57365,"proto":"UDP","dns":{"type":"answer","id":44442,"rcode":"NXDOMAIN","rrname":"nomocykyqiq.eu"}}
{"timestamp":"2017-12-12T18:33:22.262201+0100","flow_id":1352064611516473,"pcap_cnt":3976,"event_type":"dns","src_ip":"192.168.1.100","src_port":52714,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":46313,"rrname":"cicavemejih.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.880519+0100","flow_id":400188189798279,"pcap_cnt":4474,"event_type":"dns","src_ip":"192.168.1.100","src_port":60882,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2031,"rrname":"kepypirutyx.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.005368+0100","flow_id":1881400003663096,"pcap_cnt":4518,"event_type":"dns","src_ip":"192.168.1.100","src_port":52826,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53215,"rrname":"puryxepenek.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.250605+0100","flow_id":1766249781935330,"pcap_cnt":4645,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55810,"proto":"UDP","dns":{"type":"answer","id":31414,"rcode":"NXDOMAIN","rrname":"tucadilebix.eu"}}
{"timestamp":"2017-12-12T18:33:28.080669+0100","flow_id":1205724338731445,"pcap_cnt":5233,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52399,"proto":"UDP","dns":{"type":"answer","id":47771,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:22.262546+0100","flow_id":1352064611516473,"pcap_cnt":3977,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52714,"proto":"UDP","dns":{"type":"answer","id":46313,"rcode":"NXDOMAIN","rrname":"cicavemejih.eu"}}
{"timestamp":"2017-12-12T18:33:26.250605+0100","flow_id":1766249781935330,"pcap_cnt":4645,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55810,"proto":"UDP","dns":{"type":"answer","id":31414,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:26.005723+0100","flow_id":1881400003663096,"pcap_cnt":4519,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52826,"proto":"UDP","dns":{"type":"answer","id":53215,"rcode":"NXDOMAIN","rrname":"puryxepenek.eu"}}
{"timestamp":"2017-12-12T18:33:22.262546+0100","flow_id":1352064611516473,"pcap_cnt":3977,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52714,"proto":"UDP","dns":{"type":"answer","id":46313,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":595}}
{"timestamp":"2017-12-12T18:33:26.005723+0100","flow_id":1881400003663096,"pcap_cnt":4519,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52826,"proto":"UDP","dns":{"type":"answer","id":53215,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:25.984000+0100","flow_id":1543130526843840,"pcap_cnt":4502,"event_type":"dns","src_ip":"192.168.1.100","src_port":60990,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53167,"rrname":"makexotevyl.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.883707+0100","flow_id":2206930607533517,"pcap_cnt":5131,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50170,"proto":"UDP","dns":{"type":"answer","id":30247,"rcode":"NXDOMAIN","rrname":"jejajaduwok.eu"}}
{"timestamp":"2017-12-12T18:33:27.213403+0100","flow_id":359005895999899,"pcap_cnt":4830,"event_type":"dns","src_ip":"192.168.1.100","src_port":54013,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1618,"rrname":"kemadedevak.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.984349+0100","flow_id":1543130526843840,"pcap_cnt":4503,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60990,"proto":"UDP","dns":{"type":"answer","id":53167,"rcode":"NXDOMAIN","rrname":"makexotevyl.eu"}}
{"timestamp":"2017-12-12T18:33:27.883707+0100","flow_id":2206930607533517,"pcap_cnt":5131,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50170,"proto":"UDP","dns":{"type":"answer","id":30247,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:28.749299+0100","flow_id":2170245144407795,"pcap_cnt":5542,"event_type":"dns","src_ip":"192.168.1.100","src_port":64425,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":3040,"rrname":"rydufupipug.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.451642+0100","flow_id":1758864586695483,"pcap_cnt":4289,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57697,"proto":"UDP","dns":{"type":"answer","id":6158,"rcode":"NXDOMAIN","rrname":"galupehudev.eu"}}
{"timestamp":"2017-12-12T18:33:25.392996+0100","flow_id":1483752604040683,"pcap_cnt":4271,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59224,"proto":"UDP","dns":{"type":"answer","id":1959,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:28.890079+0100","flow_id":2096857038001663,"pcap_cnt":5610,"event_type":"dns","src_ip":"192.168.1.100","src_port":62291,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":12965,"rrname":"tufapovakak.eu","rrtype":"A","tx_id":2}}
{"timestamp":"2017-12-12T18:33:22.735100+0100","flow_id":555674595636839,"pcap_cnt":4139,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51367,"proto":"UDP","dns":{"type":"answer","id":57178,"rcode":"NXDOMAIN","rrname":"ganycyhywek.eu"}}
{"timestamp":"2017-12-12T18:33:28.244287+0100","flow_id":1314702691449059,"pcap_cnt":5305,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52194,"proto":"UDP","dns":{"type":"answer","id":40707,"rcode":"NXDOMAIN","rrname":"nojogefumuc.eu"}}
{"timestamp":"2017-12-12T18:33:22.735100+0100","flow_id":555674595636839,"pcap_cnt":4139,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51367,"proto":"UDP","dns":{"type":"answer","id":57178,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:28.244287+0100","flow_id":1314702691449059,"pcap_cnt":5305,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52194,"proto":"UDP","dns":{"type":"answer","id":40707,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:28.779632+0100","flow_id":1672709690418285,"pcap_cnt":5553,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59127,"proto":"UDP","dns":{"type":"answer","id":53529,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:31.752322+0100","flow_id":1229179155347885,"pcap_cnt":6467,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57237,"proto":"UDP","dns":{"type":"answer","id":21114,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:28.310375+0100","flow_id":1887994926120039,"pcap_cnt":5334,"event_type":"dns","src_ip":"192.168.1.100","src_port":60484,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18617,"rrname":"foxalihynut.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.671181+0100","flow_id":479915667438757,"pcap_cnt":3735,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59006,"proto":"UDP","dns":{"type":"answer","id":9984,"rcode":"NXDOMAIN","rrname":"gadohyzyvah.eu"}}
{"timestamp":"2017-12-12T18:33:29.068611+0100","flow_id":192552291076882,"pcap_cnt":5685,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53885,"proto":"UDP","dns":{"type":"answer","id":16028,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:31.894900+0100","flow_id":21125114079156,"pcap_cnt":6536,"event_type":"dns","src_ip":"192.168.1.100","src_port":52377,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9462,"rrname":"mavinifenam.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:21.671181+0100","flow_id":479915667438757,"pcap_cnt":3735,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59006,"proto":"UDP","dns":{"type":"answer","id":9984,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:29.387724+0100","flow_id":2142304234760844,"pcap_cnt":5844,"event_type":"dns","src_ip":"192.168.1.100","src_port":54420,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51821,"rrname":"lyvesiduneb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.758563+0100","flow_id":2152983670789937,"pcap_cnt":6013,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56570,"proto":"UDP","dns":{"type":"answer","id":38347,"rcode":"NXDOMAIN","rrname":"nojuletacuf.eu"}}
{"timestamp":"2017-12-12T18:33:25.537550+0100","flow_id":671864198607822,"pcap_cnt":4354,"event_type":"dns","src_ip":"192.168.1.100","src_port":57595,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18376,"rrname":"kezubaxemor.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.895143+0100","flow_id":21125114079156,"pcap_cnt":6537,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52377,"proto":"UDP","dns":{"type":"answer","id":9462,"rcode":"NXDOMAIN","rrname":"mavinifenam.eu"}}
{"timestamp":"2017-12-12T18:33:29.387963+0100","flow_id":2142304234760844,"pcap_cnt":5845,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54420,"proto":"UDP","dns":{"type":"answer","id":51821,"rcode":"NXDOMAIN","rrname":"lyvesiduneb.eu"}}
{"timestamp":"2017-12-12T18:33:31.895143+0100","flow_id":21125114079156,"pcap_cnt":6537,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52377,"proto":"UDP","dns":{"type":"answer","id":9462,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":571}}
{"timestamp":"2017-12-12T18:33:29.387963+0100","flow_id":2142304234760844,"pcap_cnt":5845,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54420,"proto":"UDP","dns":{"type":"answer","id":51821,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:28.022030+0100","flow_id":455022036289255,"pcap_cnt":5207,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58270,"proto":"UDP","dns":{"type":"answer","id":60658,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:32.024442+0100","flow_id":301638018162554,"pcap_cnt":6592,"event_type":"dns","src_ip":"192.168.1.100","src_port":57109,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49701,"rrname":"rynikulokop.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.430927+0100","flow_id":1725280090166095,"pcap_cnt":5868,"event_type":"dns","src_ip":"192.168.1.100","src_port":57212,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38656,"rrname":"rylupalyxad.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.033467+0100","flow_id":1796703248351931,"pcap_cnt":3866,"event_type":"dns","src_ip":"192.168.1.100","src_port":52306,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59076,"rrname":"norowetunuj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.349090+0100","flow_id":444542317253538,"pcap_cnt":5358,"event_type":"dns","src_ip":"192.168.1.100","src_port":54546,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28676,"rrname":"jeloperajov.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.140524+0100","flow_id":2085531209376659,"pcap_cnt":4791,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57365,"proto":"UDP","dns":{"type":"answer","id":44442,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:32.024702+0100","flow_id":301638018162554,"pcap_cnt":6593,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57109,"proto":"UDP","dns":{"type":"answer","id":49701,"rcode":"NXDOMAIN","rrname":"rynikulokop.eu"}}
{"timestamp":"2017-12-12T18:33:22.033886+0100","flow_id":1796703248351931,"pcap_cnt":3867,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52306,"proto":"UDP","dns":{"type":"answer","id":59076,"rcode":"NXDOMAIN","rrname":"norowetunuj.eu"}}
{"timestamp":"2017-12-12T18:33:29.488855+0100","flow_id":1828492448642588,"pcap_cnt":5897,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58050,"proto":"UDP","dns":{"type":"answer","id":44421,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:28.143645+0100","flow_id":1016329165877198,"pcap_cnt":5259,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52447,"proto":"UDP","dns":{"type":"answer","id":23620,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:27.538435+0100","flow_id":847844041242111,"pcap_cnt":4987,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52649,"proto":"UDP","dns":{"type":"answer","id":28568,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:28.302968+0100","flow_id":787252790206328,"pcap_cnt":5332,"event_type":"dns","src_ip":"192.168.1.100","src_port":57363,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":12436,"rrname":"divinuheluz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.253793+0100","flow_id":872037591326445,"pcap_cnt":4648,"event_type":"dns","src_ip":"192.168.1.100","src_port":56403,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60997,"rrname":"tunegapenef.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:28.386247+0100","flow_id":353413848687815,"pcap_cnt":5378,"event_type":"dns","src_ip":"192.168.1.100","src_port":52609,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4955,"rrname":"qekorelelyq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.352289+0100","flow_id":1522282755416097,"pcap_cnt":4020,"event_type":"dns","src_ip":"192.168.1.100","src_port":54197,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":10614,"rrname":"divyviwyxuf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.254050+0100","flow_id":872037591326445,"pcap_cnt":4649,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56403,"proto":"UDP","dns":{"type":"answer","id":60997,"rcode":"NXDOMAIN","rrname":"tunegapenef.eu"}}
{"timestamp":"2017-12-12T18:33:29.350777+0100","flow_id":1024558323292430,"pcap_cnt":5811,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58189,"proto":"UDP","dns":{"type":"answer","id":25321,"rcode":"NXDOMAIN","rrname":"direfiwahur.eu"}}
{"timestamp":"2017-12-12T18:33:28.386487+0100","flow_id":353413848687815,"pcap_cnt":5379,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52609,"proto":"UDP","dns":{"type":"answer","id":4955,"rcode":"NXDOMAIN","rrname":"qekorelelyq.eu"}}
{"timestamp":"2017-12-12T18:33:29.350777+0100","flow_id":1024558323292430,"pcap_cnt":5811,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58189,"proto":"UDP","dns":{"type":"answer","id":25321,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:25.984349+0100","flow_id":1543130526843840,"pcap_cnt":4503,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60990,"proto":"UDP","dns":{"type":"answer","id":53167,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:28.018617+0100","flow_id":1079845289740473,"pcap_cnt":5202,"event_type":"dns","src_ip":"192.168.1.100","src_port":60501,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47933,"rrname":"lykatojexub.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.749595+0100","flow_id":2170245144407795,"pcap_cnt":5543,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64425,"proto":"UDP","dns":{"type":"answer","id":3040,"rcode":"NXDOMAIN","rrname":"rydufupipug.eu"}}
{"timestamp":"2017-12-12T18:33:28.018889+0100","flow_id":1079845289740473,"pcap_cnt":5203,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60501,"proto":"UDP","dns":{"type":"answer","id":47933,"rcode":"NXDOMAIN","rrname":"lykatojexub.eu"}}
{"timestamp":"2017-12-12T18:33:25.451642+0100","flow_id":1758864586695483,"pcap_cnt":4289,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57697,"proto":"UDP","dns":{"type":"answer","id":6158,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:28.749595+0100","flow_id":2170245144407795,"pcap_cnt":5543,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64425,"proto":"UDP","dns":{"type":"answer","id":3040,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:28.018889+0100","flow_id":1079845289740473,"pcap_cnt":5203,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60501,"proto":"UDP","dns":{"type":"answer","id":47933,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:28.890352+0100","flow_id":2096857038001663,"pcap_cnt":5611,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62291,"proto":"UDP","dns":{"type":"answer","id":12965,"rcode":"NXDOMAIN","rrname":"tufapovakak.eu"}}
{"timestamp":"2017-12-12T18:33:26.051669+0100","flow_id":1667729675700693,"pcap_cnt":4558,"event_type":"dns","src_ip":"192.168.1.100","src_port":53032,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6747,"rrname":"vowagufifam.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.754647+0100","flow_id":1709326434075607,"pcap_cnt":5544,"event_type":"dns","src_ip":"192.168.1.100","src_port":59572,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31902,"rrname":"tuporupajun.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.822144+0100","flow_id":1353198482918272,"pcap_cnt":4162,"event_type":"dns","src_ip":"192.168.1.100","src_port":58071,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":10943,"rrname":"mavulymupiv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.530485+0100","flow_id":857814807680832,"pcap_cnt":4345,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56397,"proto":"UDP","dns":{"type":"answer","id":46039,"rcode":"NXDOMAIN","rrname":"mavasatokyf.eu"}}
{"timestamp":"2017-12-12T18:33:28.755002+0100","flow_id":1709326434075607,"pcap_cnt":5545,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59572,"proto":"UDP","dns":{"type":"answer","id":31902,"rcode":"NXDOMAIN","rrname":"tuporupajun.eu"}}
{"timestamp":"2017-12-12T18:33:26.051918+0100","flow_id":1667729675700693,"pcap_cnt":4559,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53032,"proto":"UDP","dns":{"type":"answer","id":6747,"rcode":"NXDOMAIN","rrname":"vowagufifam.eu"}}
{"timestamp":"2017-12-12T18:33:28.755002+0100","flow_id":1709326434075607,"pcap_cnt":5545,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59572,"proto":"UDP","dns":{"type":"answer","id":31902,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:28.310658+0100","flow_id":1887994926120039,"pcap_cnt":5335,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60484,"proto":"UDP","dns":{"type":"answer","id":18617,"rcode":"NXDOMAIN","rrname":"foxalihynut.eu"}}
{"timestamp":"2017-12-12T18:33:29.414006+0100","flow_id":1858793443512630,"pcap_cnt":5856,"event_type":"dns","src_ip":"192.168.1.100","src_port":59628,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17557,"rrname":"lyxotyxubop.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.245851+0100","flow_id":769104403814030,"pcap_cnt":3968,"event_type":"dns","src_ip":"192.168.1.100","src_port":52238,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6085,"rrname":"puvomegagep.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:29.758563+0100","flow_id":2152983670789937,"pcap_cnt":6013,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56570,"proto":"UDP","dns":{"type":"answer","id":38347,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":546}}
{"timestamp":"2017-12-12T18:33:29.414294+0100","flow_id":1858793443512630,"pcap_cnt":5857,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59628,"proto":"UDP","dns":{"type":"answer","id":17557,"rcode":"NXDOMAIN","rrname":"lyxotyxubop.eu"}}
{"timestamp":"2017-12-12T18:33:27.424232+0100","flow_id":2032778271894082,"pcap_cnt":4940,"event_type":"dns","src_ip":"192.168.1.100","src_port":49196,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31788,"rrname":"tupepulofup.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:29.414294+0100","flow_id":1858793443512630,"pcap_cnt":5857,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59628,"proto":"UDP","dns":{"type":"answer","id":17557,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:26.227297+0100","flow_id":2047817101506244,"pcap_cnt":4633,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53937,"proto":"UDP","dns":{"type":"answer","id":17797,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:29.869044+0100","flow_id":1967441083712180,"pcap_cnt":6026,"event_type":"dns","src_ip":"192.168.1.100","src_port":60888,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14771,"rrname":"vocumucokaj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.860288+0100","flow_id":1058074100309875,"pcap_cnt":4465,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57093,"proto":"UDP","dns":{"type":"answer","id":27265,"rcode":"NXDOMAIN","rrname":"tuwobiloloh.eu"}}
{"timestamp":"2017-12-12T18:33:29.723432+0100","flow_id":1733157060151784,"pcap_cnt":6002,"event_type":"dns","src_ip":"192.168.1.100","src_port":51951,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60877,"rrname":"keraborigin.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.424459+0100","flow_id":2032778271894082,"pcap_cnt":4941,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49196,"proto":"UDP","dns":{"type":"answer","id":31788,"rcode":"NXDOMAIN","rrname":"tupepulofup.eu"}}
{"timestamp":"2017-12-12T18:33:26.309055+0100","flow_id":1002903098013503,"pcap_cnt":4666,"event_type":"dns","src_ip":"192.168.1.100","src_port":51910,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35435,"rrname":"gadedozymiz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.537792+0100","flow_id":671864198607822,"pcap_cnt":4355,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57595,"proto":"UDP","dns":{"type":"answer","id":18376,"rcode":"NXDOMAIN","rrname":"kezubaxemor.eu"}}
{"timestamp":"2017-12-12T18:33:28.099289+0100","flow_id":754553056691161,"pcap_cnt":5244,"event_type":"dns","src_ip":"192.168.1.100","src_port":57092,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59147,"rrname":"vofejutalom.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.431165+0100","flow_id":1725280090166095,"pcap_cnt":5869,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57212,"proto":"UDP","dns":{"type":"answer","id":38656,"rcode":"NXDOMAIN","rrname":"rylupalyxad.eu"}}
{"timestamp":"2017-12-12T18:33:20.729216+0100","flow_id":1217526908329811,"pcap_cnt":3311,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56519,"proto":"UDP","dns":{"type":"answer","id":60866,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":590}}
{"timestamp":"2017-12-12T18:33:26.309396+0100","flow_id":1002903098013503,"pcap_cnt":4667,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51910,"proto":"UDP","dns":{"type":"answer","id":35435,"rcode":"NXDOMAIN","rrname":"gadedozymiz.eu"}}
{"timestamp":"2017-12-12T18:33:27.261609+0100","flow_id":2164438348594665,"pcap_cnt":4868,"event_type":"dns","src_ip":"192.168.1.100","src_port":57721,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23076,"rrname":"lymutinutyz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.880864+0100","flow_id":400188189798279,"pcap_cnt":4475,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60882,"proto":"UDP","dns":{"type":"answer","id":2031,"rcode":"NXDOMAIN","rrname":"kepypirutyx.eu"}}
{"timestamp":"2017-12-12T18:33:32.024702+0100","flow_id":301638018162554,"pcap_cnt":6593,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57109,"proto":"UDP","dns":{"type":"answer","id":49701,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:21.326334+0100","flow_id":144747157125822,"pcap_cnt":3582,"event_type":"dns","src_ip":"192.168.1.100","src_port":53968,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":39000,"rrname":"tuporupajun.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.880864+0100","flow_id":400188189798279,"pcap_cnt":4475,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60882,"proto":"UDP","dns":{"type":"answer","id":2031,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:27.261892+0100","flow_id":2164438348594665,"pcap_cnt":4869,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57721,"proto":"UDP","dns":{"type":"answer","id":23076,"rcode":"NXDOMAIN","rrname":"lymutinutyz.eu"}}
{"timestamp":"2017-12-12T18:33:32.134382+0100","flow_id":1337103092866632,"pcap_cnt":6640,"event_type":"dns","src_ip":"192.168.1.100","src_port":52788,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28877,"rrname":"volocecaluk.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:21.326587+0100","flow_id":144747157125822,"pcap_cnt":3583,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53968,"proto":"UDP","dns":{"type":"answer","id":39000,"rcode":"NXDOMAIN","rrname":"tuporupajun.eu"}}
{"timestamp":"2017-12-12T18:33:28.303286+0100","flow_id":787252790206328,"pcap_cnt":5333,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57363,"proto":"UDP","dns":{"type":"answer","id":12436,"rcode":"NXDOMAIN","rrname":"divinuheluz.eu"}}
{"timestamp":"2017-12-12T18:33:25.903297+0100","flow_id":1243084111595649,"pcap_cnt":4486,"event_type":"dns","src_ip":"192.168.1.100","src_port":53322,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":15454,"rrname":"cinyhotyqyt.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.254050+0100","flow_id":872037591326445,"pcap_cnt":4649,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56403,"proto":"UDP","dns":{"type":"answer","id":60997,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:28.386487+0100","flow_id":353413848687815,"pcap_cnt":5379,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52609,"proto":"UDP","dns":{"type":"answer","id":4955,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:25.903569+0100","flow_id":1243084111595649,"pcap_cnt":4487,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53322,"proto":"UDP","dns":{"type":"answer","id":15454,"rcode":"NXDOMAIN","rrname":"cinyhotyqyt.eu"}}
{"timestamp":"2017-12-12T18:33:26.285102+0100","flow_id":750094880496046,"pcap_cnt":4656,"event_type":"dns","src_ip":"192.168.1.100","src_port":64497,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8327,"rrname":"fokalesaxav.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.078980+0100","flow_id":1532702346327172,"pcap_cnt":4568,"event_type":"dns","src_ip":"192.168.1.100","src_port":56435,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":65097,"rrname":"cidacomutur.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.903569+0100","flow_id":1243084111595649,"pcap_cnt":4487,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53322,"proto":"UDP","dns":{"type":"answer","id":15454,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:25.502926+0100","flow_id":940370521306024,"pcap_cnt":4336,"event_type":"dns","src_ip":"192.168.1.100","src_port":54385,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47869,"rrname":"citeqotacyn.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:26.285488+0100","flow_id":750094880496046,"pcap_cnt":4657,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64497,"proto":"UDP","dns":{"type":"answer","id":8327,"rcode":"NXDOMAIN","rrname":"fokalesaxav.eu"}}
{"timestamp":"2017-12-12T18:33:28.353574+0100","flow_id":938283167671275,"pcap_cnt":5363,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52015,"proto":"UDP","dns":{"type":"answer","id":20202,"rcode":"NXDOMAIN","rrname":"lygyxeruqoc.eu"}}
{"timestamp":"2017-12-12T18:33:26.079316+0100","flow_id":1532702346327172,"pcap_cnt":4569,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56435,"proto":"UDP","dns":{"type":"answer","id":65097,"rcode":"NXDOMAIN","rrname":"cidacomutur.eu"}}
{"timestamp":"2017-12-12T18:33:25.503218+0100","flow_id":940370521306024,"pcap_cnt":4337,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54385,"proto":"UDP","dns":{"type":"answer","id":47869,"rcode":"NXDOMAIN","rrname":"citeqotacyn.eu"}}
{"timestamp":"2017-12-12T18:33:26.079316+0100","flow_id":1532702346327172,"pcap_cnt":4569,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56435,"proto":"UDP","dns":{"type":"answer","id":65097,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:28.219237+0100","flow_id":1370116359477349,"pcap_cnt":5292,"event_type":"dns","src_ip":"192.168.1.100","src_port":65073,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":21107,"rrname":"puvewevodek.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.220800+0100","flow_id":358441107742336,"pcap_cnt":4630,"event_type":"dns","src_ip":"192.168.1.100","src_port":50370,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29390,"rrname":"cilynitiseg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.890352+0100","flow_id":2096857038001663,"pcap_cnt":5611,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62291,"proto":"UDP","dns":{"type":"answer","id":12965,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:28.219534+0100","flow_id":1370116359477349,"pcap_cnt":5293,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65073,"proto":"UDP","dns":{"type":"answer","id":21107,"rcode":"NXDOMAIN","rrname":"puvewevodek.eu"}}
{"timestamp":"2017-12-12T18:33:22.822448+0100","flow_id":1353198482918272,"pcap_cnt":4163,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58071,"proto":"UDP","dns":{"type":"answer","id":10943,"rcode":"NXDOMAIN","rrname":"mavulymupiv.eu"}}
{"timestamp":"2017-12-12T18:33:28.219534+0100","flow_id":1370116359477349,"pcap_cnt":5293,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65073,"proto":"UDP","dns":{"type":"answer","id":21107,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:28.969131+0100","flow_id":1803854369311147,"pcap_cnt":5640,"event_type":"dns","src_ip":"192.168.1.100","src_port":51051,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51542,"rrname":"lyxyjijajel.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.538825+0100","flow_id":577370623129537,"pcap_cnt":4357,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56573,"proto":"UDP","dns":{"type":"answer","id":48635,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:26.051918+0100","flow_id":1667729675700693,"pcap_cnt":4559,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53032,"proto":"UDP","dns":{"type":"answer","id":6747,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":577}}
{"timestamp":"2017-12-12T18:33:27.683400+0100","flow_id":600496874679688,"pcap_cnt":5042,"event_type":"dns","src_ip":"192.168.1.100","src_port":59320,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7208,"rrname":"kemimojitir.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.969391+0100","flow_id":1803854369311147,"pcap_cnt":5641,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51051,"proto":"UDP","dns":{"type":"answer","id":51542,"rcode":"NXDOMAIN","rrname":"lyxyjijajel.eu"}}
{"timestamp":"2017-12-12T18:33:28.310658+0100","flow_id":1887994926120039,"pcap_cnt":5335,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60484,"proto":"UDP","dns":{"type":"answer","id":18617,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:22.246115+0100","flow_id":769104403814030,"pcap_cnt":3969,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52238,"proto":"UDP","dns":{"type":"answer","id":6085,"rcode":"NXDOMAIN","rrname":"puvomegagep.eu"}}
{"timestamp":"2017-12-12T18:33:28.969391+0100","flow_id":1803854369311147,"pcap_cnt":5641,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51051,"proto":"UDP","dns":{"type":"answer","id":51542,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:26.094484+0100","flow_id":118500612272404,"pcap_cnt":4576,"event_type":"dns","src_ip":"192.168.1.100","src_port":50280,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":39236,"rrname":"qexoligupag.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.246115+0100","flow_id":769104403814030,"pcap_cnt":3969,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52238,"proto":"UDP","dns":{"type":"answer","id":6085,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":595}}
{"timestamp":"2017-12-12T18:33:29.087318+0100","flow_id":316558734349590,"pcap_cnt":5686,"event_type":"dns","src_ip":"192.168.1.100","src_port":60098,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":58826,"rrname":"cicypucitan.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.424459+0100","flow_id":2032778271894082,"pcap_cnt":4941,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49196,"proto":"UDP","dns":{"type":"answer","id":31788,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:26.094731+0100","flow_id":118500612272404,"pcap_cnt":4577,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50280,"proto":"UDP","dns":{"type":"answer","id":39236,"rcode":"NXDOMAIN","rrname":"qexoligupag.eu"}}
{"timestamp":"2017-12-12T18:33:29.087654+0100","flow_id":316558734349590,"pcap_cnt":5687,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60098,"proto":"UDP","dns":{"type":"answer","id":58826,"rcode":"NXDOMAIN","rrname":"cicypucitan.eu"}}
{"timestamp":"2017-12-12T18:33:28.349385+0100","flow_id":444542317253538,"pcap_cnt":5359,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54546,"proto":"UDP","dns":{"type":"answer","id":28676,"rcode":"NXDOMAIN","rrname":"jeloperajov.eu"}}
{"timestamp":"2017-12-12T18:33:29.087654+0100","flow_id":316558734349590,"pcap_cnt":5687,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60098,"proto":"UDP","dns":{"type":"answer","id":58826,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:28.099562+0100","flow_id":754553056691161,"pcap_cnt":5245,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57092,"proto":"UDP","dns":{"type":"answer","id":59147,"rcode":"NXDOMAIN","rrname":"vofejutalom.eu"}}
{"timestamp":"2017-12-12T18:33:28.349385+0100","flow_id":444542317253538,"pcap_cnt":5359,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54546,"proto":"UDP","dns":{"type":"answer","id":28676,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:29.091847+0100","flow_id":1942719251965639,"pcap_cnt":5690,"event_type":"dns","src_ip":"192.168.1.100","src_port":55440,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41548,"rrname":"gatifowyciv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.099562+0100","flow_id":754553056691161,"pcap_cnt":5245,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57092,"proto":"UDP","dns":{"type":"answer","id":59147,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:29.779330+0100","flow_id":1771472463455298,"pcap_cnt":6014,"event_type":"dns","src_ip":"192.168.1.100","src_port":52820,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2407,"rrname":"magofetequb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.092136+0100","flow_id":1942719251965639,"pcap_cnt":5691,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55440,"proto":"UDP","dns":{"type":"answer","id":41548,"rcode":"NXDOMAIN","rrname":"gatifowyciv.eu"}}
{"timestamp":"2017-12-12T18:33:26.391997+0100","flow_id":446756372382219,"pcap_cnt":4721,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50848,"proto":"UDP","dns":{"type":"answer","id":19160,"rcode":"NXDOMAIN","rrname":"galuhubywum.eu"}}
{"timestamp":"2017-12-12T18:33:25.708819+0100","flow_id":2225658812289235,"pcap_cnt":4396,"event_type":"dns","src_ip":"192.168.1.100","src_port":63207,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59710,"rrname":"qeburuvenij.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.779591+0100","flow_id":1771472463455298,"pcap_cnt":6015,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52820,"proto":"UDP","dns":{"type":"answer","id":2407,"rcode":"NXDOMAIN","rrname":"magofetequb.eu"}}
{"timestamp":"2017-12-12T18:33:29.092136+0100","flow_id":1942719251965639,"pcap_cnt":5691,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55440,"proto":"UDP","dns":{"type":"answer","id":41548,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:21.326587+0100","flow_id":144747157125822,"pcap_cnt":3583,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53968,"proto":"UDP","dns":{"type":"answer","id":39000,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:25.709124+0100","flow_id":2225658812289235,"pcap_cnt":4397,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63207,"proto":"UDP","dns":{"type":"answer","id":59710,"rcode":"NXDOMAIN","rrname":"qeburuvenij.eu"}}
{"timestamp":"2017-12-12T18:33:29.142507+0100","flow_id":1996938919095467,"pcap_cnt":5726,"event_type":"dns","src_ip":"192.168.1.100","src_port":59534,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64527,"rrname":"dixuwusodut.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.709124+0100","flow_id":2225658812289235,"pcap_cnt":4397,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63207,"proto":"UDP","dns":{"type":"answer","id":59710,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:28.303286+0100","flow_id":787252790206328,"pcap_cnt":5333,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57363,"proto":"UDP","dns":{"type":"answer","id":12436,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:25.724049+0100","flow_id":1674459889339473,"pcap_cnt":4404,"event_type":"dns","src_ip":"192.168.1.100","src_port":54708,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53243,"rrname":"qeqotogemet.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.141976+0100","flow_id":2218563526535832,"pcap_cnt":5724,"event_type":"dns","src_ip":"192.168.1.100","src_port":60555,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":57166,"rrname":"puvedupuquz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.724356+0100","flow_id":1674459889339473,"pcap_cnt":4405,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54708,"proto":"UDP","dns":{"type":"answer","id":53243,"rcode":"NXDOMAIN","rrname":"qeqotogemet.eu"}}
{"timestamp":"2017-12-12T18:33:27.188261+0100","flow_id":2227061119246181,"pcap_cnt":4820,"event_type":"dns","src_ip":"192.168.1.100","src_port":53246,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59929,"rrname":"nopymecurud.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.353574+0100","flow_id":938283167671275,"pcap_cnt":5363,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52015,"proto":"UDP","dns":{"type":"answer","id":20202,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:25.503218+0100","flow_id":940370521306024,"pcap_cnt":4337,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54385,"proto":"UDP","dns":{"type":"answer","id":47869,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:27.188551+0100","flow_id":2227061119246181,"pcap_cnt":4821,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53246,"proto":"UDP","dns":{"type":"answer","id":59929,"rcode":"NXDOMAIN","rrname":"nopymecurud.eu"}}
{"timestamp":"2017-12-12T18:33:26.221064+0100","flow_id":358441107742336,"pcap_cnt":4631,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50370,"proto":"UDP","dns":{"type":"answer","id":29390,"rcode":"NXDOMAIN","rrname":"cilynitiseg.eu"}}
{"timestamp":"2017-12-12T18:33:27.188551+0100","flow_id":2227061119246181,"pcap_cnt":4821,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53246,"proto":"UDP","dns":{"type":"answer","id":59929,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:25.530485+0100","flow_id":857814807680832,"pcap_cnt":4345,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56397,"proto":"UDP","dns":{"type":"answer","id":46039,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:22.822448+0100","flow_id":1353198482918272,"pcap_cnt":4163,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58071,"proto":"UDP","dns":{"type":"answer","id":10943,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:27.246719+0100","flow_id":1569639065174975,"pcap_cnt":4848,"event_type":"dns","src_ip":"192.168.1.100","src_port":49467,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42672,"rrname":"vojedufynoj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.917438+0100","flow_id":1706612014335881,"pcap_cnt":5628,"event_type":"dns","src_ip":"192.168.1.100","src_port":64905,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":24916,"rrname":"cidinymuqom.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:22.916354+0100","flow_id":984827727903618,"pcap_cnt":4206,"event_type":"dns","src_ip":"192.168.1.100","src_port":58475,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42946,"rrname":"lyxuworenuz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.683668+0100","flow_id":600496874679688,"pcap_cnt":5043,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59320,"proto":"UDP","dns":{"type":"answer","id":7208,"rcode":"NXDOMAIN","rrname":"kemimojitir.eu"}}
{"timestamp":"2017-12-12T18:33:28.917709+0100","flow_id":1706612014335881,"pcap_cnt":5629,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64905,"proto":"UDP","dns":{"type":"answer","id":24916,"rcode":"NXDOMAIN","rrname":"cidinymuqom.eu"}}
{"timestamp":"2017-12-12T18:33:29.869286+0100","flow_id":1967441083712180,"pcap_cnt":6027,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60888,"proto":"UDP","dns":{"type":"answer","id":14771,"rcode":"NXDOMAIN","rrname":"vocumucokaj.eu"}}
{"timestamp":"2017-12-12T18:33:28.917709+0100","flow_id":1706612014335881,"pcap_cnt":5629,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64905,"proto":"UDP","dns":{"type":"answer","id":24916,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:28.589876+0100","flow_id":1901446763642932,"pcap_cnt":5474,"event_type":"dns","src_ip":"192.168.1.100","src_port":49647,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14360,"rrname":"marylefajuj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.996797+0100","flow_id":2064022013228477,"pcap_cnt":5654,"event_type":"dns","src_ip":"192.168.1.100","src_port":55558,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19526,"rrname":"nopujokelek.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.723749+0100","flow_id":1733157060151784,"pcap_cnt":6003,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51951,"proto":"UDP","dns":{"type":"answer","id":60877,"rcode":"NXDOMAIN","rrname":"keraborigin.eu"}}
{"timestamp":"2017-12-12T18:33:25.537792+0100","flow_id":671864198607822,"pcap_cnt":4355,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57595,"proto":"UDP","dns":{"type":"answer","id":18376,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:28.997080+0100","flow_id":2064022013228477,"pcap_cnt":5655,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55558,"proto":"UDP","dns":{"type":"answer","id":19526,"rcode":"NXDOMAIN","rrname":"nopujokelek.eu"}}
{"timestamp":"2017-12-12T18:33:29.723749+0100","flow_id":1733157060151784,"pcap_cnt":6003,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51951,"proto":"UDP","dns":{"type":"answer","id":60877,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":546}}
{"timestamp":"2017-12-12T18:33:28.997080+0100","flow_id":2064022013228477,"pcap_cnt":5655,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55558,"proto":"UDP","dns":{"type":"answer","id":19526,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:27.055325+0100","flow_id":671864198607822,"pcap_cnt":4744,"event_type":"dns","src_ip":"192.168.1.100","src_port":57595,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7454,"rrname":"lygivejynow.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:29.095748+0100","flow_id":980075347015172,"pcap_cnt":5694,"event_type":"dns","src_ip":"192.168.1.100","src_port":63775,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43434,"rrname":"jewararuqid.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.002462+0100","flow_id":635058476550558,"pcap_cnt":5196,"event_type":"dns","src_ip":"192.168.1.100","src_port":62247,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34642,"rrname":"xugynajuquf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.055606+0100","flow_id":671864198607822,"pcap_cnt":4745,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57595,"proto":"UDP","dns":{"type":"answer","id":7454,"rcode":"NXDOMAIN","rrname":"lygivejynow.eu"}}
{"timestamp":"2017-12-12T18:33:26.309396+0100","flow_id":1002903098013503,"pcap_cnt":4667,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51910,"proto":"UDP","dns":{"type":"answer","id":35435,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:27.055606+0100","flow_id":671864198607822,"pcap_cnt":4745,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57595,"proto":"UDP","dns":{"type":"answer","id":7454,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:22.033886+0100","flow_id":1796703248351931,"pcap_cnt":3867,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52306,"proto":"UDP","dns":{"type":"answer","id":59076,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:26.412349+0100","flow_id":1681061254154941,"pcap_cnt":4734,"event_type":"dns","src_ip":"192.168.1.100","src_port":56477,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":46022,"rrname":"vonymomaxyb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.072996+0100","flow_id":1602480532561188,"pcap_cnt":4748,"event_type":"dns","src_ip":"192.168.1.100","src_port":56664,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42694,"rrname":"tufozequwyd.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.074484+0100","flow_id":1854238630224628,"pcap_cnt":3892,"event_type":"dns","src_ip":"192.168.1.100","src_port":56524,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29134,"rrname":"qexeholagav.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.391997+0100","flow_id":446756372382219,"pcap_cnt":4721,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50848,"proto":"UDP","dns":{"type":"answer","id":19160,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":577}}
{"timestamp":"2017-12-12T18:33:27.213685+0100","flow_id":359005895999899,"pcap_cnt":4831,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54013,"proto":"UDP","dns":{"type":"answer","id":1618,"rcode":"NXDOMAIN","rrname":"kemadedevak.eu"}}
{"timestamp":"2017-12-12T18:33:22.074726+0100","flow_id":1854238630224628,"pcap_cnt":3893,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56524,"proto":"UDP","dns":{"type":"answer","id":29134,"rcode":"NXDOMAIN","rrname":"qexeholagav.eu"}}
{"timestamp":"2017-12-12T18:33:29.779591+0100","flow_id":1771472463455298,"pcap_cnt":6015,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52820,"proto":"UDP","dns":{"type":"answer","id":2407,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":546}}
{"timestamp":"2017-12-12T18:33:27.213685+0100","flow_id":359005895999899,"pcap_cnt":4831,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54013,"proto":"UDP","dns":{"type":"answer","id":1618,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:27.487622+0100","flow_id":1808398443952749,"pcap_cnt":4964,"event_type":"dns","src_ip":"192.168.1.100","src_port":51492,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44822,"rrname":"foqykasisof.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:21.716540+0100","flow_id":1247780657774208,"pcap_cnt":3750,"event_type":"dns","src_ip":"192.168.1.100","src_port":64224,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":56871,"rrname":"volimucagog.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:29.967895+0100","flow_id":922340249158871,"pcap_cnt":6066,"event_type":"dns","src_ip":"192.168.1.100","src_port":58743,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47119,"rrname":"novacofebyz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.249851+0100","flow_id":1448982696415227,"pcap_cnt":4854,"event_type":"dns","src_ip":"192.168.1.100","src_port":58655,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42491,"rrname":"keryginebyp.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.427572+0100","flow_id":1856115531351604,"pcap_cnt":5392,"event_type":"dns","src_ip":"192.168.1.100","src_port":62612,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36442,"rrname":"ganikuzosem.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.968146+0100","flow_id":922340249158871,"pcap_cnt":6067,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58743,"proto":"UDP","dns":{"type":"answer","id":47119,"rcode":"NXDOMAIN","rrname":"novacofebyz.eu"}}
{"timestamp":"2017-12-12T18:33:29.142255+0100","flow_id":2218563526535832,"pcap_cnt":5725,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60555,"proto":"UDP","dns":{"type":"answer","id":57166,"rcode":"NXDOMAIN","rrname":"puvedupuquz.eu"}}
{"timestamp":"2017-12-12T18:33:29.968146+0100","flow_id":922340249158871,"pcap_cnt":6067,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58743,"proto":"UDP","dns":{"type":"answer","id":47119,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":567}}
{"timestamp":"2017-12-12T18:33:28.527440+0100","flow_id":1545711802387536,"pcap_cnt":5438,"event_type":"dns","src_ip":"192.168.1.100","src_port":56945,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7484,"rrname":"gatecebofas.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.142255+0100","flow_id":2218563526535832,"pcap_cnt":5725,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60555,"proto":"UDP","dns":{"type":"answer","id":57166,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:28.895505+0100","flow_id":488277969250833,"pcap_cnt":5618,"event_type":"dns","src_ip":"192.168.1.100","src_port":50859,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8345,"rrname":"ganepebeloj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.527751+0100","flow_id":1545711802387536,"pcap_cnt":5439,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56945,"proto":"UDP","dns":{"type":"answer","id":7484,"rcode":"NXDOMAIN","rrname":"gatecebofas.eu"}}
{"timestamp":"2017-12-12T18:33:26.221064+0100","flow_id":358441107742336,"pcap_cnt":4631,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50370,"proto":"UDP","dns":{"type":"answer","id":29390,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:28.895723+0100","flow_id":488277969250833,"pcap_cnt":5619,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50859,"proto":"UDP","dns":{"type":"answer","id":8345,"rcode":"NXDOMAIN","rrname":"ganepebeloj.eu"}}
{"timestamp":"2017-12-12T18:33:25.716924+0100","flow_id":2111739099738236,"pcap_cnt":4400,"event_type":"dns","src_ip":"192.168.1.100","src_port":63240,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43759,"rrname":"pujuduvaxim.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.520396+0100","flow_id":1740492864221388,"pcap_cnt":4982,"event_type":"dns","src_ip":"192.168.1.100","src_port":56011,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28494,"rrname":"mavitacazyw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.715435+0100","flow_id":1207081548245675,"pcap_cnt":4398,"event_type":"dns","src_ip":"192.168.1.100","src_port":50774,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":22845,"rrname":"rycovuvutiq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.246973+0100","flow_id":1569639065174975,"pcap_cnt":4849,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49467,"proto":"UDP","dns":{"type":"answer","id":42672,"rcode":"NXDOMAIN","rrname":"vojedufynoj.eu"}}
{"timestamp":"2017-12-12T18:33:27.683668+0100","flow_id":600496874679688,"pcap_cnt":5043,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59320,"proto":"UDP","dns":{"type":"answer","id":7208,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:27.246973+0100","flow_id":1569639065174975,"pcap_cnt":4849,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49467,"proto":"UDP","dns":{"type":"answer","id":42672,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:28.969741+0100","flow_id":496238691142441,"pcap_cnt":5643,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50323,"proto":"UDP","dns":{"type":"answer","id":37814,"rcode":"NXDOMAIN","rrname":"qebonuqirin.eu"}}
{"timestamp":"2017-12-12T18:33:22.916679+0100","flow_id":984827727903618,"pcap_cnt":4207,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58475,"proto":"UDP","dns":{"type":"answer","id":42946,"rcode":"NXDOMAIN","rrname":"lyxuworenuz.eu"}}
{"timestamp":"2017-12-12T18:33:25.860288+0100","flow_id":1058074100309875,"pcap_cnt":4465,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57093,"proto":"UDP","dns":{"type":"answer","id":27265,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:28.140570+0100","flow_id":2234680391247130,"pcap_cnt":5256,"event_type":"dns","src_ip":"192.168.1.100","src_port":51630,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5770,"rrname":"lyvufixyvet.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.916679+0100","flow_id":984827727903618,"pcap_cnt":4207,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58475,"proto":"UDP","dns":{"type":"answer","id":42946,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:28.969741+0100","flow_id":496238691142441,"pcap_cnt":5643,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50323,"proto":"UDP","dns":{"type":"answer","id":37814,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:29.431165+0100","flow_id":1725280090166095,"pcap_cnt":5869,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57212,"proto":"UDP","dns":{"type":"answer","id":38656,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:29.975960+0100","flow_id":722104577897028,"pcap_cnt":6068,"event_type":"dns","src_ip":"192.168.1.100","src_port":64545,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43485,"rrname":"maxyjofytyt.eu","rrtype":"A","tx_id":2}}
{"timestamp":"2017-12-12T18:33:26.099378+0100","flow_id":1470923536761906,"pcap_cnt":4578,"event_type":"dns","src_ip":"192.168.1.100","src_port":65341,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23222,"rrname":"qebexequsyw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.384504+0100","flow_id":729655130323190,"pcap_cnt":4258,"event_type":"dns","src_ip":"192.168.1.100","src_port":61995,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34736,"rrname":"xuquranifir.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:29.041595+0100","flow_id":1114284485091963,"pcap_cnt":5674,"event_type":"dns","src_ip":"192.168.1.100","src_port":64200,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5026,"rrname":"gadohyzyvah.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.356387+0100","flow_id":438288844877859,"pcap_cnt":5364,"event_type":"dns","src_ip":"192.168.1.100","src_port":58401,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50713,"rrname":"xutufojisyl.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.976198+0100","flow_id":722104577897028,"pcap_cnt":6069,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64545,"proto":"UDP","dns":{"type":"answer","id":43485,"rcode":"NXDOMAIN","rrname":"maxyjofytyt.eu"}}
{"timestamp":"2017-12-12T18:33:28.117687+0100","flow_id":1430666808445879,"pcap_cnt":5252,"event_type":"dns","src_ip":"192.168.1.100","src_port":56981,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64524,"rrname":"qeqaxupogog.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.261892+0100","flow_id":2164438348594665,"pcap_cnt":4869,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57721,"proto":"UDP","dns":{"type":"answer","id":23076,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:29.976198+0100","flow_id":722104577897028,"pcap_cnt":6069,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64545,"proto":"UDP","dns":{"type":"answer","id":43485,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":567}}
{"timestamp":"2017-12-12T18:33:26.412601+0100","flow_id":1681061254154941,"pcap_cnt":4735,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56477,"proto":"UDP","dns":{"type":"answer","id":46022,"rcode":"NXDOMAIN","rrname":"vonymomaxyb.eu"}}
{"timestamp":"2017-12-12T18:33:32.134711+0100","flow_id":1337103092866632,"pcap_cnt":6641,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52788,"proto":"UDP","dns":{"type":"answer","id":28877,"rcode":"NXDOMAIN","rrname":"volocecaluk.eu"}}
{"timestamp":"2017-12-12T18:33:22.074726+0100","flow_id":1854238630224628,"pcap_cnt":3893,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56524,"proto":"UDP","dns":{"type":"answer","id":29134,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:27.357652+0100","flow_id":1040806182958089,"pcap_cnt":4904,"event_type":"dns","src_ip":"192.168.1.100","src_port":60337,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":61051,"rrname":"jejubyrexeq.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:29.527202+0100","flow_id":1689350541216610,"pcap_cnt":5916,"event_type":"dns","src_ip":"192.168.1.100","src_port":50806,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45049,"rrname":"lymyfenumij.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.179537+0100","flow_id":683499264851281,"pcap_cnt":3942,"event_type":"dns","src_ip":"192.168.1.100","src_port":51796,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62232,"rrname":"puzubovafik.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.285488+0100","flow_id":750094880496046,"pcap_cnt":4657,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64497,"proto":"UDP","dns":{"type":"answer","id":8327,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:27.487949+0100","flow_id":1808398443952749,"pcap_cnt":4965,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51492,"proto":"UDP","dns":{"type":"answer","id":44822,"rcode":"NXDOMAIN","rrname":"foqykasisof.eu"}}
{"timestamp":"2017-12-12T18:33:22.179769+0100","flow_id":683499264851281,"pcap_cnt":3943,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51796,"proto":"UDP","dns":{"type":"answer","id":62232,"rcode":"NXDOMAIN","rrname":"puzubovafik.eu"}}
{"timestamp":"2017-12-12T18:33:29.527488+0100","flow_id":1689350541216610,"pcap_cnt":5917,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50806,"proto":"UDP","dns":{"type":"answer","id":45049,"rcode":"NXDOMAIN","rrname":"lymyfenumij.eu"}}
{"timestamp":"2017-12-12T18:33:27.075980+0100","flow_id":2100226439981260,"pcap_cnt":4750,"event_type":"dns","src_ip":"192.168.1.100","src_port":54312,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":56705,"rrname":"xudakejupok.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.427855+0100","flow_id":1856115531351604,"pcap_cnt":5393,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62612,"proto":"UDP","dns":{"type":"answer","id":36442,"rcode":"NXDOMAIN","rrname":"ganikuzosem.eu"}}
{"timestamp":"2017-12-12T18:33:29.527488+0100","flow_id":1689350541216610,"pcap_cnt":5917,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50806,"proto":"UDP","dns":{"type":"answer","id":45049,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:25.608129+0100","flow_id":1228305129097089,"pcap_cnt":4372,"event_type":"dns","src_ip":"192.168.1.100","src_port":57196,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27223,"rrname":"vopibycywow.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.429388+0100","flow_id":1085929110160073,"pcap_cnt":5866,"event_type":"dns","src_ip":"192.168.1.100","src_port":51645,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33240,"rrname":"qexeholagav.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:28.527751+0100","flow_id":1545711802387536,"pcap_cnt":5439,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56945,"proto":"UDP","dns":{"type":"answer","id":7484,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:29.744702+0100","flow_id":975509795524449,"pcap_cnt":6008,"event_type":"dns","src_ip":"192.168.1.100","src_port":56824,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4700,"rrname":"cicaratupig.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:28.895723+0100","flow_id":488277969250833,"pcap_cnt":5619,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50859,"proto":"UDP","dns":{"type":"answer","id":8345,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:25.608345+0100","flow_id":1228305129097089,"pcap_cnt":4373,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57196,"proto":"UDP","dns":{"type":"answer","id":27223,"rcode":"NXDOMAIN","rrname":"vopibycywow.eu"}}
{"timestamp":"2017-12-12T18:33:29.429614+0100","flow_id":1085929110160073,"pcap_cnt":5867,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51645,"proto":"UDP","dns":{"type":"answer","id":33240,"rcode":"NXDOMAIN","rrname":"qexeholagav.eu"}}
{"timestamp":"2017-12-12T18:33:25.715765+0100","flow_id":1207081548245675,"pcap_cnt":4399,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50774,"proto":"UDP","dns":{"type":"answer","id":22845,"rcode":"NXDOMAIN","rrname":"rycovuvutiq.eu"}}
{"timestamp":"2017-12-12T18:33:25.608345+0100","flow_id":1228305129097089,"pcap_cnt":4373,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57196,"proto":"UDP","dns":{"type":"answer","id":27223,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:27.321515+0100","flow_id":1336250542319595,"pcap_cnt":4888,"event_type":"dns","src_ip":"192.168.1.100","src_port":50488,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51566,"rrname":"dixyjohevon.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.715765+0100","flow_id":1207081548245675,"pcap_cnt":4399,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50774,"proto":"UDP","dns":{"type":"answer","id":22845,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:25.727843+0100","flow_id":384533033982755,"pcap_cnt":4408,"event_type":"dns","src_ip":"192.168.1.100","src_port":55341,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26994,"rrname":"fodavibusim.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.258082+0100","flow_id":906440278823709,"pcap_cnt":3972,"event_type":"dns","src_ip":"192.168.1.100","src_port":61831,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42083,"rrname":"lymyfenumij.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:26.347254+0100","flow_id":631882348121206,"pcap_cnt":4688,"event_type":"dns","src_ip":"192.168.1.100","src_port":55240,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":21574,"rrname":"magusecutuk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.321775+0100","flow_id":1336250542319595,"pcap_cnt":4889,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50488,"proto":"UDP","dns":{"type":"answer","id":51566,"rcode":"NXDOMAIN","rrname":"dixyjohevon.eu"}}
{"timestamp":"2017-12-12T18:33:22.258382+0100","flow_id":906440278823709,"pcap_cnt":3973,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61831,"proto":"UDP","dns":{"type":"answer","id":42083,"rcode":"NXDOMAIN","rrname":"lymyfenumij.eu"}}
{"timestamp":"2017-12-12T18:33:28.002707+0100","flow_id":635058476550558,"pcap_cnt":5197,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62247,"proto":"UDP","dns":{"type":"answer","id":34642,"rcode":"NXDOMAIN","rrname":"xugynajuquf.eu"}}
{"timestamp":"2017-12-12T18:33:22.258382+0100","flow_id":906440278823709,"pcap_cnt":3973,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61831,"proto":"UDP","dns":{"type":"answer","id":42083,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":596}}
{"timestamp":"2017-12-12T18:33:27.321775+0100","flow_id":1336250542319595,"pcap_cnt":4889,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50488,"proto":"UDP","dns":{"type":"answer","id":51566,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:27.781911+0100","flow_id":677299479899735,"pcap_cnt":5088,"event_type":"dns","src_ip":"192.168.1.100","src_port":49398,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":12414,"rrname":"cicidutuwap.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.002707+0100","flow_id":635058476550558,"pcap_cnt":5197,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62247,"proto":"UDP","dns":{"type":"answer","id":34642,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:26.099674+0100","flow_id":1470923536761906,"pcap_cnt":4579,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65341,"proto":"UDP","dns":{"type":"answer","id":23222,"rcode":"NXDOMAIN","rrname":"qebexequsyw.eu"}}
{"timestamp":"2017-12-12T18:33:27.432362+0100","flow_id":1835016503754366,"pcap_cnt":4944,"event_type":"dns","src_ip":"192.168.1.100","src_port":60360,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25623,"rrname":"purumulazux.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:27.782250+0100","flow_id":677299479899735,"pcap_cnt":5089,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49398,"proto":"UDP","dns":{"type":"answer","id":12414,"rcode":"NXDOMAIN","rrname":"cicidutuwap.eu"}}
{"timestamp":"2017-12-12T18:33:27.073435+0100","flow_id":1602480532561188,"pcap_cnt":4749,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56664,"proto":"UDP","dns":{"type":"answer","id":42694,"rcode":"NXDOMAIN","rrname":"tufozequwyd.eu"}}
{"timestamp":"2017-12-12T18:33:27.432700+0100","flow_id":1835016503754366,"pcap_cnt":4945,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60360,"proto":"UDP","dns":{"type":"answer","id":25623,"rcode":"NXDOMAIN","rrname":"purumulazux.eu"}}
{"timestamp":"2017-12-12T18:33:28.356636+0100","flow_id":438288844877859,"pcap_cnt":5365,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58401,"proto":"UDP","dns":{"type":"answer","id":50713,"rcode":"NXDOMAIN","rrname":"xutufojisyl.eu"}}
{"timestamp":"2017-12-12T18:33:27.432700+0100","flow_id":1835016503754366,"pcap_cnt":4945,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60360,"proto":"UDP","dns":{"type":"answer","id":25623,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:26.412601+0100","flow_id":1681061254154941,"pcap_cnt":4735,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56477,"proto":"UDP","dns":{"type":"answer","id":46022,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:31.319612+0100","flow_id":1447146598162556,"pcap_cnt":6262,"event_type":"dns","src_ip":"192.168.1.100","src_port":55983,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":947,"rrname":"foxehehywef.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.453295+0100","flow_id":1790743981436132,"pcap_cnt":4952,"event_type":"dns","src_ip":"192.168.1.100","src_port":59526,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25561,"rrname":"kejaxoxuqut.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:27.207914+0100","flow_id":1312690498809260,"pcap_cnt":4826,"event_type":"dns","src_ip":"192.168.1.100","src_port":51428,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7800,"rrname":"gatuvesisak.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:32.134711+0100","flow_id":1337103092866632,"pcap_cnt":6641,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52788,"proto":"UDP","dns":{"type":"answer","id":28877,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:31.319990+0100","flow_id":1447146598162556,"pcap_cnt":6263,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55983,"proto":"UDP","dns":{"type":"answer","id":947,"rcode":"NXDOMAIN","rrname":"foxehehywef.eu"}}
{"timestamp":"2017-12-12T18:33:27.453668+0100","flow_id":1790743981436132,"pcap_cnt":4953,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59526,"proto":"UDP","dns":{"type":"answer","id":25561,"rcode":"NXDOMAIN","rrname":"kejaxoxuqut.eu"}}
{"timestamp":"2017-12-12T18:33:21.716797+0100","flow_id":1247780657774208,"pcap_cnt":3751,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64224,"proto":"UDP","dns":{"type":"answer","id":56871,"rcode":"NXDOMAIN","rrname":"volimucagog.eu"}}
{"timestamp":"2017-12-12T18:33:31.319990+0100","flow_id":1447146598162556,"pcap_cnt":6263,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55983,"proto":"UDP","dns":{"type":"answer","id":947,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:27.250104+0100","flow_id":1448982696415227,"pcap_cnt":4856,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58655,"proto":"UDP","dns":{"type":"answer","id":42491,"rcode":"NXDOMAIN","rrname":"keryginebyp.eu"}}
{"timestamp":"2017-12-12T18:33:27.487949+0100","flow_id":1808398443952749,"pcap_cnt":4965,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51492,"proto":"UDP","dns":{"type":"answer","id":44822,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:31.392018+0100","flow_id":224970704419666,"pcap_cnt":6298,"event_type":"dns","src_ip":"192.168.1.100","src_port":51192,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36730,"rrname":"rylicepyryf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.142787+0100","flow_id":1996938919095467,"pcap_cnt":5727,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59534,"proto":"UDP","dns":{"type":"answer","id":64527,"rcode":"NXDOMAIN","rrname":"dixuwusodut.eu"}}
{"timestamp":"2017-12-12T18:33:31.379585+0100","flow_id":1114668883306974,"pcap_cnt":6294,"event_type":"dns","src_ip":"192.168.1.100","src_port":50342,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64865,"rrname":"mavasatokyf.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:27.785410+0100","flow_id":834780898262018,"pcap_cnt":5090,"event_type":"dns","src_ip":"192.168.1.100","src_port":56892,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":58980,"rrname":"puvugulynum.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.179769+0100","flow_id":683499264851281,"pcap_cnt":3943,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51796,"proto":"UDP","dns":{"type":"answer","id":62232,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:31.392311+0100","flow_id":224970704419666,"pcap_cnt":6299,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51192,"proto":"UDP","dns":{"type":"answer","id":36730,"rcode":"NXDOMAIN","rrname":"rylicepyryf.eu"}}
{"timestamp":"2017-12-12T18:33:28.459737+0100","flow_id":1227695243920345,"pcap_cnt":5410,"event_type":"dns","src_ip":"192.168.1.100","src_port":56103,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40742,"rrname":"cidediceleg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.520677+0100","flow_id":1740492864221388,"pcap_cnt":4983,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56011,"proto":"UDP","dns":{"type":"answer","id":28494,"rcode":"NXDOMAIN","rrname":"mavitacazyw.eu"}}
{"timestamp":"2017-12-12T18:33:31.379850+0100","flow_id":1114668883306974,"pcap_cnt":6295,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50342,"proto":"UDP","dns":{"type":"answer","id":64865,"rcode":"NXDOMAIN","rrname":"mavasatokyf.eu"}}
{"timestamp":"2017-12-12T18:33:28.563634+0100","flow_id":1842287884147122,"pcap_cnt":5458,"event_type":"dns","src_ip":"192.168.1.100","src_port":63700,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41235,"rrname":"vojopumuqot.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.745033+0100","flow_id":975509795524449,"pcap_cnt":6009,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56824,"proto":"UDP","dns":{"type":"answer","id":4700,"rcode":"NXDOMAIN","rrname":"cicaratupig.eu"}}
{"timestamp":"2017-12-12T18:33:28.460053+0100","flow_id":1227695243920345,"pcap_cnt":5411,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56103,"proto":"UDP","dns":{"type":"answer","id":40742,"rcode":"NXDOMAIN","rrname":"cidediceleg.eu"}}
{"timestamp":"2017-12-12T18:33:29.745033+0100","flow_id":975509795524449,"pcap_cnt":6009,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56824,"proto":"UDP","dns":{"type":"answer","id":4700,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":546}}
{"timestamp":"2017-12-12T18:33:28.932313+0100","flow_id":2034466195782105,"pcap_cnt":5634,"event_type":"dns","src_ip":"192.168.1.100","src_port":55919,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29986,"rrname":"gaquduhexet.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.590102+0100","flow_id":1901446763642932,"pcap_cnt":5475,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49647,"proto":"UDP","dns":{"type":"answer","id":14360,"rcode":"NXDOMAIN","rrname":"marylefajuj.eu"}}
{"timestamp":"2017-12-12T18:33:28.140851+0100","flow_id":2234680391247130,"pcap_cnt":5257,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51630,"proto":"UDP","dns":{"type":"answer","id":5770,"rcode":"NXDOMAIN","rrname":"lyvufixyvet.eu"}}
{"timestamp":"2017-12-12T18:33:28.590102+0100","flow_id":1901446763642932,"pcap_cnt":5475,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49647,"proto":"UDP","dns":{"type":"answer","id":14360,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:29.991102+0100","flow_id":716059412340606,"pcap_cnt":6078,"event_type":"dns","src_ip":"192.168.1.100","src_port":60794,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18106,"rrname":"qexofyqihid.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.932570+0100","flow_id":2034466195782105,"pcap_cnt":5635,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55919,"proto":"UDP","dns":{"type":"answer","id":29986,"rcode":"NXDOMAIN","rrname":"gaquduhexet.eu"}}
{"timestamp":"2017-12-12T18:33:26.347513+0100","flow_id":631882348121206,"pcap_cnt":4689,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55240,"proto":"UDP","dns":{"type":"answer","id":21574,"rcode":"NXDOMAIN","rrname":"magusecutuk.eu"}}
{"timestamp":"2017-12-12T18:33:28.609621+0100","flow_id":2226094751632725,"pcap_cnt":5484,"event_type":"dns","src_ip":"192.168.1.100","src_port":55827,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27845,"rrname":"dixagowunol.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.384752+0100","flow_id":729655130323190,"pcap_cnt":4259,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61995,"proto":"UDP","dns":{"type":"answer","id":34736,"rcode":"NXDOMAIN","rrname":"xuquranifir.eu"}}
{"timestamp":"2017-12-12T18:33:26.347513+0100","flow_id":631882348121206,"pcap_cnt":4689,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55240,"proto":"UDP","dns":{"type":"answer","id":21574,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":577}}
{"timestamp":"2017-12-12T18:33:29.096095+0100","flow_id":980075347015172,"pcap_cnt":5695,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63775,"proto":"UDP","dns":{"type":"answer","id":43434,"rcode":"NXDOMAIN","rrname":"jewararuqid.eu"}}
{"timestamp":"2017-12-12T18:33:29.041919+0100","flow_id":1114284485091963,"pcap_cnt":5675,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64200,"proto":"UDP","dns":{"type":"answer","id":5026,"rcode":"NXDOMAIN","rrname":"gadohyzyvah.eu"}}
{"timestamp":"2017-12-12T18:33:29.096095+0100","flow_id":980075347015172,"pcap_cnt":5695,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63775,"proto":"UDP","dns":{"type":"answer","id":43434,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:26.408529+0100","flow_id":1028771686005713,"pcap_cnt":4732,"event_type":"dns","src_ip":"192.168.1.100","src_port":49489,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":32459,"rrname":"ciqapomogyg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.782250+0100","flow_id":677299479899735,"pcap_cnt":5089,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49398,"proto":"UDP","dns":{"type":"answer","id":12414,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:27.073435+0100","flow_id":1602480532561188,"pcap_cnt":4749,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56664,"proto":"UDP","dns":{"type":"answer","id":42694,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:22.352546+0100","flow_id":1522282755416097,"pcap_cnt":4021,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54197,"proto":"UDP","dns":{"type":"answer","id":10614,"rcode":"NXDOMAIN","rrname":"divyviwyxuf.eu"}}
{"timestamp":"2017-12-12T18:33:29.135552+0100","flow_id":1672922291310976,"pcap_cnt":5722,"event_type":"dns","src_ip":"192.168.1.100","src_port":50564,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":10272,"rrname":"qetyrypopup.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.117974+0100","flow_id":1430666808445879,"pcap_cnt":5253,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56981,"proto":"UDP","dns":{"type":"answer","id":64524,"rcode":"NXDOMAIN","rrname":"qeqaxupogog.eu"}}
{"timestamp":"2017-12-12T18:33:27.357918+0100","flow_id":1040806182958089,"pcap_cnt":4905,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60337,"proto":"UDP","dns":{"type":"answer","id":61051,"rcode":"NXDOMAIN","rrname":"jejubyrexeq.eu"}}
{"timestamp":"2017-12-12T18:33:22.352546+0100","flow_id":1522282755416097,"pcap_cnt":4021,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54197,"proto":"UDP","dns":{"type":"answer","id":10614,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:32.184953+0100","flow_id":1830577656091257,"pcap_cnt":6664,"event_type":"dns","src_ip":"192.168.1.100","src_port":54426,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23914,"rrname":"divamubojum.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.135814+0100","flow_id":1672922291310976,"pcap_cnt":5723,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50564,"proto":"UDP","dns":{"type":"answer","id":10272,"rcode":"NXDOMAIN","rrname":"qetyrypopup.eu"}}
{"timestamp":"2017-12-12T18:33:25.724356+0100","flow_id":1674459889339473,"pcap_cnt":4405,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54708,"proto":"UDP","dns":{"type":"answer","id":53243,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:28.117974+0100","flow_id":1430666808445879,"pcap_cnt":5253,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56981,"proto":"UDP","dns":{"type":"answer","id":64524,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:29.135814+0100","flow_id":1672922291310976,"pcap_cnt":5723,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50564,"proto":"UDP","dns":{"type":"answer","id":10272,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:32.185220+0100","flow_id":1830577656091257,"pcap_cnt":6665,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54426,"proto":"UDP","dns":{"type":"answer","id":23914,"rcode":"NXDOMAIN","rrname":"divamubojum.eu"}}
{"timestamp":"2017-12-12T18:33:25.785949+0100","flow_id":1008087123492381,"pcap_cnt":4426,"event_type":"dns","src_ip":"192.168.1.100","src_port":49512,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":21386,"rrname":"xuxukanoluf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.196985+0100","flow_id":1070576750297465,"pcap_cnt":5282,"event_type":"dns","src_ip":"192.168.1.100","src_port":61962,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":39670,"rrname":"ryqukavecek.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:32.185220+0100","flow_id":1830577656091257,"pcap_cnt":6665,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54426,"proto":"UDP","dns":{"type":"answer","id":23914,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:31.392311+0100","flow_id":224970704419666,"pcap_cnt":6299,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51192,"proto":"UDP","dns":{"type":"answer","id":36730,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":567}}
{"timestamp":"2017-12-12T18:33:27.785734+0100","flow_id":834780898262018,"pcap_cnt":5091,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56892,"proto":"UDP","dns":{"type":"answer","id":58980,"rcode":"NXDOMAIN","rrname":"puvugulynum.eu"}}
{"timestamp":"2017-12-12T18:33:25.786209+0100","flow_id":1008087123492381,"pcap_cnt":4427,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49512,"proto":"UDP","dns":{"type":"answer","id":21386,"rcode":"NXDOMAIN","rrname":"xuxukanoluf.eu"}}
{"timestamp":"2017-12-12T18:33:28.197261+0100","flow_id":1070576750297465,"pcap_cnt":5283,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61962,"proto":"UDP","dns":{"type":"answer","id":39670,"rcode":"NXDOMAIN","rrname":"ryqukavecek.eu"}}
{"timestamp":"2017-12-12T18:33:27.785734+0100","flow_id":834780898262018,"pcap_cnt":5091,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56892,"proto":"UDP","dns":{"type":"answer","id":58980,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:29.429614+0100","flow_id":1085929110160073,"pcap_cnt":5867,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51645,"proto":"UDP","dns":{"type":"answer","id":33240,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:28.077708+0100","flow_id":2015845363210943,"pcap_cnt":5228,"event_type":"dns","src_ip":"192.168.1.100","src_port":60373,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44887,"rrname":"rycefelelys.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:28.460053+0100","flow_id":1227695243920345,"pcap_cnt":5411,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56103,"proto":"UDP","dns":{"type":"answer","id":40742,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:25.728147+0100","flow_id":384533033982755,"pcap_cnt":4409,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55341,"proto":"UDP","dns":{"type":"answer","id":26994,"rcode":"NXDOMAIN","rrname":"fodavibusim.eu"}}
{"timestamp":"2017-12-12T18:33:28.515366+0100","flow_id":417819028849917,"pcap_cnt":5432,"event_type":"dns","src_ip":"192.168.1.100","src_port":51715,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34713,"rrname":"pujejavakav.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:26.094731+0100","flow_id":118500612272404,"pcap_cnt":4577,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50280,"proto":"UDP","dns":{"type":"answer","id":39236,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":577}}
{"timestamp":"2017-12-12T18:33:28.140851+0100","flow_id":2234680391247130,"pcap_cnt":5257,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51630,"proto":"UDP","dns":{"type":"answer","id":5770,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:28.515629+0100","flow_id":417819028849917,"pcap_cnt":5433,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51715,"proto":"UDP","dns":{"type":"answer","id":34713,"rcode":"NXDOMAIN","rrname":"pujejavakav.eu"}}
{"timestamp":"2017-12-12T18:33:29.445112+0100","flow_id":1255462207605432,"pcap_cnt":5886,"event_type":"dns","src_ip":"192.168.1.100","src_port":61416,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11091,"rrname":"rynafivyvol.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.932570+0100","flow_id":2034466195782105,"pcap_cnt":5635,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55919,"proto":"UDP","dns":{"type":"answer","id":29986,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:28.515629+0100","flow_id":417819028849917,"pcap_cnt":5433,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51715,"proto":"UDP","dns":{"type":"answer","id":34713,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:28.347045+0100","flow_id":457818061163429,"pcap_cnt":5356,"event_type":"dns","src_ip":"192.168.1.100","src_port":63722,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36817,"rrname":"gacuhawipod.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.384752+0100","flow_id":729655130323190,"pcap_cnt":4259,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61995,"proto":"UDP","dns":{"type":"answer","id":34736,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:28.651759+0100","flow_id":495214341452271,"pcap_cnt":5504,"event_type":"dns","src_ip":"192.168.1.100","src_port":58369,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59609,"rrname":"xubuvojajyb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.609855+0100","flow_id":2226094751632725,"pcap_cnt":5485,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55827,"proto":"UDP","dns":{"type":"answer","id":27845,"rcode":"NXDOMAIN","rrname":"dixagowunol.eu"}}
{"timestamp":"2017-12-12T18:33:28.347363+0100","flow_id":457818061163429,"pcap_cnt":5357,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63722,"proto":"UDP","dns":{"type":"answer","id":36817,"rcode":"NXDOMAIN","rrname":"gacuhawipod.eu"}}
{"timestamp":"2017-12-12T18:33:28.162111+0100","flow_id":1306001087691071,"pcap_cnt":5266,"event_type":"dns","src_ip":"192.168.1.100","src_port":54150,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25715,"rrname":"xuxorixurez.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.347363+0100","flow_id":457818061163429,"pcap_cnt":5357,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63722,"proto":"UDP","dns":{"type":"answer","id":36817,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:29.041919+0100","flow_id":1114284485091963,"pcap_cnt":5675,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64200,"proto":"UDP","dns":{"type":"answer","id":5026,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:26.408792+0100","flow_id":1028771686005713,"pcap_cnt":4733,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49489,"proto":"UDP","dns":{"type":"answer","id":32459,"rcode":"NXDOMAIN","rrname":"ciqapomogyg.eu"}}
{"timestamp":"2017-12-12T18:33:28.372226+0100","flow_id":1130530198826498,"pcap_cnt":5370,"event_type":"dns","src_ip":"192.168.1.100","src_port":62308,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13236,"rrname":"vonabakyvyk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.208197+0100","flow_id":1312690498809260,"pcap_cnt":4827,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51428,"proto":"UDP","dns":{"type":"answer","id":7800,"rcode":"NXDOMAIN","rrname":"gatuvesisak.eu"}}
{"timestamp":"2017-12-12T18:33:27.097153+0100","flow_id":1522010025327489,"pcap_cnt":4764,"event_type":"dns","src_ip":"192.168.1.100","src_port":58210,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4334,"rrname":"pupegeqifev.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.372556+0100","flow_id":1130530198826498,"pcap_cnt":5371,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62308,"proto":"UDP","dns":{"type":"answer","id":13236,"rcode":"NXDOMAIN","rrname":"vonabakyvyk.eu"}}
{"timestamp":"2017-12-12T18:33:27.357918+0100","flow_id":1040806182958089,"pcap_cnt":4905,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60337,"proto":"UDP","dns":{"type":"answer","id":61051,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:27.453668+0100","flow_id":1790743981436132,"pcap_cnt":4953,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59526,"proto":"UDP","dns":{"type":"answer","id":25561,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:21.716797+0100","flow_id":1247780657774208,"pcap_cnt":3751,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64224,"proto":"UDP","dns":{"type":"answer","id":56871,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":593}}
{"timestamp":"2017-12-12T18:33:27.097477+0100","flow_id":1522010025327489,"pcap_cnt":4765,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58210,"proto":"UDP","dns":{"type":"answer","id":4334,"rcode":"NXDOMAIN","rrname":"pupegeqifev.eu"}}
{"timestamp":"2017-12-12T18:33:22.457617+0100","flow_id":1210176071990161,"pcap_cnt":4052,"event_type":"dns","src_ip":"192.168.1.100","src_port":62709,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":16064,"rrname":"nojuletacuf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.250104+0100","flow_id":1448982696415227,"pcap_cnt":4856,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58655,"proto":"UDP","dns":{"type":"answer","id":42491,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:27.519249+0100","flow_id":2227061119246181,"pcap_cnt":4980,"event_type":"dns","src_ip":"192.168.1.100","src_port":53246,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":54737,"rrname":"nomugacogyk.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:22.446602+0100","flow_id":2023159693781258,"pcap_cnt":4046,"event_type":"dns","src_ip":"192.168.1.100","src_port":51758,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63581,"rrname":"masisokemep.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:29.393058+0100","flow_id":425749687959394,"pcap_cnt":5848,"event_type":"dns","src_ip":"192.168.1.100","src_port":60847,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38557,"rrname":"citahikodab.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.457890+0100","flow_id":1210176071990161,"pcap_cnt":4053,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62709,"proto":"UDP","dns":{"type":"answer","id":16064,"rcode":"NXDOMAIN","rrname":"nojuletacuf.eu"}}
{"timestamp":"2017-12-12T18:33:27.362308+0100","flow_id":663244199397188,"pcap_cnt":4908,"event_type":"dns","src_ip":"192.168.1.100","src_port":50235,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":58283,"rrname":"kepujajynib.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.446885+0100","flow_id":2023159693781258,"pcap_cnt":4047,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51758,"proto":"UDP","dns":{"type":"answer","id":63581,"rcode":"NXDOMAIN","rrname":"masisokemep.eu"}}
{"timestamp":"2017-12-12T18:33:31.379850+0100","flow_id":1114668883306974,"pcap_cnt":6295,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50342,"proto":"UDP","dns":{"type":"answer","id":64865,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":567}}
{"timestamp":"2017-12-12T18:33:25.786209+0100","flow_id":1008087123492381,"pcap_cnt":4427,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49512,"proto":"UDP","dns":{"type":"answer","id":21386,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:22.446885+0100","flow_id":2023159693781258,"pcap_cnt":4047,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51758,"proto":"UDP","dns":{"type":"answer","id":63581,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":553}}
{"timestamp":"2017-12-12T18:33:31.527928+0100","flow_id":361516304633400,"pcap_cnt":6364,"event_type":"dns","src_ip":"192.168.1.100","src_port":63198,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25126,"rrname":"qeburuvenij.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.197261+0100","flow_id":1070576750297465,"pcap_cnt":5283,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61962,"proto":"UDP","dns":{"type":"answer","id":39670,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:22.491592+0100","flow_id":503531545198664,"pcap_cnt":4074,"event_type":"dns","src_ip":"192.168.1.100","src_port":52312,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28056,"rrname":"gahihezenal.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.078011+0100","flow_id":2015845363210943,"pcap_cnt":5229,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60373,"proto":"UDP","dns":{"type":"answer","id":44887,"rcode":"NXDOMAIN","rrname":"rycefelelys.eu"}}
{"timestamp":"2017-12-12T18:33:28.275367+0100","flow_id":816967521068262,"pcap_cnt":5320,"event_type":"dns","src_ip":"192.168.1.100","src_port":54622,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62662,"rrname":"cinuqumahag.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:22.491869+0100","flow_id":503531545198664,"pcap_cnt":4075,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52312,"proto":"UDP","dns":{"type":"answer","id":28056,"rcode":"NXDOMAIN","rrname":"gahihezenal.eu"}}
{"timestamp":"2017-12-12T18:33:22.350550+0100","flow_id":1298192836745558,"pcap_cnt":4018,"event_type":"dns","src_ip":"192.168.1.100","src_port":54510,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":16466,"rrname":"foxikiwiqub.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.991342+0100","flow_id":716059412340606,"pcap_cnt":6079,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60794,"proto":"UDP","dns":{"type":"answer","id":18106,"rcode":"NXDOMAIN","rrname":"qexofyqihid.eu"}}
{"timestamp":"2017-12-12T18:33:29.445393+0100","flow_id":1255462207605432,"pcap_cnt":5887,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61416,"proto":"UDP","dns":{"type":"answer","id":11091,"rcode":"NXDOMAIN","rrname":"rynafivyvol.eu"}}
{"timestamp":"2017-12-12T18:33:29.991342+0100","flow_id":716059412340606,"pcap_cnt":6079,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60794,"proto":"UDP","dns":{"type":"answer","id":18106,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:29.306515+0100","flow_id":1184303189437779,"pcap_cnt":5798,"event_type":"dns","src_ip":"192.168.1.100","src_port":55630,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64020,"rrname":"kejepujajeg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.445393+0100","flow_id":1255462207605432,"pcap_cnt":5887,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61416,"proto":"UDP","dns":{"type":"answer","id":11091,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:26.099674+0100","flow_id":1470923536761906,"pcap_cnt":4579,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65341,"proto":"UDP","dns":{"type":"answer","id":23222,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:28.609855+0100","flow_id":2226094751632725,"pcap_cnt":5485,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55827,"proto":"UDP","dns":{"type":"answer","id":27845,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:29.306769+0100","flow_id":1184303189437779,"pcap_cnt":5799,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55630,"proto":"UDP","dns":{"type":"answer","id":64020,"rcode":"NXDOMAIN","rrname":"kejepujajeg.eu"}}
{"timestamp":"2017-12-12T18:33:26.000490+0100","flow_id":1296642353500438,"pcap_cnt":4510,"event_type":"dns","src_ip":"192.168.1.100","src_port":60032,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":578,"rrname":"tupamapazer.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:26.272721+0100","flow_id":110398156450129,"pcap_cnt":4654,"event_type":"dns","src_ip":"192.168.1.100","src_port":51113,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":12288,"rrname":"dixonesohed.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.652013+0100","flow_id":495214341452271,"pcap_cnt":5505,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58369,"proto":"UDP","dns":{"type":"answer","id":59609,"rcode":"NXDOMAIN","rrname":"xubuvojajyb.eu"}}
{"timestamp":"2017-12-12T18:33:26.000728+0100","flow_id":1296642353500438,"pcap_cnt":4511,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60032,"proto":"UDP","dns":{"type":"answer","id":578,"rcode":"NXDOMAIN","rrname":"tupamapazer.eu"}}
{"timestamp":"2017-12-12T18:33:28.652013+0100","flow_id":495214341452271,"pcap_cnt":5505,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58369,"proto":"UDP","dns":{"type":"answer","id":59609,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:26.000728+0100","flow_id":1296642353500438,"pcap_cnt":4511,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60032,"proto":"UDP","dns":{"type":"answer","id":578,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:26.408792+0100","flow_id":1028771686005713,"pcap_cnt":4733,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49489,"proto":"UDP","dns":{"type":"answer","id":32459,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":577}}
{"timestamp":"2017-12-12T18:33:27.208197+0100","flow_id":1312690498809260,"pcap_cnt":4827,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51428,"proto":"UDP","dns":{"type":"answer","id":7800,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:26.010116+0100","flow_id":301275091532323,"pcap_cnt":4522,"event_type":"dns","src_ip":"192.168.1.100","src_port":50742,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":10065,"rrname":"fobatesohek.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:27.373675+0100","flow_id":1920363946613710,"pcap_cnt":4914,"event_type":"dns","src_ip":"192.168.1.100","src_port":62652,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":24692,"rrname":"xutyrurojah.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:27.417364+0100","flow_id":2175738407509588,"pcap_cnt":4938,"event_type":"dns","src_ip":"192.168.1.100","src_port":62875,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27095,"rrname":"nozapekidis.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.427855+0100","flow_id":1856115531351604,"pcap_cnt":5393,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62612,"proto":"UDP","dns":{"type":"answer","id":36442,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:27.097477+0100","flow_id":1522010025327489,"pcap_cnt":4765,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58210,"proto":"UDP","dns":{"type":"answer","id":4334,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:29.142787+0100","flow_id":1996938919095467,"pcap_cnt":5727,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59534,"proto":"UDP","dns":{"type":"answer","id":64527,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:27.373932+0100","flow_id":1920363946613710,"pcap_cnt":4915,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62652,"proto":"UDP","dns":{"type":"answer","id":24692,"rcode":"NXDOMAIN","rrname":"xutyrurojah.eu"}}
{"timestamp":"2017-12-12T18:33:25.717199+0100","flow_id":2111739099738236,"pcap_cnt":4401,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63240,"proto":"UDP","dns":{"type":"answer","id":43759,"rcode":"NXDOMAIN","rrname":"pujuduvaxim.eu"}}
{"timestamp":"2017-12-12T18:33:28.466658+0100","flow_id":214304152887010,"pcap_cnt":5414,"event_type":"dns","src_ip":"192.168.1.100","src_port":59354,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23215,"rrname":"pufagipajit.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.519518+0100","flow_id":2227061119246181,"pcap_cnt":4981,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53246,"proto":"UDP","dns":{"type":"answer","id":54737,"rcode":"NXDOMAIN","rrname":"nomugacogyk.eu"}}
{"timestamp":"2017-12-12T18:33:29.869286+0100","flow_id":1967441083712180,"pcap_cnt":6027,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60888,"proto":"UDP","dns":{"type":"answer","id":14771,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":546}}
{"timestamp":"2017-12-12T18:33:22.457890+0100","flow_id":1210176071990161,"pcap_cnt":4053,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62709,"proto":"UDP","dns":{"type":"answer","id":16064,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":553}}
{"timestamp":"2017-12-12T18:33:29.393314+0100","flow_id":425749687959394,"pcap_cnt":5849,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60847,"proto":"UDP","dns":{"type":"answer","id":38557,"rcode":"NXDOMAIN","rrname":"citahikodab.eu"}}
{"timestamp":"2017-12-12T18:33:28.466900+0100","flow_id":214304152887010,"pcap_cnt":5415,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59354,"proto":"UDP","dns":{"type":"answer","id":23215,"rcode":"NXDOMAIN","rrname":"pufagipajit.eu"}}
{"timestamp":"2017-12-12T18:33:27.362583+0100","flow_id":663244199397188,"pcap_cnt":4909,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50235,"proto":"UDP","dns":{"type":"answer","id":58283,"rcode":"NXDOMAIN","rrname":"kepujajynib.eu"}}
{"timestamp":"2017-12-12T18:33:28.563874+0100","flow_id":1842287884147122,"pcap_cnt":5459,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63700,"proto":"UDP","dns":{"type":"answer","id":41235,"rcode":"NXDOMAIN","rrname":"vojopumuqot.eu"}}
{"timestamp":"2017-12-12T18:33:22.490402+0100","flow_id":158338581167010,"pcap_cnt":4072,"event_type":"dns","src_ip":"192.168.1.100","src_port":60980,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18312,"rrname":"dixemazufel.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.466900+0100","flow_id":214304152887010,"pcap_cnt":5415,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59354,"proto":"UDP","dns":{"type":"answer","id":23215,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:25.798124+0100","flow_id":1555180057603500,"pcap_cnt":4434,"event_type":"dns","src_ip":"192.168.1.100","src_port":59491,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26980,"rrname":"cilodamenub.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.563874+0100","flow_id":1842287884147122,"pcap_cnt":5459,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63700,"proto":"UDP","dns":{"type":"answer","id":41235,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:25.728147+0100","flow_id":384533033982755,"pcap_cnt":4409,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55341,"proto":"UDP","dns":{"type":"answer","id":26994,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:22.490686+0100","flow_id":158338581167010,"pcap_cnt":4073,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60980,"proto":"UDP","dns":{"type":"answer","id":18312,"rcode":"NXDOMAIN","rrname":"dixemazufel.eu"}}
{"timestamp":"2017-12-12T18:33:28.078011+0100","flow_id":2015845363210943,"pcap_cnt":5229,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60373,"proto":"UDP","dns":{"type":"answer","id":44887,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:25.798430+0100","flow_id":1555180057603500,"pcap_cnt":4435,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59491,"proto":"UDP","dns":{"type":"answer","id":26980,"rcode":"NXDOMAIN","rrname":"cilodamenub.eu"}}
{"timestamp":"2017-12-12T18:33:28.275598+0100","flow_id":816967521068262,"pcap_cnt":5321,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54622,"proto":"UDP","dns":{"type":"answer","id":62662,"rcode":"NXDOMAIN","rrname":"cinuqumahag.eu"}}
{"timestamp":"2017-12-12T18:33:22.491869+0100","flow_id":503531545198664,"pcap_cnt":4075,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52312,"proto":"UDP","dns":{"type":"answer","id":28056,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":553}}
{"timestamp":"2017-12-12T18:33:25.798430+0100","flow_id":1555180057603500,"pcap_cnt":4435,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59491,"proto":"UDP","dns":{"type":"answer","id":26980,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:22.350797+0100","flow_id":1298192836745558,"pcap_cnt":4019,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54510,"proto":"UDP","dns":{"type":"answer","id":16466,"rcode":"NXDOMAIN","rrname":"foxikiwiqub.eu"}}
{"timestamp":"2017-12-12T18:33:28.275598+0100","flow_id":816967521068262,"pcap_cnt":5321,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54622,"proto":"UDP","dns":{"type":"answer","id":62662,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:30.076061+0100","flow_id":188695410518301,"pcap_cnt":6106,"event_type":"dns","src_ip":"192.168.1.100","src_port":54173,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37497,"rrname":"kezapyjolek.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.811417+0100","flow_id":2200713642205593,"pcap_cnt":4440,"event_type":"dns","src_ip":"192.168.1.100","src_port":61819,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38248,"rrname":"jepogejebak.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.306769+0100","flow_id":1184303189437779,"pcap_cnt":5799,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55630,"proto":"UDP","dns":{"type":"answer","id":64020,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:28.407976+0100","flow_id":1845680908286376,"pcap_cnt":5386,"event_type":"dns","src_ip":"192.168.1.100","src_port":61907,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":32137,"rrname":"direwyzexem.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.356636+0100","flow_id":438288844877859,"pcap_cnt":5365,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58401,"proto":"UDP","dns":{"type":"answer","id":50713,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:25.811712+0100","flow_id":2200713642205593,"pcap_cnt":4441,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61819,"proto":"UDP","dns":{"type":"answer","id":38248,"rcode":"NXDOMAIN","rrname":"jepogejebak.eu"}}
{"timestamp":"2017-12-12T18:33:26.273033+0100","flow_id":110398156450129,"pcap_cnt":4655,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51113,"proto":"UDP","dns":{"type":"answer","id":12288,"rcode":"NXDOMAIN","rrname":"dixonesohed.eu"}}
{"timestamp":"2017-12-12T18:33:25.811712+0100","flow_id":2200713642205593,"pcap_cnt":4441,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61819,"proto":"UDP","dns":{"type":"answer","id":38248,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:26.273033+0100","flow_id":110398156450129,"pcap_cnt":4655,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51113,"proto":"UDP","dns":{"type":"answer","id":12288,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:28.372556+0100","flow_id":1130530198826498,"pcap_cnt":5371,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62308,"proto":"UDP","dns":{"type":"answer","id":13236,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:25.933620+0100","flow_id":134164357922548,"pcap_cnt":4492,"event_type":"dns","src_ip":"192.168.1.100","src_port":61151,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62609,"rrname":"vocupotusyz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.240476+0100","flow_id":1462872620641116,"pcap_cnt":4844,"event_type":"dns","src_ip":"192.168.1.100","src_port":58069,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63526,"rrname":"nofuwufutom.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.305197+0100","flow_id":1506881002973229,"pcap_cnt":4664,"event_type":"dns","src_ip":"192.168.1.100","src_port":54352,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":10178,"rrname":"kepabydokas.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.933949+0100","flow_id":134164357922548,"pcap_cnt":4493,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61151,"proto":"UDP","dns":{"type":"answer","id":62609,"rcode":"NXDOMAIN","rrname":"vocupotusyz.eu"}}
{"timestamp":"2017-12-12T18:33:27.076287+0100","flow_id":2100226439981260,"pcap_cnt":4751,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54312,"proto":"UDP","dns":{"type":"answer","id":56705,"rcode":"NXDOMAIN","rrname":"xudakejupok.eu"}}
{"timestamp":"2017-12-12T18:33:27.240804+0100","flow_id":1462872620641116,"pcap_cnt":4845,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58069,"proto":"UDP","dns":{"type":"answer","id":63526,"rcode":"NXDOMAIN","rrname":"nofuwufutom.eu"}}
{"timestamp":"2017-12-12T18:33:27.417642+0100","flow_id":2175738407509588,"pcap_cnt":4939,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62875,"proto":"UDP","dns":{"type":"answer","id":27095,"rcode":"NXDOMAIN","rrname":"nozapekidis.eu"}}
{"timestamp":"2017-12-12T18:33:27.240804+0100","flow_id":1462872620641116,"pcap_cnt":4845,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58069,"proto":"UDP","dns":{"type":"answer","id":63526,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:27.417642+0100","flow_id":2175738407509588,"pcap_cnt":4939,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62875,"proto":"UDP","dns":{"type":"answer","id":27095,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:27.246239+0100","flow_id":163627833737695,"pcap_cnt":4846,"event_type":"dns","src_ip":"192.168.1.100","src_port":52735,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":16121,"rrname":"gadinubidyp.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.305508+0100","flow_id":1660677339588964,"pcap_cnt":5796,"event_type":"dns","src_ip":"192.168.1.100","src_port":56794,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":22223,"rrname":"jelojujopen.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.706864+0100","flow_id":1363560091863344,"pcap_cnt":5050,"event_type":"dns","src_ip":"192.168.1.100","src_port":49462,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53600,"rrname":"xuxehajexuw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.246504+0100","flow_id":163627833737695,"pcap_cnt":4847,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52735,"proto":"UDP","dns":{"type":"answer","id":16121,"rcode":"NXDOMAIN","rrname":"gadinubidyp.eu"}}
{"timestamp":"2017-12-12T18:33:27.707183+0100","flow_id":1363560091863344,"pcap_cnt":5051,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49462,"proto":"UDP","dns":{"type":"answer","id":53600,"rcode":"NXDOMAIN","rrname":"xuxehajexuw.eu"}}
{"timestamp":"2017-12-12T18:33:27.246504+0100","flow_id":163627833737695,"pcap_cnt":4847,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52735,"proto":"UDP","dns":{"type":"answer","id":16121,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:27.520677+0100","flow_id":1740492864221388,"pcap_cnt":4983,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56011,"proto":"UDP","dns":{"type":"answer","id":28494,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:29.393314+0100","flow_id":425749687959394,"pcap_cnt":5849,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60847,"proto":"UDP","dns":{"type":"answer","id":38557,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:31.481306+0100","flow_id":1788721052211226,"pcap_cnt":6338,"event_type":"dns","src_ip":"192.168.1.100","src_port":55297,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40619,"rrname":"qeqotogemet.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.362583+0100","flow_id":663244199397188,"pcap_cnt":4909,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50235,"proto":"UDP","dns":{"type":"answer","id":58283,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:27.808122+0100","flow_id":77515886908602,"pcap_cnt":5096,"event_type":"dns","src_ip":"192.168.1.100","src_port":65139,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28644,"rrname":"fokenuzohym.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.528164+0100","flow_id":361516304633400,"pcap_cnt":6365,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63198,"proto":"UDP","dns":{"type":"answer","id":25126,"rcode":"NXDOMAIN","rrname":"qeburuvenij.eu"}}
{"timestamp":"2017-12-12T18:33:27.406701+0100","flow_id":905583434085549,"pcap_cnt":4928,"event_type":"dns","src_ip":"192.168.1.100","src_port":61711,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62349,"rrname":"noveditifan.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.698967+0100","flow_id":2128450817665623,"pcap_cnt":5520,"event_type":"dns","src_ip":"192.168.1.100","src_port":55708,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47614,"rrname":"qedakalyned.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.615681+0100","flow_id":319155042018561,"pcap_cnt":5486,"event_type":"dns","src_ip":"192.168.1.100","src_port":49549,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":57047,"rrname":"rynoryguwuh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.490686+0100","flow_id":158338581167010,"pcap_cnt":4073,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60980,"proto":"UDP","dns":{"type":"answer","id":18312,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":553}}
{"timestamp":"2017-12-12T18:33:28.699216+0100","flow_id":2128450817665623,"pcap_cnt":5521,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55708,"proto":"UDP","dns":{"type":"answer","id":47614,"rcode":"NXDOMAIN","rrname":"qedakalyned.eu"}}
{"timestamp":"2017-12-12T18:33:31.198576+0100","flow_id":1219412399687600,"pcap_cnt":6194,"event_type":"dns","src_ip":"192.168.1.100","src_port":63399,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47107,"rrname":"cicucifokym.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.529418+0100","flow_id":703404290043204,"pcap_cnt":4080,"event_type":"dns","src_ip":"192.168.1.100","src_port":60563,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23377,"rrname":"vocumucokaj.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:28.326926+0100","flow_id":1276286356487438,"pcap_cnt":5344,"event_type":"dns","src_ip":"192.168.1.100","src_port":49167,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51435,"rrname":"tupyjoqirof.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.350797+0100","flow_id":1298192836745558,"pcap_cnt":4019,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54510,"proto":"UDP","dns":{"type":"answer","id":16466,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":594}}
{"timestamp":"2017-12-12T18:33:31.198788+0100","flow_id":1219412399687600,"pcap_cnt":6195,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63399,"proto":"UDP","dns":{"type":"answer","id":47107,"rcode":"NXDOMAIN","rrname":"cicucifokym.eu"}}
{"timestamp":"2017-12-12T18:33:28.327259+0100","flow_id":1276286356487438,"pcap_cnt":5345,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49167,"proto":"UDP","dns":{"type":"answer","id":51435,"rcode":"NXDOMAIN","rrname":"tupyjoqirof.eu"}}
{"timestamp":"2017-12-12T18:33:28.885248+0100","flow_id":476840471331328,"pcap_cnt":5608,"event_type":"dns","src_ip":"192.168.1.100","src_port":61068,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43991,"rrname":"lysisuxofaz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.327259+0100","flow_id":1276286356487438,"pcap_cnt":5345,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49167,"proto":"UDP","dns":{"type":"answer","id":51435,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:22.430344+0100","flow_id":979437543919880,"pcap_cnt":4038,"event_type":"dns","src_ip":"192.168.1.100","src_port":62699,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35611,"rrname":"vojacikigep.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.924648+0100","flow_id":1548576545512424,"pcap_cnt":5150,"event_type":"dns","src_ip":"192.168.1.100","src_port":50100,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38447,"rrname":"fobirybakes.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.345999+0100","flow_id":2058090663397263,"pcap_cnt":5354,"event_type":"dns","src_ip":"192.168.1.100","src_port":60953,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49912,"rrname":"fobexawumov.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.430643+0100","flow_id":979437543919880,"pcap_cnt":4039,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62699,"proto":"UDP","dns":{"type":"answer","id":35611,"rcode":"NXDOMAIN","rrname":"vojacikigep.eu"}}
{"timestamp":"2017-12-12T18:33:28.408241+0100","flow_id":1845680908286376,"pcap_cnt":5387,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61907,"proto":"UDP","dns":{"type":"answer","id":32137,"rcode":"NXDOMAIN","rrname":"direwyzexem.eu"}}
{"timestamp":"2017-12-12T18:33:28.363110+0100","flow_id":699251057789542,"pcap_cnt":5366,"event_type":"dns","src_ip":"192.168.1.100","src_port":63254,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60942,"rrname":"ciqirokajyr.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.438877+0100","flow_id":1009298304512605,"pcap_cnt":5882,"event_type":"dns","src_ip":"192.168.1.100","src_port":56636,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4102,"rrname":"cihuzucagot.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.346335+0100","flow_id":2058090663397263,"pcap_cnt":5355,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60953,"proto":"UDP","dns":{"type":"answer","id":49912,"rcode":"NXDOMAIN","rrname":"fobexawumov.eu"}}
{"timestamp":"2017-12-12T18:33:26.010403+0100","flow_id":301275091532323,"pcap_cnt":4523,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50742,"proto":"UDP","dns":{"type":"answer","id":10065,"rcode":"NXDOMAIN","rrname":"fobatesohek.eu"}}
{"timestamp":"2017-12-12T18:33:25.933949+0100","flow_id":134164357922548,"pcap_cnt":4493,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61151,"proto":"UDP","dns":{"type":"answer","id":62609,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:26.010403+0100","flow_id":301275091532323,"pcap_cnt":4523,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50742,"proto":"UDP","dns":{"type":"answer","id":10065,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:26.305600+0100","flow_id":1506881002973229,"pcap_cnt":4665,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54352,"proto":"UDP","dns":{"type":"answer","id":10178,"rcode":"NXDOMAIN","rrname":"kepabydokas.eu"}}
{"timestamp":"2017-12-12T18:33:27.076287+0100","flow_id":2100226439981260,"pcap_cnt":4751,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54312,"proto":"UDP","dns":{"type":"answer","id":56705,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:22.268957+0100","flow_id":1165239976598173,"pcap_cnt":3978,"event_type":"dns","src_ip":"192.168.1.100","src_port":50317,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49874,"rrname":"fokyhyhumap.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.020792+0100","flow_id":2122530205094200,"pcap_cnt":4536,"event_type":"dns","src_ip":"192.168.1.100","src_port":60243,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":32775,"rrname":"ryhadyvigis.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.373932+0100","flow_id":1920363946613710,"pcap_cnt":4915,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62652,"proto":"UDP","dns":{"type":"answer","id":24692,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:27.165110+0100","flow_id":2096996624598262,"pcap_cnt":4804,"event_type":"dns","src_ip":"192.168.1.100","src_port":53290,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44947,"rrname":"qebifopalaz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.269228+0100","flow_id":1165239976598173,"pcap_cnt":3979,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50317,"proto":"UDP","dns":{"type":"answer","id":49874,"rcode":"NXDOMAIN","rrname":"fokyhyhumap.eu"}}
{"timestamp":"2017-12-12T18:33:27.519518+0100","flow_id":2227061119246181,"pcap_cnt":4981,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53246,"proto":"UDP","dns":{"type":"answer","id":54737,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:22.269228+0100","flow_id":1165239976598173,"pcap_cnt":3979,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50317,"proto":"UDP","dns":{"type":"answer","id":49874,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":595}}
{"timestamp":"2017-12-12T18:33:27.707183+0100","flow_id":1363560091863344,"pcap_cnt":5051,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49462,"proto":"UDP","dns":{"type":"answer","id":53600,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:27.165378+0100","flow_id":2096996624598262,"pcap_cnt":4805,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53290,"proto":"UDP","dns":{"type":"answer","id":44947,"rcode":"NXDOMAIN","rrname":"qebifopalaz.eu"}}
{"timestamp":"2017-12-12T18:33:27.254489+0100","flow_id":734446167253529,"pcap_cnt":4860,"event_type":"dns","src_ip":"192.168.1.100","src_port":63742,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36948,"rrname":"ryqudigyqog.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.404468+0100","flow_id":907043722636276,"pcap_cnt":4034,"event_type":"dns","src_ip":"192.168.1.100","src_port":49992,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5400,"rrname":"keraborigin.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.165378+0100","flow_id":2096996624598262,"pcap_cnt":4805,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53290,"proto":"UDP","dns":{"type":"answer","id":44947,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:27.575841+0100","flow_id":1604204961974625,"pcap_cnt":4998,"event_type":"dns","src_ip":"192.168.1.100","src_port":61231,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":32889,"rrname":"vopycyfutoc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.481575+0100","flow_id":1788721052211226,"pcap_cnt":6339,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55297,"proto":"UDP","dns":{"type":"answer","id":40619,"rcode":"NXDOMAIN","rrname":"qeqotogemet.eu"}}
{"timestamp":"2017-12-12T18:33:27.808393+0100","flow_id":77515886908602,"pcap_cnt":5097,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65139,"proto":"UDP","dns":{"type":"answer","id":28644,"rcode":"NXDOMAIN","rrname":"fokenuzohym.eu"}}
{"timestamp":"2017-12-12T18:33:27.254727+0100","flow_id":734446167253529,"pcap_cnt":4861,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63742,"proto":"UDP","dns":{"type":"answer","id":36948,"rcode":"NXDOMAIN","rrname":"ryqudigyqog.eu"}}
{"timestamp":"2017-12-12T18:33:27.808393+0100","flow_id":77515886908602,"pcap_cnt":5097,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65139,"proto":"UDP","dns":{"type":"answer","id":28644,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:27.406977+0100","flow_id":905583434085549,"pcap_cnt":4929,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61711,"proto":"UDP","dns":{"type":"answer","id":62349,"rcode":"NXDOMAIN","rrname":"noveditifan.eu"}}
{"timestamp":"2017-12-12T18:33:27.826780+0100","flow_id":1810311851914976,"pcap_cnt":5108,"event_type":"dns","src_ip":"192.168.1.100","src_port":53138,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18222,"rrname":"galicasevor.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:25.850194+0100","flow_id":1538659465951506,"pcap_cnt":4454,"event_type":"dns","src_ip":"192.168.1.100","src_port":63343,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5162,"rrname":"volyrukupoq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.406977+0100","flow_id":905583434085549,"pcap_cnt":4929,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61711,"proto":"UDP","dns":{"type":"answer","id":62349,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:28.699216+0100","flow_id":2128450817665623,"pcap_cnt":5521,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55708,"proto":"UDP","dns":{"type":"answer","id":47614,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:28.615927+0100","flow_id":319155042018561,"pcap_cnt":5487,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49549,"proto":"UDP","dns":{"type":"answer","id":57047,"rcode":"NXDOMAIN","rrname":"rynoryguwuh.eu"}}
{"timestamp":"2017-12-12T18:33:27.827126+0100","flow_id":1810311851914976,"pcap_cnt":5109,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53138,"proto":"UDP","dns":{"type":"answer","id":18222,"rcode":"NXDOMAIN","rrname":"galicasevor.eu"}}
{"timestamp":"2017-12-12T18:33:22.844849+0100","flow_id":86868177904689,"pcap_cnt":4178,"event_type":"dns","src_ip":"192.168.1.100","src_port":65155,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28044,"rrname":"nomebemenid.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.858592+0100","flow_id":1698382857312736,"pcap_cnt":5124,"event_type":"dns","src_ip":"192.168.1.100","src_port":58452,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":24052,"rrname":"nozubacezyb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.827126+0100","flow_id":1810311851914976,"pcap_cnt":5109,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53138,"proto":"UDP","dns":{"type":"answer","id":18222,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:29.496524+0100","flow_id":1129327608042380,"pcap_cnt":5900,"event_type":"dns","src_ip":"192.168.1.100","src_port":56801,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60105,"rrname":"dikolobeliw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.885579+0100","flow_id":476840471331328,"pcap_cnt":5609,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61068,"proto":"UDP","dns":{"type":"answer","id":43991,"rcode":"NXDOMAIN","rrname":"lysisuxofaz.eu"}}
{"timestamp":"2017-12-12T18:33:22.845106+0100","flow_id":86868177904689,"pcap_cnt":4179,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65155,"proto":"UDP","dns":{"type":"answer","id":28044,"rcode":"NXDOMAIN","rrname":"nomebemenid.eu"}}
{"timestamp":"2017-12-12T18:33:27.858864+0100","flow_id":1698382857312736,"pcap_cnt":5125,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58452,"proto":"UDP","dns":{"type":"answer","id":24052,"rcode":"NXDOMAIN","rrname":"nozubacezyb.eu"}}
{"timestamp":"2017-12-12T18:33:28.762138+0100","flow_id":418162628141338,"pcap_cnt":5546,"event_type":"dns","src_ip":"192.168.1.100","src_port":64249,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1194,"rrname":"purebupycug.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.408241+0100","flow_id":1845680908286376,"pcap_cnt":5387,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61907,"proto":"UDP","dns":{"type":"answer","id":32137,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:22.845106+0100","flow_id":86868177904689,"pcap_cnt":4179,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65155,"proto":"UDP","dns":{"type":"answer","id":28044,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:28.578982+0100","flow_id":1115308834739622,"pcap_cnt":5466,"event_type":"dns","src_ip":"192.168.1.100","src_port":55540,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34946,"rrname":"xuxyxynahop.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.439153+0100","flow_id":1009298304512605,"pcap_cnt":5883,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56636,"proto":"UDP","dns":{"type":"answer","id":4102,"rcode":"NXDOMAIN","rrname":"cihuzucagot.eu"}}
{"timestamp":"2017-12-12T18:33:28.346335+0100","flow_id":2058090663397263,"pcap_cnt":5355,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60953,"proto":"UDP","dns":{"type":"answer","id":49912,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:28.609186+0100","flow_id":816967521068262,"pcap_cnt":5482,"event_type":"dns","src_ip":"192.168.1.100","src_port":54622,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8496,"rrname":"qequfygycuq.eu","rrtype":"A","tx_id":2}}
{"timestamp":"2017-12-12T18:33:28.762436+0100","flow_id":418162628141338,"pcap_cnt":5547,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64249,"proto":"UDP","dns":{"type":"answer","id":1194,"rcode":"NXDOMAIN","rrname":"purebupycug.eu"}}
{"timestamp":"2017-12-12T18:33:25.717199+0100","flow_id":2111739099738236,"pcap_cnt":4401,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63240,"proto":"UDP","dns":{"type":"answer","id":43759,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:28.415637+0100","flow_id":1147540416780181,"pcap_cnt":5388,"event_type":"dns","src_ip":"192.168.1.100","src_port":54862,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51537,"rrname":"foqyvyzuqeh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.305775+0100","flow_id":1660677339588964,"pcap_cnt":5797,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56794,"proto":"UDP","dns":{"type":"answer","id":22223,"rcode":"NXDOMAIN","rrname":"jelojujopen.eu"}}
{"timestamp":"2017-12-12T18:33:27.687716+0100","flow_id":2082559092031076,"pcap_cnt":5044,"event_type":"dns","src_ip":"192.168.1.100","src_port":51452,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45288,"rrname":"qequroquweb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.415914+0100","flow_id":1147540416780181,"pcap_cnt":5389,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54862,"proto":"UDP","dns":{"type":"answer","id":51537,"rcode":"NXDOMAIN","rrname":"foqyvyzuqeh.eu"}}
{"timestamp":"2017-12-12T18:33:27.935934+0100","flow_id":874827171491592,"pcap_cnt":5154,"event_type":"dns","src_ip":"192.168.1.100","src_port":49484,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8093,"rrname":"novomyfexij.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:27.688193+0100","flow_id":2082559092031076,"pcap_cnt":5045,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51452,"proto":"UDP","dns":{"type":"answer","id":45288,"rcode":"NXDOMAIN","rrname":"qequroquweb.eu"}}
{"timestamp":"2017-12-12T18:33:29.480088+0100","flow_id":301968730444632,"pcap_cnt":5894,"event_type":"dns","src_ip":"192.168.1.100","src_port":55916,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11956,"rrname":"cilicofahev.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.404754+0100","flow_id":907043722636276,"pcap_cnt":4035,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49992,"proto":"UDP","dns":{"type":"answer","id":5400,"rcode":"NXDOMAIN","rrname":"keraborigin.eu"}}
{"timestamp":"2017-12-12T18:33:27.688193+0100","flow_id":2082559092031076,"pcap_cnt":5045,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51452,"proto":"UDP","dns":{"type":"answer","id":45288,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:27.936304+0100","flow_id":874827171491592,"pcap_cnt":5155,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49484,"proto":"UDP","dns":{"type":"answer","id":8093,"rcode":"NXDOMAIN","rrname":"novomyfexij.eu"}}
{"timestamp":"2017-12-12T18:33:31.528164+0100","flow_id":361516304633400,"pcap_cnt":6365,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63198,"proto":"UDP","dns":{"type":"answer","id":25126,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:27.936304+0100","flow_id":874827171491592,"pcap_cnt":5155,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49484,"proto":"UDP","dns":{"type":"answer","id":8093,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:29.431685+0100","flow_id":955757242193477,"pcap_cnt":5870,"event_type":"dns","src_ip":"192.168.1.100","src_port":59366,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":367,"rrname":"pufexalopas.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.424438+0100","flow_id":1398332147005942,"pcap_cnt":4738,"event_type":"dns","src_ip":"192.168.1.100","src_port":64460,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":61088,"rrname":"maxagamisyb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.997715+0100","flow_id":3893703659338,"pcap_cnt":5190,"event_type":"dns","src_ip":"192.168.1.100","src_port":63599,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7603,"rrname":"nomawimecat.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:27.254727+0100","flow_id":734446167253529,"pcap_cnt":4861,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63742,"proto":"UDP","dns":{"type":"answer","id":36948,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:29.431936+0100","flow_id":955757242193477,"pcap_cnt":5871,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59366,"proto":"UDP","dns":{"type":"answer","id":367,"rcode":"NXDOMAIN","rrname":"pufexalopas.eu"}}
{"timestamp":"2017-12-12T18:33:26.424693+0100","flow_id":1398332147005942,"pcap_cnt":4739,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64460,"proto":"UDP","dns":{"type":"answer","id":61088,"rcode":"NXDOMAIN","rrname":"maxagamisyb.eu"}}
{"timestamp":"2017-12-12T18:33:29.431936+0100","flow_id":955757242193477,"pcap_cnt":5871,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59366,"proto":"UDP","dns":{"type":"answer","id":367,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:25.850450+0100","flow_id":1538659465951506,"pcap_cnt":4455,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63343,"proto":"UDP","dns":{"type":"answer","id":5162,"rcode":"NXDOMAIN","rrname":"volyrukupoq.eu"}}
{"timestamp":"2017-12-12T18:33:26.424693+0100","flow_id":1398332147005942,"pcap_cnt":4739,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64460,"proto":"UDP","dns":{"type":"answer","id":61088,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:30.076337+0100","flow_id":188695410518301,"pcap_cnt":6107,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54173,"proto":"UDP","dns":{"type":"answer","id":37497,"rcode":"NXDOMAIN","rrname":"kezapyjolek.eu"}}
{"timestamp":"2017-12-12T18:33:25.850450+0100","flow_id":1538659465951506,"pcap_cnt":4455,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63343,"proto":"UDP","dns":{"type":"answer","id":5162,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:29.659060+0100","flow_id":555655268732532,"pcap_cnt":5972,"event_type":"dns","src_ip":"192.168.1.100","src_port":62072,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":21006,"rrname":"kefucoruvyd.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.104248+0100","flow_id":1088699364775736,"pcap_cnt":4772,"event_type":"dns","src_ip":"192.168.1.100","src_port":59416,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51505,"rrname":"lykonurymex.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:30.076337+0100","flow_id":188695410518301,"pcap_cnt":6107,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54173,"proto":"UDP","dns":{"type":"answer","id":37497,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:27.924961+0100","flow_id":1548576545512424,"pcap_cnt":5151,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50100,"proto":"UDP","dns":{"type":"answer","id":38447,"rcode":"NXDOMAIN","rrname":"fobirybakes.eu"}}
{"timestamp":"2017-12-12T18:33:27.904783+0100","flow_id":259141463952975,"pcap_cnt":5138,"event_type":"dns","src_ip":"192.168.1.100","src_port":61128,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37044,"rrname":"xutoxedyniq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.104528+0100","flow_id":1088699364775736,"pcap_cnt":4773,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59416,"proto":"UDP","dns":{"type":"answer","id":51505,"rcode":"NXDOMAIN","rrname":"lykonurymex.eu"}}
{"timestamp":"2017-12-12T18:33:29.496780+0100","flow_id":1129327608042380,"pcap_cnt":5901,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56801,"proto":"UDP","dns":{"type":"answer","id":60105,"rcode":"NXDOMAIN","rrname":"dikolobeliw.eu"}}
{"timestamp":"2017-12-12T18:33:27.858864+0100","flow_id":1698382857312736,"pcap_cnt":5125,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58452,"proto":"UDP","dns":{"type":"answer","id":24052,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:28.363416+0100","flow_id":699251057789542,"pcap_cnt":5367,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63254,"proto":"UDP","dns":{"type":"answer","id":60942,"rcode":"NXDOMAIN","rrname":"ciqirokajyr.eu"}}
{"timestamp":"2017-12-12T18:33:27.100597+0100","flow_id":2041271571417333,"pcap_cnt":4768,"event_type":"dns","src_ip":"192.168.1.100","src_port":50204,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29699,"rrname":"kezituraxep.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.363416+0100","flow_id":699251057789542,"pcap_cnt":5367,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63254,"proto":"UDP","dns":{"type":"answer","id":60942,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:29.439153+0100","flow_id":1009298304512605,"pcap_cnt":5883,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56636,"proto":"UDP","dns":{"type":"answer","id":4102,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:25.577942+0100","flow_id":2230280197099926,"pcap_cnt":4362,"event_type":"dns","src_ip":"192.168.1.100","src_port":64251,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35097,"rrname":"pufepepazyd.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.305600+0100","flow_id":1506881002973229,"pcap_cnt":4665,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54352,"proto":"UDP","dns":{"type":"answer","id":10178,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:29.540524+0100","flow_id":1914780489695084,"pcap_cnt":5922,"event_type":"dns","src_ip":"192.168.1.100","src_port":57791,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":58380,"rrname":"xubirenosiq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.324140+0100","flow_id":1798715440820780,"pcap_cnt":4680,"event_type":"dns","src_ip":"192.168.1.100","src_port":55549,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33247,"rrname":"nozulufynax.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.609448+0100","flow_id":816967521068262,"pcap_cnt":5483,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54622,"proto":"UDP","dns":{"type":"answer","id":8496,"rcode":"NXDOMAIN","rrname":"qequfygycuq.eu"}}
{"timestamp":"2017-12-12T18:33:26.021044+0100","flow_id":2122530205094200,"pcap_cnt":4537,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60243,"proto":"UDP","dns":{"type":"answer","id":32775,"rcode":"NXDOMAIN","rrname":"ryhadyvigis.eu"}}
{"timestamp":"2017-12-12T18:33:28.609448+0100","flow_id":816967521068262,"pcap_cnt":5483,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54622,"proto":"UDP","dns":{"type":"answer","id":8496,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:29.305775+0100","flow_id":1660677339588964,"pcap_cnt":5797,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56794,"proto":"UDP","dns":{"type":"answer","id":22223,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:29.923894+0100","flow_id":1357744706230518,"pcap_cnt":6052,"event_type":"dns","src_ip":"192.168.1.100","src_port":56497,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35931,"rrname":"fobonobaxog.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.415914+0100","flow_id":1147540416780181,"pcap_cnt":5389,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54862,"proto":"UDP","dns":{"type":"answer","id":51537,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:29.525091+0100","flow_id":1248652536906531,"pcap_cnt":5914,"event_type":"dns","src_ip":"192.168.1.100","src_port":53089,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51290,"rrname":"jepobanagij.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.360573+0100","flow_id":2150632176189565,"pcap_cnt":4906,"event_type":"dns","src_ip":"192.168.1.100","src_port":49163,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41699,"rrname":"kefilyrymaj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.576365+0100","flow_id":1604204961974625,"pcap_cnt":4999,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61231,"proto":"UDP","dns":{"type":"answer","id":32889,"rcode":"NXDOMAIN","rrname":"vopycyfutoc.eu"}}
{"timestamp":"2017-12-12T18:33:22.404754+0100","flow_id":907043722636276,"pcap_cnt":4035,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49992,"proto":"UDP","dns":{"type":"answer","id":5400,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":553}}
{"timestamp":"2017-12-12T18:33:27.576365+0100","flow_id":1604204961974625,"pcap_cnt":4999,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61231,"proto":"UDP","dns":{"type":"answer","id":32889,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:27.793502+0100","flow_id":894811656100766,"pcap_cnt":5092,"event_type":"dns","src_ip":"192.168.1.100","src_port":65400,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31928,"rrname":"dixotuzipuh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.747957+0100","flow_id":2181858735581621,"pcap_cnt":4144,"event_type":"dns","src_ip":"192.168.1.100","src_port":56795,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23630,"rrname":"vopepukaxej.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.701122+0100","flow_id":156732264002242,"pcap_cnt":6442,"event_type":"dns","src_ip":"192.168.1.100","src_port":54089,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":15704,"rrname":"galavozaxog.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.604553+0100","flow_id":1516175312238985,"pcap_cnt":5010,"event_type":"dns","src_ip":"192.168.1.100","src_port":55130,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1664,"rrname":"lyxilunogem.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.793838+0100","flow_id":894811656100766,"pcap_cnt":5093,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65400,"proto":"UDP","dns":{"type":"answer","id":31928,"rcode":"NXDOMAIN","rrname":"dixotuzipuh.eu"}}
{"timestamp":"2017-12-12T18:33:27.997981+0100","flow_id":3893703659338,"pcap_cnt":5191,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63599,"proto":"UDP","dns":{"type":"answer","id":7603,"rcode":"NXDOMAIN","rrname":"nomawimecat.eu"}}
{"timestamp":"2017-12-12T18:33:27.793838+0100","flow_id":894811656100766,"pcap_cnt":5093,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65400,"proto":"UDP","dns":{"type":"answer","id":31928,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:28.615927+0100","flow_id":319155042018561,"pcap_cnt":5487,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49549,"proto":"UDP","dns":{"type":"answer","id":57047,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:27.338099+0100","flow_id":1959920595839155,"pcap_cnt":4894,"event_type":"dns","src_ip":"192.168.1.100","src_port":61306,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42953,"rrname":"foxofewuteq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.198788+0100","flow_id":1219412399687600,"pcap_cnt":6195,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63399,"proto":"UDP","dns":{"type":"answer","id":47107,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:28.833433+0100","flow_id":1541225709090713,"pcap_cnt":5580,"event_type":"dns","src_ip":"192.168.1.100","src_port":59248,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2511,"rrname":"mavywefycyc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.805906+0100","flow_id":1426483510266898,"pcap_cnt":5568,"event_type":"dns","src_ip":"192.168.1.100","src_port":57038,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":32625,"rrname":"jejecyxyvex.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.316505+0100","flow_id":187617373574233,"pcap_cnt":4884,"event_type":"dns","src_ip":"192.168.1.100","src_port":53483,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2535,"rrname":"rytifaquwer.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:30.133854+0100","flow_id":1666164160334558,"pcap_cnt":6124,"event_type":"dns","src_ip":"192.168.1.100","src_port":57493,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":52361,"rrname":"vofydatacut.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.924961+0100","flow_id":1548576545512424,"pcap_cnt":5151,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50100,"proto":"UDP","dns":{"type":"answer","id":38447,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:28.885579+0100","flow_id":476840471331328,"pcap_cnt":5609,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61068,"proto":"UDP","dns":{"type":"answer","id":43991,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:27.316769+0100","flow_id":187617373574233,"pcap_cnt":4885,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53483,"proto":"UDP","dns":{"type":"answer","id":2535,"rcode":"NXDOMAIN","rrname":"rytifaquwer.eu"}}
{"timestamp":"2017-12-12T18:33:27.104528+0100","flow_id":1088699364775736,"pcap_cnt":4773,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59416,"proto":"UDP","dns":{"type":"answer","id":51505,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:29.496780+0100","flow_id":1129327608042380,"pcap_cnt":5901,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56801,"proto":"UDP","dns":{"type":"answer","id":60105,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:27.316769+0100","flow_id":187617373574233,"pcap_cnt":4885,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53483,"proto":"UDP","dns":{"type":"answer","id":2535,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:26.009449+0100","flow_id":2200713642205593,"pcap_cnt":4520,"event_type":"dns","src_ip":"192.168.1.100","src_port":61819,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28472,"rrname":"novewecoliv.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:27.907431+0100","flow_id":355157605341351,"pcap_cnt":5142,"event_type":"dns","src_ip":"192.168.1.100","src_port":51826,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":52008,"rrname":"vonupyfogiq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.100898+0100","flow_id":2041271571417333,"pcap_cnt":4769,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50204,"proto":"UDP","dns":{"type":"answer","id":29699,"rcode":"NXDOMAIN","rrname":"kezituraxep.eu"}}
{"timestamp":"2017-12-12T18:33:28.792304+0100","flow_id":1991297479018739,"pcap_cnt":5560,"event_type":"dns","src_ip":"192.168.1.100","src_port":61879,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63086,"rrname":"foxusyzosex.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:27.100898+0100","flow_id":2041271571417333,"pcap_cnt":4769,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50204,"proto":"UDP","dns":{"type":"answer","id":29699,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:27.907712+0100","flow_id":355157605341351,"pcap_cnt":5143,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51826,"proto":"UDP","dns":{"type":"answer","id":52008,"rcode":"NXDOMAIN","rrname":"vonupyfogiq.eu"}}
{"timestamp":"2017-12-12T18:33:28.762436+0100","flow_id":418162628141338,"pcap_cnt":5547,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64249,"proto":"UDP","dns":{"type":"answer","id":1194,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:27.907712+0100","flow_id":355157605341351,"pcap_cnt":5143,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51826,"proto":"UDP","dns":{"type":"answer","id":52008,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:28.792608+0100","flow_id":1991297479018739,"pcap_cnt":5561,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61879,"proto":"UDP","dns":{"type":"answer","id":63086,"rcode":"NXDOMAIN","rrname":"foxusyzosex.eu"}}
{"timestamp":"2017-12-12T18:33:27.160977+0100","flow_id":1486172818207953,"pcap_cnt":4798,"event_type":"dns","src_ip":"192.168.1.100","src_port":53091,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8275,"rrname":"lyxemoxyquf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.726008+0100","flow_id":470717995226104,"pcap_cnt":4406,"event_type":"dns","src_ip":"192.168.1.100","src_port":60701,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29753,"rrname":"rynenogupez.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.262469+0100","flow_id":256476436758853,"pcap_cnt":5314,"event_type":"dns","src_ip":"192.168.1.100","src_port":57230,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27447,"rrname":"qedunygajux.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.857718+0100","flow_id":586980612642422,"pcap_cnt":5596,"event_type":"dns","src_ip":"192.168.1.100","src_port":65376,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47194,"rrname":"pufuwygybyx.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.726337+0100","flow_id":470717995226104,"pcap_cnt":4407,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60701,"proto":"UDP","dns":{"type":"answer","id":29753,"rcode":"NXDOMAIN","rrname":"rynenogupez.eu"}}
{"timestamp":"2017-12-12T18:33:29.924140+0100","flow_id":1357744706230518,"pcap_cnt":6053,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56497,"proto":"UDP","dns":{"type":"answer","id":35931,"rcode":"NXDOMAIN","rrname":"fobonobaxog.eu"}}
{"timestamp":"2017-12-12T18:33:28.858009+0100","flow_id":586980612642422,"pcap_cnt":5597,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65376,"proto":"UDP","dns":{"type":"answer","id":47194,"rcode":"NXDOMAIN","rrname":"pufuwygybyx.eu"}}
{"timestamp":"2017-12-12T18:33:28.701131+0100","flow_id":586634867815115,"pcap_cnt":5522,"event_type":"dns","src_ip":"192.168.1.100","src_port":49695,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":24457,"rrname":"kepegaruqik.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.858009+0100","flow_id":586980612642422,"pcap_cnt":5597,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65376,"proto":"UDP","dns":{"type":"answer","id":47194,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:29.924140+0100","flow_id":1357744706230518,"pcap_cnt":6053,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56497,"proto":"UDP","dns":{"type":"answer","id":35931,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":547}}
{"timestamp":"2017-12-12T18:33:29.480485+0100","flow_id":301968730444632,"pcap_cnt":5895,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55916,"proto":"UDP","dns":{"type":"answer","id":11956,"rcode":"NXDOMAIN","rrname":"cilicofahev.eu"}}
{"timestamp":"2017-12-12T18:33:28.875691+0100","flow_id":476926370667691,"pcap_cnt":5604,"event_type":"dns","src_ip":"192.168.1.100","src_port":65510,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42579,"rrname":"qekuxovuqal.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.701333+0100","flow_id":586634867815115,"pcap_cnt":5523,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49695,"proto":"UDP","dns":{"type":"answer","id":24457,"rcode":"NXDOMAIN","rrname":"kepegaruqik.eu"}}
{"timestamp":"2017-12-12T18:33:22.748213+0100","flow_id":2181858735581621,"pcap_cnt":4145,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56795,"proto":"UDP","dns":{"type":"answer","id":23630,"rcode":"NXDOMAIN","rrname":"vopepukaxej.eu"}}
{"timestamp":"2017-12-12T18:33:27.604875+0100","flow_id":1516175312238985,"pcap_cnt":5011,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55130,"proto":"UDP","dns":{"type":"answer","id":1664,"rcode":"NXDOMAIN","rrname":"lyxilunogem.eu"}}
{"timestamp":"2017-12-12T18:33:28.875994+0100","flow_id":476926370667691,"pcap_cnt":5605,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65510,"proto":"UDP","dns":{"type":"answer","id":42579,"rcode":"NXDOMAIN","rrname":"qekuxovuqal.eu"}}
{"timestamp":"2017-12-12T18:33:22.748213+0100","flow_id":2181858735581621,"pcap_cnt":4145,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56795,"proto":"UDP","dns":{"type":"answer","id":23630,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:28.008797+0100","flow_id":1859598749803101,"pcap_cnt":5198,"event_type":"dns","src_ip":"192.168.1.100","src_port":61077,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53472,"rrname":"jecuzojitub.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.430643+0100","flow_id":979437543919880,"pcap_cnt":4039,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62699,"proto":"UDP","dns":{"type":"answer","id":35611,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":553}}
{"timestamp":"2017-12-12T18:33:22.788630+0100","flow_id":693188710826377,"pcap_cnt":4152,"event_type":"dns","src_ip":"192.168.1.100","src_port":49802,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":16711,"rrname":"citifemifif.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:28.009123+0100","flow_id":1859598749803101,"pcap_cnt":5199,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61077,"proto":"UDP","dns":{"type":"answer","id":53472,"rcode":"NXDOMAIN","rrname":"jecuzojitub.eu"}}
{"timestamp":"2017-12-12T18:33:31.332011+0100","flow_id":107307927802091,"pcap_cnt":6268,"event_type":"dns","src_ip":"192.168.1.100","src_port":55891,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":32303,"rrname":"kefaxyjebav.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.833766+0100","flow_id":1541225709090713,"pcap_cnt":5581,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59248,"proto":"UDP","dns":{"type":"answer","id":2511,"rcode":"NXDOMAIN","rrname":"mavywefycyc.eu"}}
{"timestamp":"2017-12-12T18:33:28.806128+0100","flow_id":1426483510266898,"pcap_cnt":5569,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57038,"proto":"UDP","dns":{"type":"answer","id":32625,"rcode":"NXDOMAIN","rrname":"jejecyxyvex.eu"}}
{"timestamp":"2017-12-12T18:33:22.788929+0100","flow_id":693188710826377,"pcap_cnt":4153,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49802,"proto":"UDP","dns":{"type":"answer","id":16711,"rcode":"NXDOMAIN","rrname":"citifemifif.eu"}}
{"timestamp":"2017-12-12T18:33:27.973529+0100","flow_id":1287184835280363,"pcap_cnt":5172,"event_type":"dns","src_ip":"192.168.1.100","src_port":64365,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1853,"rrname":"foqotihalun.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:28.833766+0100","flow_id":1541225709090713,"pcap_cnt":5581,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59248,"proto":"UDP","dns":{"type":"answer","id":2511,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:29.352228+0100","flow_id":377180050251748,"pcap_cnt":5812,"event_type":"dns","src_ip":"192.168.1.100","src_port":55588,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34405,"rrname":"ganovowuqur.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.158747+0100","flow_id":2247618980178971,"pcap_cnt":4794,"event_type":"dns","src_ip":"192.168.1.100","src_port":52715,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":32387,"rrname":"jenujoxojug.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.268252+0100","flow_id":2145424528447452,"pcap_cnt":5782,"event_type":"dns","src_ip":"192.168.1.100","src_port":64157,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":517,"rrname":"qekafuqafit.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.579235+0100","flow_id":1115308834739622,"pcap_cnt":5467,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55540,"proto":"UDP","dns":{"type":"answer","id":34946,"rcode":"NXDOMAIN","rrname":"xuxyxynahop.eu"}}
{"timestamp":"2017-12-12T18:33:29.352578+0100","flow_id":377180050251748,"pcap_cnt":5813,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55588,"proto":"UDP","dns":{"type":"answer","id":34405,"rcode":"NXDOMAIN","rrname":"ganovowuqur.eu"}}
{"timestamp":"2017-12-12T18:33:28.579235+0100","flow_id":1115308834739622,"pcap_cnt":5467,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55540,"proto":"UDP","dns":{"type":"answer","id":34946,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:29.352578+0100","flow_id":377180050251748,"pcap_cnt":5813,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55588,"proto":"UDP","dns":{"type":"answer","id":34405,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:26.324432+0100","flow_id":1798715440820780,"pcap_cnt":4681,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55549,"proto":"UDP","dns":{"type":"answer","id":33247,"rcode":"NXDOMAIN","rrname":"nozulufynax.eu"}}
{"timestamp":"2017-12-12T18:33:28.812987+0100","flow_id":1888110890215355,"pcap_cnt":5574,"event_type":"dns","src_ip":"192.168.1.100","src_port":50245,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":32643,"rrname":"kefyjuxiwap.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.792608+0100","flow_id":1991297479018739,"pcap_cnt":5561,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61879,"proto":"UDP","dns":{"type":"answer","id":63086,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:29.356366+0100","flow_id":1071263945158670,"pcap_cnt":5816,"event_type":"dns","src_ip":"192.168.1.100","src_port":52188,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26905,"rrname":"kezydorekuw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.842046+0100","flow_id":840272014006590,"pcap_cnt":5586,"event_type":"dns","src_ip":"192.168.1.100","src_port":54421,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49229,"rrname":"rylakegodyc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.161235+0100","flow_id":1486172818207953,"pcap_cnt":4799,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53091,"proto":"UDP","dns":{"type":"answer","id":8275,"rcode":"NXDOMAIN","rrname":"lyxemoxyquf.eu"}}
{"timestamp":"2017-12-12T18:33:26.021044+0100","flow_id":2122530205094200,"pcap_cnt":4537,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60243,"proto":"UDP","dns":{"type":"answer","id":32775,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:28.876532+0100","flow_id":1086107352063988,"pcap_cnt":5606,"event_type":"dns","src_ip":"192.168.1.100","src_port":51731,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33998,"rrname":"ryhohovosar.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.161235+0100","flow_id":1486172818207953,"pcap_cnt":4799,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53091,"proto":"UDP","dns":{"type":"answer","id":8275,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:28.262823+0100","flow_id":256476436758853,"pcap_cnt":5315,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57230,"proto":"UDP","dns":{"type":"answer","id":27447,"rcode":"NXDOMAIN","rrname":"qedunygajux.eu"}}
{"timestamp":"2017-12-12T18:33:29.525357+0100","flow_id":1248652536906531,"pcap_cnt":5915,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53089,"proto":"UDP","dns":{"type":"answer","id":51290,"rcode":"NXDOMAIN","rrname":"jepobanagij.eu"}}
{"timestamp":"2017-12-12T18:33:28.262823+0100","flow_id":256476436758853,"pcap_cnt":5315,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57230,"proto":"UDP","dns":{"type":"answer","id":27447,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:22.529646+0100","flow_id":703404290043204,"pcap_cnt":4081,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60563,"proto":"UDP","dns":{"type":"answer","id":23377,"rcode":"NXDOMAIN","rrname":"vocumucokaj.eu"}}
{"timestamp":"2017-12-12T18:33:28.162356+0100","flow_id":1306001087691071,"pcap_cnt":5267,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54150,"proto":"UDP","dns":{"type":"answer","id":25715,"rcode":"NXDOMAIN","rrname":"xuxorixurez.eu"}}
{"timestamp":"2017-12-12T18:33:28.327967+0100","flow_id":1777925651693855,"pcap_cnt":5346,"event_type":"dns","src_ip":"192.168.1.100","src_port":64373,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37094,"rrname":"purupoqogob.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.480485+0100","flow_id":301968730444632,"pcap_cnt":5895,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55916,"proto":"UDP","dns":{"type":"answer","id":11956,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:28.701333+0100","flow_id":586634867815115,"pcap_cnt":5523,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49695,"proto":"UDP","dns":{"type":"answer","id":24457,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:27.997981+0100","flow_id":3893703659338,"pcap_cnt":5191,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63599,"proto":"UDP","dns":{"type":"answer","id":7603,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:27.604875+0100","flow_id":1516175312238985,"pcap_cnt":5011,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55130,"proto":"UDP","dns":{"type":"answer","id":1664,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:28.875994+0100","flow_id":476926370667691,"pcap_cnt":5605,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65510,"proto":"UDP","dns":{"type":"answer","id":42579,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:28.856016+0100","flow_id":258224488452048,"pcap_cnt":5594,"event_type":"dns","src_ip":"192.168.1.100","src_port":55216,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":61103,"rrname":"novopicahal.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.659331+0100","flow_id":555655268732532,"pcap_cnt":5973,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62072,"proto":"UDP","dns":{"type":"answer","id":21006,"rcode":"NXDOMAIN","rrname":"kefucoruvyd.eu"}}
{"timestamp":"2017-12-12T18:33:27.620528+0100","flow_id":1247808575731696,"pcap_cnt":5016,"event_type":"dns","src_ip":"192.168.1.100","src_port":61620,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13773,"rrname":"xukafinezeg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.565214+0100","flow_id":1009588214341598,"pcap_cnt":4092,"event_type":"dns","src_ip":"192.168.1.100","src_port":61964,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":55396,"rrname":"ciqydofudyx.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.856318+0100","flow_id":258224488452048,"pcap_cnt":5595,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55216,"proto":"UDP","dns":{"type":"answer","id":61103,"rcode":"NXDOMAIN","rrname":"novopicahal.eu"}}
{"timestamp":"2017-12-12T18:33:28.009123+0100","flow_id":1859598749803101,"pcap_cnt":5199,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61077,"proto":"UDP","dns":{"type":"answer","id":53472,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:30.134086+0100","flow_id":1666164160334558,"pcap_cnt":6125,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57493,"proto":"UDP","dns":{"type":"answer","id":52361,"rcode":"NXDOMAIN","rrname":"vofydatacut.eu"}}
{"timestamp":"2017-12-12T18:33:28.856318+0100","flow_id":258224488452048,"pcap_cnt":5595,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55216,"proto":"UDP","dns":{"type":"answer","id":61103,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:22.565518+0100","flow_id":1009588214341598,"pcap_cnt":4093,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61964,"proto":"UDP","dns":{"type":"answer","id":55396,"rcode":"NXDOMAIN","rrname":"ciqydofudyx.eu"}}
{"timestamp":"2017-12-12T18:33:30.134086+0100","flow_id":1666164160334558,"pcap_cnt":6125,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57493,"proto":"UDP","dns":{"type":"answer","id":52361,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":569}}
{"timestamp":"2017-12-12T18:33:22.565518+0100","flow_id":1009588214341598,"pcap_cnt":4093,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61964,"proto":"UDP","dns":{"type":"answer","id":55396,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":553}}
{"timestamp":"2017-12-12T18:33:27.973765+0100","flow_id":1287184835280363,"pcap_cnt":5173,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64365,"proto":"UDP","dns":{"type":"answer","id":1853,"rcode":"NXDOMAIN","rrname":"foqotihalun.eu"}}
{"timestamp":"2017-12-12T18:33:31.210242+0100","flow_id":1090243403826859,"pcap_cnt":6200,"event_type":"dns","src_ip":"192.168.1.100","src_port":63766,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41743,"rrname":"jefubonokiz.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:27.409931+0100","flow_id":1177968112517451,"pcap_cnt":4932,"event_type":"dns","src_ip":"192.168.1.100","src_port":53325,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64941,"rrname":"qekovipynan.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.628067+0100","flow_id":903176104613219,"pcap_cnt":4108,"event_type":"dns","src_ip":"192.168.1.100","src_port":60141,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18505,"rrname":"maxyjofytyt.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.268570+0100","flow_id":2145424528447452,"pcap_cnt":5783,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64157,"proto":"UDP","dns":{"type":"answer","id":517,"rcode":"NXDOMAIN","rrname":"qekafuqafit.eu"}}
{"timestamp":"2017-12-12T18:33:25.578248+0100","flow_id":2230280197099926,"pcap_cnt":4363,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64251,"proto":"UDP","dns":{"type":"answer","id":35097,"rcode":"NXDOMAIN","rrname":"pufepepazyd.eu"}}
{"timestamp":"2017-12-12T18:33:29.268570+0100","flow_id":2145424528447452,"pcap_cnt":5783,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64157,"proto":"UDP","dns":{"type":"answer","id":517,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:26.009756+0100","flow_id":2200713642205593,"pcap_cnt":4521,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61819,"proto":"UDP","dns":{"type":"answer","id":28472,"rcode":"NXDOMAIN","rrname":"novewecoliv.eu"}}
{"timestamp":"2017-12-12T18:33:25.578248+0100","flow_id":2230280197099926,"pcap_cnt":4363,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64251,"proto":"UDP","dns":{"type":"answer","id":35097,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:26.324432+0100","flow_id":1798715440820780,"pcap_cnt":4681,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55549,"proto":"UDP","dns":{"type":"answer","id":33247,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:26.009756+0100","flow_id":2200713642205593,"pcap_cnt":4521,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61819,"proto":"UDP","dns":{"type":"answer","id":28472,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:28.813283+0100","flow_id":1888110890215355,"pcap_cnt":5575,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50245,"proto":"UDP","dns":{"type":"answer","id":32643,"rcode":"NXDOMAIN","rrname":"kefyjuxiwap.eu"}}
{"timestamp":"2017-12-12T18:33:25.841940+0100","flow_id":464241184594132,"pcap_cnt":4450,"event_type":"dns","src_ip":"192.168.1.100","src_port":64790,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36326,"rrname":"cicafykemaj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.356670+0100","flow_id":1071263945158670,"pcap_cnt":5817,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52188,"proto":"UDP","dns":{"type":"answer","id":26905,"rcode":"NXDOMAIN","rrname":"kezydorekuw.eu"}}
{"timestamp":"2017-12-12T18:33:26.055669+0100","flow_id":1078490227464565,"pcap_cnt":4560,"event_type":"dns","src_ip":"192.168.1.100","src_port":59345,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":55367,"rrname":"lykysonalut.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.842243+0100","flow_id":464241184594132,"pcap_cnt":4451,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64790,"proto":"UDP","dns":{"type":"answer","id":36326,"rcode":"NXDOMAIN","rrname":"cicafykemaj.eu"}}
{"timestamp":"2017-12-12T18:33:29.356670+0100","flow_id":1071263945158670,"pcap_cnt":5817,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52188,"proto":"UDP","dns":{"type":"answer","id":26905,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:25.726337+0100","flow_id":470717995226104,"pcap_cnt":4407,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60701,"proto":"UDP","dns":{"type":"answer","id":29753,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:25.842243+0100","flow_id":464241184594132,"pcap_cnt":4451,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64790,"proto":"UDP","dns":{"type":"answer","id":36326,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:29.629104+0100","flow_id":391868838276742,"pcap_cnt":5962,"event_type":"dns","src_ip":"192.168.1.100","src_port":52582,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6617,"rrname":"qegynolyzow.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:25.729734+0100","flow_id":1305831436264070,"pcap_cnt":4410,"event_type":"dns","src_ip":"192.168.1.100","src_port":60004,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":3375,"rrname":"digowibymih.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.056243+0100","flow_id":606698807417779,"pcap_cnt":4562,"event_type":"dns","src_ip":"192.168.1.100","src_port":55286,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33225,"rrname":"nomytifazah.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.926463+0100","flow_id":690225183793919,"pcap_cnt":4490,"event_type":"dns","src_ip":"192.168.1.100","src_port":57700,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":56173,"rrname":"foxirozigon.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.370996+0100","flow_id":287172568000820,"pcap_cnt":4912,"event_type":"dns","src_ip":"192.168.1.100","src_port":56862,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60170,"rrname":"lyrosajupid.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.948476+0100","flow_id":2099708896573692,"pcap_cnt":6062,"event_type":"dns","src_ip":"192.168.1.100","src_port":64477,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40509,"rrname":"lygananavof.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.525357+0100","flow_id":1248652536906531,"pcap_cnt":5915,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53089,"proto":"UDP","dns":{"type":"answer","id":51290,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:22.529646+0100","flow_id":703404290043204,"pcap_cnt":4081,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60563,"proto":"UDP","dns":{"type":"answer","id":23377,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":553}}
{"timestamp":"2017-12-12T18:33:27.371268+0100","flow_id":287172568000820,"pcap_cnt":4913,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56862,"proto":"UDP","dns":{"type":"answer","id":60170,"rcode":"NXDOMAIN","rrname":"lyrosajupid.eu"}}
{"timestamp":"2017-12-12T18:33:31.701446+0100","flow_id":156732264002242,"pcap_cnt":6443,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54089,"proto":"UDP","dns":{"type":"answer","id":15704,"rcode":"NXDOMAIN","rrname":"galavozaxog.eu"}}
{"timestamp":"2017-12-12T18:33:29.880356+0100","flow_id":704016324062948,"pcap_cnt":6034,"event_type":"dns","src_ip":"192.168.1.100","src_port":65289,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64248,"rrname":"divywysigud.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.328279+0100","flow_id":1777925651693855,"pcap_cnt":5347,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64373,"proto":"UDP","dns":{"type":"answer","id":37094,"rcode":"NXDOMAIN","rrname":"purupoqogob.eu"}}
{"timestamp":"2017-12-12T18:33:28.041443+0100","flow_id":2099958004621795,"pcap_cnt":5212,"event_type":"dns","src_ip":"192.168.1.100","src_port":64006,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27343,"rrname":"gaqyqewymow.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.880704+0100","flow_id":704016324062948,"pcap_cnt":6035,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65289,"proto":"UDP","dns":{"type":"answer","id":64248,"rcode":"NXDOMAIN","rrname":"divywysigud.eu"}}
{"timestamp":"2017-12-12T18:33:29.880704+0100","flow_id":704016324062948,"pcap_cnt":6035,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65289,"proto":"UDP","dns":{"type":"answer","id":64248,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":546}}
{"timestamp":"2017-12-12T18:33:29.659331+0100","flow_id":555655268732532,"pcap_cnt":5973,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62072,"proto":"UDP","dns":{"type":"answer","id":21006,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:28.041735+0100","flow_id":2099958004621795,"pcap_cnt":5213,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64006,"proto":"UDP","dns":{"type":"answer","id":27343,"rcode":"NXDOMAIN","rrname":"gaqyqewymow.eu"}}
{"timestamp":"2017-12-12T18:33:30.213372+0100","flow_id":597277796876668,"pcap_cnt":6156,"event_type":"dns","src_ip":"192.168.1.100","src_port":55368,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60840,"rrname":"lyvitexemod.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.041735+0100","flow_id":2099958004621795,"pcap_cnt":5213,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64006,"proto":"UDP","dns":{"type":"answer","id":27343,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:27.620814+0100","flow_id":1247808575731696,"pcap_cnt":5017,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61620,"proto":"UDP","dns":{"type":"answer","id":13773,"rcode":"NXDOMAIN","rrname":"xukafinezeg.eu"}}
{"timestamp":"2017-12-12T18:33:29.806049+0100","flow_id":280090167037089,"pcap_cnt":6018,"event_type":"dns","src_ip":"192.168.1.100","src_port":52981,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2193,"rrname":"rytuvepokuv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.788929+0100","flow_id":693188710826377,"pcap_cnt":4153,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49802,"proto":"UDP","dns":{"type":"answer","id":16711,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:28.234904+0100","flow_id":2167801308026264,"pcap_cnt":5302,"event_type":"dns","src_ip":"192.168.1.100","src_port":58560,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64673,"rrname":"dixuvebakeq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.332268+0100","flow_id":107307927802091,"pcap_cnt":6269,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55891,"proto":"UDP","dns":{"type":"answer","id":32303,"rcode":"NXDOMAIN","rrname":"kefaxyjebav.eu"}}
{"timestamp":"2017-12-12T18:33:28.863126+0100","flow_id":1924018964278166,"pcap_cnt":5598,"event_type":"dns","src_ip":"192.168.1.100","src_port":61619,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63300,"rrname":"disovyhityp.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.332268+0100","flow_id":107307927802091,"pcap_cnt":6269,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55891,"proto":"UDP","dns":{"type":"answer","id":32303,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":567}}
{"timestamp":"2017-12-12T18:33:28.067649+0100","flow_id":1650914878818369,"pcap_cnt":5222,"event_type":"dns","src_ip":"192.168.1.100","src_port":64498,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47790,"rrname":"lyxesyrecoj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.235153+0100","flow_id":2167801308026264,"pcap_cnt":5303,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58560,"proto":"UDP","dns":{"type":"answer","id":64673,"rcode":"NXDOMAIN","rrname":"dixuvebakeq.eu"}}
{"timestamp":"2017-12-12T18:33:27.973765+0100","flow_id":1287184835280363,"pcap_cnt":5173,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64365,"proto":"UDP","dns":{"type":"answer","id":1853,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:28.235153+0100","flow_id":2167801308026264,"pcap_cnt":5303,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58560,"proto":"UDP","dns":{"type":"answer","id":64673,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:31.210495+0100","flow_id":1090243403826859,"pcap_cnt":6201,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63766,"proto":"UDP","dns":{"type":"answer","id":41743,"rcode":"NXDOMAIN","rrname":"jefubonokiz.eu"}}
{"timestamp":"2017-12-12T18:33:28.189546+0100","flow_id":386753532322922,"pcap_cnt":5280,"event_type":"dns","src_ip":"192.168.1.100","src_port":57964,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5411,"rrname":"qetevavahew.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.210495+0100","flow_id":1090243403826859,"pcap_cnt":6201,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63766,"proto":"UDP","dns":{"type":"answer","id":41743,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:29.540758+0100","flow_id":1914780489695084,"pcap_cnt":5923,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57791,"proto":"UDP","dns":{"type":"answer","id":58380,"rcode":"NXDOMAIN","rrname":"xubirenosiq.eu"}}
{"timestamp":"2017-12-12T18:33:28.189798+0100","flow_id":386753532322922,"pcap_cnt":5281,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57964,"proto":"UDP","dns":{"type":"answer","id":5411,"rcode":"NXDOMAIN","rrname":"qetevavahew.eu"}}
{"timestamp":"2017-12-12T18:33:29.338796+0100","flow_id":231312223447916,"pcap_cnt":5806,"event_type":"dns","src_ip":"192.168.1.100","src_port":54701,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50858,"rrname":"digijusekyg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.360763+0100","flow_id":210969110675771,"pcap_cnt":4698,"event_type":"dns","src_ip":"192.168.1.100","src_port":57589,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27838,"rrname":"pumipuvupuj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.189798+0100","flow_id":386753532322922,"pcap_cnt":5281,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57964,"proto":"UDP","dns":{"type":"answer","id":5411,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:31.481575+0100","flow_id":1788721052211226,"pcap_cnt":6339,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55297,"proto":"UDP","dns":{"type":"answer","id":40619,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:29.339134+0100","flow_id":231312223447916,"pcap_cnt":5807,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54701,"proto":"UDP","dns":{"type":"answer","id":50858,"rcode":"NXDOMAIN","rrname":"digijusekyg.eu"}}
{"timestamp":"2017-12-12T18:33:26.055984+0100","flow_id":1078490227464565,"pcap_cnt":4561,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59345,"proto":"UDP","dns":{"type":"answer","id":55367,"rcode":"NXDOMAIN","rrname":"lykysonalut.eu"}}
{"timestamp":"2017-12-12T18:33:28.451301+0100","flow_id":170579238380261,"pcap_cnt":5404,"event_type":"dns","src_ip":"192.168.1.100","src_port":49371,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26836,"rrname":"rylunupumit.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.842306+0100","flow_id":840272014006590,"pcap_cnt":5587,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54421,"proto":"UDP","dns":{"type":"answer","id":49229,"rcode":"NXDOMAIN","rrname":"rylakegodyc.eu"}}
{"timestamp":"2017-12-12T18:33:26.055984+0100","flow_id":1078490227464565,"pcap_cnt":4561,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59345,"proto":"UDP","dns":{"type":"answer","id":55367,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:28.842306+0100","flow_id":840272014006590,"pcap_cnt":5587,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54421,"proto":"UDP","dns":{"type":"answer","id":49229,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:28.451589+0100","flow_id":170579238380261,"pcap_cnt":5405,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49371,"proto":"UDP","dns":{"type":"answer","id":26836,"rcode":"NXDOMAIN","rrname":"rylunupumit.eu"}}
{"timestamp":"2017-12-12T18:33:28.876808+0100","flow_id":1086107352063988,"pcap_cnt":5607,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51731,"proto":"UDP","dns":{"type":"answer","id":33998,"rcode":"NXDOMAIN","rrname":"ryhohovosar.eu"}}
{"timestamp":"2017-12-12T18:33:26.157117+0100","flow_id":1743918100538813,"pcap_cnt":4608,"event_type":"dns","src_ip":"192.168.1.100","src_port":61079,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":55257,"rrname":"xukorejymod.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.451589+0100","flow_id":170579238380261,"pcap_cnt":5405,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49371,"proto":"UDP","dns":{"type":"answer","id":26836,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:29.629345+0100","flow_id":391868838276742,"pcap_cnt":5963,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52582,"proto":"UDP","dns":{"type":"answer","id":6617,"rcode":"NXDOMAIN","rrname":"qegynolyzow.eu"}}
{"timestamp":"2017-12-12T18:33:25.730033+0100","flow_id":1305831436264070,"pcap_cnt":4411,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60004,"proto":"UDP","dns":{"type":"answer","id":3375,"rcode":"NXDOMAIN","rrname":"digowibymih.eu"}}
{"timestamp":"2017-12-12T18:33:26.056563+0100","flow_id":606698807417779,"pcap_cnt":4563,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55286,"proto":"UDP","dns":{"type":"answer","id":33225,"rcode":"NXDOMAIN","rrname":"nomytifazah.eu"}}
{"timestamp":"2017-12-12T18:33:28.500606+0100","flow_id":112064603923326,"pcap_cnt":5428,"event_type":"dns","src_ip":"192.168.1.100","src_port":50178,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28667,"rrname":"ryciqavuqav.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.730033+0100","flow_id":1305831436264070,"pcap_cnt":4411,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60004,"proto":"UDP","dns":{"type":"answer","id":3375,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:27.371268+0100","flow_id":287172568000820,"pcap_cnt":4913,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56862,"proto":"UDP","dns":{"type":"answer","id":60170,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:29.729492+0100","flow_id":471482499653147,"pcap_cnt":6004,"event_type":"dns","src_ip":"192.168.1.100","src_port":59701,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60792,"rrname":"lymylorozig.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:25.865274+0100","flow_id":259577402962938,"pcap_cnt":4468,"event_type":"dns","src_ip":"192.168.1.100","src_port":53810,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44310,"rrname":"tunicyqokuv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.780158+0100","flow_id":941242399778686,"pcap_cnt":4150,"event_type":"dns","src_ip":"192.168.1.100","src_port":56406,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":52413,"rrname":"qebahilojam.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.442588+0100","flow_id":393808016031964,"pcap_cnt":4948,"event_type":"dns","src_ip":"192.168.1.100","src_port":50363,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4523,"rrname":"dimoxuzynup.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.865576+0100","flow_id":259577402962938,"pcap_cnt":4469,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53810,"proto":"UDP","dns":{"type":"answer","id":44310,"rcode":"NXDOMAIN","rrname":"tunicyqokuv.eu"}}
{"timestamp":"2017-12-12T18:33:27.338414+0100","flow_id":1959920595839155,"pcap_cnt":4895,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61306,"proto":"UDP","dns":{"type":"answer","id":42953,"rcode":"NXDOMAIN","rrname":"foxofewuteq.eu"}}
{"timestamp":"2017-12-12T18:33:27.442910+0100","flow_id":393808016031964,"pcap_cnt":4949,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50363,"proto":"UDP","dns":{"type":"answer","id":4523,"rcode":"NXDOMAIN","rrname":"dimoxuzynup.eu"}}
{"timestamp":"2017-12-12T18:33:27.905036+0100","flow_id":259141463952975,"pcap_cnt":5139,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61128,"proto":"UDP","dns":{"type":"answer","id":37044,"rcode":"NXDOMAIN","rrname":"xutoxedyniq.eu"}}
{"timestamp":"2017-12-12T18:33:27.442910+0100","flow_id":393808016031964,"pcap_cnt":4949,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50363,"proto":"UDP","dns":{"type":"answer","id":4523,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:27.620814+0100","flow_id":1247808575731696,"pcap_cnt":5017,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61620,"proto":"UDP","dns":{"type":"answer","id":13773,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:30.213614+0100","flow_id":597277796876668,"pcap_cnt":6157,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55368,"proto":"UDP","dns":{"type":"answer","id":60840,"rcode":"NXDOMAIN","rrname":"lyvitexemod.eu"}}
{"timestamp":"2017-12-12T18:33:27.506683+0100","flow_id":1427967421430587,"pcap_cnt":4968,"event_type":"dns","src_ip":"192.168.1.100","src_port":63968,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":20518,"rrname":"jecoqedevod.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.905036+0100","flow_id":259141463952975,"pcap_cnt":5139,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61128,"proto":"UDP","dns":{"type":"answer","id":37044,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:27.719814+0100","flow_id":938021173870630,"pcap_cnt":5060,"event_type":"dns","src_ip":"192.168.1.100","src_port":63103,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19856,"rrname":"fogavewogad.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:27.506984+0100","flow_id":1427967421430587,"pcap_cnt":4969,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63968,"proto":"UDP","dns":{"type":"answer","id":20518,"rcode":"NXDOMAIN","rrname":"jecoqedevod.eu"}}
{"timestamp":"2017-12-12T18:33:31.369833+0100","flow_id":1633120827366630,"pcap_cnt":6288,"event_type":"dns","src_ip":"192.168.1.100","src_port":54409,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41846,"rrname":"pupatololoz.eu","rrtype":"A","tx_id":2}}
{"timestamp":"2017-12-12T18:33:28.863399+0100","flow_id":1924018964278166,"pcap_cnt":5599,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61619,"proto":"UDP","dns":{"type":"answer","id":63300,"rcode":"NXDOMAIN","rrname":"disovyhityp.eu"}}
{"timestamp":"2017-12-12T18:33:27.720106+0100","flow_id":938021173870630,"pcap_cnt":5061,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63103,"proto":"UDP","dns":{"type":"answer","id":19856,"rcode":"NXDOMAIN","rrname":"fogavewogad.eu"}}
{"timestamp":"2017-12-12T18:33:28.067938+0100","flow_id":1650914878818369,"pcap_cnt":5223,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64498,"proto":"UDP","dns":{"type":"answer","id":47790,"rcode":"NXDOMAIN","rrname":"lyxesyrecoj.eu"}}
{"timestamp":"2017-12-12T18:33:27.159003+0100","flow_id":2247618980178971,"pcap_cnt":4795,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52715,"proto":"UDP","dns":{"type":"answer","id":32387,"rcode":"NXDOMAIN","rrname":"jenujoxojug.eu"}}
{"timestamp":"2017-12-12T18:33:27.410269+0100","flow_id":1177968112517451,"pcap_cnt":4933,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53325,"proto":"UDP","dns":{"type":"answer","id":64941,"rcode":"NXDOMAIN","rrname":"qekovipynan.eu"}}
{"timestamp":"2017-12-12T18:33:31.370143+0100","flow_id":1633120827366630,"pcap_cnt":6289,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54409,"proto":"UDP","dns":{"type":"answer","id":41846,"rcode":"NXDOMAIN","rrname":"pupatololoz.eu"}}
{"timestamp":"2017-12-12T18:33:28.244900+0100","flow_id":273652011023524,"pcap_cnt":5306,"event_type":"dns","src_ip":"192.168.1.100","src_port":50768,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33910,"rrname":"gahadyburaq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.468770+0100","flow_id":659166128187170,"pcap_cnt":6330,"event_type":"dns","src_ip":"192.168.1.100","src_port":59652,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14196,"rrname":"vofomifyrex.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.540758+0100","flow_id":1914780489695084,"pcap_cnt":5923,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57791,"proto":"UDP","dns":{"type":"answer","id":58380,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:28.813283+0100","flow_id":1888110890215355,"pcap_cnt":5575,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50245,"proto":"UDP","dns":{"type":"answer","id":32643,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:26.361004+0100","flow_id":210969110675771,"pcap_cnt":4699,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57589,"proto":"UDP","dns":{"type":"answer","id":27838,"rcode":"NXDOMAIN","rrname":"pumipuvupuj.eu"}}
{"timestamp":"2017-12-12T18:33:31.469034+0100","flow_id":659166128187170,"pcap_cnt":6331,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59652,"proto":"UDP","dns":{"type":"answer","id":14196,"rcode":"NXDOMAIN","rrname":"vofomifyrex.eu"}}
{"timestamp":"2017-12-12T18:33:31.503717+0100","flow_id":1450621226692517,"pcap_cnt":6350,"event_type":"dns","src_ip":"192.168.1.100","src_port":57852,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19435,"rrname":"gaduzehokar.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.245146+0100","flow_id":273652011023524,"pcap_cnt":5307,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50768,"proto":"UDP","dns":{"type":"answer","id":33910,"rcode":"NXDOMAIN","rrname":"gahadyburaq.eu"}}
{"timestamp":"2017-12-12T18:33:28.867831+0100","flow_id":1533170497895927,"pcap_cnt":5600,"event_type":"dns","src_ip":"192.168.1.100","src_port":56300,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":16965,"rrname":"maxemocexar.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.876808+0100","flow_id":1086107352063988,"pcap_cnt":5607,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51731,"proto":"UDP","dns":{"type":"answer","id":33998,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:29.629345+0100","flow_id":391868838276742,"pcap_cnt":5963,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52582,"proto":"UDP","dns":{"type":"answer","id":6617,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:28.868108+0100","flow_id":1533170497895927,"pcap_cnt":5601,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56300,"proto":"UDP","dns":{"type":"answer","id":16965,"rcode":"NXDOMAIN","rrname":"maxemocexar.eu"}}
{"timestamp":"2017-12-12T18:33:25.926744+0100","flow_id":690225183793919,"pcap_cnt":4491,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57700,"proto":"UDP","dns":{"type":"answer","id":56173,"rcode":"NXDOMAIN","rrname":"foxirozigon.eu"}}
{"timestamp":"2017-12-12T18:33:28.893925+0100","flow_id":1549637402534885,"pcap_cnt":5616,"event_type":"dns","src_ip":"192.168.1.100","src_port":56946,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17916,"rrname":"foqahabofoq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.162356+0100","flow_id":1306001087691071,"pcap_cnt":5267,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54150,"proto":"UDP","dns":{"type":"answer","id":25715,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:28.868108+0100","flow_id":1533170497895927,"pcap_cnt":5601,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56300,"proto":"UDP","dns":{"type":"answer","id":16965,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:26.056563+0100","flow_id":606698807417779,"pcap_cnt":4563,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55286,"proto":"UDP","dns":{"type":"answer","id":33225,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":577}}
{"timestamp":"2017-12-12T18:33:28.894179+0100","flow_id":1549637402534885,"pcap_cnt":5617,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56946,"proto":"UDP","dns":{"type":"answer","id":17916,"rcode":"NXDOMAIN","rrname":"foqahabofoq.eu"}}
{"timestamp":"2017-12-12T18:33:28.938222+0100","flow_id":812423446024430,"pcap_cnt":5636,"event_type":"dns","src_ip":"192.168.1.100","src_port":60644,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62762,"rrname":"mamitumyvig.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.701446+0100","flow_id":156732264002242,"pcap_cnt":6443,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54089,"proto":"UDP","dns":{"type":"answer","id":15704,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:28.328279+0100","flow_id":1777925651693855,"pcap_cnt":5347,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64373,"proto":"UDP","dns":{"type":"answer","id":37094,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:28.894179+0100","flow_id":1549637402534885,"pcap_cnt":5617,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56946,"proto":"UDP","dns":{"type":"answer","id":17916,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:22.780449+0100","flow_id":941242399778686,"pcap_cnt":4151,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56406,"proto":"UDP","dns":{"type":"answer","id":52413,"rcode":"NXDOMAIN","rrname":"qebahilojam.eu"}}
{"timestamp":"2017-12-12T18:33:29.067896+0100","flow_id":1489009644210488,"pcap_cnt":5682,"event_type":"dns","src_ip":"192.168.1.100","src_port":60673,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18817,"rrname":"lymoxuxelam.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.780449+0100","flow_id":941242399778686,"pcap_cnt":4151,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56406,"proto":"UDP","dns":{"type":"answer","id":52413,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:31.783336+0100","flow_id":115328779285480,"pcap_cnt":6480,"event_type":"dns","src_ip":"192.168.1.100","src_port":64491,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26204,"rrname":"kezajonifuz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.806289+0100","flow_id":280090167037089,"pcap_cnt":6019,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52981,"proto":"UDP","dns":{"type":"answer","id":2193,"rcode":"NXDOMAIN","rrname":"rytuvepokuv.eu"}}
{"timestamp":"2017-12-12T18:33:28.806128+0100","flow_id":1426483510266898,"pcap_cnt":5569,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57038,"proto":"UDP","dns":{"type":"answer","id":32625,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:25.457120+0100","flow_id":1493729811640243,"pcap_cnt":4296,"event_type":"dns","src_ip":"192.168.1.100","src_port":60556,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41668,"rrname":"purowuqokuq.eu","rrtype":"A","tx_id":2}}
{"timestamp":"2017-12-12T18:33:29.806289+0100","flow_id":280090167037089,"pcap_cnt":6019,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52981,"proto":"UDP","dns":{"type":"answer","id":2193,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":546}}
{"timestamp":"2017-12-12T18:33:29.989455+0100","flow_id":228415268002063,"pcap_cnt":6074,"event_type":"dns","src_ip":"192.168.1.100","src_port":52336,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26948,"rrname":"nomebemenid.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.457399+0100","flow_id":1493729811640243,"pcap_cnt":4297,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60556,"proto":"UDP","dns":{"type":"answer","id":41668,"rcode":"NXDOMAIN","rrname":"purowuqokuq.eu"}}
{"timestamp":"2017-12-12T18:33:28.853053+0100","flow_id":883926061548605,"pcap_cnt":5592,"event_type":"dns","src_ip":"192.168.1.100","src_port":54155,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":16605,"rrname":"tujydygelyp.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.863399+0100","flow_id":1924018964278166,"pcap_cnt":5599,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61619,"proto":"UDP","dns":{"type":"answer","id":63300,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:25.457399+0100","flow_id":1493729811640243,"pcap_cnt":4297,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60556,"proto":"UDP","dns":{"type":"answer","id":41668,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:27.720106+0100","flow_id":938021173870630,"pcap_cnt":5061,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63103,"proto":"UDP","dns":{"type":"answer","id":19856,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:28.853347+0100","flow_id":883926061548605,"pcap_cnt":5593,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54155,"proto":"UDP","dns":{"type":"answer","id":16605,"rcode":"NXDOMAIN","rrname":"tujydygelyp.eu"}}
{"timestamp":"2017-12-12T18:33:25.482733+0100","flow_id":966239109602733,"pcap_cnt":4312,"event_type":"dns","src_ip":"192.168.1.100","src_port":60111,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17803,"rrname":"lysygyjytad.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.628352+0100","flow_id":903176104613219,"pcap_cnt":4109,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60141,"proto":"UDP","dns":{"type":"answer","id":18505,"rcode":"NXDOMAIN","rrname":"maxyjofytyt.eu"}}
{"timestamp":"2017-12-12T18:33:28.853347+0100","flow_id":883926061548605,"pcap_cnt":5593,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54155,"proto":"UDP","dns":{"type":"answer","id":16605,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:27.410269+0100","flow_id":1177968112517451,"pcap_cnt":4933,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53325,"proto":"UDP","dns":{"type":"answer","id":64941,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:22.628352+0100","flow_id":903176104613219,"pcap_cnt":4109,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60141,"proto":"UDP","dns":{"type":"answer","id":18505,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:31.370143+0100","flow_id":1633120827366630,"pcap_cnt":6289,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54409,"proto":"UDP","dns":{"type":"answer","id":41846,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":567}}
{"timestamp":"2017-12-12T18:33:29.339134+0100","flow_id":231312223447916,"pcap_cnt":5807,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54701,"proto":"UDP","dns":{"type":"answer","id":50858,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:29.586407+0100","flow_id":1564689115509415,"pcap_cnt":5938,"event_type":"dns","src_ip":"192.168.1.100","src_port":54196,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9408,"rrname":"jefamyjejat.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.360839+0100","flow_id":2150632176189565,"pcap_cnt":4907,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49163,"proto":"UDP","dns":{"type":"answer","id":41699,"rcode":"NXDOMAIN","rrname":"kefilyrymaj.eu"}}
{"timestamp":"2017-12-12T18:33:22.937074+0100","flow_id":2050619567393906,"pcap_cnt":4214,"event_type":"dns","src_ip":"192.168.1.100","src_port":59368,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13920,"rrname":"vofydatacut.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.355334+0100","flow_id":1758540316896262,"pcap_cnt":5814,"event_type":"dns","src_ip":"192.168.1.100","src_port":52749,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4260,"rrname":"jecekorosuk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.469034+0100","flow_id":659166128187170,"pcap_cnt":6331,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59652,"proto":"UDP","dns":{"type":"answer","id":14196,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":569}}
{"timestamp":"2017-12-12T18:33:26.157443+0100","flow_id":1743918100538813,"pcap_cnt":4609,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61079,"proto":"UDP","dns":{"type":"answer","id":55257,"rcode":"NXDOMAIN","rrname":"xukorejymod.eu"}}
{"timestamp":"2017-12-12T18:33:28.245146+0100","flow_id":273652011023524,"pcap_cnt":5307,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50768,"proto":"UDP","dns":{"type":"answer","id":33910,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:31.503955+0100","flow_id":1450621226692517,"pcap_cnt":6351,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57852,"proto":"UDP","dns":{"type":"answer","id":19435,"rcode":"NXDOMAIN","rrname":"gaduzehokar.eu"}}
{"timestamp":"2017-12-12T18:33:25.926744+0100","flow_id":690225183793919,"pcap_cnt":4491,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57700,"proto":"UDP","dns":{"type":"answer","id":56173,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:29.639426+0100","flow_id":1223065268750876,"pcap_cnt":5966,"event_type":"dns","src_ip":"192.168.1.100","src_port":61150,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17660,"rrname":"foxikiwiqub.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:29.948729+0100","flow_id":2099708896573692,"pcap_cnt":6063,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64477,"proto":"UDP","dns":{"type":"answer","id":40509,"rcode":"NXDOMAIN","rrname":"lygananavof.eu"}}
{"timestamp":"2017-12-12T18:33:28.500930+0100","flow_id":112064603923326,"pcap_cnt":5429,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50178,"proto":"UDP","dns":{"type":"answer","id":28667,"rcode":"NXDOMAIN","rrname":"ryciqavuqav.eu"}}
{"timestamp":"2017-12-12T18:33:28.274550+0100","flow_id":1774090245778519,"pcap_cnt":5318,"event_type":"dns","src_ip":"192.168.1.100","src_port":60770,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":12797,"rrname":"rytozygyvup.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:29.948729+0100","flow_id":2099708896573692,"pcap_cnt":6063,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64477,"proto":"UDP","dns":{"type":"answer","id":40509,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":567}}
{"timestamp":"2017-12-12T18:33:25.865576+0100","flow_id":259577402962938,"pcap_cnt":4469,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53810,"proto":"UDP","dns":{"type":"answer","id":44310,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:28.274805+0100","flow_id":1774090245778519,"pcap_cnt":5319,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60770,"proto":"UDP","dns":{"type":"answer","id":12797,"rcode":"NXDOMAIN","rrname":"rytozygyvup.eu"}}
{"timestamp":"2017-12-12T18:33:29.729726+0100","flow_id":471482499653147,"pcap_cnt":6005,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59701,"proto":"UDP","dns":{"type":"answer","id":60792,"rcode":"NXDOMAIN","rrname":"lymylorozig.eu"}}
{"timestamp":"2017-12-12T18:33:29.008795+0100","flow_id":1525121729241691,"pcap_cnt":5660,"event_type":"dns","src_ip":"192.168.1.100","src_port":55832,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":12980,"rrname":"rynucalagew.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.044992+0100","flow_id":409042264960960,"pcap_cnt":4550,"event_type":"dns","src_ip":"192.168.1.100","src_port":62311,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48515,"rrname":"foqesibojup.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.338414+0100","flow_id":1959920595839155,"pcap_cnt":4895,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61306,"proto":"UDP","dns":{"type":"answer","id":42953,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:22.893291+0100","flow_id":1112927274967403,"pcap_cnt":4194,"event_type":"dns","src_ip":"192.168.1.100","src_port":57244,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48437,"rrname":"pufiluqudic.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.009103+0100","flow_id":1525121729241691,"pcap_cnt":5661,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55832,"proto":"UDP","dns":{"type":"answer","id":12980,"rcode":"NXDOMAIN","rrname":"rynucalagew.eu"}}
{"timestamp":"2017-12-12T18:33:26.045240+0100","flow_id":409042264960960,"pcap_cnt":4551,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62311,"proto":"UDP","dns":{"type":"answer","id":48515,"rcode":"NXDOMAIN","rrname":"foqesibojup.eu"}}
{"timestamp":"2017-12-12T18:33:29.068190+0100","flow_id":1489009644210488,"pcap_cnt":5683,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60673,"proto":"UDP","dns":{"type":"answer","id":18817,"rcode":"NXDOMAIN","rrname":"lymoxuxelam.eu"}}
{"timestamp":"2017-12-12T18:33:26.045240+0100","flow_id":409042264960960,"pcap_cnt":4551,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62311,"proto":"UDP","dns":{"type":"answer","id":48515,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:29.068190+0100","flow_id":1489009644210488,"pcap_cnt":5683,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60673,"proto":"UDP","dns":{"type":"answer","id":18817,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:27.506984+0100","flow_id":1427967421430587,"pcap_cnt":4969,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63968,"proto":"UDP","dns":{"type":"answer","id":20518,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:29.868192+0100","flow_id":682528602668896,"pcap_cnt":6024,"event_type":"dns","src_ip":"192.168.1.100","src_port":61950,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8199,"rrname":"qegytuvufoq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.910373+0100","flow_id":1677099146929189,"pcap_cnt":5146,"event_type":"dns","src_ip":"192.168.1.100","src_port":49206,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11402,"rrname":"puralevuqes.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.664209+0100","flow_id":1688946814165649,"pcap_cnt":5034,"event_type":"dns","src_ip":"192.168.1.100","src_port":52949,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29692,"rrname":"gatahohalir.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.989716+0100","flow_id":228415268002063,"pcap_cnt":6075,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52336,"proto":"UDP","dns":{"type":"answer","id":26948,"rcode":"NXDOMAIN","rrname":"nomebemenid.eu"}}
{"timestamp":"2017-12-12T18:33:29.868439+0100","flow_id":682528602668896,"pcap_cnt":6025,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61950,"proto":"UDP","dns":{"type":"answer","id":8199,"rcode":"NXDOMAIN","rrname":"qegytuvufoq.eu"}}
{"timestamp":"2017-12-12T18:33:28.067938+0100","flow_id":1650914878818369,"pcap_cnt":5223,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64498,"proto":"UDP","dns":{"type":"answer","id":47790,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:29.868439+0100","flow_id":682528602668896,"pcap_cnt":6025,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61950,"proto":"UDP","dns":{"type":"answer","id":8199,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":547}}
{"timestamp":"2017-12-12T18:33:29.989716+0100","flow_id":228415268002063,"pcap_cnt":6075,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52336,"proto":"UDP","dns":{"type":"answer","id":26948,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:28.047919+0100","flow_id":1945517423115055,"pcap_cnt":5214,"event_type":"dns","src_ip":"192.168.1.100","src_port":64437,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53458,"rrname":"jeniceripoj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:30.012612+0100","flow_id":1689749973250372,"pcap_cnt":6088,"event_type":"dns","src_ip":"192.168.1.100","src_port":61993,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18208,"rrname":"tufecagemyl.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.483139+0100","flow_id":966239109602733,"pcap_cnt":4313,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60111,"proto":"UDP","dns":{"type":"answer","id":17803,"rcode":"NXDOMAIN","rrname":"lysygyjytad.eu"}}
{"timestamp":"2017-12-12T18:33:27.454039+0100","flow_id":403877566395065,"pcap_cnt":4954,"event_type":"dns","src_ip":"192.168.1.100","src_port":52854,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14712,"rrname":"jelimixecuz.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:25.483139+0100","flow_id":966239109602733,"pcap_cnt":4313,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60111,"proto":"UDP","dns":{"type":"answer","id":17803,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:31.437243+0100","flow_id":72312532157552,"pcap_cnt":6314,"event_type":"dns","src_ip":"192.168.1.100","src_port":55959,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35275,"rrname":"disumesenyv.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:29.369505+0100","flow_id":804037521193717,"pcap_cnt":5836,"event_type":"dns","src_ip":"192.168.1.100","src_port":50467,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":57782,"rrname":"fodasusuvyn.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:25.517165+0100","flow_id":684832852403245,"pcap_cnt":4340,"event_type":"dns","src_ip":"192.168.1.100","src_port":59387,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":46931,"rrname":"nomojatudyn.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.360839+0100","flow_id":2150632176189565,"pcap_cnt":4907,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49163,"proto":"UDP","dns":{"type":"answer","id":41699,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:29.586714+0100","flow_id":1564689115509415,"pcap_cnt":5939,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54196,"proto":"UDP","dns":{"type":"answer","id":9408,"rcode":"NXDOMAIN","rrname":"jefamyjejat.eu"}}
{"timestamp":"2017-12-12T18:33:29.369731+0100","flow_id":804037521193717,"pcap_cnt":5837,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50467,"proto":"UDP","dns":{"type":"answer","id":57782,"rcode":"NXDOMAIN","rrname":"fodasusuvyn.eu"}}
{"timestamp":"2017-12-12T18:33:22.937394+0100","flow_id":2050619567393906,"pcap_cnt":4215,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59368,"proto":"UDP","dns":{"type":"answer","id":13920,"rcode":"NXDOMAIN","rrname":"vofydatacut.eu"}}
{"timestamp":"2017-12-12T18:33:27.517747+0100","flow_id":479168343565939,"pcap_cnt":4978,"event_type":"dns","src_ip":"192.168.1.100","src_port":61505,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19383,"rrname":"vowezacuryr.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.157443+0100","flow_id":1743918100538813,"pcap_cnt":4609,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61079,"proto":"UDP","dns":{"type":"answer","id":55257,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:29.369731+0100","flow_id":804037521193717,"pcap_cnt":5837,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50467,"proto":"UDP","dns":{"type":"answer","id":57782,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:22.937394+0100","flow_id":2050619567393906,"pcap_cnt":4215,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59368,"proto":"UDP","dns":{"type":"answer","id":13920,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:28.473412+0100","flow_id":505762781083972,"pcap_cnt":5416,"event_type":"dns","src_ip":"192.168.1.100","src_port":60636,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18495,"rrname":"vopuqicyneb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.152953+0100","flow_id":2064357020554617,"pcap_cnt":4606,"event_type":"dns","src_ip":"192.168.1.100","src_port":49824,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":32795,"rrname":"lyxufejazov.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.500930+0100","flow_id":112064603923326,"pcap_cnt":5429,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50178,"proto":"UDP","dns":{"type":"answer","id":28667,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:22.939177+0100","flow_id":2240061984887977,"pcap_cnt":4218,"event_type":"dns","src_ip":"192.168.1.100","src_port":55099,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40661,"rrname":"qeqekepokul.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.938467+0100","flow_id":812423446024430,"pcap_cnt":5637,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60644,"proto":"UDP","dns":{"type":"answer","id":62762,"rcode":"NXDOMAIN","rrname":"mamitumyvig.eu"}}
{"timestamp":"2017-12-12T18:33:26.153258+0100","flow_id":2064357020554617,"pcap_cnt":4607,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49824,"proto":"UDP","dns":{"type":"answer","id":32795,"rcode":"NXDOMAIN","rrname":"lyxufejazov.eu"}}
{"timestamp":"2017-12-12T18:33:22.939467+0100","flow_id":2240061984887977,"pcap_cnt":4219,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55099,"proto":"UDP","dns":{"type":"answer","id":40661,"rcode":"NXDOMAIN","rrname":"qeqekepokul.eu"}}
{"timestamp":"2017-12-12T18:33:28.645505+0100","flow_id":328805833147429,"pcap_cnt":5502,"event_type":"dns","src_ip":"192.168.1.100","src_port":50930,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50134,"rrname":"lymewijosyf.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:26.153258+0100","flow_id":2064357020554617,"pcap_cnt":4607,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49824,"proto":"UDP","dns":{"type":"answer","id":32795,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:29.729726+0100","flow_id":471482499653147,"pcap_cnt":6005,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59701,"proto":"UDP","dns":{"type":"answer","id":60792,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":546}}
{"timestamp":"2017-12-12T18:33:28.645785+0100","flow_id":328805833147429,"pcap_cnt":5503,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50930,"proto":"UDP","dns":{"type":"answer","id":50134,"rcode":"NXDOMAIN","rrname":"lymewijosyf.eu"}}
{"timestamp":"2017-12-12T18:33:26.210896+0100","flow_id":772310598825936,"pcap_cnt":4626,"event_type":"dns","src_ip":"192.168.1.100","src_port":62547,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":16795,"rrname":"xuxetiryqem.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.645785+0100","flow_id":328805833147429,"pcap_cnt":5503,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50930,"proto":"UDP","dns":{"type":"answer","id":50134,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:29.009103+0100","flow_id":1525121729241691,"pcap_cnt":5661,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55832,"proto":"UDP","dns":{"type":"answer","id":12980,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:30.173273+0100","flow_id":101376577251697,"pcap_cnt":6138,"event_type":"dns","src_ip":"192.168.1.100","src_port":52801,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":16805,"rrname":"puzecypigyw.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:31.783603+0100","flow_id":115328779285480,"pcap_cnt":6481,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64491,"proto":"UDP","dns":{"type":"answer","id":26204,"rcode":"NXDOMAIN","rrname":"kezajonifuz.eu"}}
{"timestamp":"2017-12-12T18:33:30.173508+0100","flow_id":101376577251697,"pcap_cnt":6139,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52801,"proto":"UDP","dns":{"type":"answer","id":16805,"rcode":"NXDOMAIN","rrname":"puzecypigyw.eu"}}
{"timestamp":"2017-12-12T18:33:22.893543+0100","flow_id":1112927274967403,"pcap_cnt":4195,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57244,"proto":"UDP","dns":{"type":"answer","id":48437,"rcode":"NXDOMAIN","rrname":"pufiluqudic.eu"}}
{"timestamp":"2017-12-12T18:33:30.173508+0100","flow_id":101376577251697,"pcap_cnt":6139,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52801,"proto":"UDP","dns":{"type":"answer","id":16805,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":569}}
{"timestamp":"2017-12-12T18:33:26.085636+0100","flow_id":1141042131127940,"pcap_cnt":4572,"event_type":"dns","src_ip":"192.168.1.100","src_port":63868,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5269,"rrname":"norupamaxur.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.192408+0100","flow_id":350757411483544,"pcap_cnt":5750,"event_type":"dns","src_ip":"192.168.1.100","src_port":51469,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62564,"rrname":"galyzabunoc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.910631+0100","flow_id":1677099146929189,"pcap_cnt":5147,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49206,"proto":"UDP","dns":{"type":"answer","id":11402,"rcode":"NXDOMAIN","rrname":"puralevuqes.eu"}}
{"timestamp":"2017-12-12T18:33:29.011635+0100","flow_id":1202103681363315,"pcap_cnt":5662,"event_type":"dns","src_ip":"192.168.1.100","src_port":62907,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":58573,"rrname":"tulugiqezib.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.159003+0100","flow_id":2247618980178971,"pcap_cnt":4795,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52715,"proto":"UDP","dns":{"type":"answer","id":32387,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:28.157307+0100","flow_id":1629457222231675,"pcap_cnt":5262,"event_type":"dns","src_ip":"192.168.1.100","src_port":60279,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":20518,"rrname":"cilavocofer.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.011899+0100","flow_id":1202103681363315,"pcap_cnt":5663,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62907,"proto":"UDP","dns":{"type":"answer","id":58573,"rcode":"NXDOMAIN","rrname":"tulugiqezib.eu"}}
{"timestamp":"2017-12-12T18:33:30.137764+0100","flow_id":1801043313302052,"pcap_cnt":6130,"event_type":"dns","src_ip":"192.168.1.100","src_port":59867,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":24494,"rrname":"qeqekepokul.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.157627+0100","flow_id":1629457222231675,"pcap_cnt":5263,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60279,"proto":"UDP","dns":{"type":"answer","id":20518,"rcode":"NXDOMAIN","rrname":"cilavocofer.eu"}}
{"timestamp":"2017-12-12T18:33:30.012855+0100","flow_id":1689749973250372,"pcap_cnt":6089,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61993,"proto":"UDP","dns":{"type":"answer","id":18208,"rcode":"NXDOMAIN","rrname":"tufecagemyl.eu"}}
{"timestamp":"2017-12-12T18:33:30.138070+0100","flow_id":1801043313302052,"pcap_cnt":6131,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59867,"proto":"UDP","dns":{"type":"answer","id":24494,"rcode":"NXDOMAIN","rrname":"qeqekepokul.eu"}}
{"timestamp":"2017-12-12T18:33:26.361004+0100","flow_id":210969110675771,"pcap_cnt":4699,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57589,"proto":"UDP","dns":{"type":"answer","id":27838,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":577}}
{"timestamp":"2017-12-12T18:33:30.138070+0100","flow_id":1801043313302052,"pcap_cnt":6131,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59867,"proto":"UDP","dns":{"type":"answer","id":24494,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":569}}
{"timestamp":"2017-12-12T18:33:31.437492+0100","flow_id":72312532157552,"pcap_cnt":6315,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55959,"proto":"UDP","dns":{"type":"answer","id":35275,"rcode":"NXDOMAIN","rrname":"disumesenyv.eu"}}
{"timestamp":"2017-12-12T18:33:30.227288+0100","flow_id":1398965654943704,"pcap_cnt":6170,"event_type":"dns","src_ip":"192.168.1.100","src_port":61813,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5226,"rrname":"vojugycavov.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.437492+0100","flow_id":72312532157552,"pcap_cnt":6315,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55959,"proto":"UDP","dns":{"type":"answer","id":35275,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:29.355688+0100","flow_id":1758540316896262,"pcap_cnt":5815,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52749,"proto":"UDP","dns":{"type":"answer","id":4260,"rcode":"NXDOMAIN","rrname":"jecekorosuk.eu"}}
{"timestamp":"2017-12-12T18:33:31.620988+0100","flow_id":1419770476591548,"pcap_cnt":6410,"event_type":"dns","src_ip":"192.168.1.100","src_port":55826,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30040,"rrname":"magalukacom.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.355688+0100","flow_id":1758540316896262,"pcap_cnt":5815,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52749,"proto":"UDP","dns":{"type":"answer","id":4260,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:31.503955+0100","flow_id":1450621226692517,"pcap_cnt":6351,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57852,"proto":"UDP","dns":{"type":"answer","id":19435,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:27.518038+0100","flow_id":479168343565939,"pcap_cnt":4979,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61505,"proto":"UDP","dns":{"type":"answer","id":19383,"rcode":"NXDOMAIN","rrname":"vowezacuryr.eu"}}
{"timestamp":"2017-12-12T18:33:29.366401+0100","flow_id":2081539037435713,"pcap_cnt":5830,"event_type":"dns","src_ip":"192.168.1.100","src_port":51507,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1647,"rrname":"rycodypycym.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.569795+0100","flow_id":872123491660227,"pcap_cnt":6384,"event_type":"dns","src_ip":"192.168.1.100","src_port":51852,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":24205,"rrname":"xuxukanoluf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.639718+0100","flow_id":1223065268750876,"pcap_cnt":5967,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61150,"proto":"UDP","dns":{"type":"answer","id":17660,"rcode":"NXDOMAIN","rrname":"foxikiwiqub.eu"}}
{"timestamp":"2017-12-12T18:33:29.366659+0100","flow_id":2081539037435713,"pcap_cnt":5831,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51507,"proto":"UDP","dns":{"type":"answer","id":1647,"rcode":"NXDOMAIN","rrname":"rycodypycym.eu"}}
{"timestamp":"2017-12-12T18:33:28.473695+0100","flow_id":505762781083972,"pcap_cnt":5417,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60636,"proto":"UDP","dns":{"type":"answer","id":18495,"rcode":"NXDOMAIN","rrname":"vopuqicyneb.eu"}}
{"timestamp":"2017-12-12T18:33:26.080194+0100","flow_id":1145511044593986,"pcap_cnt":4570,"event_type":"dns","src_ip":"192.168.1.100","src_port":51405,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":16765,"rrname":"vopejamogul.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.473695+0100","flow_id":505762781083972,"pcap_cnt":5417,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60636,"proto":"UDP","dns":{"type":"answer","id":18495,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:28.274805+0100","flow_id":1774090245778519,"pcap_cnt":5319,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60770,"proto":"UDP","dns":{"type":"answer","id":12797,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:26.080506+0100","flow_id":1145511044593986,"pcap_cnt":4571,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51405,"proto":"UDP","dns":{"type":"answer","id":16765,"rcode":"NXDOMAIN","rrname":"vopejamogul.eu"}}
{"timestamp":"2017-12-12T18:33:22.939467+0100","flow_id":2240061984887977,"pcap_cnt":4219,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55099,"proto":"UDP","dns":{"type":"answer","id":40661,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:28.449200+0100","flow_id":871494278765232,"pcap_cnt":5402,"event_type":"dns","src_ip":"192.168.1.100","src_port":59560,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30372,"rrname":"qexetupezix.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.369432+0100","flow_id":523992769733400,"pcap_cnt":4910,"event_type":"dns","src_ip":"192.168.1.100","src_port":60793,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":56175,"rrname":"lysafurisam.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.687974+0100","flow_id":1853897180513739,"pcap_cnt":5514,"event_type":"dns","src_ip":"192.168.1.100","src_port":58517,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62523,"rrname":"magivakelev.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:26.211248+0100","flow_id":772310598825936,"pcap_cnt":4627,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62547,"proto":"UDP","dns":{"type":"answer","id":16795,"rcode":"NXDOMAIN","rrname":"xuxetiryqem.eu"}}
{"timestamp":"2017-12-12T18:33:22.949599+0100","flow_id":1554052628512095,"pcap_cnt":4222,"event_type":"dns","src_ip":"192.168.1.100","src_port":54178,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":54698,"rrname":"puzecypigyw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:30.213614+0100","flow_id":597277796876668,"pcap_cnt":6157,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55368,"proto":"UDP","dns":{"type":"answer","id":60840,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":569}}
{"timestamp":"2017-12-12T18:33:29.021808+0100","flow_id":807930910299440,"pcap_cnt":5668,"event_type":"dns","src_ip":"192.168.1.100","src_port":54252,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60876,"rrname":"puzapelumaq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.893543+0100","flow_id":1112927274967403,"pcap_cnt":4195,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57244,"proto":"UDP","dns":{"type":"answer","id":48437,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:30.213769+0100","flow_id":1081458047997814,"pcap_cnt":6158,"event_type":"dns","src_ip":"192.168.1.100","src_port":57630,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":271,"rrname":"jepycudijyq.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:31.391055+0100","flow_id":1429311746471823,"pcap_cnt":6296,"event_type":"dns","src_ip":"192.168.1.100","src_port":52435,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19266,"rrname":"qexyqapevyb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.085890+0100","flow_id":1141042131127940,"pcap_cnt":4573,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63868,"proto":"UDP","dns":{"type":"answer","id":5269,"rcode":"NXDOMAIN","rrname":"norupamaxur.eu"}}
{"timestamp":"2017-12-12T18:33:30.214003+0100","flow_id":1081458047997814,"pcap_cnt":6159,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57630,"proto":"UDP","dns":{"type":"answer","id":271,"rcode":"NXDOMAIN","rrname":"jepycudijyq.eu"}}
{"timestamp":"2017-12-12T18:33:27.910631+0100","flow_id":1677099146929189,"pcap_cnt":5147,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49206,"proto":"UDP","dns":{"type":"answer","id":11402,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:30.214003+0100","flow_id":1081458047997814,"pcap_cnt":6159,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57630,"proto":"UDP","dns":{"type":"answer","id":271,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":569}}
{"timestamp":"2017-12-12T18:33:29.192677+0100","flow_id":350757411483544,"pcap_cnt":5751,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51469,"proto":"UDP","dns":{"type":"answer","id":62564,"rcode":"NXDOMAIN","rrname":"galyzabunoc.eu"}}
{"timestamp":"2017-12-12T18:33:27.187444+0100","flow_id":1330626282642484,"pcap_cnt":4818,"event_type":"dns","src_ip":"192.168.1.100","src_port":57029,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":24486,"rrname":"pujulapohar.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.192677+0100","flow_id":350757411483544,"pcap_cnt":5751,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51469,"proto":"UDP","dns":{"type":"answer","id":62564,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:29.011899+0100","flow_id":1202103681363315,"pcap_cnt":5663,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62907,"proto":"UDP","dns":{"type":"answer","id":58573,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:28.157627+0100","flow_id":1629457222231675,"pcap_cnt":5263,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60279,"proto":"UDP","dns":{"type":"answer","id":20518,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:28.048188+0100","flow_id":1945517423115055,"pcap_cnt":5215,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64437,"proto":"UDP","dns":{"type":"answer","id":53458,"rcode":"NXDOMAIN","rrname":"jeniceripoj.eu"}}
{"timestamp":"2017-12-12T18:33:28.562338+0100","flow_id":1176819208852642,"pcap_cnt":5456,"event_type":"dns","src_ip":"192.168.1.100","src_port":57274,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":15552,"rrname":"nofemumodoz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.048188+0100","flow_id":1945517423115055,"pcap_cnt":5215,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64437,"proto":"UDP","dns":{"type":"answer","id":53458,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:27.454301+0100","flow_id":403877566395065,"pcap_cnt":4955,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52854,"proto":"UDP","dns":{"type":"answer","id":14712,"rcode":"NXDOMAIN","rrname":"jelimixecuz.eu"}}
{"timestamp":"2017-12-12T18:33:28.733623+0100","flow_id":1461990004200714,"pcap_cnt":5534,"event_type":"dns","src_ip":"192.168.1.100","src_port":58012,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":12405,"rrname":"nozitytogim.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:27.454301+0100","flow_id":403877566395065,"pcap_cnt":4955,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52854,"proto":"UDP","dns":{"type":"answer","id":14712,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:28.562572+0100","flow_id":1176819208852642,"pcap_cnt":5457,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57274,"proto":"UDP","dns":{"type":"answer","id":15552,"rcode":"NXDOMAIN","rrname":"nofemumodoz.eu"}}
{"timestamp":"2017-12-12T18:33:27.515744+0100","flow_id":1813485831693603,"pcap_cnt":4974,"event_type":"dns","src_ip":"192.168.1.100","src_port":54684,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":54728,"rrname":"qexanevymyk.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:28.562572+0100","flow_id":1176819208852642,"pcap_cnt":5457,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57274,"proto":"UDP","dns":{"type":"answer","id":15552,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:30.227598+0100","flow_id":1398965654943704,"pcap_cnt":6171,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61813,"proto":"UDP","dns":{"type":"answer","id":5226,"rcode":"NXDOMAIN","rrname":"vojugycavov.eu"}}
{"timestamp":"2017-12-12T18:33:27.516045+0100","flow_id":1813485831693603,"pcap_cnt":4975,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54684,"proto":"UDP","dns":{"type":"answer","id":54728,"rcode":"NXDOMAIN","rrname":"qexanevymyk.eu"}}
{"timestamp":"2017-12-12T18:33:28.572781+0100","flow_id":1851403952242029,"pcap_cnt":5464,"event_type":"dns","src_ip":"192.168.1.100","src_port":56155,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19330,"rrname":"lyxonadituw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:30.227598+0100","flow_id":1398965654943704,"pcap_cnt":6171,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61813,"proto":"UDP","dns":{"type":"answer","id":5226,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:27.516045+0100","flow_id":1813485831693603,"pcap_cnt":4975,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54684,"proto":"UDP","dns":{"type":"answer","id":54728,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:31.621260+0100","flow_id":1419770476591548,"pcap_cnt":6411,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55826,"proto":"UDP","dns":{"type":"answer","id":30040,"rcode":"NXDOMAIN","rrname":"magalukacom.eu"}}
{"timestamp":"2017-12-12T18:33:27.529079+0100","flow_id":823702030062263,"pcap_cnt":4984,"event_type":"dns","src_ip":"192.168.1.100","src_port":60256,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37543,"rrname":"lykujedofod.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.621260+0100","flow_id":1419770476591548,"pcap_cnt":6411,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55826,"proto":"UDP","dns":{"type":"answer","id":30040,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":569}}
{"timestamp":"2017-12-12T18:33:31.570045+0100","flow_id":872123491660227,"pcap_cnt":6385,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51852,"proto":"UDP","dns":{"type":"answer","id":24205,"rcode":"NXDOMAIN","rrname":"xuxukanoluf.eu"}}
{"timestamp":"2017-12-12T18:33:29.639718+0100","flow_id":1223065268750876,"pcap_cnt":5967,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61150,"proto":"UDP","dns":{"type":"answer","id":17660,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:31.570045+0100","flow_id":872123491660227,"pcap_cnt":6385,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51852,"proto":"UDP","dns":{"type":"answer","id":24205,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:29.366659+0100","flow_id":2081539037435713,"pcap_cnt":5831,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51507,"proto":"UDP","dns":{"type":"answer","id":1647,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:29.697539+0100","flow_id":1439067763366047,"pcap_cnt":5986,"event_type":"dns","src_ip":"192.168.1.100","src_port":64197,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":602,"rrname":"masisokemep.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:31.818877+0100","flow_id":1041018785595069,"pcap_cnt":6500,"event_type":"dns","src_ip":"192.168.1.100","src_port":61122,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29502,"rrname":"pujamyqywyk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.561921+0100","flow_id":32914799104769,"pcap_cnt":5454,"event_type":"dns","src_ip":"192.168.1.100","src_port":63033,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":12158,"rrname":"cihyfafexuw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.819126+0100","flow_id":1041018785595069,"pcap_cnt":6501,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61122,"proto":"UDP","dns":{"type":"answer","id":29502,"rcode":"NXDOMAIN","rrname":"pujamyqywyk.eu"}}
{"timestamp":"2017-12-12T18:33:29.697841+0100","flow_id":1439067763366047,"pcap_cnt":5987,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64197,"proto":"UDP","dns":{"type":"answer","id":602,"rcode":"NXDOMAIN","rrname":"masisokemep.eu"}}
{"timestamp":"2017-12-12T18:33:31.819126+0100","flow_id":1041018785595069,"pcap_cnt":6501,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61122,"proto":"UDP","dns":{"type":"answer","id":29502,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:28.562173+0100","flow_id":32914799104769,"pcap_cnt":5455,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63033,"proto":"UDP","dns":{"type":"answer","id":12158,"rcode":"NXDOMAIN","rrname":"cihyfafexuw.eu"}}
{"timestamp":"2017-12-12T18:33:26.211248+0100","flow_id":772310598825936,"pcap_cnt":4627,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62547,"proto":"UDP","dns":{"type":"answer","id":16795,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:28.562173+0100","flow_id":32914799104769,"pcap_cnt":5455,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63033,"proto":"UDP","dns":{"type":"answer","id":12158,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:31.783603+0100","flow_id":115328779285480,"pcap_cnt":6481,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64491,"proto":"UDP","dns":{"type":"answer","id":26204,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:28.688259+0100","flow_id":1853897180513739,"pcap_cnt":5515,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58517,"proto":"UDP","dns":{"type":"answer","id":62523,"rcode":"NXDOMAIN","rrname":"magivakelev.eu"}}
{"timestamp":"2017-12-12T18:33:26.406000+0100","flow_id":1217389469774320,"pcap_cnt":4730,"event_type":"dns","src_ip":"192.168.1.100","src_port":51906,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62318,"rrname":"lysuxinebyg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.688259+0100","flow_id":1853897180513739,"pcap_cnt":5515,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58517,"proto":"UDP","dns":{"type":"answer","id":62523,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:27.664534+0100","flow_id":1688946814165649,"pcap_cnt":5035,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52949,"proto":"UDP","dns":{"type":"answer","id":29692,"rcode":"NXDOMAIN","rrname":"gatahohalir.eu"}}
{"timestamp":"2017-12-12T18:33:22.910664+0100","flow_id":871945249940808,"pcap_cnt":4204,"event_type":"dns","src_ip":"192.168.1.100","src_port":62244,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60362,"rrname":"kevedorozup.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.406237+0100","flow_id":1217389469774320,"pcap_cnt":4731,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51906,"proto":"UDP","dns":{"type":"answer","id":62318,"rcode":"NXDOMAIN","rrname":"lysuxinebyg.eu"}}
{"timestamp":"2017-12-12T18:33:29.022100+0100","flow_id":807930910299440,"pcap_cnt":5669,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54252,"proto":"UDP","dns":{"type":"answer","id":60876,"rcode":"NXDOMAIN","rrname":"puzapelumaq.eu"}}
{"timestamp":"2017-12-12T18:33:26.085890+0100","flow_id":1141042131127940,"pcap_cnt":4573,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63868,"proto":"UDP","dns":{"type":"answer","id":5269,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:26.406237+0100","flow_id":1217389469774320,"pcap_cnt":4731,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51906,"proto":"UDP","dns":{"type":"answer","id":62318,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:27.999356+0100","flow_id":1029194740350908,"pcap_cnt":5192,"event_type":"dns","src_ip":"192.168.1.100","src_port":56818,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1685,"rrname":"mavyvomuqal.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.162441+0100","flow_id":1185366193699465,"pcap_cnt":4800,"event_type":"dns","src_ip":"192.168.1.100","src_port":58174,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8457,"rrname":"norebituwez.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.371515+0100","flow_id":1641403673848635,"pcap_cnt":5838,"event_type":"dns","src_ip":"192.168.1.100","src_port":53715,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26989,"rrname":"gatequsiryg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.162683+0100","flow_id":1185366193699465,"pcap_cnt":4801,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58174,"proto":"UDP","dns":{"type":"answer","id":8457,"rcode":"NXDOMAIN","rrname":"norebituwez.eu"}}
{"timestamp":"2017-12-12T18:33:29.282108+0100","flow_id":148498811538940,"pcap_cnt":5786,"event_type":"dns","src_ip":"192.168.1.100","src_port":52209,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17629,"rrname":"tufibiqunit.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.162683+0100","flow_id":1185366193699465,"pcap_cnt":4801,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58174,"proto":"UDP","dns":{"type":"answer","id":8457,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:27.999623+0100","flow_id":1029194740350908,"pcap_cnt":5193,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56818,"proto":"UDP","dns":{"type":"answer","id":1685,"rcode":"NXDOMAIN","rrname":"mavyvomuqal.eu"}}
{"timestamp":"2017-12-12T18:33:30.012855+0100","flow_id":1689749973250372,"pcap_cnt":6089,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61993,"proto":"UDP","dns":{"type":"answer","id":18208,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:27.412509+0100","flow_id":95698630953821,"pcap_cnt":4934,"event_type":"dns","src_ip":"192.168.1.100","src_port":52201,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":32942,"rrname":"ryhekoputag.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.282400+0100","flow_id":148498811538940,"pcap_cnt":5787,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52209,"proto":"UDP","dns":{"type":"answer","id":17629,"rcode":"NXDOMAIN","rrname":"tufibiqunit.eu"}}
{"timestamp":"2017-12-12T18:33:30.021533+0100","flow_id":477023005367651,"pcap_cnt":6090,"event_type":"dns","src_ip":"192.168.1.100","src_port":56063,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17130,"rrname":"pupujeguper.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:29.586714+0100","flow_id":1564689115509415,"pcap_cnt":5939,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54196,"proto":"UDP","dns":{"type":"answer","id":9408,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:29.282400+0100","flow_id":148498811538940,"pcap_cnt":5787,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52209,"proto":"UDP","dns":{"type":"answer","id":17629,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:27.412816+0100","flow_id":95698630953821,"pcap_cnt":4935,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52201,"proto":"UDP","dns":{"type":"answer","id":32942,"rcode":"NXDOMAIN","rrname":"ryhekoputag.eu"}}
{"timestamp":"2017-12-12T18:33:30.021854+0100","flow_id":477023005367651,"pcap_cnt":6091,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56063,"proto":"UDP","dns":{"type":"answer","id":17130,"rcode":"NXDOMAIN","rrname":"pupujeguper.eu"}}
{"timestamp":"2017-12-12T18:33:29.623965+0100","flow_id":416764616344925,"pcap_cnt":5958,"event_type":"dns","src_ip":"192.168.1.100","src_port":50718,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50657,"rrname":"makatokagal.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:30.021854+0100","flow_id":477023005367651,"pcap_cnt":6091,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56063,"proto":"UDP","dns":{"type":"answer","id":17130,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:29.358377+0100","flow_id":1614852186011625,"pcap_cnt":5818,"event_type":"dns","src_ip":"192.168.1.100","src_port":55140,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":24818,"rrname":"xugavariruq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.573040+0100","flow_id":1851403952242029,"pcap_cnt":5465,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56155,"proto":"UDP","dns":{"type":"answer","id":19330,"rcode":"NXDOMAIN","rrname":"lyxonadituw.eu"}}
{"timestamp":"2017-12-12T18:33:31.173026+0100","flow_id":1878902480544738,"pcap_cnt":6182,"event_type":"dns","src_ip":"192.168.1.100","src_port":54464,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4789,"rrname":"lymosudyqym.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.947709+0100","flow_id":1967526983071229,"pcap_cnt":6060,"event_type":"dns","src_ip":"192.168.1.100","src_port":58967,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":58153,"rrname":"kejitanokon.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.624201+0100","flow_id":416764616344925,"pcap_cnt":5959,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50718,"proto":"UDP","dns":{"type":"answer","id":50657,"rcode":"NXDOMAIN","rrname":"makatokagal.eu"}}
{"timestamp":"2017-12-12T18:33:27.529483+0100","flow_id":823702030062263,"pcap_cnt":4985,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60256,"proto":"UDP","dns":{"type":"answer","id":37543,"rcode":"NXDOMAIN","rrname":"lykujedofod.eu"}}
{"timestamp":"2017-12-12T18:33:28.938467+0100","flow_id":812423446024430,"pcap_cnt":5637,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60644,"proto":"UDP","dns":{"type":"answer","id":62762,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:29.624201+0100","flow_id":416764616344925,"pcap_cnt":5959,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50718,"proto":"UDP","dns":{"type":"answer","id":50657,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":588}}
{"timestamp":"2017-12-12T18:33:29.533224+0100","flow_id":1400030806745832,"pcap_cnt":5918,"event_type":"dns","src_ip":"192.168.1.100","src_port":60246,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":20958,"rrname":"tunupegirec.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.947985+0100","flow_id":1967526983071229,"pcap_cnt":6061,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58967,"proto":"UDP","dns":{"type":"answer","id":58153,"rcode":"NXDOMAIN","rrname":"kejitanokon.eu"}}
{"timestamp":"2017-12-12T18:33:28.449477+0100","flow_id":871494278765232,"pcap_cnt":5403,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59560,"proto":"UDP","dns":{"type":"answer","id":30372,"rcode":"NXDOMAIN","rrname":"qexetupezix.eu"}}
{"timestamp":"2017-12-12T18:33:29.715827+0100","flow_id":2214122530401331,"pcap_cnt":5998,"event_type":"dns","src_ip":"192.168.1.100","src_port":51656,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30870,"rrname":"kepymexihak.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.369766+0100","flow_id":523992769733400,"pcap_cnt":4911,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60793,"proto":"UDP","dns":{"type":"answer","id":56175,"rcode":"NXDOMAIN","rrname":"lysafurisam.eu"}}
{"timestamp":"2017-12-12T18:33:29.697841+0100","flow_id":1439067763366047,"pcap_cnt":5987,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64197,"proto":"UDP","dns":{"type":"answer","id":602,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":546}}
{"timestamp":"2017-12-12T18:33:28.449477+0100","flow_id":871494278765232,"pcap_cnt":5403,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59560,"proto":"UDP","dns":{"type":"answer","id":30372,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:27.369766+0100","flow_id":523992769733400,"pcap_cnt":4911,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60793,"proto":"UDP","dns":{"type":"answer","id":56175,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:28.720014+0100","flow_id":1954483167362190,"pcap_cnt":5530,"event_type":"dns","src_ip":"192.168.1.100","src_port":59968,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2993,"rrname":"cinazetybiq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.949853+0100","flow_id":1554052628512095,"pcap_cnt":4223,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54178,"proto":"UDP","dns":{"type":"answer","id":54698,"rcode":"NXDOMAIN","rrname":"puzecypigyw.eu"}}
{"timestamp":"2017-12-12T18:33:31.816605+0100","flow_id":1608379670427101,"pcap_cnt":6496,"event_type":"dns","src_ip":"192.168.1.100","src_port":51586,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8608,"rrname":"rycuheqojyk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.664534+0100","flow_id":1688946814165649,"pcap_cnt":5035,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52949,"proto":"UDP","dns":{"type":"answer","id":29692,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:27.513858+0100","flow_id":671791184336706,"pcap_cnt":4972,"event_type":"dns","src_ip":"192.168.1.100","src_port":52644,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41278,"rrname":"citonocebyl.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.391311+0100","flow_id":1429311746471823,"pcap_cnt":6297,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52435,"proto":"UDP","dns":{"type":"answer","id":19266,"rcode":"NXDOMAIN","rrname":"qexyqapevyb.eu"}}
{"timestamp":"2017-12-12T18:33:28.720267+0100","flow_id":1954483167362190,"pcap_cnt":5531,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59968,"proto":"UDP","dns":{"type":"answer","id":2993,"rcode":"NXDOMAIN","rrname":"cinazetybiq.eu"}}
{"timestamp":"2017-12-12T18:33:31.816855+0100","flow_id":1608379670427101,"pcap_cnt":6497,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51586,"proto":"UDP","dns":{"type":"answer","id":8608,"rcode":"NXDOMAIN","rrname":"rycuheqojyk.eu"}}
{"timestamp":"2017-12-12T18:33:27.514116+0100","flow_id":671791184336706,"pcap_cnt":4973,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52644,"proto":"UDP","dns":{"type":"answer","id":41278,"rcode":"NXDOMAIN","rrname":"citonocebyl.eu"}}
{"timestamp":"2017-12-12T18:33:28.720267+0100","flow_id":1954483167362190,"pcap_cnt":5531,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59968,"proto":"UDP","dns":{"type":"answer","id":2993,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:27.187687+0100","flow_id":1330626282642484,"pcap_cnt":4819,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57029,"proto":"UDP","dns":{"type":"answer","id":24486,"rcode":"NXDOMAIN","rrname":"pujulapohar.eu"}}
{"timestamp":"2017-12-12T18:33:27.514116+0100","flow_id":671791184336706,"pcap_cnt":4973,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52644,"proto":"UDP","dns":{"type":"answer","id":41278,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:29.105657+0100","flow_id":828286907817145,"pcap_cnt":5702,"event_type":"dns","src_ip":"192.168.1.100","src_port":59503,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17325,"rrname":"qedutivosob.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.873982+0100","flow_id":719714429457918,"pcap_cnt":5602,"event_type":"dns","src_ip":"192.168.1.100","src_port":62998,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26760,"rrname":"fotekuhagyx.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.159513+0100","flow_id":961952732376857,"pcap_cnt":4796,"event_type":"dns","src_ip":"192.168.1.100","src_port":58983,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8056,"rrname":"kevopoxecun.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.874232+0100","flow_id":719714429457918,"pcap_cnt":5603,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62998,"proto":"UDP","dns":{"type":"answer","id":26760,"rcode":"NXDOMAIN","rrname":"fotekuhagyx.eu"}}
{"timestamp":"2017-12-12T18:33:29.105916+0100","flow_id":828286907817145,"pcap_cnt":5703,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59503,"proto":"UDP","dns":{"type":"answer","id":17325,"rcode":"NXDOMAIN","rrname":"qedutivosob.eu"}}
{"timestamp":"2017-12-12T18:33:28.733902+0100","flow_id":1461990004200714,"pcap_cnt":5535,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58012,"proto":"UDP","dns":{"type":"answer","id":12405,"rcode":"NXDOMAIN","rrname":"nozitytogim.eu"}}
{"timestamp":"2017-12-12T18:33:31.583432+0100","flow_id":1592954295412488,"pcap_cnt":6390,"event_type":"dns","src_ip":"192.168.1.100","src_port":58877,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":65041,"rrname":"nofucemihub.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.733902+0100","flow_id":1461990004200714,"pcap_cnt":5535,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58012,"proto":"UDP","dns":{"type":"answer","id":12405,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:27.412816+0100","flow_id":95698630953821,"pcap_cnt":4935,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52201,"proto":"UDP","dns":{"type":"answer","id":32942,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:27.518038+0100","flow_id":479168343565939,"pcap_cnt":4979,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61505,"proto":"UDP","dns":{"type":"answer","id":19383,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:27.516932+0100","flow_id":135727726191428,"pcap_cnt":4976,"event_type":"dns","src_ip":"192.168.1.100","src_port":65426,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":22653,"rrname":"xudutoxakur.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:30.131997+0100","flow_id":468450252817309,"pcap_cnt":6120,"event_type":"dns","src_ip":"192.168.1.100","src_port":59924,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28629,"rrname":"lyxuworenuz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.358731+0100","flow_id":1614852186011625,"pcap_cnt":5819,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55140,"proto":"UDP","dns":{"type":"answer","id":24818,"rcode":"NXDOMAIN","rrname":"xugavariruq.eu"}}
{"timestamp":"2017-12-12T18:33:30.132273+0100","flow_id":468450252817309,"pcap_cnt":6121,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59924,"proto":"UDP","dns":{"type":"answer","id":28629,"rcode":"NXDOMAIN","rrname":"lyxuworenuz.eu"}}
{"timestamp":"2017-12-12T18:33:29.358731+0100","flow_id":1614852186011625,"pcap_cnt":5819,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55140,"proto":"UDP","dns":{"type":"answer","id":24818,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:30.132273+0100","flow_id":468450252817309,"pcap_cnt":6121,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59924,"proto":"UDP","dns":{"type":"answer","id":28629,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:30.223879+0100","flow_id":316008978606727,"pcap_cnt":6164,"event_type":"dns","src_ip":"192.168.1.100","src_port":55805,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9028,"rrname":"digegazolan.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.426655+0100","flow_id":1531529820471967,"pcap_cnt":5862,"event_type":"dns","src_ip":"192.168.1.100","src_port":56062,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51837,"rrname":"vowypikelaf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.837817+0100","flow_id":615784811055289,"pcap_cnt":6510,"event_type":"dns","src_ip":"192.168.1.100","src_port":60690,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50552,"rrname":"rydopapifel.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.154347+0100","flow_id":657942062389995,"pcap_cnt":5732,"event_type":"dns","src_ip":"192.168.1.100","src_port":56025,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37718,"rrname":"kepiwodagyr.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:30.224194+0100","flow_id":316008978606727,"pcap_cnt":6165,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55805,"proto":"UDP","dns":{"type":"answer","id":9028,"rcode":"NXDOMAIN","rrname":"digegazolan.eu"}}
{"timestamp":"2017-12-12T18:33:29.426916+0100","flow_id":1531529820471967,"pcap_cnt":5863,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56062,"proto":"UDP","dns":{"type":"answer","id":51837,"rcode":"NXDOMAIN","rrname":"vowypikelaf.eu"}}
{"timestamp":"2017-12-12T18:33:26.080506+0100","flow_id":1145511044593986,"pcap_cnt":4571,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51405,"proto":"UDP","dns":{"type":"answer","id":16765,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:29.154597+0100","flow_id":657942062389995,"pcap_cnt":5733,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56025,"proto":"UDP","dns":{"type":"answer","id":37718,"rcode":"NXDOMAIN","rrname":"kepiwodagyr.eu"}}
{"timestamp":"2017-12-12T18:33:28.961463+0100","flow_id":1810814363806647,"pcap_cnt":5638,"event_type":"dns","src_ip":"192.168.1.100","src_port":63087,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26840,"rrname":"jenoqujumez.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.154597+0100","flow_id":657942062389995,"pcap_cnt":5733,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56025,"proto":"UDP","dns":{"type":"answer","id":37718,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:29.533505+0100","flow_id":1400030806745832,"pcap_cnt":5919,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60246,"proto":"UDP","dns":{"type":"answer","id":20958,"rcode":"NXDOMAIN","rrname":"tunupegirec.eu"}}
{"timestamp":"2017-12-12T18:33:26.314552+0100","flow_id":675452643888312,"pcap_cnt":4668,"event_type":"dns","src_ip":"192.168.1.100","src_port":60683,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36572,"rrname":"cinorufifac.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.217221+0100","flow_id":2020632106193029,"pcap_cnt":5764,"event_type":"dns","src_ip":"192.168.1.100","src_port":55203,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2423,"rrname":"rydeqegekeq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.533505+0100","flow_id":1400030806745832,"pcap_cnt":5919,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60246,"proto":"UDP","dns":{"type":"answer","id":20958,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:29.716078+0100","flow_id":2214122530401331,"pcap_cnt":5999,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51656,"proto":"UDP","dns":{"type":"answer","id":30870,"rcode":"NXDOMAIN","rrname":"kepymexihak.eu"}}
{"timestamp":"2017-12-12T18:33:29.859126+0100","flow_id":833735073799158,"pcap_cnt":6020,"event_type":"dns","src_ip":"192.168.1.100","src_port":52881,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":55953,"rrname":"tuwikypabud.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.202542+0100","flow_id":1705841068152622,"pcap_cnt":5756,"event_type":"dns","src_ip":"192.168.1.100","src_port":56189,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64923,"rrname":"nozecafycyk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.949853+0100","flow_id":1554052628512095,"pcap_cnt":4223,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54178,"proto":"UDP","dns":{"type":"answer","id":54698,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:31.175418+0100","flow_id":817283201740090,"pcap_cnt":6184,"event_type":"dns","src_ip":"192.168.1.100","src_port":57202,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4359,"rrname":"ryqofuvenoc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.859470+0100","flow_id":833735073799158,"pcap_cnt":6021,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52881,"proto":"UDP","dns":{"type":"answer","id":55953,"rcode":"NXDOMAIN","rrname":"tuwikypabud.eu"}}
{"timestamp":"2017-12-12T18:33:27.801260+0100","flow_id":1787902860671468,"pcap_cnt":5094,"event_type":"dns","src_ip":"192.168.1.100","src_port":50670,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29192,"rrname":"qedosiputot.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.678729+0100","flow_id":233281465703241,"pcap_cnt":4390,"event_type":"dns","src_ip":"192.168.1.100","src_port":56233,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33628,"rrname":"marugofazez.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.022100+0100","flow_id":807930910299440,"pcap_cnt":5669,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54252,"proto":"UDP","dns":{"type":"answer","id":60876,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:27.234156+0100","flow_id":2058687663805100,"pcap_cnt":4836,"event_type":"dns","src_ip":"192.168.1.100","src_port":56773,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25263,"rrname":"rynepevymuc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.816855+0100","flow_id":1608379670427101,"pcap_cnt":6497,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51586,"proto":"UDP","dns":{"type":"answer","id":8608,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:25.679004+0100","flow_id":233281465703241,"pcap_cnt":4391,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56233,"proto":"UDP","dns":{"type":"answer","id":33628,"rcode":"NXDOMAIN","rrname":"marugofazez.eu"}}
{"timestamp":"2017-12-12T18:33:27.999623+0100","flow_id":1029194740350908,"pcap_cnt":5193,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56818,"proto":"UDP","dns":{"type":"answer","id":1685,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:27.234421+0100","flow_id":2058687663805100,"pcap_cnt":4837,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56773,"proto":"UDP","dns":{"type":"answer","id":25263,"rcode":"NXDOMAIN","rrname":"rynepevymuc.eu"}}
{"timestamp":"2017-12-12T18:33:27.671358+0100","flow_id":1627541666741886,"pcap_cnt":5036,"event_type":"dns","src_ip":"192.168.1.100","src_port":51354,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":22873,"rrname":"jewypojynil.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:32.014792+0100","flow_id":1823007776192968,"pcap_cnt":6586,"event_type":"dns","src_ip":"192.168.1.100","src_port":64226,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":24804,"rrname":"qetunopifef.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.874232+0100","flow_id":719714429457918,"pcap_cnt":5603,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62998,"proto":"UDP","dns":{"type":"answer","id":26760,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:29.105916+0100","flow_id":828286907817145,"pcap_cnt":5703,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59503,"proto":"UDP","dns":{"type":"answer","id":17325,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:27.159754+0100","flow_id":961952732376857,"pcap_cnt":4797,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58983,"proto":"UDP","dns":{"type":"answer","id":8056,"rcode":"NXDOMAIN","rrname":"kevopoxecun.eu"}}
{"timestamp":"2017-12-12T18:33:26.356955+0100","flow_id":1269564732502619,"pcap_cnt":4694,"event_type":"dns","src_ip":"192.168.1.100","src_port":63641,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":3686,"rrname":"tuwyjyvymuq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.918947+0100","flow_id":1197108634322339,"pcap_cnt":5630,"event_type":"dns","src_ip":"192.168.1.100","src_port":62553,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28407,"rrname":"vopazumosoh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.550133+0100","flow_id":606625793008885,"pcap_cnt":4992,"event_type":"dns","src_ip":"192.168.1.100","src_port":61312,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":56554,"rrname":"tujigevojyj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.517194+0100","flow_id":135727726191428,"pcap_cnt":4977,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65426,"proto":"UDP","dns":{"type":"answer","id":22653,"rcode":"NXDOMAIN","rrname":"xudutoxakur.eu"}}
{"timestamp":"2017-12-12T18:33:31.715578+0100","flow_id":1435009020586810,"pcap_cnt":6446,"event_type":"dns","src_ip":"192.168.1.100","src_port":63558,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":15768,"rrname":"jejykaxymob.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.517194+0100","flow_id":135727726191428,"pcap_cnt":4977,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65426,"proto":"UDP","dns":{"type":"answer","id":22653,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:28.573040+0100","flow_id":1851403952242029,"pcap_cnt":5465,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56155,"proto":"UDP","dns":{"type":"answer","id":19330,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:27.529483+0100","flow_id":823702030062263,"pcap_cnt":4985,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60256,"proto":"UDP","dns":{"type":"answer","id":37543,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:31.838093+0100","flow_id":615784811055289,"pcap_cnt":6511,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60690,"proto":"UDP","dns":{"type":"answer","id":50552,"rcode":"NXDOMAIN","rrname":"rydopapifel.eu"}}
{"timestamp":"2017-12-12T18:33:28.786602+0100","flow_id":1845786134970538,"pcap_cnt":5556,"event_type":"dns","src_ip":"192.168.1.100","src_port":54644,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6020,"rrname":"gacarisekub.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.730343+0100","flow_id":267280426935527,"pcap_cnt":5066,"event_type":"dns","src_ip":"192.168.1.100","src_port":61334,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18816,"rrname":"vojomekisuw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:30.224194+0100","flow_id":316008978606727,"pcap_cnt":6165,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55805,"proto":"UDP","dns":{"type":"answer","id":9028,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:29.426916+0100","flow_id":1531529820471967,"pcap_cnt":5863,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56062,"proto":"UDP","dns":{"type":"answer","id":51837,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:29.947985+0100","flow_id":1967526983071229,"pcap_cnt":6061,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58967,"proto":"UDP","dns":{"type":"answer","id":58153,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":567}}
{"timestamp":"2017-12-12T18:33:27.730754+0100","flow_id":267280426935527,"pcap_cnt":5067,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61334,"proto":"UDP","dns":{"type":"answer","id":18816,"rcode":"NXDOMAIN","rrname":"vojomekisuw.eu"}}
{"timestamp":"2017-12-12T18:33:31.227006+0100","flow_id":1819127272959732,"pcap_cnt":6220,"event_type":"dns","src_ip":"192.168.1.100","src_port":63316,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8005,"rrname":"vocakemenir.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:29.451285+0100","flow_id":1535223492371157,"pcap_cnt":5892,"event_type":"dns","src_ip":"192.168.1.100","src_port":51873,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":16025,"rrname":"nopetucumot.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.983911+0100","flow_id":1077180262418054,"pcap_cnt":6070,"event_type":"dns","src_ip":"192.168.1.100","src_port":51234,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":714,"rrname":"citifemifif.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:31.227243+0100","flow_id":1819127272959732,"pcap_cnt":6221,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63316,"proto":"UDP","dns":{"type":"answer","id":8005,"rcode":"NXDOMAIN","rrname":"vocakemenir.eu"}}
{"timestamp":"2017-12-12T18:33:29.451519+0100","flow_id":1535223492371157,"pcap_cnt":5893,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51873,"proto":"UDP","dns":{"type":"answer","id":16025,"rcode":"NXDOMAIN","rrname":"nopetucumot.eu"}}
{"timestamp":"2017-12-12T18:33:29.217464+0100","flow_id":2020632106193029,"pcap_cnt":5765,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55203,"proto":"UDP","dns":{"type":"answer","id":2423,"rcode":"NXDOMAIN","rrname":"rydeqegekeq.eu"}}
{"timestamp":"2017-12-12T18:33:29.451519+0100","flow_id":1535223492371157,"pcap_cnt":5893,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51873,"proto":"UDP","dns":{"type":"answer","id":16025,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:30.249488+0100","flow_id":1556608134598288,"pcap_cnt":6180,"event_type":"dns","src_ip":"192.168.1.100","src_port":51660,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30993,"rrname":"cidohukigeq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.217464+0100","flow_id":2020632106193029,"pcap_cnt":5765,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55203,"proto":"UDP","dns":{"type":"answer","id":2423,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:22.910996+0100","flow_id":871945249940808,"pcap_cnt":4205,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62244,"proto":"UDP","dns":{"type":"answer","id":60362,"rcode":"NXDOMAIN","rrname":"kevedorozup.eu"}}
{"timestamp":"2017-12-12T18:33:31.391311+0100","flow_id":1429311746471823,"pcap_cnt":6297,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52435,"proto":"UDP","dns":{"type":"answer","id":19266,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":567}}
{"timestamp":"2017-12-12T18:33:29.495530+0100","flow_id":1662062466535338,"pcap_cnt":5898,"event_type":"dns","src_ip":"192.168.1.100","src_port":55791,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":297,"rrname":"nofypafiqev.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:22.910996+0100","flow_id":871945249940808,"pcap_cnt":4205,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62244,"proto":"UDP","dns":{"type":"answer","id":60362,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:31.175663+0100","flow_id":817283201740090,"pcap_cnt":6185,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57202,"proto":"UDP","dns":{"type":"answer","id":4359,"rcode":"NXDOMAIN","rrname":"ryqofuvenoc.eu"}}
{"timestamp":"2017-12-12T18:33:31.537181+0100","flow_id":565473564111453,"pcap_cnt":6370,"event_type":"dns","src_ip":"192.168.1.100","src_port":63078,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45372,"rrname":"pujuduvaxim.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.175663+0100","flow_id":817283201740090,"pcap_cnt":6185,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57202,"proto":"UDP","dns":{"type":"answer","id":4359,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:27.801642+0100","flow_id":1787902860671468,"pcap_cnt":5095,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50670,"proto":"UDP","dns":{"type":"answer","id":29192,"rcode":"NXDOMAIN","rrname":"qedosiputot.eu"}}
{"timestamp":"2017-12-12T18:33:27.187687+0100","flow_id":1330626282642484,"pcap_cnt":4819,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57029,"proto":"UDP","dns":{"type":"answer","id":24486,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:27.801642+0100","flow_id":1787902860671468,"pcap_cnt":5095,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50670,"proto":"UDP","dns":{"type":"answer","id":29192,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:25.679004+0100","flow_id":233281465703241,"pcap_cnt":4391,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56233,"proto":"UDP","dns":{"type":"answer","id":33628,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:25.517464+0100","flow_id":684832852403245,"pcap_cnt":4341,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59387,"proto":"UDP","dns":{"type":"answer","id":46931,"rcode":"NXDOMAIN","rrname":"nomojatudyn.eu"}}
{"timestamp":"2017-12-12T18:33:27.855041+0100","flow_id":750547999591425,"pcap_cnt":5122,"event_type":"dns","src_ip":"192.168.1.100","src_port":59214,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27538,"rrname":"vocerocofyf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.234421+0100","flow_id":2058687663805100,"pcap_cnt":4837,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56773,"proto":"UDP","dns":{"type":"answer","id":25263,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:25.881739+0100","flow_id":2107588013814859,"pcap_cnt":4476,"event_type":"dns","src_ip":"192.168.1.100","src_port":55074,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13054,"rrname":"fokuquwifys.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.282706+0100","flow_id":1240575850860626,"pcap_cnt":5322,"event_type":"dns","src_ip":"192.168.1.100","src_port":52049,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63796,"rrname":"tuwaguguwux.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.855328+0100","flow_id":750547999591425,"pcap_cnt":5123,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59214,"proto":"UDP","dns":{"type":"answer","id":27538,"rcode":"NXDOMAIN","rrname":"vocerocofyf.eu"}}
{"timestamp":"2017-12-12T18:33:28.283040+0100","flow_id":1240575850860626,"pcap_cnt":5323,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52049,"proto":"UDP","dns":{"type":"answer","id":63796,"rcode":"NXDOMAIN","rrname":"tuwaguguwux.eu"}}
{"timestamp":"2017-12-12T18:33:32.015076+0100","flow_id":1823007776192968,"pcap_cnt":6587,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64226,"proto":"UDP","dns":{"type":"answer","id":24804,"rcode":"NXDOMAIN","rrname":"qetunopifef.eu"}}
{"timestamp":"2017-12-12T18:33:28.283040+0100","flow_id":1240575850860626,"pcap_cnt":5323,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52049,"proto":"UDP","dns":{"type":"answer","id":63796,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:27.159754+0100","flow_id":961952732376857,"pcap_cnt":4797,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58983,"proto":"UDP","dns":{"type":"answer","id":8056,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:29.133081+0100","flow_id":859588629432281,"pcap_cnt":5718,"event_type":"dns","src_ip":"192.168.1.100","src_port":59548,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41221,"rrname":"ryqivypahux.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.378348+0100","flow_id":1403234852324844,"pcap_cnt":5372,"event_type":"dns","src_ip":"192.168.1.100","src_port":62684,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":52127,"rrname":"novylakuwyw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.357275+0100","flow_id":1269564732502619,"pcap_cnt":4695,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63641,"proto":"UDP","dns":{"type":"answer","id":3686,"rcode":"NXDOMAIN","rrname":"tuwyjyvymuq.eu"}}
{"timestamp":"2017-12-12T18:33:28.919261+0100","flow_id":1197108634322339,"pcap_cnt":5631,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62553,"proto":"UDP","dns":{"type":"answer","id":28407,"rcode":"NXDOMAIN","rrname":"vopazumosoh.eu"}}
{"timestamp":"2017-12-12T18:33:29.133353+0100","flow_id":859588629432281,"pcap_cnt":5719,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59548,"proto":"UDP","dns":{"type":"answer","id":41221,"rcode":"NXDOMAIN","rrname":"ryqivypahux.eu"}}
{"timestamp":"2017-12-12T18:33:28.378641+0100","flow_id":1403234852324844,"pcap_cnt":5373,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62684,"proto":"UDP","dns":{"type":"answer","id":52127,"rcode":"NXDOMAIN","rrname":"novylakuwyw.eu"}}
{"timestamp":"2017-12-12T18:33:29.133353+0100","flow_id":859588629432281,"pcap_cnt":5719,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59548,"proto":"UDP","dns":{"type":"answer","id":41221,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:31.173322+0100","flow_id":1878902480544738,"pcap_cnt":6183,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54464,"proto":"UDP","dns":{"type":"answer","id":4789,"rcode":"NXDOMAIN","rrname":"lymosudyqym.eu"}}
{"timestamp":"2017-12-12T18:33:31.838093+0100","flow_id":615784811055289,"pcap_cnt":6511,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60690,"proto":"UDP","dns":{"type":"answer","id":50552,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:29.156839+0100","flow_id":2237414138012839,"pcap_cnt":5734,"event_type":"dns","src_ip":"192.168.1.100","src_port":60784,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40213,"rrname":"jefudidiryl.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.173322+0100","flow_id":1878902480544738,"pcap_cnt":6183,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54464,"proto":"UDP","dns":{"type":"answer","id":4789,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:28.786848+0100","flow_id":1845786134970538,"pcap_cnt":5557,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54644,"proto":"UDP","dns":{"type":"answer","id":6020,"rcode":"NXDOMAIN","rrname":"gacarisekub.eu"}}
{"timestamp":"2017-12-12T18:33:28.961848+0100","flow_id":1810814363806647,"pcap_cnt":5639,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63087,"proto":"UDP","dns":{"type":"answer","id":26840,"rcode":"NXDOMAIN","rrname":"jenoqujumez.eu"}}
{"timestamp":"2017-12-12T18:33:31.918563+0100","flow_id":280090167037089,"pcap_cnt":6548,"event_type":"dns","src_ip":"192.168.1.100","src_port":52981,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":58906,"rrname":"fotyfahokab.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:27.730754+0100","flow_id":267280426935527,"pcap_cnt":5067,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61334,"proto":"UDP","dns":{"type":"answer","id":18816,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:26.314823+0100","flow_id":675452643888312,"pcap_cnt":4669,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60683,"proto":"UDP","dns":{"type":"answer","id":36572,"rcode":"NXDOMAIN","rrname":"cinorufifac.eu"}}
{"timestamp":"2017-12-12T18:33:29.716078+0100","flow_id":2214122530401331,"pcap_cnt":5999,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51656,"proto":"UDP","dns":{"type":"answer","id":30870,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":546}}
{"timestamp":"2017-12-12T18:33:31.918851+0100","flow_id":280090167037089,"pcap_cnt":6549,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52981,"proto":"UDP","dns":{"type":"answer","id":58906,"rcode":"NXDOMAIN","rrname":"fotyfahokab.eu"}}
{"timestamp":"2017-12-12T18:33:28.053014+0100","flow_id":467254103856275,"pcap_cnt":5218,"event_type":"dns","src_ip":"192.168.1.100","src_port":50584,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7082,"rrname":"mamunekuryd.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:29.859470+0100","flow_id":833735073799158,"pcap_cnt":6021,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52881,"proto":"UDP","dns":{"type":"answer","id":55953,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":546}}
{"timestamp":"2017-12-12T18:33:30.249773+0100","flow_id":1556608134598288,"pcap_cnt":6181,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51660,"proto":"UDP","dns":{"type":"answer","id":30993,"rcode":"NXDOMAIN","rrname":"cidohukigeq.eu"}}
{"timestamp":"2017-12-12T18:33:29.871041+0100","flow_id":1277345065945729,"pcap_cnt":6030,"event_type":"dns","src_ip":"192.168.1.100","src_port":61915,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49333,"rrname":"makagucyraj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.202839+0100","flow_id":1705841068152622,"pcap_cnt":5757,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56189,"proto":"UDP","dns":{"type":"answer","id":64923,"rcode":"NXDOMAIN","rrname":"nozecafycyk.eu"}}
{"timestamp":"2017-12-12T18:33:29.495806+0100","flow_id":1662062466535338,"pcap_cnt":5899,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55791,"proto":"UDP","dns":{"type":"answer","id":297,"rcode":"NXDOMAIN","rrname":"nofypafiqev.eu"}}
{"timestamp":"2017-12-12T18:33:29.371750+0100","flow_id":1641403673848635,"pcap_cnt":5839,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53715,"proto":"UDP","dns":{"type":"answer","id":26989,"rcode":"NXDOMAIN","rrname":"gatequsiryg.eu"}}
{"timestamp":"2017-12-12T18:33:25.534914+0100","flow_id":693154351256694,"pcap_cnt":4348,"event_type":"dns","src_ip":"192.168.1.100","src_port":56827,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14840,"rrname":"foqilozutoz.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:29.371750+0100","flow_id":1641403673848635,"pcap_cnt":5839,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53715,"proto":"UDP","dns":{"type":"answer","id":26989,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:29.105123+0100","flow_id":978715989875363,"pcap_cnt":5700,"event_type":"dns","src_ip":"192.168.1.100","src_port":53716,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50675,"rrname":"nojaxicyxon.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.270625+0100","flow_id":359594304972308,"pcap_cnt":6238,"event_type":"dns","src_ip":"192.168.1.100","src_port":52718,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18836,"rrname":"qedixogazen.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:27.211802+0100","flow_id":1010032743758682,"pcap_cnt":4828,"event_type":"dns","src_ip":"192.168.1.100","src_port":49527,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30386,"rrname":"jewokedokaw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.517464+0100","flow_id":684832852403245,"pcap_cnt":4341,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59387,"proto":"UDP","dns":{"type":"answer","id":46931,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:29.105429+0100","flow_id":978715989875363,"pcap_cnt":5701,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53716,"proto":"UDP","dns":{"type":"answer","id":50675,"rcode":"NXDOMAIN","rrname":"nojaxicyxon.eu"}}
{"timestamp":"2017-12-12T18:33:31.270894+0100","flow_id":359594304972308,"pcap_cnt":6239,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52718,"proto":"UDP","dns":{"type":"answer","id":18836,"rcode":"NXDOMAIN","rrname":"qedixogazen.eu"}}
{"timestamp":"2017-12-12T18:33:27.671725+0100","flow_id":1627541666741886,"pcap_cnt":5037,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51354,"proto":"UDP","dns":{"type":"answer","id":22873,"rcode":"NXDOMAIN","rrname":"jewypojynil.eu"}}
{"timestamp":"2017-12-12T18:33:25.882044+0100","flow_id":2107588013814859,"pcap_cnt":4477,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55074,"proto":"UDP","dns":{"type":"answer","id":13054,"rcode":"NXDOMAIN","rrname":"fokuquwifys.eu"}}
{"timestamp":"2017-12-12T18:33:25.899437+0100","flow_id":1204575434815853,"pcap_cnt":4484,"event_type":"dns","src_ip":"192.168.1.100","src_port":61106,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37782,"rrname":"xuqaxiraxyx.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.882044+0100","flow_id":2107588013814859,"pcap_cnt":4477,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55074,"proto":"UDP","dns":{"type":"answer","id":13054,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:29.241011+0100","flow_id":869525036313971,"pcap_cnt":5770,"event_type":"dns","src_ip":"192.168.1.100","src_port":52352,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63489,"rrname":"ciqofymosip.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.899760+0100","flow_id":1204575434815853,"pcap_cnt":4485,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61106,"proto":"UDP","dns":{"type":"answer","id":37782,"rcode":"NXDOMAIN","rrname":"xuqaxiraxyx.eu"}}
{"timestamp":"2017-12-12T18:33:26.387583+0100","flow_id":1961318607677951,"pcap_cnt":4718,"event_type":"dns","src_ip":"192.168.1.100","src_port":57741,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36441,"rrname":"qedoqyvoguq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.195305+0100","flow_id":1514577584454377,"pcap_cnt":4824,"event_type":"dns","src_ip":"192.168.1.100","src_port":56301,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27190,"rrname":"foderasyqaw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.550412+0100","flow_id":606625793008885,"pcap_cnt":4993,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61312,"proto":"UDP","dns":{"type":"answer","id":56554,"rcode":"NXDOMAIN","rrname":"tujigevojyj.eu"}}
{"timestamp":"2017-12-12T18:33:26.357275+0100","flow_id":1269564732502619,"pcap_cnt":4695,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63641,"proto":"UDP","dns":{"type":"answer","id":3686,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":577}}
{"timestamp":"2017-12-12T18:33:31.715844+0100","flow_id":1435009020586810,"pcap_cnt":6447,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63558,"proto":"UDP","dns":{"type":"answer","id":15768,"rcode":"NXDOMAIN","rrname":"jejykaxymob.eu"}}
{"timestamp":"2017-12-12T18:33:27.823969+0100","flow_id":1011437198086817,"pcap_cnt":5104,"event_type":"dns","src_ip":"192.168.1.100","src_port":51545,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37899,"rrname":"divesosisor.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.387821+0100","flow_id":1961318607677951,"pcap_cnt":4719,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57741,"proto":"UDP","dns":{"type":"answer","id":36441,"rcode":"NXDOMAIN","rrname":"qedoqyvoguq.eu"}}
{"timestamp":"2017-12-12T18:33:28.378641+0100","flow_id":1403234852324844,"pcap_cnt":5373,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62684,"proto":"UDP","dns":{"type":"answer","id":52127,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:31.925034+0100","flow_id":2041763345407338,"pcap_cnt":6550,"event_type":"dns","src_ip":"192.168.1.100","src_port":63452,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53377,"rrname":"gaqirahebof.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.567485+0100","flow_id":844229826357437,"pcap_cnt":5460,"event_type":"dns","src_ip":"192.168.1.100","src_port":61631,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25195,"rrname":"nopabefipuq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.157086+0100","flow_id":2237414138012839,"pcap_cnt":5735,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60784,"proto":"UDP","dns":{"type":"answer","id":40213,"rcode":"NXDOMAIN","rrname":"jefudidiryl.eu"}}
{"timestamp":"2017-12-12T18:33:28.786848+0100","flow_id":1845786134970538,"pcap_cnt":5557,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54644,"proto":"UDP","dns":{"type":"answer","id":6020,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:28.567736+0100","flow_id":844229826357437,"pcap_cnt":5461,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61631,"proto":"UDP","dns":{"type":"answer","id":25195,"rcode":"NXDOMAIN","rrname":"nopabefipuq.eu"}}
{"timestamp":"2017-12-12T18:33:29.984184+0100","flow_id":1077180262418054,"pcap_cnt":6071,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51234,"proto":"UDP","dns":{"type":"answer","id":714,"rcode":"NXDOMAIN","rrname":"citifemifif.eu"}}
{"timestamp":"2017-12-12T18:33:26.314823+0100","flow_id":675452643888312,"pcap_cnt":4669,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60683,"proto":"UDP","dns":{"type":"answer","id":36572,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:31.227243+0100","flow_id":1819127272959732,"pcap_cnt":6221,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63316,"proto":"UDP","dns":{"type":"answer","id":8005,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":569}}
{"timestamp":"2017-12-12T18:33:29.984184+0100","flow_id":1077180262418054,"pcap_cnt":6071,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51234,"proto":"UDP","dns":{"type":"answer","id":714,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:26.375737+0100","flow_id":1145511044593986,"pcap_cnt":4708,"event_type":"dns","src_ip":"192.168.1.100","src_port":51405,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":22620,"rrname":"qegarigohox.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:31.918851+0100","flow_id":280090167037089,"pcap_cnt":6549,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52981,"proto":"UDP","dns":{"type":"answer","id":58906,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:29.986024+0100","flow_id":303055357152168,"pcap_cnt":6072,"event_type":"dns","src_ip":"192.168.1.100","src_port":51136,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":3772,"rrname":"voworemoziv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.376053+0100","flow_id":1145511044593986,"pcap_cnt":4709,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51405,"proto":"UDP","dns":{"type":"answer","id":22620,"rcode":"NXDOMAIN","rrname":"qegarigohox.eu"}}
{"timestamp":"2017-12-12T18:33:29.871286+0100","flow_id":1277345065945729,"pcap_cnt":6031,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61915,"proto":"UDP","dns":{"type":"answer","id":49333,"rcode":"NXDOMAIN","rrname":"makagucyraj.eu"}}
{"timestamp":"2017-12-12T18:33:26.376053+0100","flow_id":1145511044593986,"pcap_cnt":4709,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51405,"proto":"UDP","dns":{"type":"answer","id":22620,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":577}}
{"timestamp":"2017-12-12T18:33:29.871286+0100","flow_id":1277345065945729,"pcap_cnt":6031,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61915,"proto":"UDP","dns":{"type":"answer","id":49333,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":546}}
{"timestamp":"2017-12-12T18:33:31.537500+0100","flow_id":565473564111453,"pcap_cnt":6371,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63078,"proto":"UDP","dns":{"type":"answer","id":45372,"rcode":"NXDOMAIN","rrname":"pujuduvaxim.eu"}}
{"timestamp":"2017-12-12T18:33:29.942754+0100","flow_id":889578238599842,"pcap_cnt":6058,"event_type":"dns","src_ip":"192.168.1.100","src_port":58607,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40207,"rrname":"ciqydofudyx.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.537500+0100","flow_id":565473564111453,"pcap_cnt":6371,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63078,"proto":"UDP","dns":{"type":"answer","id":45372,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:29.389725+0100","flow_id":1384976946426461,"pcap_cnt":5846,"event_type":"dns","src_ip":"192.168.1.100","src_port":54591,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11027,"rrname":"xuxuqodopef.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.212111+0100","flow_id":1010032743758682,"pcap_cnt":4829,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49527,"proto":"UDP","dns":{"type":"answer","id":30386,"rcode":"NXDOMAIN","rrname":"jewokedokaw.eu"}}
{"timestamp":"2017-12-12T18:33:31.270894+0100","flow_id":359594304972308,"pcap_cnt":6239,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52718,"proto":"UDP","dns":{"type":"answer","id":18836,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:29.105429+0100","flow_id":978715989875363,"pcap_cnt":5701,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53716,"proto":"UDP","dns":{"type":"answer","id":50675,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:27.212111+0100","flow_id":1010032743758682,"pcap_cnt":4829,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49527,"proto":"UDP","dns":{"type":"answer","id":30386,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:31.299524+0100","flow_id":1874618250662404,"pcap_cnt":6252,"event_type":"dns","src_ip":"192.168.1.100","src_port":51677,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11291,"rrname":"rytahagemeg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.115210+0100","flow_id":637626867106314,"pcap_cnt":5708,"event_type":"dns","src_ip":"192.168.1.100","src_port":64798,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11747,"rrname":"lyvularekud.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.855328+0100","flow_id":750547999591425,"pcap_cnt":5123,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59214,"proto":"UDP","dns":{"type":"answer","id":27538,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:27.483778+0100","flow_id":418701646455234,"pcap_cnt":4962,"event_type":"dns","src_ip":"192.168.1.100","src_port":51925,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6250,"rrname":"diravasymob.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:32.015076+0100","flow_id":1823007776192968,"pcap_cnt":6587,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64226,"proto":"UDP","dns":{"type":"answer","id":24804,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:29.241296+0100","flow_id":869525036313971,"pcap_cnt":5771,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52352,"proto":"UDP","dns":{"type":"answer","id":63489,"rcode":"NXDOMAIN","rrname":"ciqofymosip.eu"}}
{"timestamp":"2017-12-12T18:33:27.484077+0100","flow_id":418701646455234,"pcap_cnt":4963,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51925,"proto":"UDP","dns":{"type":"answer","id":6250,"rcode":"NXDOMAIN","rrname":"diravasymob.eu"}}
{"timestamp":"2017-12-12T18:33:27.550412+0100","flow_id":606625793008885,"pcap_cnt":4993,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61312,"proto":"UDP","dns":{"type":"answer","id":56554,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:29.241296+0100","flow_id":869525036313971,"pcap_cnt":5771,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52352,"proto":"UDP","dns":{"type":"answer","id":63489,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:28.919261+0100","flow_id":1197108634322339,"pcap_cnt":5631,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62553,"proto":"UDP","dns":{"type":"answer","id":28407,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:27.195630+0100","flow_id":1514577584454377,"pcap_cnt":4825,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56301,"proto":"UDP","dns":{"type":"answer","id":27190,"rcode":"NXDOMAIN","rrname":"foderasyqaw.eu"}}
{"timestamp":"2017-12-12T18:33:29.248704+0100","flow_id":1524730885839395,"pcap_cnt":5774,"event_type":"dns","src_ip":"192.168.1.100","src_port":51493,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40235,"rrname":"vonerymekix.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:27.195630+0100","flow_id":1514577584454377,"pcap_cnt":4825,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56301,"proto":"UDP","dns":{"type":"answer","id":27190,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:29.361731+0100","flow_id":508556657394947,"pcap_cnt":5822,"event_type":"dns","src_ip":"192.168.1.100","src_port":52717,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43306,"rrname":"vopudetezuq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.248997+0100","flow_id":1524730885839395,"pcap_cnt":5775,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51493,"proto":"UDP","dns":{"type":"answer","id":40235,"rcode":"NXDOMAIN","rrname":"vonerymekix.eu"}}
{"timestamp":"2017-12-12T18:33:27.718184+0100","flow_id":1041736044901736,"pcap_cnt":5058,"event_type":"dns","src_ip":"192.168.1.100","src_port":64515,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53612,"rrname":"puzydaqybad.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.248997+0100","flow_id":1524730885839395,"pcap_cnt":5775,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51493,"proto":"UDP","dns":{"type":"answer","id":40235,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:29.362005+0100","flow_id":508556657394947,"pcap_cnt":5823,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52717,"proto":"UDP","dns":{"type":"answer","id":43306,"rcode":"NXDOMAIN","rrname":"vopudetezuq.eu"}}
{"timestamp":"2017-12-12T18:33:27.824257+0100","flow_id":1011437198086817,"pcap_cnt":5105,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51545,"proto":"UDP","dns":{"type":"answer","id":37899,"rcode":"NXDOMAIN","rrname":"divesosisor.eu"}}
{"timestamp":"2017-12-12T18:33:29.254168+0100","flow_id":501841476051160,"pcap_cnt":5776,"event_type":"dns","src_ip":"192.168.1.100","src_port":62621,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":56765,"rrname":"maxilumiriz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.635785+0100","flow_id":660531927626633,"pcap_cnt":5496,"event_type":"dns","src_ip":"192.168.1.100","src_port":53090,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62711,"rrname":"gadyvuhagyn.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.397109+0100","flow_id":1057137797828405,"pcap_cnt":6302,"event_type":"dns","src_ip":"192.168.1.100","src_port":58103,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48115,"rrname":"ganofazigor.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.925374+0100","flow_id":2041763345407338,"pcap_cnt":6551,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63452,"proto":"UDP","dns":{"type":"answer","id":53377,"rcode":"NXDOMAIN","rrname":"gaqirahebof.eu"}}
{"timestamp":"2017-12-12T18:33:29.254448+0100","flow_id":501841476051160,"pcap_cnt":5777,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62621,"proto":"UDP","dns":{"type":"answer","id":56765,"rcode":"NXDOMAIN","rrname":"maxilumiriz.eu"}}
{"timestamp":"2017-12-12T18:33:28.636040+0100","flow_id":660531927626633,"pcap_cnt":5497,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53090,"proto":"UDP","dns":{"type":"answer","id":62711,"rcode":"NXDOMAIN","rrname":"gadyvuhagyn.eu"}}
{"timestamp":"2017-12-12T18:33:28.961848+0100","flow_id":1810814363806647,"pcap_cnt":5639,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63087,"proto":"UDP","dns":{"type":"answer","id":26840,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:28.797546+0100","flow_id":591243367689066,"pcap_cnt":5564,"event_type":"dns","src_ip":"192.168.1.100","src_port":53392,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11378,"rrname":"lygofodagud.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.636040+0100","flow_id":660531927626633,"pcap_cnt":5497,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53090,"proto":"UDP","dns":{"type":"answer","id":62711,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:31.397312+0100","flow_id":1057137797828405,"pcap_cnt":6303,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58103,"proto":"UDP","dns":{"type":"answer","id":48115,"rcode":"NXDOMAIN","rrname":"ganofazigor.eu"}}
{"timestamp":"2017-12-12T18:33:31.323309+0100","flow_id":1038611456454381,"pcap_cnt":6264,"event_type":"dns","src_ip":"192.168.1.100","src_port":53652,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31991,"rrname":"galupehudev.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:30.249773+0100","flow_id":1556608134598288,"pcap_cnt":6181,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51660,"proto":"UDP","dns":{"type":"answer","id":30993,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":569}}
{"timestamp":"2017-12-12T18:33:29.261301+0100","flow_id":2121203060440245,"pcap_cnt":5780,"event_type":"dns","src_ip":"192.168.1.100","src_port":49285,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47317,"rrname":"novubymyvip.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.745163+0100","flow_id":1222141851229899,"pcap_cnt":5540,"event_type":"dns","src_ip":"192.168.1.100","src_port":59637,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33271,"rrname":"qegelupumum.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.639715+0100","flow_id":1039047395623651,"pcap_cnt":6418,"event_type":"dns","src_ip":"192.168.1.100","src_port":58979,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59988,"rrname":"dixesywyruc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.261545+0100","flow_id":2121203060440245,"pcap_cnt":5781,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49285,"proto":"UDP","dns":{"type":"answer","id":47317,"rcode":"NXDOMAIN","rrname":"novubymyvip.eu"}}
{"timestamp":"2017-12-12T18:33:29.202839+0100","flow_id":1705841068152622,"pcap_cnt":5757,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56189,"proto":"UDP","dns":{"type":"answer","id":64923,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:25.535161+0100","flow_id":693154351256694,"pcap_cnt":4349,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56827,"proto":"UDP","dns":{"type":"answer","id":14840,"rcode":"NXDOMAIN","rrname":"foqilozutoz.eu"}}
{"timestamp":"2017-12-12T18:33:29.943032+0100","flow_id":889578238599842,"pcap_cnt":6059,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58607,"proto":"UDP","dns":{"type":"answer","id":40207,"rcode":"NXDOMAIN","rrname":"ciqydofudyx.eu"}}
{"timestamp":"2017-12-12T18:33:29.331436+0100","flow_id":548227122794156,"pcap_cnt":5804,"event_type":"dns","src_ip":"192.168.1.100","src_port":65282,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50722,"rrname":"xudoxijiwef.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.607400+0100","flow_id":2081579839734952,"pcap_cnt":6400,"event_type":"dns","src_ip":"192.168.1.100","src_port":55423,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35425,"rrname":"ryqyqequsud.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.943032+0100","flow_id":889578238599842,"pcap_cnt":6059,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58607,"proto":"UDP","dns":{"type":"answer","id":40207,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":546}}
{"timestamp":"2017-12-12T18:33:27.890441+0100","flow_id":1082544676640329,"pcap_cnt":5132,"event_type":"dns","src_ip":"192.168.1.100","src_port":61310,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40372,"rrname":"rydurevohed.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.331785+0100","flow_id":548227122794156,"pcap_cnt":5805,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65282,"proto":"UDP","dns":{"type":"answer","id":50722,"rcode":"NXDOMAIN","rrname":"xudoxijiwef.eu"}}
{"timestamp":"2017-12-12T18:33:31.583711+0100","flow_id":1592954295412488,"pcap_cnt":6391,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58877,"proto":"UDP","dns":{"type":"answer","id":65041,"rcode":"NXDOMAIN","rrname":"nofucemihub.eu"}}
{"timestamp":"2017-12-12T18:33:29.331785+0100","flow_id":548227122794156,"pcap_cnt":5805,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65282,"proto":"UDP","dns":{"type":"answer","id":50722,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:31.607704+0100","flow_id":2081579839734952,"pcap_cnt":6401,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55423,"proto":"UDP","dns":{"type":"answer","id":35425,"rcode":"NXDOMAIN","rrname":"ryqyqequsud.eu"}}
{"timestamp":"2017-12-12T18:33:29.115440+0100","flow_id":637626867106314,"pcap_cnt":5709,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64798,"proto":"UDP","dns":{"type":"answer","id":11747,"rcode":"NXDOMAIN","rrname":"lyvularekud.eu"}}
{"timestamp":"2017-12-12T18:33:25.899760+0100","flow_id":1204575434815853,"pcap_cnt":4485,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61106,"proto":"UDP","dns":{"type":"answer","id":37782,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:29.115440+0100","flow_id":637626867106314,"pcap_cnt":5709,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64798,"proto":"UDP","dns":{"type":"answer","id":11747,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:31.299811+0100","flow_id":1874618250662404,"pcap_cnt":6253,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51677,"proto":"UDP","dns":{"type":"answer","id":11291,"rcode":"NXDOMAIN","rrname":"rytahagemeg.eu"}}
{"timestamp":"2017-12-12T18:33:27.484077+0100","flow_id":418701646455234,"pcap_cnt":4963,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51925,"proto":"UDP","dns":{"type":"answer","id":6250,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:31.299811+0100","flow_id":1874618250662404,"pcap_cnt":6253,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51677,"proto":"UDP","dns":{"type":"answer","id":11291,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:27.550885+0100","flow_id":1919133438928869,"pcap_cnt":4994,"event_type":"dns","src_ip":"192.168.1.100","src_port":51828,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50204,"rrname":"pufotyvecyq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.643896+0100","flow_id":263687686837048,"pcap_cnt":5028,"event_type":"dns","src_ip":"192.168.1.100","src_port":51891,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17690,"rrname":"digumihurit.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.452692+0100","flow_id":2223661652470498,"pcap_cnt":6322,"event_type":"dns","src_ip":"192.168.1.100","src_port":58746,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59513,"rrname":"jenupydaces.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:26.363245+0100","flow_id":1239809199082221,"pcap_cnt":4700,"event_type":"dns","src_ip":"192.168.1.100","src_port":63989,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":39337,"rrname":"gacokahurol.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.551179+0100","flow_id":1919133438928869,"pcap_cnt":4995,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51828,"proto":"UDP","dns":{"type":"answer","id":50204,"rcode":"NXDOMAIN","rrname":"pufotyvecyq.eu"}}
{"timestamp":"2017-12-12T18:33:31.452964+0100","flow_id":2223661652470498,"pcap_cnt":6323,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58746,"proto":"UDP","dns":{"type":"answer","id":59513,"rcode":"NXDOMAIN","rrname":"jenupydaces.eu"}}
{"timestamp":"2017-12-12T18:33:27.551179+0100","flow_id":1919133438928869,"pcap_cnt":4995,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51828,"proto":"UDP","dns":{"type":"answer","id":50204,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:27.824257+0100","flow_id":1011437198086817,"pcap_cnt":5105,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51545,"proto":"UDP","dns":{"type":"answer","id":37899,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:29.157086+0100","flow_id":2237414138012839,"pcap_cnt":5735,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60784,"proto":"UDP","dns":{"type":"answer","id":40213,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:27.845903+0100","flow_id":1136455106023453,"pcap_cnt":5118,"event_type":"dns","src_ip":"192.168.1.100","src_port":64927,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":65111,"rrname":"xuqiloxyvyf.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:31.925374+0100","flow_id":2041763345407338,"pcap_cnt":6551,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63452,"proto":"UDP","dns":{"type":"answer","id":53377,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:29.178094+0100","flow_id":1912044595558318,"pcap_cnt":5744,"event_type":"dns","src_ip":"192.168.1.100","src_port":49468,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1083,"rrname":"divotabofov.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.254448+0100","flow_id":501841476051160,"pcap_cnt":5777,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62621,"proto":"UDP","dns":{"type":"answer","id":56765,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:28.053341+0100","flow_id":467254103856275,"pcap_cnt":5219,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50584,"proto":"UDP","dns":{"type":"answer","id":7082,"rcode":"NXDOMAIN","rrname":"mamunekuryd.eu"}}
{"timestamp":"2017-12-12T18:33:31.397312+0100","flow_id":1057137797828405,"pcap_cnt":6303,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58103,"proto":"UDP","dns":{"type":"answer","id":48115,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":567}}
{"timestamp":"2017-12-12T18:33:30.174537+0100","flow_id":2040109782968777,"pcap_cnt":6140,"event_type":"dns","src_ip":"192.168.1.100","src_port":63095,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":56117,"rrname":"dikujysozyk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.053341+0100","flow_id":467254103856275,"pcap_cnt":5219,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50584,"proto":"UDP","dns":{"type":"answer","id":7082,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:29.495806+0100","flow_id":1662062466535338,"pcap_cnt":5899,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55791,"proto":"UDP","dns":{"type":"answer","id":297,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:30.174798+0100","flow_id":2040109782968777,"pcap_cnt":6141,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63095,"proto":"UDP","dns":{"type":"answer","id":56117,"rcode":"NXDOMAIN","rrname":"dikujysozyk.eu"}}
{"timestamp":"2017-12-12T18:33:28.797867+0100","flow_id":591243367689066,"pcap_cnt":5565,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53392,"proto":"UDP","dns":{"type":"answer","id":11378,"rcode":"NXDOMAIN","rrname":"lygofodagud.eu"}}
{"timestamp":"2017-12-12T18:33:29.986245+0100","flow_id":303055357152168,"pcap_cnt":6073,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51136,"proto":"UDP","dns":{"type":"answer","id":3772,"rcode":"NXDOMAIN","rrname":"voworemoziv.eu"}}
{"timestamp":"2017-12-12T18:33:31.323632+0100","flow_id":1038611456454381,"pcap_cnt":6265,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53652,"proto":"UDP","dns":{"type":"answer","id":31991,"rcode":"NXDOMAIN","rrname":"galupehudev.eu"}}
{"timestamp":"2017-12-12T18:33:29.986245+0100","flow_id":303055357152168,"pcap_cnt":6073,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51136,"proto":"UDP","dns":{"type":"answer","id":3772,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:28.745421+0100","flow_id":1222141851229899,"pcap_cnt":5541,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59637,"proto":"UDP","dns":{"type":"answer","id":33271,"rcode":"NXDOMAIN","rrname":"qegelupumum.eu"}}
{"timestamp":"2017-12-12T18:33:29.990215+0100","flow_id":1053626658414724,"pcap_cnt":6076,"event_type":"dns","src_ip":"192.168.1.100","src_port":61378,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37622,"rrname":"mavulymupiv.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:28.745421+0100","flow_id":1222141851229899,"pcap_cnt":5541,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59637,"proto":"UDP","dns":{"type":"answer","id":33271,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:29.261545+0100","flow_id":2121203060440245,"pcap_cnt":5781,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49285,"proto":"UDP","dns":{"type":"answer","id":47317,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:29.990473+0100","flow_id":1053626658414724,"pcap_cnt":6077,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61378,"proto":"UDP","dns":{"type":"answer","id":37622,"rcode":"NXDOMAIN","rrname":"mavulymupiv.eu"}}
{"timestamp":"2017-12-12T18:33:29.049939+0100","flow_id":2113433464002532,"pcap_cnt":5676,"event_type":"dns","src_ip":"192.168.1.100","src_port":51511,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50441,"rrname":"jepepyxiwam.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:29.437168+0100","flow_id":750696176135088,"pcap_cnt":5880,"event_type":"dns","src_ip":"192.168.1.100","src_port":49666,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30874,"rrname":"xukenyxitox.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.992957+0100","flow_id":1003446411536061,"pcap_cnt":6080,"event_type":"dns","src_ip":"192.168.1.100","src_port":55502,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41809,"rrname":"ryleryqacic.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.389966+0100","flow_id":1384976946426461,"pcap_cnt":5847,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54591,"proto":"UDP","dns":{"type":"answer","id":11027,"rcode":"NXDOMAIN","rrname":"xuxuqodopef.eu"}}
{"timestamp":"2017-12-12T18:33:29.437500+0100","flow_id":750696176135088,"pcap_cnt":5881,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49666,"proto":"UDP","dns":{"type":"answer","id":30874,"rcode":"NXDOMAIN","rrname":"xukenyxitox.eu"}}
{"timestamp":"2017-12-12T18:33:29.389966+0100","flow_id":1384976946426461,"pcap_cnt":5847,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54591,"proto":"UDP","dns":{"type":"answer","id":11027,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:29.993216+0100","flow_id":1003446411536061,"pcap_cnt":6081,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55502,"proto":"UDP","dns":{"type":"answer","id":41809,"rcode":"NXDOMAIN","rrname":"ryleryqacic.eu"}}
{"timestamp":"2017-12-12T18:33:29.550102+0100","flow_id":1150450257192150,"pcap_cnt":5926,"event_type":"dns","src_ip":"192.168.1.100","src_port":64693,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30493,"rrname":"dixexehyzex.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.993216+0100","flow_id":1003446411536061,"pcap_cnt":6081,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55502,"proto":"UDP","dns":{"type":"answer","id":41809,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:30.031702+0100","flow_id":2133589746154454,"pcap_cnt":6092,"event_type":"dns","src_ip":"192.168.1.100","src_port":56109,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38829,"rrname":"tujybuqeqis.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.970551+0100","flow_id":922518490041251,"pcap_cnt":5166,"event_type":"dns","src_ip":"192.168.1.100","src_port":65516,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":39045,"rrname":"kejudunogex.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:29.550391+0100","flow_id":1150450257192150,"pcap_cnt":5927,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64693,"proto":"UDP","dns":{"type":"answer","id":30493,"rcode":"NXDOMAIN","rrname":"dixexehyzex.eu"}}
{"timestamp":"2017-12-12T18:33:30.176857+0100","flow_id":2218406760329945,"pcap_cnt":6144,"event_type":"dns","src_ip":"192.168.1.100","src_port":61867,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4876,"rrname":"gadaqusupyj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.201303+0100","flow_id":1029688661709399,"pcap_cnt":5754,"event_type":"dns","src_ip":"192.168.1.100","src_port":62966,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13740,"rrname":"vocoqafajyw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:32.137730+0100","flow_id":1356196369747579,"pcap_cnt":6642,"event_type":"dns","src_ip":"192.168.1.100","src_port":63094,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":16617,"rrname":"qegarigohox.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:31.715844+0100","flow_id":1435009020586810,"pcap_cnt":6447,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63558,"proto":"UDP","dns":{"type":"answer","id":15768,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:30.177138+0100","flow_id":2218406760329945,"pcap_cnt":6145,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61867,"proto":"UDP","dns":{"type":"answer","id":4876,"rcode":"NXDOMAIN","rrname":"gadaqusupyj.eu"}}
{"timestamp":"2017-12-12T18:33:27.644149+0100","flow_id":263687686837048,"pcap_cnt":5029,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51891,"proto":"UDP","dns":{"type":"answer","id":17690,"rcode":"NXDOMAIN","rrname":"digumihurit.eu"}}
{"timestamp":"2017-12-12T18:33:29.362005+0100","flow_id":508556657394947,"pcap_cnt":5823,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52717,"proto":"UDP","dns":{"type":"answer","id":43306,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:29.201558+0100","flow_id":1029688661709399,"pcap_cnt":5755,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62966,"proto":"UDP","dns":{"type":"answer","id":13740,"rcode":"NXDOMAIN","rrname":"vocoqafajyw.eu"}}
{"timestamp":"2017-12-12T18:33:26.363503+0100","flow_id":1239809199082221,"pcap_cnt":4701,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63989,"proto":"UDP","dns":{"type":"answer","id":39337,"rcode":"NXDOMAIN","rrname":"gacokahurol.eu"}}
{"timestamp":"2017-12-12T18:33:29.400677+0100","flow_id":2081356499785714,"pcap_cnt":5852,"event_type":"dns","src_ip":"192.168.1.100","src_port":55993,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2769,"rrname":"mavaxokitad.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:27.616076+0100","flow_id":1230426842649002,"pcap_cnt":5014,"event_type":"dns","src_ip":"192.168.1.100","src_port":62115,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37286,"rrname":"qebequgyqip.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:26.363503+0100","flow_id":1239809199082221,"pcap_cnt":4701,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63989,"proto":"UDP","dns":{"type":"answer","id":39337,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":577}}
{"timestamp":"2017-12-12T18:33:27.846222+0100","flow_id":1136455106023453,"pcap_cnt":5119,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64927,"proto":"UDP","dns":{"type":"answer","id":65111,"rcode":"NXDOMAIN","rrname":"xuqiloxyvyf.eu"}}
{"timestamp":"2017-12-12T18:33:29.400977+0100","flow_id":2081356499785714,"pcap_cnt":5853,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55993,"proto":"UDP","dns":{"type":"answer","id":2769,"rcode":"NXDOMAIN","rrname":"mavaxokitad.eu"}}
{"timestamp":"2017-12-12T18:33:27.089408+0100","flow_id":1282535533122454,"pcap_cnt":4760,"event_type":"dns","src_ip":"192.168.1.100","src_port":58754,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36255,"rrname":"qexusulakiq.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:31.937062+0100","flow_id":41837593840742,"pcap_cnt":6556,"event_type":"dns","src_ip":"192.168.1.100","src_port":49858,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62029,"rrname":"lyxufejazov.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.400977+0100","flow_id":2081356499785714,"pcap_cnt":5853,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55993,"proto":"UDP","dns":{"type":"answer","id":2769,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:30.039773+0100","flow_id":418050959121245,"pcap_cnt":6094,"event_type":"dns","src_ip":"192.168.1.100","src_port":61698,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":52502,"rrname":"dirosehijel.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.427477+0100","flow_id":1689082103608506,"pcap_cnt":6310,"event_type":"dns","src_ip":"192.168.1.100","src_port":64494,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":55780,"rrname":"tujajepifyv.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:28.158441+0100","flow_id":226753115613929,"pcap_cnt":5264,"event_type":"dns","src_ip":"192.168.1.100","src_port":53177,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":16720,"rrname":"vojykocezel.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.937324+0100","flow_id":41837593840742,"pcap_cnt":6557,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49858,"proto":"UDP","dns":{"type":"answer","id":62029,"rcode":"NXDOMAIN","rrname":"lyxufejazov.eu"}}
{"timestamp":"2017-12-12T18:33:31.427799+0100","flow_id":1689082103608506,"pcap_cnt":6311,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64494,"proto":"UDP","dns":{"type":"answer","id":55780,"rcode":"NXDOMAIN","rrname":"tujajepifyv.eu"}}
{"timestamp":"2017-12-12T18:33:28.797867+0100","flow_id":591243367689066,"pcap_cnt":5565,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53392,"proto":"UDP","dns":{"type":"answer","id":11378,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:31.323632+0100","flow_id":1038611456454381,"pcap_cnt":6265,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53652,"proto":"UDP","dns":{"type":"answer","id":31991,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:31.427799+0100","flow_id":1689082103608506,"pcap_cnt":6311,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64494,"proto":"UDP","dns":{"type":"answer","id":55780,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:25.535161+0100","flow_id":693154351256694,"pcap_cnt":4349,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56827,"proto":"UDP","dns":{"type":"answer","id":14840,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:31.448982+0100","flow_id":40168999082454,"pcap_cnt":6318,"event_type":"dns","src_ip":"192.168.1.100","src_port":56337,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":3874,"rrname":"fotoxysupyd.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.885206+0100","flow_id":15780027269590,"pcap_cnt":6530,"event_type":"dns","src_ip":"192.168.1.100","src_port":57548,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":22901,"rrname":"citizufurah.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.050210+0100","flow_id":2113433464002532,"pcap_cnt":5677,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51511,"proto":"UDP","dns":{"type":"answer","id":50441,"rcode":"NXDOMAIN","rrname":"jepepyxiwam.eu"}}
{"timestamp":"2017-12-12T18:33:25.620084+0100","flow_id":1156014387066420,"pcap_cnt":4374,"event_type":"dns","src_ip":"192.168.1.100","src_port":49854,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":39958,"rrname":"gaqehysohec.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.050210+0100","flow_id":2113433464002532,"pcap_cnt":5677,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51511,"proto":"UDP","dns":{"type":"answer","id":50441,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:29.437500+0100","flow_id":750696176135088,"pcap_cnt":5881,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49666,"proto":"UDP","dns":{"type":"answer","id":30874,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:25.620428+0100","flow_id":1156014387066420,"pcap_cnt":4375,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49854,"proto":"UDP","dns":{"type":"answer","id":39958,"rcode":"NXDOMAIN","rrname":"gaqehysohec.eu"}}
{"timestamp":"2017-12-12T18:33:29.423006+0100","flow_id":469148184966238,"pcap_cnt":5860,"event_type":"dns","src_ip":"192.168.1.100","src_port":53962,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":15004,"rrname":"qeqilivejor.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.620428+0100","flow_id":1156014387066420,"pcap_cnt":4375,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49854,"proto":"UDP","dns":{"type":"answer","id":39958,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:29.751323+0100","flow_id":1134666252383963,"pcap_cnt":6010,"event_type":"dns","src_ip":"192.168.1.100","src_port":62441,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28343,"rrname":"volebatijub.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:30.031981+0100","flow_id":2133589746154454,"pcap_cnt":6093,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56109,"proto":"UDP","dns":{"type":"answer","id":38829,"rcode":"NXDOMAIN","rrname":"tujybuqeqis.eu"}}
{"timestamp":"2017-12-12T18:33:29.550391+0100","flow_id":1150450257192150,"pcap_cnt":5927,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64693,"proto":"UDP","dns":{"type":"answer","id":30493,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:30.031981+0100","flow_id":2133589746154454,"pcap_cnt":6093,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56109,"proto":"UDP","dns":{"type":"answer","id":38829,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:27.970787+0100","flow_id":922518490041251,"pcap_cnt":5167,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65516,"proto":"UDP","dns":{"type":"answer","id":39045,"rcode":"NXDOMAIN","rrname":"kejudunogex.eu"}}
{"timestamp":"2017-12-12T18:33:26.387821+0100","flow_id":1961318607677951,"pcap_cnt":4719,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57741,"proto":"UDP","dns":{"type":"answer","id":36441,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":577}}
{"timestamp":"2017-12-12T18:33:29.561062+0100","flow_id":1946496675483712,"pcap_cnt":5930,"event_type":"dns","src_ip":"192.168.1.100","src_port":64833,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47933,"rrname":"volekymyvum.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:27.718460+0100","flow_id":1041736044901736,"pcap_cnt":5059,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64515,"proto":"UDP","dns":{"type":"answer","id":53612,"rcode":"NXDOMAIN","rrname":"puzydaqybad.eu"}}
{"timestamp":"2017-12-12T18:33:30.177138+0100","flow_id":2218406760329945,"pcap_cnt":6145,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61867,"proto":"UDP","dns":{"type":"answer","id":4876,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":569}}
{"timestamp":"2017-12-12T18:33:31.452964+0100","flow_id":2223661652470498,"pcap_cnt":6323,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58746,"proto":"UDP","dns":{"type":"answer","id":59513,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":569}}
{"timestamp":"2017-12-12T18:33:32.138053+0100","flow_id":1356196369747579,"pcap_cnt":6643,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63094,"proto":"UDP","dns":{"type":"answer","id":16617,"rcode":"NXDOMAIN","rrname":"qegarigohox.eu"}}
{"timestamp":"2017-12-12T18:33:29.561309+0100","flow_id":1946496675483712,"pcap_cnt":5931,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64833,"proto":"UDP","dns":{"type":"answer","id":47933,"rcode":"NXDOMAIN","rrname":"volekymyvum.eu"}}
{"timestamp":"2017-12-12T18:33:28.567736+0100","flow_id":844229826357437,"pcap_cnt":5461,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61631,"proto":"UDP","dns":{"type":"answer","id":25195,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:30.211254+0100","flow_id":929154214803766,"pcap_cnt":6152,"event_type":"dns","src_ip":"192.168.1.100","src_port":58339,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5334,"rrname":"tulimolywan.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.616404+0100","flow_id":1230426842649002,"pcap_cnt":5015,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62115,"proto":"UDP","dns":{"type":"answer","id":37286,"rcode":"NXDOMAIN","rrname":"qebequgyqip.eu"}}
{"timestamp":"2017-12-12T18:33:29.178353+0100","flow_id":1912044595558318,"pcap_cnt":5745,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49468,"proto":"UDP","dns":{"type":"answer","id":1083,"rcode":"NXDOMAIN","rrname":"divotabofov.eu"}}
{"timestamp":"2017-12-12T18:33:27.616404+0100","flow_id":1230426842649002,"pcap_cnt":5015,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62115,"proto":"UDP","dns":{"type":"answer","id":37286,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:30.211568+0100","flow_id":929154214803766,"pcap_cnt":6153,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58339,"proto":"UDP","dns":{"type":"answer","id":5334,"rcode":"NXDOMAIN","rrname":"tulimolywan.eu"}}
{"timestamp":"2017-12-12T18:33:29.178353+0100","flow_id":1912044595558318,"pcap_cnt":5745,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49468,"proto":"UDP","dns":{"type":"answer","id":1083,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:30.174798+0100","flow_id":2040109782968777,"pcap_cnt":6141,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63095,"proto":"UDP","dns":{"type":"answer","id":56117,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:27.089661+0100","flow_id":1282535533122454,"pcap_cnt":4761,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58754,"proto":"UDP","dns":{"type":"answer","id":36255,"rcode":"NXDOMAIN","rrname":"qexusulakiq.eu"}}
{"timestamp":"2017-12-12T18:33:27.898346+0100","flow_id":551770470724906,"pcap_cnt":5134,"event_type":"dns","src_ip":"192.168.1.100","src_port":59777,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43092,"rrname":"tupibevecev.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.290893+0100","flow_id":1730693896433741,"pcap_cnt":5790,"event_type":"dns","src_ip":"192.168.1.100","src_port":56688,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53823,"rrname":"fobyqyhezem.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.213180+0100","flow_id":1331526078513340,"pcap_cnt":6202,"event_type":"dns","src_ip":"192.168.1.100","src_port":57195,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28915,"rrname":"volojifebeh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.937324+0100","flow_id":41837593840742,"pcap_cnt":6557,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49858,"proto":"UDP","dns":{"type":"answer","id":62029,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:28.158677+0100","flow_id":226753115613929,"pcap_cnt":5265,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53177,"proto":"UDP","dns":{"type":"answer","id":16720,"rcode":"NXDOMAIN","rrname":"vojykocezel.eu"}}
{"timestamp":"2017-12-12T18:33:29.291210+0100","flow_id":1730693896433741,"pcap_cnt":5791,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56688,"proto":"UDP","dns":{"type":"answer","id":53823,"rcode":"NXDOMAIN","rrname":"fobyqyhezem.eu"}}
{"timestamp":"2017-12-12T18:33:28.158677+0100","flow_id":226753115613929,"pcap_cnt":5265,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53177,"proto":"UDP","dns":{"type":"answer","id":16720,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:31.213454+0100","flow_id":1331526078513340,"pcap_cnt":6203,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57195,"proto":"UDP","dns":{"type":"answer","id":28915,"rcode":"NXDOMAIN","rrname":"volojifebeh.eu"}}
{"timestamp":"2017-12-12T18:33:32.074686+0100","flow_id":306648097498046,"pcap_cnt":6614,"event_type":"dns","src_ip":"192.168.1.100","src_port":51648,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6775,"rrname":"dixonesohed.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.291210+0100","flow_id":1730693896433741,"pcap_cnt":5791,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56688,"proto":"UDP","dns":{"type":"answer","id":53823,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:31.213454+0100","flow_id":1331526078513340,"pcap_cnt":6203,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57195,"proto":"UDP","dns":{"type":"answer","id":28915,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:31.449260+0100","flow_id":40168999082454,"pcap_cnt":6319,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56337,"proto":"UDP","dns":{"type":"answer","id":3874,"rcode":"NXDOMAIN","rrname":"fotoxysupyd.eu"}}
{"timestamp":"2017-12-12T18:33:31.241875+0100","flow_id":579082168021203,"pcap_cnt":6224,"event_type":"dns","src_ip":"192.168.1.100","src_port":62743,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43055,"rrname":"rydekyqyquw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:32.074969+0100","flow_id":306648097498046,"pcap_cnt":6615,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51648,"proto":"UDP","dns":{"type":"answer","id":6775,"rcode":"NXDOMAIN","rrname":"dixonesohed.eu"}}
{"timestamp":"2017-12-12T18:33:29.423398+0100","flow_id":469148184966238,"pcap_cnt":5861,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53962,"proto":"UDP","dns":{"type":"answer","id":15004,"rcode":"NXDOMAIN","rrname":"qeqilivejor.eu"}}
{"timestamp":"2017-12-12T18:33:32.074969+0100","flow_id":306648097498046,"pcap_cnt":6615,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51648,"proto":"UDP","dns":{"type":"answer","id":6775,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:25.638644+0100","flow_id":1824775154810548,"pcap_cnt":4380,"event_type":"dns","src_ip":"192.168.1.100","src_port":64984,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37609,"rrname":"noralycifok.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.751639+0100","flow_id":1134666252383963,"pcap_cnt":6011,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62441,"proto":"UDP","dns":{"type":"answer","id":28343,"rcode":"NXDOMAIN","rrname":"volebatijub.eu"}}
{"timestamp":"2017-12-12T18:33:27.970787+0100","flow_id":922518490041251,"pcap_cnt":5167,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65516,"proto":"UDP","dns":{"type":"answer","id":39045,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:25.638954+0100","flow_id":1824775154810548,"pcap_cnt":4381,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64984,"proto":"UDP","dns":{"type":"answer","id":37609,"rcode":"NXDOMAIN","rrname":"noralycifok.eu"}}
{"timestamp":"2017-12-12T18:33:30.087486+0100","flow_id":2228594422732222,"pcap_cnt":6110,"event_type":"dns","src_ip":"192.168.1.100","src_port":62188,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19945,"rrname":"lykemujebeq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.050027+0100","flow_id":572961839367019,"pcap_cnt":4742,"event_type":"dns","src_ip":"192.168.1.100","src_port":62655,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":24359,"rrname":"kejywajazok.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.718460+0100","flow_id":1041736044901736,"pcap_cnt":5059,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64515,"proto":"UDP","dns":{"type":"answer","id":53612,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:30.087766+0100","flow_id":2228594422732222,"pcap_cnt":6111,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62188,"proto":"UDP","dns":{"type":"answer","id":19945,"rcode":"NXDOMAIN","rrname":"lykemujebeq.eu"}}
{"timestamp":"2017-12-12T18:33:27.050415+0100","flow_id":572961839367019,"pcap_cnt":4743,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62655,"proto":"UDP","dns":{"type":"answer","id":24359,"rcode":"NXDOMAIN","rrname":"kejywajazok.eu"}}
{"timestamp":"2017-12-12T18:33:29.201558+0100","flow_id":1029688661709399,"pcap_cnt":5755,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62966,"proto":"UDP","dns":{"type":"answer","id":13740,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:30.087766+0100","flow_id":2228594422732222,"pcap_cnt":6111,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62188,"proto":"UDP","dns":{"type":"answer","id":19945,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":569}}
{"timestamp":"2017-12-12T18:33:32.138053+0100","flow_id":1356196369747579,"pcap_cnt":6643,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63094,"proto":"UDP","dns":{"type":"answer","id":16617,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:31.255421+0100","flow_id":1278152519254592,"pcap_cnt":6234,"event_type":"dns","src_ip":"192.168.1.100","src_port":49823,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28630,"rrname":"dimevuwevuj.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:29.561309+0100","flow_id":1946496675483712,"pcap_cnt":5931,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64833,"proto":"UDP","dns":{"type":"answer","id":47933,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:32.190120+0100","flow_id":2239550883712571,"pcap_cnt":6672,"event_type":"dns","src_ip":"192.168.1.100","src_port":57965,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":12813,"rrname":"kefeminalyn.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:27.846222+0100","flow_id":1136455106023453,"pcap_cnt":5119,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64927,"proto":"UDP","dns":{"type":"answer","id":65111,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:32.204809+0100","flow_id":2018692928643081,"pcap_cnt":6680,"event_type":"dns","src_ip":"192.168.1.100","src_port":50766,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":32737,"rrname":"lysuxinebyg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:30.211568+0100","flow_id":929154214803766,"pcap_cnt":6153,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58339,"proto":"UDP","dns":{"type":"answer","id":5334,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":569}}
{"timestamp":"2017-12-12T18:33:29.428595+0100","flow_id":1541874249206323,"pcap_cnt":5864,"event_type":"dns","src_ip":"192.168.1.100","src_port":55910,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":65056,"rrname":"nomimokubab.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:32.205100+0100","flow_id":2018692928643081,"pcap_cnt":6681,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50766,"proto":"UDP","dns":{"type":"answer","id":32737,"rcode":"NXDOMAIN","rrname":"lysuxinebyg.eu"}}
{"timestamp":"2017-12-12T18:33:27.089661+0100","flow_id":1282535533122454,"pcap_cnt":4761,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58754,"proto":"UDP","dns":{"type":"answer","id":36255,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:32.205100+0100","flow_id":2018692928643081,"pcap_cnt":6681,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50766,"proto":"UDP","dns":{"type":"answer","id":32737,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:29.602700+0100","flow_id":141008388567628,"pcap_cnt":5946,"event_type":"dns","src_ip":"192.168.1.100","src_port":51639,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":12803,"rrname":"kepyxujycaz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.898760+0100","flow_id":551770470724906,"pcap_cnt":5135,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59777,"proto":"UDP","dns":{"type":"answer","id":43092,"rcode":"NXDOMAIN","rrname":"tupibevecev.eu"}}
{"timestamp":"2017-12-12T18:33:31.639948+0100","flow_id":1039047395623651,"pcap_cnt":6419,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58979,"proto":"UDP","dns":{"type":"answer","id":59988,"rcode":"NXDOMAIN","rrname":"dixesywyruc.eu"}}
{"timestamp":"2017-12-12T18:33:29.602950+0100","flow_id":141008388567628,"pcap_cnt":5947,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51639,"proto":"UDP","dns":{"type":"answer","id":12803,"rcode":"NXDOMAIN","rrname":"kepyxujycaz.eu"}}
{"timestamp":"2017-12-12T18:33:28.976489+0100","flow_id":1372085601227608,"pcap_cnt":5646,"event_type":"dns","src_ip":"192.168.1.100","src_port":62935,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53064,"rrname":"xukisijycer.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:29.990473+0100","flow_id":1053626658414724,"pcap_cnt":6077,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61378,"proto":"UDP","dns":{"type":"answer","id":37622,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:31.885499+0100","flow_id":15780027269590,"pcap_cnt":6531,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57548,"proto":"UDP","dns":{"type":"answer","id":22901,"rcode":"NXDOMAIN","rrname":"citizufurah.eu"}}
{"timestamp":"2017-12-12T18:33:27.671725+0100","flow_id":1627541666741886,"pcap_cnt":5037,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51354,"proto":"UDP","dns":{"type":"answer","id":22873,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:31.885499+0100","flow_id":15780027269590,"pcap_cnt":6531,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57548,"proto":"UDP","dns":{"type":"answer","id":22901,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":571}}
{"timestamp":"2017-12-12T18:33:27.890783+0100","flow_id":1082544676640329,"pcap_cnt":5133,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61310,"proto":"UDP","dns":{"type":"answer","id":40372,"rcode":"NXDOMAIN","rrname":"rydurevohed.eu"}}
{"timestamp":"2017-12-12T18:33:27.714178+0100","flow_id":548439723599298,"pcap_cnt":5052,"event_type":"dns","src_ip":"192.168.1.100","src_port":57419,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43575,"rrname":"jepuderymas.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.915455+0100","flow_id":999808574420991,"pcap_cnt":6544,"event_type":"dns","src_ip":"192.168.1.100","src_port":59310,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48577,"rrname":"pufobogyqan.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.890783+0100","flow_id":1082544676640329,"pcap_cnt":5133,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61310,"proto":"UDP","dns":{"type":"answer","id":40372,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:31.583711+0100","flow_id":1592954295412488,"pcap_cnt":6391,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58877,"proto":"UDP","dns":{"type":"answer","id":65041,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":569}}
{"timestamp":"2017-12-12T18:33:31.915726+0100","flow_id":999808574420991,"pcap_cnt":6545,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59310,"proto":"UDP","dns":{"type":"answer","id":48577,"rcode":"NXDOMAIN","rrname":"pufobogyqan.eu"}}
{"timestamp":"2017-12-12T18:33:31.242133+0100","flow_id":579082168021203,"pcap_cnt":6225,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62743,"proto":"UDP","dns":{"type":"answer","id":43055,"rcode":"NXDOMAIN","rrname":"rydekyqyquw.eu"}}
{"timestamp":"2017-12-12T18:33:31.915726+0100","flow_id":999808574420991,"pcap_cnt":6545,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59310,"proto":"UDP","dns":{"type":"answer","id":48577,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":571}}
{"timestamp":"2017-12-12T18:33:26.160562+0100","flow_id":1524447419200306,"pcap_cnt":4610,"event_type":"dns","src_ip":"192.168.1.100","src_port":50134,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49054,"rrname":"nopodykecoc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:32.215608+0100","flow_id":1090050131584912,"pcap_cnt":6688,"event_type":"dns","src_ip":"192.168.1.100","src_port":65042,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49725,"rrname":"maxagamisyb.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:29.751639+0100","flow_id":1134666252383963,"pcap_cnt":6011,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62441,"proto":"UDP","dns":{"type":"answer","id":28343,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":546}}
{"timestamp":"2017-12-12T18:33:26.160851+0100","flow_id":1524447419200306,"pcap_cnt":4611,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50134,"proto":"UDP","dns":{"type":"answer","id":49054,"rcode":"NXDOMAIN","rrname":"nopodykecoc.eu"}}
{"timestamp":"2017-12-12T18:33:27.644149+0100","flow_id":263687686837048,"pcap_cnt":5029,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51891,"proto":"UDP","dns":{"type":"answer","id":17690,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:25.638954+0100","flow_id":1824775154810548,"pcap_cnt":4381,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64984,"proto":"UDP","dns":{"type":"answer","id":37609,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:28.030740+0100","flow_id":1025838223489044,"pcap_cnt":5210,"event_type":"dns","src_ip":"192.168.1.100","src_port":59464,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27935,"rrname":"fotasawezak.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.889856+0100","flow_id":362517031916544,"pcap_cnt":6036,"event_type":"dns","src_ip":"192.168.1.100","src_port":58817,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48201,"rrname":"galokusemus.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.646889+0100","flow_id":1102924296478441,"pcap_cnt":5030,"event_type":"dns","src_ip":"192.168.1.100","src_port":52809,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48154,"rrname":"pujepigeviz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.092607+0100","flow_id":902029348727231,"pcap_cnt":5242,"event_type":"dns","src_ip":"192.168.1.100","src_port":53207,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38891,"rrname":"cihocytodoh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.650919+0100","flow_id":1923531485736615,"pcap_cnt":6422,"event_type":"dns","src_ip":"192.168.1.100","src_port":49179,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36870,"rrname":"pumelilebon.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.890119+0100","flow_id":362517031916544,"pcap_cnt":6037,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58817,"proto":"UDP","dns":{"type":"answer","id":48201,"rcode":"NXDOMAIN","rrname":"galokusemus.eu"}}
{"timestamp":"2017-12-12T18:33:29.433607+0100","flow_id":896235437923783,"pcap_cnt":5874,"event_type":"dns","src_ip":"192.168.1.100","src_port":54813,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":39548,"rrname":"fotitezycas.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:32.104825+0100","flow_id":1655866976409977,"pcap_cnt":6626,"event_type":"dns","src_ip":"192.168.1.100","src_port":52825,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53206,"rrname":"xubysaxywil.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.255726+0100","flow_id":1278152519254592,"pcap_cnt":6235,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49823,"proto":"UDP","dns":{"type":"answer","id":28630,"rcode":"NXDOMAIN","rrname":"dimevuwevuj.eu"}}
{"timestamp":"2017-12-12T18:33:28.787035+0100","flow_id":979263598101083,"pcap_cnt":5558,"event_type":"dns","src_ip":"192.168.1.100","src_port":55626,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":22368,"rrname":"jelybodybuf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.433845+0100","flow_id":896235437923783,"pcap_cnt":5875,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54813,"proto":"UDP","dns":{"type":"answer","id":39548,"rcode":"NXDOMAIN","rrname":"fotitezycas.eu"}}
{"timestamp":"2017-12-12T18:33:32.190388+0100","flow_id":2239550883712571,"pcap_cnt":6673,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57965,"proto":"UDP","dns":{"type":"answer","id":12813,"rcode":"NXDOMAIN","rrname":"kefeminalyn.eu"}}
{"timestamp":"2017-12-12T18:33:29.433845+0100","flow_id":896235437923783,"pcap_cnt":5875,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54813,"proto":"UDP","dns":{"type":"answer","id":39548,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:32.105099+0100","flow_id":1655866976409977,"pcap_cnt":6627,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52825,"proto":"UDP","dns":{"type":"answer","id":53206,"rcode":"NXDOMAIN","rrname":"xubysaxywil.eu"}}
{"timestamp":"2017-12-12T18:33:32.190388+0100","flow_id":2239550883712571,"pcap_cnt":6673,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57965,"proto":"UDP","dns":{"type":"answer","id":12813,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:31.286786+0100","flow_id":1383647654142018,"pcap_cnt":6246,"event_type":"dns","src_ip":"192.168.1.100","src_port":57933,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40340,"rrname":"lygujirupum.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:32.105099+0100","flow_id":1655866976409977,"pcap_cnt":6627,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52825,"proto":"UDP","dns":{"type":"answer","id":53206,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:29.625011+0100","flow_id":1731778375682419,"pcap_cnt":5960,"event_type":"dns","src_ip":"192.168.1.100","src_port":55361,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19897,"rrname":"pumawuqahun.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.239588+0100","flow_id":1307671829915620,"pcap_cnt":4842,"event_type":"dns","src_ip":"192.168.1.100","src_port":49435,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45309,"rrname":"fogytubuwyx.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:32.116436+0100","flow_id":1513858177746644,"pcap_cnt":6630,"event_type":"dns","src_ip":"192.168.1.100","src_port":54435,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19526,"rrname":"cinorufifac.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.287077+0100","flow_id":1383647654142018,"pcap_cnt":6247,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57933,"proto":"UDP","dns":{"type":"answer","id":40340,"rcode":"NXDOMAIN","rrname":"lygujirupum.eu"}}
{"timestamp":"2017-12-12T18:33:27.354225+0100","flow_id":2049651052603313,"pcap_cnt":4902,"event_type":"dns","src_ip":"192.168.1.100","src_port":56001,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14955,"rrname":"jefecajazif.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.602950+0100","flow_id":141008388567628,"pcap_cnt":5947,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51639,"proto":"UDP","dns":{"type":"answer","id":12803,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:31.287077+0100","flow_id":1383647654142018,"pcap_cnt":6247,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57933,"proto":"UDP","dns":{"type":"answer","id":40340,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:30.228628+0100","flow_id":2071860328693012,"pcap_cnt":6172,"event_type":"dns","src_ip":"192.168.1.100","src_port":54180,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":32942,"rrname":"nofotycywos.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.622154+0100","flow_id":1106860634111562,"pcap_cnt":5956,"event_type":"dns","src_ip":"192.168.1.100","src_port":51960,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51817,"rrname":"nozogikirar.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.354490+0100","flow_id":2049651052603313,"pcap_cnt":4903,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56001,"proto":"UDP","dns":{"type":"answer","id":14955,"rcode":"NXDOMAIN","rrname":"jefecajazif.eu"}}
{"timestamp":"2017-12-12T18:33:31.309676+0100","flow_id":1921772696615340,"pcap_cnt":6256,"event_type":"dns","src_ip":"192.168.1.100","src_port":64355,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44523,"rrname":"tuwypagupeb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.317181+0100","flow_id":1765276973127421,"pcap_cnt":5802,"event_type":"dns","src_ip":"192.168.1.100","src_port":63369,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43337,"rrname":"lykiwaryvuk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.449260+0100","flow_id":40168999082454,"pcap_cnt":6319,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56337,"proto":"UDP","dns":{"type":"answer","id":3874,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:31.607704+0100","flow_id":2081579839734952,"pcap_cnt":6401,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55423,"proto":"UDP","dns":{"type":"answer","id":35425,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:29.317523+0100","flow_id":1765276973127421,"pcap_cnt":5803,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63369,"proto":"UDP","dns":{"type":"answer","id":43337,"rcode":"NXDOMAIN","rrname":"lykiwaryvuk.eu"}}
{"timestamp":"2017-12-12T18:33:31.552927+0100","flow_id":316008978606727,"pcap_cnt":6376,"event_type":"dns","src_ip":"192.168.1.100","src_port":55805,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48872,"rrname":"gatykibojig.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:29.317523+0100","flow_id":1765276973127421,"pcap_cnt":5803,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63369,"proto":"UDP","dns":{"type":"answer","id":43337,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:27.714471+0100","flow_id":548439723599298,"pcap_cnt":5053,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57419,"proto":"UDP","dns":{"type":"answer","id":43575,"rcode":"NXDOMAIN","rrname":"jepuderymas.eu"}}
{"timestamp":"2017-12-12T18:33:31.553205+0100","flow_id":316008978606727,"pcap_cnt":6377,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55805,"proto":"UDP","dns":{"type":"answer","id":48872,"rcode":"NXDOMAIN","rrname":"gatykibojig.eu"}}
{"timestamp":"2017-12-12T18:33:27.714471+0100","flow_id":548439723599298,"pcap_cnt":5053,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57419,"proto":"UDP","dns":{"type":"answer","id":43575,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:31.242133+0100","flow_id":579082168021203,"pcap_cnt":6225,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62743,"proto":"UDP","dns":{"type":"answer","id":43055,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:32.019571+0100","flow_id":1672709690418285,"pcap_cnt":6588,"event_type":"dns","src_ip":"192.168.1.100","src_port":59127,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40331,"rrname":"ryqozapaleb.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:31.479737+0100","flow_id":1243084111595649,"pcap_cnt":6334,"event_type":"dns","src_ip":"192.168.1.100","src_port":53322,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":54506,"rrname":"xugefexojow.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:32.215846+0100","flow_id":1090050131584912,"pcap_cnt":6689,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65042,"proto":"UDP","dns":{"type":"answer","id":49725,"rcode":"NXDOMAIN","rrname":"maxagamisyb.eu"}}
{"timestamp":"2017-12-12T18:33:26.160851+0100","flow_id":1524447419200306,"pcap_cnt":4611,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50134,"proto":"UDP","dns":{"type":"answer","id":49054,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:32.019832+0100","flow_id":1672709690418285,"pcap_cnt":6589,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59127,"proto":"UDP","dns":{"type":"answer","id":40331,"rcode":"NXDOMAIN","rrname":"ryqozapaleb.eu"}}
{"timestamp":"2017-12-12T18:33:27.050415+0100","flow_id":572961839367019,"pcap_cnt":4743,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62655,"proto":"UDP","dns":{"type":"answer","id":24359,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:26.202726+0100","flow_id":2048227270858726,"pcap_cnt":4622,"event_type":"dns","src_ip":"192.168.1.100","src_port":49896,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30125,"rrname":"marawukyqos.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.031008+0100","flow_id":1025838223489044,"pcap_cnt":5211,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59464,"proto":"UDP","dns":{"type":"answer","id":27935,"rcode":"NXDOMAIN","rrname":"fotasawezak.eu"}}
{"timestamp":"2017-12-12T18:33:27.250042+0100","flow_id":1992208012529850,"pcap_cnt":4855,"event_type":"dns","src_ip":"192.168.1.100","src_port":61170,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6696,"rrname":"cilakyfaloq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.647155+0100","flow_id":1102924296478441,"pcap_cnt":5031,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52809,"proto":"UDP","dns":{"type":"answer","id":48154,"rcode":"NXDOMAIN","rrname":"pujepigeviz.eu"}}
{"timestamp":"2017-12-12T18:33:28.092888+0100","flow_id":902029348727231,"pcap_cnt":5243,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53207,"proto":"UDP","dns":{"type":"answer","id":38891,"rcode":"NXDOMAIN","rrname":"cihocytodoh.eu"}}
{"timestamp":"2017-12-12T18:33:27.250313+0100","flow_id":1992208012529850,"pcap_cnt":4857,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61170,"proto":"UDP","dns":{"type":"answer","id":6696,"rcode":"NXDOMAIN","rrname":"cilakyfaloq.eu"}}
{"timestamp":"2017-12-12T18:33:28.092888+0100","flow_id":902029348727231,"pcap_cnt":5243,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53207,"proto":"UDP","dns":{"type":"answer","id":38891,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:27.250313+0100","flow_id":1992208012529850,"pcap_cnt":4857,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61170,"proto":"UDP","dns":{"type":"answer","id":6696,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:29.593014+0100","flow_id":1469978644122742,"pcap_cnt":5940,"event_type":"dns","src_ip":"192.168.1.100","src_port":62155,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53403,"rrname":"qedevuqelug.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.255726+0100","flow_id":1278152519254592,"pcap_cnt":6235,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49823,"proto":"UDP","dns":{"type":"answer","id":28630,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:28.028057+0100","flow_id":937202983398809,"pcap_cnt":5208,"event_type":"dns","src_ip":"192.168.1.100","src_port":51717,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62949,"rrname":"disojawogaw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.593316+0100","flow_id":1469978644122742,"pcap_cnt":5941,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62155,"proto":"UDP","dns":{"type":"answer","id":53403,"rcode":"NXDOMAIN","rrname":"qedevuqelug.eu"}}
{"timestamp":"2017-12-12T18:33:28.787315+0100","flow_id":979263598101083,"pcap_cnt":5559,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55626,"proto":"UDP","dns":{"type":"answer","id":22368,"rcode":"NXDOMAIN","rrname":"jelybodybuf.eu"}}
{"timestamp":"2017-12-12T18:33:28.028362+0100","flow_id":937202983398809,"pcap_cnt":5209,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51717,"proto":"UDP","dns":{"type":"answer","id":62949,"rcode":"NXDOMAIN","rrname":"disojawogaw.eu"}}
{"timestamp":"2017-12-12T18:33:29.428830+0100","flow_id":1541874249206323,"pcap_cnt":5865,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55910,"proto":"UDP","dns":{"type":"answer","id":65056,"rcode":"NXDOMAIN","rrname":"nomimokubab.eu"}}
{"timestamp":"2017-12-12T18:33:27.898760+0100","flow_id":551770470724906,"pcap_cnt":5135,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59777,"proto":"UDP","dns":{"type":"answer","id":43092,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:28.028362+0100","flow_id":937202983398809,"pcap_cnt":5209,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51717,"proto":"UDP","dns":{"type":"answer","id":62949,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:31.639948+0100","flow_id":1039047395623651,"pcap_cnt":6419,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58979,"proto":"UDP","dns":{"type":"answer","id":59988,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:29.428830+0100","flow_id":1541874249206323,"pcap_cnt":5865,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55910,"proto":"UDP","dns":{"type":"answer","id":65056,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:28.976783+0100","flow_id":1372085601227608,"pcap_cnt":5647,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62935,"proto":"UDP","dns":{"type":"answer","id":53064,"rcode":"NXDOMAIN","rrname":"xukisijycer.eu"}}
{"timestamp":"2017-12-12T18:33:27.239982+0100","flow_id":1307671829915620,"pcap_cnt":4843,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49435,"proto":"UDP","dns":{"type":"answer","id":45309,"rcode":"NXDOMAIN","rrname":"fogytubuwyx.eu"}}
{"timestamp":"2017-12-12T18:33:28.976783+0100","flow_id":1372085601227608,"pcap_cnt":5647,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62935,"proto":"UDP","dns":{"type":"answer","id":53064,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:28.210817+0100","flow_id":198165813278593,"pcap_cnt":5288,"event_type":"dns","src_ip":"192.168.1.100","src_port":61826,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53682,"rrname":"xubateditid.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.239982+0100","flow_id":1307671829915620,"pcap_cnt":4843,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49435,"proto":"UDP","dns":{"type":"answer","id":45309,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:30.228892+0100","flow_id":2071860328693012,"pcap_cnt":6173,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54180,"proto":"UDP","dns":{"type":"answer","id":32942,"rcode":"NXDOMAIN","rrname":"nofotycywos.eu"}}
{"timestamp":"2017-12-12T18:33:29.622409+0100","flow_id":1106860634111562,"pcap_cnt":5957,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51960,"proto":"UDP","dns":{"type":"answer","id":51817,"rcode":"NXDOMAIN","rrname":"nozogikirar.eu"}}
{"timestamp":"2017-12-12T18:33:27.354490+0100","flow_id":2049651052603313,"pcap_cnt":4903,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56001,"proto":"UDP","dns":{"type":"answer","id":14955,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:31.309945+0100","flow_id":1921772696615340,"pcap_cnt":6257,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64355,"proto":"UDP","dns":{"type":"answer","id":44523,"rcode":"NXDOMAIN","rrname":"tuwypagupeb.eu"}}
{"timestamp":"2017-12-12T18:33:28.211080+0100","flow_id":198165813278593,"pcap_cnt":5289,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61826,"proto":"UDP","dns":{"type":"answer","id":53682,"rcode":"NXDOMAIN","rrname":"xubateditid.eu"}}
{"timestamp":"2017-12-12T18:33:29.622409+0100","flow_id":1106860634111562,"pcap_cnt":5957,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51960,"proto":"UDP","dns":{"type":"answer","id":51817,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:31.975696+0100","flow_id":1092019374777168,"pcap_cnt":6568,"event_type":"dns","src_ip":"192.168.1.100","src_port":62968,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6231,"rrname":"jewemurutyj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.309945+0100","flow_id":1921772696615340,"pcap_cnt":6257,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64355,"proto":"UDP","dns":{"type":"answer","id":44523,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:29.423398+0100","flow_id":469148184966238,"pcap_cnt":5861,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53962,"proto":"UDP","dns":{"type":"answer","id":15004,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:28.312966+0100","flow_id":943989031749254,"pcap_cnt":5336,"event_type":"dns","src_ip":"192.168.1.100","src_port":54526,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23655,"rrname":"qegiqiqakof.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.975948+0100","flow_id":1092019374777168,"pcap_cnt":6569,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62968,"proto":"UDP","dns":{"type":"answer","id":6231,"rcode":"NXDOMAIN","rrname":"jewemurutyj.eu"}}
{"timestamp":"2017-12-12T18:33:32.215846+0100","flow_id":1090050131584912,"pcap_cnt":6689,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65042,"proto":"UDP","dns":{"type":"answer","id":49725,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:28.313246+0100","flow_id":943989031749254,"pcap_cnt":5337,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54526,"proto":"UDP","dns":{"type":"answer","id":23655,"rcode":"NXDOMAIN","rrname":"qegiqiqakof.eu"}}
{"timestamp":"2017-12-12T18:33:31.821353+0100","flow_id":1342993641212009,"pcap_cnt":6502,"event_type":"dns","src_ip":"192.168.1.100","src_port":51583,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35159,"rrname":"makexotevyl.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:32.019832+0100","flow_id":1672709690418285,"pcap_cnt":6589,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59127,"proto":"UDP","dns":{"type":"answer","id":40331,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:26.203205+0100","flow_id":2048227270858726,"pcap_cnt":4623,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49896,"proto":"UDP","dns":{"type":"answer","id":30125,"rcode":"NXDOMAIN","rrname":"marawukyqos.eu"}}
{"timestamp":"2017-12-12T18:33:31.821604+0100","flow_id":1342993641212009,"pcap_cnt":6503,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51583,"proto":"UDP","dns":{"type":"answer","id":35159,"rcode":"NXDOMAIN","rrname":"makexotevyl.eu"}}
{"timestamp":"2017-12-12T18:33:26.203205+0100","flow_id":2048227270858726,"pcap_cnt":4623,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49896,"proto":"UDP","dns":{"type":"answer","id":30125,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:27.647155+0100","flow_id":1102924296478441,"pcap_cnt":5031,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52809,"proto":"UDP","dns":{"type":"answer","id":48154,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:31.821604+0100","flow_id":1342993641212009,"pcap_cnt":6503,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51583,"proto":"UDP","dns":{"type":"answer","id":35159,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:31.651200+0100","flow_id":1923531485736615,"pcap_cnt":6423,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49179,"proto":"UDP","dns":{"type":"answer","id":36870,"rcode":"NXDOMAIN","rrname":"pumelilebon.eu"}}
{"timestamp":"2017-12-12T18:33:28.181989+0100","flow_id":1472108947883749,"pcap_cnt":5276,"event_type":"dns","src_ip":"192.168.1.100","src_port":65522,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27096,"rrname":"gadoposuwif.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.915905+0100","flow_id":189159267105217,"pcap_cnt":6546,"event_type":"dns","src_ip":"192.168.1.100","src_port":58806,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8459,"rrname":"diselahidaf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.476969+0100","flow_id":1907700235978537,"pcap_cnt":4960,"event_type":"dns","src_ip":"192.168.1.100","src_port":51905,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50064,"rrname":"pupiwopexof.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:30.040045+0100","flow_id":418050959121245,"pcap_cnt":6095,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61698,"proto":"UDP","dns":{"type":"answer","id":52502,"rcode":"NXDOMAIN","rrname":"dirosehijel.eu"}}
{"timestamp":"2017-12-12T18:33:29.593316+0100","flow_id":1469978644122742,"pcap_cnt":5941,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62155,"proto":"UDP","dns":{"type":"answer","id":53403,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:27.477259+0100","flow_id":1907700235978537,"pcap_cnt":4961,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51905,"proto":"UDP","dns":{"type":"answer","id":50064,"rcode":"NXDOMAIN","rrname":"pupiwopexof.eu"}}
{"timestamp":"2017-12-12T18:33:28.787315+0100","flow_id":979263598101083,"pcap_cnt":5559,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55626,"proto":"UDP","dns":{"type":"answer","id":22368,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:29.625241+0100","flow_id":1731778375682419,"pcap_cnt":5961,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55361,"proto":"UDP","dns":{"type":"answer","id":19897,"rcode":"NXDOMAIN","rrname":"pumawuqahun.eu"}}
{"timestamp":"2017-12-12T18:33:32.116708+0100","flow_id":1513858177746644,"pcap_cnt":6631,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54435,"proto":"UDP","dns":{"type":"answer","id":19526,"rcode":"NXDOMAIN","rrname":"cinorufifac.eu"}}
{"timestamp":"2017-12-12T18:33:28.352243+0100","flow_id":669263596118003,"pcap_cnt":5360,"event_type":"dns","src_ip":"192.168.1.100","src_port":63058,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":3929,"rrname":"kejamerecos.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.629848+0100","flow_id":2216203442035800,"pcap_cnt":5964,"event_type":"dns","src_ip":"192.168.1.100","src_port":61493,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":55841,"rrname":"divyviwyxuf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.558766+0100","flow_id":421386001155758,"pcap_cnt":5928,"event_type":"dns","src_ip":"192.168.1.100","src_port":59023,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5260,"rrname":"fokyhyhumap.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.242495+0100","flow_id":1534173372855103,"pcap_cnt":5772,"event_type":"dns","src_ip":"192.168.1.100","src_port":60172,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7223,"rrname":"tupycegubej.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:30.228892+0100","flow_id":2071860328693012,"pcap_cnt":6173,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54180,"proto":"UDP","dns":{"type":"answer","id":32942,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:29.630114+0100","flow_id":2216203442035800,"pcap_cnt":5965,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61493,"proto":"UDP","dns":{"type":"answer","id":55841,"rcode":"NXDOMAIN","rrname":"divyviwyxuf.eu"}}
{"timestamp":"2017-12-12T18:33:29.242740+0100","flow_id":1534173372855103,"pcap_cnt":5773,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60172,"proto":"UDP","dns":{"type":"answer","id":7223,"rcode":"NXDOMAIN","rrname":"tupycegubej.eu"}}
{"timestamp":"2017-12-12T18:33:31.598418+0100","flow_id":697006937547154,"pcap_cnt":6398,"event_type":"dns","src_ip":"192.168.1.100","src_port":49567,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":12191,"rrname":"xubolyjazaq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.242740+0100","flow_id":1534173372855103,"pcap_cnt":5773,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60172,"proto":"UDP","dns":{"type":"answer","id":7223,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:31.339836+0100","flow_id":1892450953389769,"pcap_cnt":6274,"event_type":"dns","src_ip":"192.168.1.100","src_port":63884,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27935,"rrname":"ciqanukaxas.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:29.386004+0100","flow_id":1934309706032084,"pcap_cnt":5842,"event_type":"dns","src_ip":"192.168.1.100","src_port":63916,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59071,"rrname":"kemojidezyf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.340120+0100","flow_id":1892450953389769,"pcap_cnt":6275,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63884,"proto":"UDP","dns":{"type":"answer","id":27935,"rcode":"NXDOMAIN","rrname":"ciqanukaxas.eu"}}
{"timestamp":"2017-12-12T18:33:27.424753+0100","flow_id":1591996517415729,"pcap_cnt":4942,"event_type":"dns","src_ip":"192.168.1.100","src_port":64534,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45511,"rrname":"rydohyluruc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.553205+0100","flow_id":316008978606727,"pcap_cnt":6377,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55805,"proto":"UDP","dns":{"type":"answer","id":48872,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:29.656602+0100","flow_id":2152393112315890,"pcap_cnt":5968,"event_type":"dns","src_ip":"192.168.1.100","src_port":53022,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":32672,"rrname":"jejeqorekuv.eu","rrtype":"A","tx_id":2}}
{"timestamp":"2017-12-12T18:33:31.356978+0100","flow_id":1347191971738226,"pcap_cnt":6282,"event_type":"dns","src_ip":"192.168.1.100","src_port":63403,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40854,"rrname":"maxotikojax.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.425015+0100","flow_id":1591996517415729,"pcap_cnt":4943,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64534,"proto":"UDP","dns":{"type":"answer","id":45511,"rcode":"NXDOMAIN","rrname":"rydohyluruc.eu"}}
{"timestamp":"2017-12-12T18:33:30.132872+0100","flow_id":42829731202824,"pcap_cnt":6122,"event_type":"dns","src_ip":"192.168.1.100","src_port":62079,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36462,"rrname":"cihakotihuz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.425015+0100","flow_id":1591996517415729,"pcap_cnt":4943,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64534,"proto":"UDP","dns":{"type":"answer","id":45511,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:31.975948+0100","flow_id":1092019374777168,"pcap_cnt":6569,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62968,"proto":"UDP","dns":{"type":"answer","id":6231,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:31.357265+0100","flow_id":1347191971738226,"pcap_cnt":6283,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63403,"proto":"UDP","dns":{"type":"answer","id":40854,"rcode":"NXDOMAIN","rrname":"maxotikojax.eu"}}
{"timestamp":"2017-12-12T18:33:30.133137+0100","flow_id":42829731202824,"pcap_cnt":6123,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62079,"proto":"UDP","dns":{"type":"answer","id":36462,"rcode":"NXDOMAIN","rrname":"cihakotihuz.eu"}}
{"timestamp":"2017-12-12T18:33:31.357265+0100","flow_id":1347191971738226,"pcap_cnt":6283,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63403,"proto":"UDP","dns":{"type":"answer","id":40854,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":567}}
{"timestamp":"2017-12-12T18:33:30.133137+0100","flow_id":42829731202824,"pcap_cnt":6123,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62079,"proto":"UDP","dns":{"type":"answer","id":36462,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:27.739605+0100","flow_id":2078569067399445,"pcap_cnt":5068,"event_type":"dns","src_ip":"192.168.1.100","src_port":64588,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17147,"rrname":"nofexekakuk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:30.135503+0100","flow_id":191006102917455,"pcap_cnt":6126,"event_type":"dns","src_ip":"192.168.1.100","src_port":55861,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40347,"rrname":"nopiwatyqul.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.349782+0100","flow_id":2002421444990550,"pcap_cnt":6278,"event_type":"dns","src_ip":"192.168.1.100","src_port":57404,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51066,"rrname":"novugukupap.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:30.135817+0100","flow_id":191006102917455,"pcap_cnt":6127,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55861,"proto":"UDP","dns":{"type":"answer","id":40347,"rcode":"NXDOMAIN","rrname":"nopiwatyqul.eu"}}
{"timestamp":"2017-12-12T18:33:31.916140+0100","flow_id":189159267105217,"pcap_cnt":6547,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58806,"proto":"UDP","dns":{"type":"answer","id":8459,"rcode":"NXDOMAIN","rrname":"diselahidaf.eu"}}
{"timestamp":"2017-12-12T18:33:30.040045+0100","flow_id":418050959121245,"pcap_cnt":6095,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61698,"proto":"UDP","dns":{"type":"answer","id":52502,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:31.916140+0100","flow_id":189159267105217,"pcap_cnt":6547,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58806,"proto":"UDP","dns":{"type":"answer","id":8459,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":571}}
{"timestamp":"2017-12-12T18:33:27.477259+0100","flow_id":1907700235978537,"pcap_cnt":4961,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51905,"proto":"UDP","dns":{"type":"answer","id":50064,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:28.166015+0100","flow_id":1104363110566015,"pcap_cnt":5268,"event_type":"dns","src_ip":"192.168.1.100","src_port":50937,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":15389,"rrname":"dikexosajif.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.224888+0100","flow_id":263981892333176,"pcap_cnt":6216,"event_type":"dns","src_ip":"192.168.1.100","src_port":53561,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35605,"rrname":"qegovyqaxuk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.948378+0100","flow_id":1775861919873178,"pcap_cnt":5162,"event_type":"dns","src_ip":"192.168.1.100","src_port":50091,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":15404,"rrname":"ryhipugajim.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.030547+0100","flow_id":982789766346579,"pcap_cnt":5670,"event_type":"dns","src_ip":"192.168.1.100","src_port":59610,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":20813,"rrname":"dikymezosaj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.166318+0100","flow_id":1104363110566015,"pcap_cnt":5269,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50937,"proto":"UDP","dns":{"type":"answer","id":15389,"rcode":"NXDOMAIN","rrname":"dikexosajif.eu"}}
{"timestamp":"2017-12-12T18:33:28.352546+0100","flow_id":669263596118003,"pcap_cnt":5361,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63058,"proto":"UDP","dns":{"type":"answer","id":3929,"rcode":"NXDOMAIN","rrname":"kejamerecos.eu"}}
{"timestamp":"2017-12-12T18:33:27.970807+0100","flow_id":1233366748221495,"pcap_cnt":5168,"event_type":"dns","src_ip":"192.168.1.100","src_port":58565,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47576,"rrname":"dirugihofug.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.630114+0100","flow_id":2216203442035800,"pcap_cnt":5965,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61493,"proto":"UDP","dns":{"type":"answer","id":55841,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:28.352546+0100","flow_id":669263596118003,"pcap_cnt":5361,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63058,"proto":"UDP","dns":{"type":"answer","id":3929,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:28.211080+0100","flow_id":198165813278593,"pcap_cnt":5289,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61826,"proto":"UDP","dns":{"type":"answer","id":53682,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:31.598662+0100","flow_id":697006937547154,"pcap_cnt":6399,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49567,"proto":"UDP","dns":{"type":"answer","id":12191,"rcode":"NXDOMAIN","rrname":"xubolyjazaq.eu"}}
{"timestamp":"2017-12-12T18:33:28.369543+0100","flow_id":882963988915079,"pcap_cnt":5368,"event_type":"dns","src_ip":"192.168.1.100","src_port":58253,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40614,"rrname":"xudiherodos.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.717044+0100","flow_id":805581563228404,"pcap_cnt":6000,"event_type":"dns","src_ip":"192.168.1.100","src_port":52772,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":32366,"rrname":"gahihezenal.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.419357+0100","flow_id":363968730785309,"pcap_cnt":5390,"event_type":"dns","src_ip":"192.168.1.100","src_port":63692,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11388,"rrname":"vowemytybip.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.386238+0100","flow_id":1934309706032084,"pcap_cnt":5843,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63916,"proto":"UDP","dns":{"type":"answer","id":59071,"rcode":"NXDOMAIN","rrname":"kemojidezyf.eu"}}
{"timestamp":"2017-12-12T18:33:28.369906+0100","flow_id":882963988915079,"pcap_cnt":5369,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58253,"proto":"UDP","dns":{"type":"answer","id":40614,"rcode":"NXDOMAIN","rrname":"xudiherodos.eu"}}
{"timestamp":"2017-12-12T18:33:31.975187+0100","flow_id":2112696877834579,"pcap_cnt":6566,"event_type":"dns","src_ip":"192.168.1.100","src_port":62643,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36036,"rrname":"gatopuwenyq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.656899+0100","flow_id":2152393112315890,"pcap_cnt":5969,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53022,"proto":"UDP","dns":{"type":"answer","id":32672,"rcode":"NXDOMAIN","rrname":"jejeqorekuv.eu"}}
{"timestamp":"2017-12-12T18:33:25.661730+0100","flow_id":1001189404216132,"pcap_cnt":4386,"event_type":"dns","src_ip":"192.168.1.100","src_port":61571,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8233,"rrname":"cihipifebep.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:28.313246+0100","flow_id":943989031749254,"pcap_cnt":5337,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54526,"proto":"UDP","dns":{"type":"answer","id":23655,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:27.461510+0100","flow_id":79807251942086,"pcap_cnt":4956,"event_type":"dns","src_ip":"192.168.1.100","src_port":49333,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59132,"rrname":"lygegoxidul.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.031008+0100","flow_id":1025838223489044,"pcap_cnt":5211,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59464,"proto":"UDP","dns":{"type":"answer","id":27935,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:29.890119+0100","flow_id":362517031916544,"pcap_cnt":6037,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58817,"proto":"UDP","dns":{"type":"answer","id":48201,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":546}}
{"timestamp":"2017-12-12T18:33:26.244853+0100","flow_id":1317395635813493,"pcap_cnt":4638,"event_type":"dns","src_ip":"192.168.1.100","src_port":59016,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":58236,"rrname":"puzewilurip.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.430131+0100","flow_id":845127474712627,"pcap_cnt":6312,"event_type":"dns","src_ip":"192.168.1.100","src_port":52524,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":21361,"rrname":"pufepepazyd.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.651200+0100","flow_id":1923531485736615,"pcap_cnt":6423,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49179,"proto":"UDP","dns":{"type":"answer","id":36870,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:28.083861+0100","flow_id":1609266580965269,"pcap_cnt":5236,"event_type":"dns","src_ip":"192.168.1.100","src_port":63011,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14578,"rrname":"fodyfuzexyp.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:30.135817+0100","flow_id":191006102917455,"pcap_cnt":6127,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55861,"proto":"UDP","dns":{"type":"answer","id":40347,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":569}}
{"timestamp":"2017-12-12T18:33:31.350058+0100","flow_id":2002421444990550,"pcap_cnt":6279,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57404,"proto":"UDP","dns":{"type":"answer","id":51066,"rcode":"NXDOMAIN","rrname":"novugukupap.eu"}}
{"timestamp":"2017-12-12T18:33:28.084107+0100","flow_id":1609266580965269,"pcap_cnt":5237,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63011,"proto":"UDP","dns":{"type":"answer","id":14578,"rcode":"NXDOMAIN","rrname":"fodyfuzexyp.eu"}}
{"timestamp":"2017-12-12T18:33:31.350058+0100","flow_id":2002421444990550,"pcap_cnt":6279,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57404,"proto":"UDP","dns":{"type":"answer","id":51066,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":567}}
{"timestamp":"2017-12-12T18:33:32.130900+0100","flow_id":263307582570324,"pcap_cnt":6638,"event_type":"dns","src_ip":"192.168.1.100","src_port":55700,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42059,"rrname":"makififupap.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.084107+0100","flow_id":1609266580965269,"pcap_cnt":5237,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63011,"proto":"UDP","dns":{"type":"answer","id":14578,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:27.346174+0100","flow_id":969194047227966,"pcap_cnt":4898,"event_type":"dns","src_ip":"192.168.1.100","src_port":58549,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":32827,"rrname":"gahoqohofib.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.948627+0100","flow_id":1775861919873178,"pcap_cnt":5163,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50091,"proto":"UDP","dns":{"type":"answer","id":15404,"rcode":"NXDOMAIN","rrname":"ryhipugajim.eu"}}
{"timestamp":"2017-12-12T18:33:29.559071+0100","flow_id":421386001155758,"pcap_cnt":5929,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59023,"proto":"UDP","dns":{"type":"answer","id":5260,"rcode":"NXDOMAIN","rrname":"fokyhyhumap.eu"}}
{"timestamp":"2017-12-12T18:33:27.948627+0100","flow_id":1775861919873178,"pcap_cnt":5163,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50091,"proto":"UDP","dns":{"type":"answer","id":15404,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:27.346503+0100","flow_id":969194047227966,"pcap_cnt":4899,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58549,"proto":"UDP","dns":{"type":"answer","id":32827,"rcode":"NXDOMAIN","rrname":"gahoqohofib.eu"}}
{"timestamp":"2017-12-12T18:33:28.166318+0100","flow_id":1104363110566015,"pcap_cnt":5269,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50937,"proto":"UDP","dns":{"type":"answer","id":15389,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:27.346503+0100","flow_id":969194047227966,"pcap_cnt":4899,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58549,"proto":"UDP","dns":{"type":"answer","id":32827,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:29.362646+0100","flow_id":494602308651158,"pcap_cnt":5824,"event_type":"dns","src_ip":"192.168.1.100","src_port":55506,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":58411,"rrname":"norowetunuj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.174082+0100","flow_id":2182039124617218,"pcap_cnt":5272,"event_type":"dns","src_ip":"192.168.1.100","src_port":59447,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9403,"rrname":"masawocipel.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.971051+0100","flow_id":1233366748221495,"pcap_cnt":5169,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58565,"proto":"UDP","dns":{"type":"answer","id":47576,"rcode":"NXDOMAIN","rrname":"dirugihofug.eu"}}
{"timestamp":"2017-12-12T18:33:31.598662+0100","flow_id":697006937547154,"pcap_cnt":6399,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49567,"proto":"UDP","dns":{"type":"answer","id":12191,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:27.971051+0100","flow_id":1233366748221495,"pcap_cnt":5169,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58565,"proto":"UDP","dns":{"type":"answer","id":47576,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:28.174288+0100","flow_id":2182039124617218,"pcap_cnt":5273,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59447,"proto":"UDP","dns":{"type":"answer","id":9403,"rcode":"NXDOMAIN","rrname":"masawocipel.eu"}}
{"timestamp":"2017-12-12T18:33:29.362896+0100","flow_id":494602308651158,"pcap_cnt":5825,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55506,"proto":"UDP","dns":{"type":"answer","id":58411,"rcode":"NXDOMAIN","rrname":"norowetunuj.eu"}}
{"timestamp":"2017-12-12T18:33:29.717291+0100","flow_id":805581563228404,"pcap_cnt":6001,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52772,"proto":"UDP","dns":{"type":"answer","id":32366,"rcode":"NXDOMAIN","rrname":"gahihezenal.eu"}}
{"timestamp":"2017-12-12T18:33:28.074780+0100","flow_id":566255247405555,"pcap_cnt":5224,"event_type":"dns","src_ip":"192.168.1.100","src_port":56876,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42415,"rrname":"xukuqyruwoq.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:29.362896+0100","flow_id":494602308651158,"pcap_cnt":5825,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55506,"proto":"UDP","dns":{"type":"answer","id":58411,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:28.419676+0100","flow_id":363968730785309,"pcap_cnt":5391,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63692,"proto":"UDP","dns":{"type":"answer","id":11388,"rcode":"NXDOMAIN","rrname":"vowemytybip.eu"}}
{"timestamp":"2017-12-12T18:33:29.717291+0100","flow_id":805581563228404,"pcap_cnt":6001,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52772,"proto":"UDP","dns":{"type":"answer","id":32366,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":546}}
{"timestamp":"2017-12-12T18:33:28.419676+0100","flow_id":363968730785309,"pcap_cnt":5391,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63692,"proto":"UDP","dns":{"type":"answer","id":11388,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:29.573275+0100","flow_id":269030626279259,"pcap_cnt":5934,"event_type":"dns","src_ip":"192.168.1.100","src_port":58958,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41107,"rrname":"nojudymiwuh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.461856+0100","flow_id":79807251942086,"pcap_cnt":4957,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49333,"proto":"UDP","dns":{"type":"answer","id":59132,"rcode":"NXDOMAIN","rrname":"lygegoxidul.eu"}}
{"timestamp":"2017-12-12T18:33:27.739984+0100","flow_id":2078569067399445,"pcap_cnt":5069,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64588,"proto":"UDP","dns":{"type":"answer","id":17147,"rcode":"NXDOMAIN","rrname":"nofexekakuk.eu"}}
{"timestamp":"2017-12-12T18:33:28.182275+0100","flow_id":1472108947883749,"pcap_cnt":5277,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65522,"proto":"UDP","dns":{"type":"answer","id":27096,"rcode":"NXDOMAIN","rrname":"gadoposuwif.eu"}}
{"timestamp":"2017-12-12T18:33:27.739984+0100","flow_id":2078569067399445,"pcap_cnt":5069,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64588,"proto":"UDP","dns":{"type":"answer","id":17147,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:31.354152+0100","flow_id":1533170497895927,"pcap_cnt":6280,"event_type":"dns","src_ip":"192.168.1.100","src_port":56300,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6733,"rrname":"qekenilacap.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:28.182275+0100","flow_id":1472108947883749,"pcap_cnt":5277,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65522,"proto":"UDP","dns":{"type":"answer","id":27096,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:26.245095+0100","flow_id":1317395635813493,"pcap_cnt":4639,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59016,"proto":"UDP","dns":{"type":"answer","id":58236,"rcode":"NXDOMAIN","rrname":"puzewilurip.eu"}}
{"timestamp":"2017-12-12T18:33:31.354431+0100","flow_id":1533170497895927,"pcap_cnt":6281,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56300,"proto":"UDP","dns":{"type":"answer","id":6733,"rcode":"NXDOMAIN","rrname":"qekenilacap.eu"}}
{"timestamp":"2017-12-12T18:33:26.245095+0100","flow_id":1317395635813493,"pcap_cnt":4639,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59016,"proto":"UDP","dns":{"type":"answer","id":58236,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:31.354431+0100","flow_id":1533170497895927,"pcap_cnt":6281,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56300,"proto":"UDP","dns":{"type":"answer","id":6733,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":567}}
{"timestamp":"2017-12-12T18:33:30.218909+0100","flow_id":1333037906941725,"pcap_cnt":6160,"event_type":"dns","src_ip":"192.168.1.100","src_port":52866,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9192,"rrname":"fodutazenaf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.492385+0100","flow_id":1255131495236449,"pcap_cnt":6342,"event_type":"dns","src_ip":"192.168.1.100","src_port":65259,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2021,"rrname":"tucyzogojat.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.401817+0100","flow_id":1876132226605465,"pcap_cnt":6306,"event_type":"dns","src_ip":"192.168.1.100","src_port":54549,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26972,"rrname":"kezubaxemor.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:30.219177+0100","flow_id":1333037906941725,"pcap_cnt":6161,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52866,"proto":"UDP","dns":{"type":"answer","id":9192,"rcode":"NXDOMAIN","rrname":"fodutazenaf.eu"}}
{"timestamp":"2017-12-12T18:33:32.131233+0100","flow_id":263307582570324,"pcap_cnt":6639,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55700,"proto":"UDP","dns":{"type":"answer","id":42059,"rcode":"NXDOMAIN","rrname":"makififupap.eu"}}
{"timestamp":"2017-12-12T18:33:28.086155+0100","flow_id":152207515734155,"pcap_cnt":5238,"event_type":"dns","src_ip":"192.168.1.100","src_port":65007,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":39363,"rrname":"gaturuzuqyx.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.030906+0100","flow_id":982789766346579,"pcap_cnt":5671,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59610,"proto":"UDP","dns":{"type":"answer","id":20813,"rcode":"NXDOMAIN","rrname":"dikymezosaj.eu"}}
{"timestamp":"2017-12-12T18:33:29.559071+0100","flow_id":421386001155758,"pcap_cnt":5929,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59023,"proto":"UDP","dns":{"type":"answer","id":5260,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:28.078881+0100","flow_id":529410871014433,"pcap_cnt":5230,"event_type":"dns","src_ip":"192.168.1.100","src_port":55048,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40988,"rrname":"tulyrylynyc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.086413+0100","flow_id":152207515734155,"pcap_cnt":5239,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65007,"proto":"UDP","dns":{"type":"answer","id":39363,"rcode":"NXDOMAIN","rrname":"gaturuzuqyx.eu"}}
{"timestamp":"2017-12-12T18:33:27.391446+0100","flow_id":675452643888312,"pcap_cnt":4920,"event_type":"dns","src_ip":"192.168.1.100","src_port":60683,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6723,"rrname":"xuqeqejohiv.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:29.910715+0100","flow_id":1022904760919419,"pcap_cnt":6046,"event_type":"dns","src_ip":"192.168.1.100","src_port":56286,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38866,"rrname":"jeluganusog.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.480006+0100","flow_id":1243084111595649,"pcap_cnt":6335,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53322,"proto":"UDP","dns":{"type":"answer","id":54506,"rcode":"NXDOMAIN","rrname":"xugefexojow.eu"}}
{"timestamp":"2017-12-12T18:33:28.174288+0100","flow_id":2182039124617218,"pcap_cnt":5273,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59447,"proto":"UDP","dns":{"type":"answer","id":9403,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:31.894414+0100","flow_id":472036550616526,"pcap_cnt":6534,"event_type":"dns","src_ip":"192.168.1.100","src_port":56544,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19392,"rrname":"nomytifazah.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.391742+0100","flow_id":675452643888312,"pcap_cnt":4921,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60683,"proto":"UDP","dns":{"type":"answer","id":6723,"rcode":"NXDOMAIN","rrname":"xuqeqejohiv.eu"}}
{"timestamp":"2017-12-12T18:33:29.910993+0100","flow_id":1022904760919419,"pcap_cnt":6047,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56286,"proto":"UDP","dns":{"type":"answer","id":38866,"rcode":"NXDOMAIN","rrname":"jeluganusog.eu"}}
{"timestamp":"2017-12-12T18:33:29.386238+0100","flow_id":1934309706032084,"pcap_cnt":5843,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63916,"proto":"UDP","dns":{"type":"answer","id":59071,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:31.894672+0100","flow_id":472036550616526,"pcap_cnt":6535,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56544,"proto":"UDP","dns":{"type":"answer","id":19392,"rcode":"NXDOMAIN","rrname":"nomytifazah.eu"}}
{"timestamp":"2017-12-12T18:33:31.975477+0100","flow_id":2112696877834579,"pcap_cnt":6567,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62643,"proto":"UDP","dns":{"type":"answer","id":36036,"rcode":"NXDOMAIN","rrname":"gatopuwenyq.eu"}}
{"timestamp":"2017-12-12T18:33:28.075082+0100","flow_id":566255247405555,"pcap_cnt":5225,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56876,"proto":"UDP","dns":{"type":"answer","id":42415,"rcode":"NXDOMAIN","rrname":"xukuqyruwoq.eu"}}
{"timestamp":"2017-12-12T18:33:25.662097+0100","flow_id":1001189404216132,"pcap_cnt":4387,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61571,"proto":"UDP","dns":{"type":"answer","id":8233,"rcode":"NXDOMAIN","rrname":"cihipifebep.eu"}}
{"timestamp":"2017-12-12T18:33:29.005925+0100","flow_id":1859813498230565,"pcap_cnt":5656,"event_type":"dns","src_ip":"192.168.1.100","src_port":60756,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":54910,"rrname":"marosokubew.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.463612+0100","flow_id":419240665092860,"pcap_cnt":6324,"event_type":"dns","src_ip":"192.168.1.100","src_port":52370,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":12924,"rrname":"lyxaxududes.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.573626+0100","flow_id":269030626279259,"pcap_cnt":5935,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58958,"proto":"UDP","dns":{"type":"answer","id":41107,"rcode":"NXDOMAIN","rrname":"nojudymiwuh.eu"}}
{"timestamp":"2017-12-12T18:33:27.461856+0100","flow_id":79807251942086,"pcap_cnt":4957,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49333,"proto":"UDP","dns":{"type":"answer","id":59132,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:29.006272+0100","flow_id":1859813498230565,"pcap_cnt":5657,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60756,"proto":"UDP","dns":{"type":"answer","id":54910,"rcode":"NXDOMAIN","rrname":"marosokubew.eu"}}
{"timestamp":"2017-12-12T18:33:29.573626+0100","flow_id":269030626279259,"pcap_cnt":5935,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58958,"proto":"UDP","dns":{"type":"answer","id":41107,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:31.951835+0100","flow_id":2058359099065883,"pcap_cnt":6562,"event_type":"dns","src_ip":"192.168.1.100","src_port":49283,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9956,"rrname":"vofukykojos.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.006272+0100","flow_id":1859813498230565,"pcap_cnt":5657,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60756,"proto":"UDP","dns":{"type":"answer","id":54910,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:27.590548+0100","flow_id":1825659918156500,"pcap_cnt":5006,"event_type":"dns","src_ip":"192.168.1.100","src_port":55874,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51691,"rrname":"norijyfohop.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.659999+0100","flow_id":2058348360295102,"pcap_cnt":5974,"event_type":"dns","src_ip":"192.168.1.100","src_port":63483,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40781,"rrname":"digivehusyd.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:31.952101+0100","flow_id":2058359099065883,"pcap_cnt":6563,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49283,"proto":"UDP","dns":{"type":"answer","id":9956,"rcode":"NXDOMAIN","rrname":"vofukykojos.eu"}}
{"timestamp":"2017-12-12T18:33:32.116708+0100","flow_id":1513858177746644,"pcap_cnt":6631,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54435,"proto":"UDP","dns":{"type":"answer","id":19526,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:27.590989+0100","flow_id":1825659918156500,"pcap_cnt":5007,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55874,"proto":"UDP","dns":{"type":"answer","id":51691,"rcode":"NXDOMAIN","rrname":"norijyfohop.eu"}}
{"timestamp":"2017-12-12T18:33:29.660256+0100","flow_id":2058348360295102,"pcap_cnt":5975,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63483,"proto":"UDP","dns":{"type":"answer","id":40781,"rcode":"NXDOMAIN","rrname":"digivehusyd.eu"}}
{"timestamp":"2017-12-12T18:33:27.590989+0100","flow_id":1825659918156500,"pcap_cnt":5007,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55874,"proto":"UDP","dns":{"type":"answer","id":51691,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:29.660256+0100","flow_id":2058348360295102,"pcap_cnt":5975,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63483,"proto":"UDP","dns":{"type":"answer","id":40781,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":546}}
{"timestamp":"2017-12-12T18:33:30.219177+0100","flow_id":1333037906941725,"pcap_cnt":6161,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52866,"proto":"UDP","dns":{"type":"answer","id":9192,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:27.746529+0100","flow_id":1555214417486881,"pcap_cnt":5070,"event_type":"dns","src_ip":"192.168.1.100","src_port":50970,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59873,"rrname":"masygekevuq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:32.131233+0100","flow_id":263307582570324,"pcap_cnt":6639,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55700,"proto":"UDP","dns":{"type":"answer","id":42059,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:29.030906+0100","flow_id":982789766346579,"pcap_cnt":5671,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59610,"proto":"UDP","dns":{"type":"answer","id":20813,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:31.447748+0100","flow_id":160357216408836,"pcap_cnt":6316,"event_type":"dns","src_ip":"192.168.1.100","src_port":59334,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48546,"rrname":"kevimudyqec.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.340120+0100","flow_id":1892450953389769,"pcap_cnt":6275,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63884,"proto":"UDP","dns":{"type":"answer","id":27935,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":567}}
{"timestamp":"2017-12-12T18:33:28.086413+0100","flow_id":152207515734155,"pcap_cnt":5239,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65007,"proto":"UDP","dns":{"type":"answer","id":39363,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:31.448031+0100","flow_id":160357216408836,"pcap_cnt":6317,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59334,"proto":"UDP","dns":{"type":"answer","id":48546,"rcode":"NXDOMAIN","rrname":"kevimudyqec.eu"}}
{"timestamp":"2017-12-12T18:33:31.737524+0100","flow_id":721574150488308,"pcap_cnt":6460,"event_type":"dns","src_ip":"192.168.1.100","src_port":55198,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45338,"rrname":"maxyvycebid.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.448031+0100","flow_id":160357216408836,"pcap_cnt":6317,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59334,"proto":"UDP","dns":{"type":"answer","id":48546,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":569}}
{"timestamp":"2017-12-12T18:33:31.480006+0100","flow_id":1243084111595649,"pcap_cnt":6335,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53322,"proto":"UDP","dns":{"type":"answer","id":54506,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:29.656899+0100","flow_id":2152393112315890,"pcap_cnt":5969,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53022,"proto":"UDP","dns":{"type":"answer","id":32672,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:27.391742+0100","flow_id":675452643888312,"pcap_cnt":4921,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60683,"proto":"UDP","dns":{"type":"answer","id":6723,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:31.518766+0100","flow_id":932643875842670,"pcap_cnt":6358,"event_type":"dns","src_ip":"192.168.1.100","src_port":49345,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":56376,"rrname":"vopibycywow.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.788223+0100","flow_id":1821921149257471,"pcap_cnt":6016,"event_type":"dns","src_ip":"192.168.1.100","src_port":64399,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63092,"rrname":"qederepuduf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.894672+0100","flow_id":472036550616526,"pcap_cnt":6535,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56544,"proto":"UDP","dns":{"type":"answer","id":19392,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":571}}
{"timestamp":"2017-12-12T18:33:29.419188+0100","flow_id":2247034864756084,"pcap_cnt":5858,"event_type":"dns","src_ip":"192.168.1.100","src_port":55934,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27514,"rrname":"vofogucyxoz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.519092+0100","flow_id":932643875842670,"pcap_cnt":6359,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49345,"proto":"UDP","dns":{"type":"answer","id":56376,"rcode":"NXDOMAIN","rrname":"vopibycywow.eu"}}
{"timestamp":"2017-12-12T18:33:31.975477+0100","flow_id":2112696877834579,"pcap_cnt":6567,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62643,"proto":"UDP","dns":{"type":"answer","id":36036,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:31.519092+0100","flow_id":932643875842670,"pcap_cnt":6359,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49345,"proto":"UDP","dns":{"type":"answer","id":56376,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:25.662097+0100","flow_id":1001189404216132,"pcap_cnt":4387,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61571,"proto":"UDP","dns":{"type":"answer","id":8233,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":575}}
{"timestamp":"2017-12-12T18:33:31.463887+0100","flow_id":419240665092860,"pcap_cnt":6325,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52370,"proto":"UDP","dns":{"type":"answer","id":12924,"rcode":"NXDOMAIN","rrname":"lyxaxududes.eu"}}
{"timestamp":"2017-12-12T18:33:31.576111+0100","flow_id":1443848063273583,"pcap_cnt":6388,"event_type":"dns","src_ip":"192.168.1.100","src_port":61507,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":39486,"rrname":"vojeqamutuf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.463887+0100","flow_id":419240665092860,"pcap_cnt":6325,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52370,"proto":"UDP","dns":{"type":"answer","id":12924,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":569}}
{"timestamp":"2017-12-12T18:33:25.795070+0100","flow_id":2175811421492477,"pcap_cnt":4432,"event_type":"dns","src_ip":"192.168.1.100","src_port":59132,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5362,"rrname":"vojeqamutuf.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:28.325268+0100","flow_id":264432863737492,"pcap_cnt":5342,"event_type":"dns","src_ip":"192.168.1.100","src_port":55886,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26418,"rrname":"rydacoqybob.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.625241+0100","flow_id":1731778375682419,"pcap_cnt":5961,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55361,"proto":"UDP","dns":{"type":"answer","id":19897,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:25.795352+0100","flow_id":2175811421492477,"pcap_cnt":4433,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59132,"proto":"UDP","dns":{"type":"answer","id":5362,"rcode":"NXDOMAIN","rrname":"vojeqamutuf.eu"}}
{"timestamp":"2017-12-12T18:33:29.368171+0100","flow_id":2153932858695211,"pcap_cnt":5834,"event_type":"dns","src_ip":"192.168.1.100","src_port":61987,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62487,"rrname":"tulaqypiqyh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.098710+0100","flow_id":712200384119190,"pcap_cnt":4766,"event_type":"dns","src_ip":"192.168.1.100","src_port":49524,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":22492,"rrname":"dirutewaled.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.695028+0100","flow_id":85208173484788,"pcap_cnt":5982,"event_type":"dns","src_ip":"192.168.1.100","src_port":61324,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47835,"rrname":"nofyjikoxex.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.368400+0100","flow_id":2153932858695211,"pcap_cnt":5835,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61987,"proto":"UDP","dns":{"type":"answer","id":62487,"rcode":"NXDOMAIN","rrname":"tulaqypiqyh.eu"}}
{"timestamp":"2017-12-12T18:33:31.952101+0100","flow_id":2058359099065883,"pcap_cnt":6563,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49283,"proto":"UDP","dns":{"type":"answer","id":9956,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:27.099043+0100","flow_id":712200384119190,"pcap_cnt":4767,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49524,"proto":"UDP","dns":{"type":"answer","id":22492,"rcode":"NXDOMAIN","rrname":"dirutewaled.eu"}}
{"timestamp":"2017-12-12T18:33:31.225137+0100","flow_id":263981892333176,"pcap_cnt":6217,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53561,"proto":"UDP","dns":{"type":"answer","id":35605,"rcode":"NXDOMAIN","rrname":"qegovyqaxuk.eu"}}
{"timestamp":"2017-12-12T18:33:27.099043+0100","flow_id":712200384119190,"pcap_cnt":4767,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49524,"proto":"UDP","dns":{"type":"answer","id":22492,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:31.402056+0100","flow_id":1876132226605465,"pcap_cnt":6307,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54549,"proto":"UDP","dns":{"type":"answer","id":26972,"rcode":"NXDOMAIN","rrname":"kezubaxemor.eu"}}
{"timestamp":"2017-12-12T18:33:32.155243+0100","flow_id":177418973264449,"pcap_cnt":6652,"event_type":"dns","src_ip":"192.168.1.100","src_port":52037,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38950,"rrname":"qedoqyvoguq.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:30.041167+0100","flow_id":1325987716593943,"pcap_cnt":6096,"event_type":"dns","src_ip":"192.168.1.100","src_port":52369,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45581,"rrname":"pufiluqudic.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:32.155472+0100","flow_id":177418973264449,"pcap_cnt":6653,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52037,"proto":"UDP","dns":{"type":"answer","id":38950,"rcode":"NXDOMAIN","rrname":"qedoqyvoguq.eu"}}
{"timestamp":"2017-12-12T18:33:32.172819+0100","flow_id":1419770476591548,"pcap_cnt":6660,"event_type":"dns","src_ip":"192.168.1.100","src_port":55826,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":39829,"rrname":"rytecyvaxuj.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:32.155472+0100","flow_id":177418973264449,"pcap_cnt":6653,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52037,"proto":"UDP","dns":{"type":"answer","id":38950,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:29.148759+0100","flow_id":288087395654305,"pcap_cnt":5728,"event_type":"dns","src_ip":"192.168.1.100","src_port":51917,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1744,"rrname":"fokovisekyz.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:32.193799+0100","flow_id":1297271566955783,"pcap_cnt":6676,"event_type":"dns","src_ip":"192.168.1.100","src_port":52731,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63305,"rrname":"jeledajifor.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.369906+0100","flow_id":882963988915079,"pcap_cnt":5369,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58253,"proto":"UDP","dns":{"type":"answer","id":40614,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:32.173050+0100","flow_id":1419770476591548,"pcap_cnt":6661,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55826,"proto":"UDP","dns":{"type":"answer","id":39829,"rcode":"NXDOMAIN","rrname":"rytecyvaxuj.eu"}}
{"timestamp":"2017-12-12T18:33:29.910993+0100","flow_id":1022904760919419,"pcap_cnt":6047,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56286,"proto":"UDP","dns":{"type":"answer","id":38866,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":567}}
{"timestamp":"2017-12-12T18:33:28.780513+0100","flow_id":2029015882328289,"pcap_cnt":5554,"event_type":"dns","src_ip":"192.168.1.100","src_port":50679,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19795,"rrname":"divejezumes.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.737786+0100","flow_id":721574150488308,"pcap_cnt":6461,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55198,"proto":"UDP","dns":{"type":"answer","id":45338,"rcode":"NXDOMAIN","rrname":"maxyvycebid.eu"}}
{"timestamp":"2017-12-12T18:33:31.509103+0100","flow_id":682934476299260,"pcap_cnt":6352,"event_type":"dns","src_ip":"192.168.1.100","src_port":51919,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25074,"rrname":"jepogejebak.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:31.737786+0100","flow_id":721574150488308,"pcap_cnt":6461,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55198,"proto":"UDP","dns":{"type":"answer","id":45338,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:30.152164+0100","flow_id":758936069506811,"pcap_cnt":6132,"event_type":"dns","src_ip":"192.168.1.100","src_port":50726,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41484,"rrname":"tucoqepyryk.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:31.758250+0100","flow_id":1996200184877546,"pcap_cnt":6470,"event_type":"dns","src_ip":"192.168.1.100","src_port":50778,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47428,"rrname":"nozomotokyt.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.075082+0100","flow_id":566255247405555,"pcap_cnt":5225,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56876,"proto":"UDP","dns":{"type":"answer","id":42415,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:30.152445+0100","flow_id":758936069506811,"pcap_cnt":6133,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50726,"proto":"UDP","dns":{"type":"answer","id":41484,"rcode":"NXDOMAIN","rrname":"tucoqepyryk.eu"}}
{"timestamp":"2017-12-12T18:33:31.758524+0100","flow_id":1996200184877546,"pcap_cnt":6471,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50778,"proto":"UDP","dns":{"type":"answer","id":47428,"rcode":"NXDOMAIN","rrname":"nozomotokyt.eu"}}
{"timestamp":"2017-12-12T18:33:32.021197+0100","flow_id":411838289040077,"pcap_cnt":6590,"event_type":"dns","src_ip":"192.168.1.100","src_port":56445,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33312,"rrname":"qeqyvulidox.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:30.152445+0100","flow_id":758936069506811,"pcap_cnt":6133,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50726,"proto":"UDP","dns":{"type":"answer","id":41484,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":569}}
{"timestamp":"2017-12-12T18:33:28.231301+0100","flow_id":2127355600996229,"pcap_cnt":5298,"event_type":"dns","src_ip":"192.168.1.100","src_port":59724,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9253,"rrname":"jefyqynofaj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.419466+0100","flow_id":2247034864756084,"pcap_cnt":5859,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55934,"proto":"UDP","dns":{"type":"answer","id":27514,"rcode":"NXDOMAIN","rrname":"vofogucyxoz.eu"}}
{"timestamp":"2017-12-12T18:33:32.021460+0100","flow_id":411838289040077,"pcap_cnt":6591,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56445,"proto":"UDP","dns":{"type":"answer","id":33312,"rcode":"NXDOMAIN","rrname":"qeqyvulidox.eu"}}
{"timestamp":"2017-12-12T18:33:31.430380+0100","flow_id":845127474712627,"pcap_cnt":6313,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52524,"proto":"UDP","dns":{"type":"answer","id":21361,"rcode":"NXDOMAIN","rrname":"pufepepazyd.eu"}}
{"timestamp":"2017-12-12T18:33:32.021460+0100","flow_id":411838289040077,"pcap_cnt":6591,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56445,"proto":"UDP","dns":{"type":"answer","id":33312,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:31.576375+0100","flow_id":1443848063273583,"pcap_cnt":6389,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61507,"proto":"UDP","dns":{"type":"answer","id":39486,"rcode":"NXDOMAIN","rrname":"vojeqamutuf.eu"}}
{"timestamp":"2017-12-12T18:33:31.430380+0100","flow_id":845127474712627,"pcap_cnt":6313,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52524,"proto":"UDP","dns":{"type":"answer","id":21361,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:31.586696+0100","flow_id":434444849378248,"pcap_cnt":6394,"event_type":"dns","src_ip":"192.168.1.100","src_port":63279,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33714,"rrname":"qetaseqyquv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.576375+0100","flow_id":1443848063273583,"pcap_cnt":6389,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61507,"proto":"UDP","dns":{"type":"answer","id":39486,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:31.521149+0100","flow_id":1288058862039997,"pcap_cnt":6360,"event_type":"dns","src_ip":"192.168.1.100","src_port":64509,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63380,"rrname":"noralycifok.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.795352+0100","flow_id":2175811421492477,"pcap_cnt":4433,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59132,"proto":"UDP","dns":{"type":"answer","id":5362,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":574}}
{"timestamp":"2017-12-12T18:33:29.368400+0100","flow_id":2153932858695211,"pcap_cnt":5835,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61987,"proto":"UDP","dns":{"type":"answer","id":62487,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:31.586965+0100","flow_id":434444849378248,"pcap_cnt":6395,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63279,"proto":"UDP","dns":{"type":"answer","id":33714,"rcode":"NXDOMAIN","rrname":"qetaseqyquv.eu"}}
{"timestamp":"2017-12-12T18:33:31.225137+0100","flow_id":263981892333176,"pcap_cnt":6217,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53561,"proto":"UDP","dns":{"type":"answer","id":35605,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:29.449281+0100","flow_id":42303595517105,"pcap_cnt":5890,"event_type":"dns","src_ip":"192.168.1.100","src_port":61670,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25964,"rrname":"puzubovafik.eu","rrtype":"A","tx_id":2}}
{"timestamp":"2017-12-12T18:33:27.351369+0100","flow_id":1844714540588169,"pcap_cnt":4900,"event_type":"dns","src_ip":"192.168.1.100","src_port":63623,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27032,"rrname":"galerywogej.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.402056+0100","flow_id":1876132226605465,"pcap_cnt":6307,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54549,"proto":"UDP","dns":{"type":"answer","id":26972,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":567}}
{"timestamp":"2017-12-12T18:33:29.449531+0100","flow_id":42303595517105,"pcap_cnt":5891,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61670,"proto":"UDP","dns":{"type":"answer","id":25964,"rcode":"NXDOMAIN","rrname":"puzubovafik.eu"}}
{"timestamp":"2017-12-12T18:33:27.746863+0100","flow_id":1555214417486881,"pcap_cnt":5071,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50970,"proto":"UDP","dns":{"type":"answer","id":59873,"rcode":"NXDOMAIN","rrname":"masygekevuq.eu"}}
{"timestamp":"2017-12-12T18:33:27.351643+0100","flow_id":1844714540588169,"pcap_cnt":4901,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63623,"proto":"UDP","dns":{"type":"answer","id":27032,"rcode":"NXDOMAIN","rrname":"galerywogej.eu"}}
{"timestamp":"2017-12-12T18:33:27.746863+0100","flow_id":1555214417486881,"pcap_cnt":5071,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50970,"proto":"UDP","dns":{"type":"answer","id":59873,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:28.079207+0100","flow_id":529410871014433,"pcap_cnt":5231,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55048,"proto":"UDP","dns":{"type":"answer","id":40988,"rcode":"NXDOMAIN","rrname":"tulyrylynyc.eu"}}
{"timestamp":"2017-12-12T18:33:32.194021+0100","flow_id":1297271566955783,"pcap_cnt":6677,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52731,"proto":"UDP","dns":{"type":"answer","id":63305,"rcode":"NXDOMAIN","rrname":"jeledajifor.eu"}}
{"timestamp":"2017-12-12T18:33:29.149018+0100","flow_id":288087395654305,"pcap_cnt":5729,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51917,"proto":"UDP","dns":{"type":"answer","id":1744,"rcode":"NXDOMAIN","rrname":"fokovisekyz.eu"}}
{"timestamp":"2017-12-12T18:33:28.198869+0100","flow_id":1423960216963285,"pcap_cnt":5284,"event_type":"dns","src_ip":"192.168.1.100","src_port":54379,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43155,"rrname":"keryxadalid.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:32.194021+0100","flow_id":1297271566955783,"pcap_cnt":6677,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52731,"proto":"UDP","dns":{"type":"answer","id":63305,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:28.292013+0100","flow_id":1345121797305517,"pcap_cnt":5324,"event_type":"dns","src_ip":"192.168.1.100","src_port":52394,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37872,"rrname":"pumytugofup.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.780748+0100","flow_id":2029015882328289,"pcap_cnt":5555,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50679,"proto":"UDP","dns":{"type":"answer","id":19795,"rcode":"NXDOMAIN","rrname":"divejezumes.eu"}}
{"timestamp":"2017-12-12T18:33:31.509356+0100","flow_id":682934476299260,"pcap_cnt":6353,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51919,"proto":"UDP","dns":{"type":"answer","id":25074,"rcode":"NXDOMAIN","rrname":"jepogejebak.eu"}}
{"timestamp":"2017-12-12T18:33:27.404146+0100","flow_id":1164391720889010,"pcap_cnt":4926,"event_type":"dns","src_ip":"192.168.1.100","src_port":50523,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37112,"rrname":"vocijekyqiv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.780748+0100","flow_id":2029015882328289,"pcap_cnt":5555,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50679,"proto":"UDP","dns":{"type":"answer","id":19795,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:31.509356+0100","flow_id":682934476299260,"pcap_cnt":6353,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51919,"proto":"UDP","dns":{"type":"answer","id":25074,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:31.758524+0100","flow_id":1996200184877546,"pcap_cnt":6471,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50778,"proto":"UDP","dns":{"type":"answer","id":47428,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:32.147069+0100","flow_id":1943526706003581,"pcap_cnt":6646,"event_type":"dns","src_ip":"192.168.1.100","src_port":53159,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25751,"rrname":"tupikogyqoz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.543609+0100","flow_id":231206996888441,"pcap_cnt":6374,"event_type":"dns","src_ip":"192.168.1.100","src_port":51500,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31161,"rrname":"fodavibusim.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.536555+0100","flow_id":1426116290752491,"pcap_cnt":6368,"event_type":"dns","src_ip":"192.168.1.100","src_port":49369,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64152,"rrname":"tulekuvigij.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.776796+0100","flow_id":131144996084316,"pcap_cnt":5086,"event_type":"dns","src_ip":"192.168.1.100","src_port":54188,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43502,"rrname":"xubukyrecax.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:32.147322+0100","flow_id":1943526706003581,"pcap_cnt":6647,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53159,"proto":"UDP","dns":{"type":"answer","id":25751,"rcode":"NXDOMAIN","rrname":"tupikogyqoz.eu"}}
{"timestamp":"2017-12-12T18:33:28.231573+0100","flow_id":2127355600996229,"pcap_cnt":5299,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59724,"proto":"UDP","dns":{"type":"answer","id":9253,"rcode":"NXDOMAIN","rrname":"jefyqynofaj.eu"}}
{"timestamp":"2017-12-12T18:33:29.419466+0100","flow_id":2247034864756084,"pcap_cnt":5859,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55934,"proto":"UDP","dns":{"type":"answer","id":27514,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:32.184003+0100","flow_id":1033337236672195,"pcap_cnt":6662,"event_type":"dns","src_ip":"192.168.1.100","src_port":54647,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45598,"rrname":"tuwyjyvymuq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.777152+0100","flow_id":131144996084316,"pcap_cnt":5087,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54188,"proto":"UDP","dns":{"type":"answer","id":43502,"rcode":"NXDOMAIN","rrname":"xubukyrecax.eu"}}
{"timestamp":"2017-12-12T18:33:31.662742+0100","flow_id":798640896154838,"pcap_cnt":6428,"event_type":"dns","src_ip":"192.168.1.100","src_port":58310,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26553,"rrname":"jefejurenyp.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:32.184265+0100","flow_id":1033337236672195,"pcap_cnt":6663,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54647,"proto":"UDP","dns":{"type":"answer","id":45598,"rcode":"NXDOMAIN","rrname":"tuwyjyvymuq.eu"}}
{"timestamp":"2017-12-12T18:33:31.492785+0100","flow_id":1255131495236449,"pcap_cnt":6343,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65259,"proto":"UDP","dns":{"type":"answer","id":2021,"rcode":"NXDOMAIN","rrname":"tucyzogojat.eu"}}
{"timestamp":"2017-12-12T18:33:25.950593+0100","flow_id":1315288954274113,"pcap_cnt":4498,"event_type":"dns","src_ip":"192.168.1.100","src_port":65318,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50569,"rrname":"nozomotokyt.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.492785+0100","flow_id":1255131495236449,"pcap_cnt":6343,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65259,"proto":"UDP","dns":{"type":"answer","id":2021,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:31.586965+0100","flow_id":434444849378248,"pcap_cnt":6395,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63279,"proto":"UDP","dns":{"type":"answer","id":33714,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":569}}
{"timestamp":"2017-12-12T18:33:32.052046+0100","flow_id":1262673457892174,"pcap_cnt":6606,"event_type":"dns","src_ip":"192.168.1.100","src_port":55987,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51059,"rrname":"kericoxojil.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:25.950868+0100","flow_id":1315288954274113,"pcap_cnt":4499,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65318,"proto":"UDP","dns":{"type":"answer","id":50569,"rcode":"NXDOMAIN","rrname":"nozomotokyt.eu"}}
{"timestamp":"2017-12-12T18:33:31.527458+0100","flow_id":694234536152162,"pcap_cnt":6362,"event_type":"dns","src_ip":"192.168.1.100","src_port":62835,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":46369,"rrname":"mamyfycoliq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.449531+0100","flow_id":42303595517105,"pcap_cnt":5891,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61670,"proto":"UDP","dns":{"type":"answer","id":25964,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:25.950868+0100","flow_id":1315288954274113,"pcap_cnt":4499,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65318,"proto":"UDP","dns":{"type":"answer","id":50569,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":576}}
{"timestamp":"2017-12-12T18:33:32.052247+0100","flow_id":1262673457892174,"pcap_cnt":6607,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55987,"proto":"UDP","dns":{"type":"answer","id":51059,"rcode":"NXDOMAIN","rrname":"kericoxojil.eu"}}
{"timestamp":"2017-12-12T18:33:31.527730+0100","flow_id":694234536152162,"pcap_cnt":6363,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62835,"proto":"UDP","dns":{"type":"answer","id":46369,"rcode":"NXDOMAIN","rrname":"mamyfycoliq.eu"}}
{"timestamp":"2017-12-12T18:33:28.079207+0100","flow_id":529410871014433,"pcap_cnt":5231,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55048,"proto":"UDP","dns":{"type":"answer","id":40988,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:32.173050+0100","flow_id":1419770476591548,"pcap_cnt":6661,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55826,"proto":"UDP","dns":{"type":"answer","id":39829,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:29.149018+0100","flow_id":288087395654305,"pcap_cnt":5729,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51917,"proto":"UDP","dns":{"type":"answer","id":1744,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:28.107682+0100","flow_id":954835971646626,"pcap_cnt":5246,"event_type":"dns","src_ip":"192.168.1.100","src_port":54283,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48306,"rrname":"nopuputyboh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.199166+0100","flow_id":1423960216963285,"pcap_cnt":5285,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54379,"proto":"UDP","dns":{"type":"answer","id":43155,"rcode":"NXDOMAIN","rrname":"keryxadalid.eu"}}
{"timestamp":"2017-12-12T18:33:29.788585+0100","flow_id":1821921149257471,"pcap_cnt":6017,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64399,"proto":"UDP","dns":{"type":"answer","id":63092,"rcode":"NXDOMAIN","rrname":"qederepuduf.eu"}}
{"timestamp":"2017-12-12T18:33:28.199166+0100","flow_id":1423960216963285,"pcap_cnt":5285,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54379,"proto":"UDP","dns":{"type":"answer","id":43155,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:28.107943+0100","flow_id":954835971646626,"pcap_cnt":5247,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54283,"proto":"UDP","dns":{"type":"answer","id":48306,"rcode":"NXDOMAIN","rrname":"nopuputyboh.eu"}}
{"timestamp":"2017-12-12T18:33:28.292290+0100","flow_id":1345121797305517,"pcap_cnt":5325,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52394,"proto":"UDP","dns":{"type":"answer","id":37872,"rcode":"NXDOMAIN","rrname":"pumytugofup.eu"}}
{"timestamp":"2017-12-12T18:33:28.978272+0100","flow_id":1328833132200055,"pcap_cnt":5648,"event_type":"dns","src_ip":"192.168.1.100","src_port":64453,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":39216,"rrname":"ryceziqofig.eu","rrtype":"A","tx_id":2}}
{"timestamp":"2017-12-12T18:33:27.404421+0100","flow_id":1164391720889010,"pcap_cnt":4927,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50523,"proto":"UDP","dns":{"type":"answer","id":37112,"rcode":"NXDOMAIN","rrname":"vocijekyqiv.eu"}}
{"timestamp":"2017-12-12T18:33:28.292290+0100","flow_id":1345121797305517,"pcap_cnt":5325,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52394,"proto":"UDP","dns":{"type":"answer","id":37872,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:31.543893+0100","flow_id":231206996888441,"pcap_cnt":6375,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51500,"proto":"UDP","dns":{"type":"answer","id":31161,"rcode":"NXDOMAIN","rrname":"fodavibusim.eu"}}
{"timestamp":"2017-12-12T18:33:31.536848+0100","flow_id":1426116290752491,"pcap_cnt":6369,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49369,"proto":"UDP","dns":{"type":"answer","id":64152,"rcode":"NXDOMAIN","rrname":"tulekuvigij.eu"}}
{"timestamp":"2017-12-12T18:33:27.404421+0100","flow_id":1164391720889010,"pcap_cnt":4927,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50523,"proto":"UDP","dns":{"type":"answer","id":37112,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:28.325614+0100","flow_id":264432863737492,"pcap_cnt":5343,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55886,"proto":"UDP","dns":{"type":"answer","id":26418,"rcode":"NXDOMAIN","rrname":"rydacoqybob.eu"}}
{"timestamp":"2017-12-12T18:33:28.231573+0100","flow_id":2127355600996229,"pcap_cnt":5299,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59724,"proto":"UDP","dns":{"type":"answer","id":9253,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:29.695293+0100","flow_id":85208173484788,"pcap_cnt":5983,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61324,"proto":"UDP","dns":{"type":"answer","id":47835,"rcode":"NXDOMAIN","rrname":"nofyjikoxex.eu"}}
{"timestamp":"2017-12-12T18:33:28.325614+0100","flow_id":264432863737492,"pcap_cnt":5343,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55886,"proto":"UDP","dns":{"type":"answer","id":26418,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:29.515794+0100","flow_id":1447552472440530,"pcap_cnt":5908,"event_type":"dns","src_ip":"192.168.1.100","src_port":54452,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14776,"rrname":"gadurabotiw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.695293+0100","flow_id":85208173484788,"pcap_cnt":5983,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61324,"proto":"UDP","dns":{"type":"answer","id":47835,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":546}}
{"timestamp":"2017-12-12T18:33:31.521530+0100","flow_id":1288058862039997,"pcap_cnt":6361,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64509,"proto":"UDP","dns":{"type":"answer","id":63380,"rcode":"NXDOMAIN","rrname":"noralycifok.eu"}}
{"timestamp":"2017-12-12T18:33:29.516043+0100","flow_id":1447552472440530,"pcap_cnt":5909,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54452,"proto":"UDP","dns":{"type":"answer","id":14776,"rcode":"NXDOMAIN","rrname":"gadurabotiw.eu"}}
{"timestamp":"2017-12-12T18:33:32.184265+0100","flow_id":1033337236672195,"pcap_cnt":6663,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54647,"proto":"UDP","dns":{"type":"answer","id":45598,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:29.516043+0100","flow_id":1447552472440530,"pcap_cnt":5909,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54452,"proto":"UDP","dns":{"type":"answer","id":14776,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:31.662988+0100","flow_id":798640896154838,"pcap_cnt":6429,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58310,"proto":"UDP","dns":{"type":"answer","id":26553,"rcode":"NXDOMAIN","rrname":"jefejurenyp.eu"}}
{"timestamp":"2017-12-12T18:33:31.792495+0100","flow_id":1298510664221317,"pcap_cnt":6486,"event_type":"dns","src_ip":"192.168.1.100","src_port":52177,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":32474,"rrname":"cidacomutur.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:31.662988+0100","flow_id":798640896154838,"pcap_cnt":6429,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58310,"proto":"UDP","dns":{"type":"answer","id":26553,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":569}}
{"timestamp":"2017-12-12T18:33:31.860190+0100","flow_id":601879854391326,"pcap_cnt":6520,"event_type":"dns","src_ip":"192.168.1.100","src_port":60523,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43565,"rrname":"gacenysacew.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:30.041391+0100","flow_id":1325987716593943,"pcap_cnt":6097,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52369,"proto":"UDP","dns":{"type":"answer","id":45581,"rcode":"NXDOMAIN","rrname":"pufiluqudic.eu"}}
{"timestamp":"2017-12-12T18:33:31.792766+0100","flow_id":1298510664221317,"pcap_cnt":6487,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52177,"proto":"UDP","dns":{"type":"answer","id":32474,"rcode":"NXDOMAIN","rrname":"cidacomutur.eu"}}
{"timestamp":"2017-12-12T18:33:31.860457+0100","flow_id":601879854391326,"pcap_cnt":6521,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60523,"proto":"UDP","dns":{"type":"answer","id":43565,"rcode":"NXDOMAIN","rrname":"gacenysacew.eu"}}
{"timestamp":"2017-12-12T18:33:30.041391+0100","flow_id":1325987716593943,"pcap_cnt":6097,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52369,"proto":"UDP","dns":{"type":"answer","id":45581,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:31.860457+0100","flow_id":601879854391326,"pcap_cnt":6521,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60523,"proto":"UDP","dns":{"type":"answer","id":43565,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:28.329566+0100","flow_id":753794994931550,"pcap_cnt":5348,"event_type":"dns","src_ip":"192.168.1.100","src_port":56905,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38354,"rrname":"dimomawezod.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.666595+0100","flow_id":577370623129537,"pcap_cnt":5976,"event_type":"dns","src_ip":"192.168.1.100","src_port":56573,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31633,"rrname":"vofozymufok.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:26.073989+0100","flow_id":1152458152370992,"pcap_cnt":4566,"event_type":"dns","src_ip":"192.168.1.100","src_port":62695,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11843,"rrname":"mavinifenam.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:28.329952+0100","flow_id":753794994931550,"pcap_cnt":5349,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56905,"proto":"UDP","dns":{"type":"answer","id":38354,"rcode":"NXDOMAIN","rrname":"dimomawezod.eu"}}
{"timestamp":"2017-12-12T18:33:29.666846+0100","flow_id":577370623129537,"pcap_cnt":5977,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56573,"proto":"UDP","dns":{"type":"answer","id":31633,"rcode":"NXDOMAIN","rrname":"vofozymufok.eu"}}
{"timestamp":"2017-12-12T18:33:31.527730+0100","flow_id":694234536152162,"pcap_cnt":6363,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62835,"proto":"UDP","dns":{"type":"answer","id":46369,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:28.525406+0100","flow_id":403877566395065,"pcap_cnt":5436,"event_type":"dns","src_ip":"192.168.1.100","src_port":52854,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50620,"rrname":"fodoqebirac.eu","rrtype":"A","tx_id":2}}
{"timestamp":"2017-12-12T18:33:29.158336+0100","flow_id":531508962617984,"pcap_cnt":5736,"event_type":"dns","src_ip":"192.168.1.100","src_port":49673,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5434,"rrname":"lyravodezyl.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.566627+0100","flow_id":293462547866979,"pcap_cnt":6382,"event_type":"dns","src_ip":"192.168.1.100","src_port":56605,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":10453,"rrname":"lyvevonifun.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.525712+0100","flow_id":403877566395065,"pcap_cnt":5437,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52854,"proto":"UDP","dns":{"type":"answer","id":50620,"rcode":"NXDOMAIN","rrname":"fodoqebirac.eu"}}
{"timestamp":"2017-12-12T18:33:28.107943+0100","flow_id":954835971646626,"pcap_cnt":5247,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54283,"proto":"UDP","dns":{"type":"answer","id":48306,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:28.525712+0100","flow_id":403877566395065,"pcap_cnt":5437,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52854,"proto":"UDP","dns":{"type":"answer","id":50620,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:31.908872+0100","flow_id":1210942724234824,"pcap_cnt":6542,"event_type":"dns","src_ip":"192.168.1.100","src_port":59783,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29555,"rrname":"tujurogacag.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.158557+0100","flow_id":531508962617984,"pcap_cnt":5737,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49673,"proto":"UDP","dns":{"type":"answer","id":5434,"rcode":"NXDOMAIN","rrname":"lyravodezyl.eu"}}
{"timestamp":"2017-12-12T18:33:29.006569+0100","flow_id":873265951937546,"pcap_cnt":5658,"event_type":"dns","src_ip":"192.168.1.100","src_port":49565,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17673,"rrname":"qeqeqalitek.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:29.158557+0100","flow_id":531508962617984,"pcap_cnt":5737,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49673,"proto":"UDP","dns":{"type":"answer","id":5434,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:28.388079+0100","flow_id":588080124324847,"pcap_cnt":5380,"event_type":"dns","src_ip":"192.168.1.100","src_port":59863,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13430,"rrname":"tufukelityq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.909118+0100","flow_id":1210942724234824,"pcap_cnt":6543,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59783,"proto":"UDP","dns":{"type":"answer","id":29555,"rcode":"NXDOMAIN","rrname":"tujurogacag.eu"}}
{"timestamp":"2017-12-12T18:33:31.536848+0100","flow_id":1426116290752491,"pcap_cnt":6369,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49369,"proto":"UDP","dns":{"type":"answer","id":64152,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:29.195537+0100","flow_id":1485764796480465,"pcap_cnt":5752,"event_type":"dns","src_ip":"192.168.1.100","src_port":59175,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":3893,"rrname":"jejigenitos.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.777152+0100","flow_id":131144996084316,"pcap_cnt":5087,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54188,"proto":"UDP","dns":{"type":"answer","id":43502,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:31.900391+0100","flow_id":1190580284276007,"pcap_cnt":6538,"event_type":"dns","src_ip":"192.168.1.100","src_port":58072,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":55461,"rrname":"qexoligupag.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.402079+0100","flow_id":1858147050857119,"pcap_cnt":5382,"event_type":"dns","src_ip":"192.168.1.100","src_port":62509,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23741,"rrname":"pupodylahej.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.900728+0100","flow_id":1190580284276007,"pcap_cnt":6539,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58072,"proto":"UDP","dns":{"type":"answer","id":55461,"rcode":"NXDOMAIN","rrname":"qexoligupag.eu"}}
{"timestamp":"2017-12-12T18:33:31.521530+0100","flow_id":1288058862039997,"pcap_cnt":6361,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64509,"proto":"UDP","dns":{"type":"answer","id":63380,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:31.900728+0100","flow_id":1190580284276007,"pcap_cnt":6539,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58072,"proto":"UDP","dns":{"type":"answer","id":55461,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":571}}
{"timestamp":"2017-12-12T18:33:29.698571+0100","flow_id":2230887935224011,"pcap_cnt":5988,"event_type":"dns","src_ip":"192.168.1.100","src_port":60875,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50546,"rrname":"qetoqolusex.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.691057+0100","flow_id":1670261559233393,"pcap_cnt":6438,"event_type":"dns","src_ip":"192.168.1.100","src_port":58530,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40090,"rrname":"divufozutog.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.611955+0100","flow_id":1880420750774817,"pcap_cnt":6406,"event_type":"dns","src_ip":"192.168.1.100","src_port":65406,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7513,"rrname":"nojibukojoj.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:29.698960+0100","flow_id":2230887935224011,"pcap_cnt":5989,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60875,"proto":"UDP","dns":{"type":"answer","id":50546,"rcode":"NXDOMAIN","rrname":"qetoqolusex.eu"}}
{"timestamp":"2017-12-12T18:33:31.792766+0100","flow_id":1298510664221317,"pcap_cnt":6487,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52177,"proto":"UDP","dns":{"type":"answer","id":32474,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:31.691361+0100","flow_id":1670261559233393,"pcap_cnt":6439,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58530,"proto":"UDP","dns":{"type":"answer","id":40090,"rcode":"NXDOMAIN","rrname":"divufozutog.eu"}}
{"timestamp":"2017-12-12T18:33:27.351643+0100","flow_id":1844714540588169,"pcap_cnt":4901,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63623,"proto":"UDP","dns":{"type":"answer","id":27032,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:31.691361+0100","flow_id":1670261559233393,"pcap_cnt":6439,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58530,"proto":"UDP","dns":{"type":"answer","id":40090,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:32.052247+0100","flow_id":1262673457892174,"pcap_cnt":6607,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55987,"proto":"UDP","dns":{"type":"answer","id":51059,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:26.074245+0100","flow_id":1152458152370992,"pcap_cnt":4567,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62695,"proto":"UDP","dns":{"type":"answer","id":11843,"rcode":"NXDOMAIN","rrname":"mavinifenam.eu"}}
{"timestamp":"2017-12-12T18:33:28.329952+0100","flow_id":753794994931550,"pcap_cnt":5349,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56905,"proto":"UDP","dns":{"type":"answer","id":38354,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:26.074245+0100","flow_id":1152458152370992,"pcap_cnt":4567,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62695,"proto":"UDP","dns":{"type":"answer","id":11843,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":577}}
{"timestamp":"2017-12-12T18:33:29.666846+0100","flow_id":577370623129537,"pcap_cnt":5977,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56573,"proto":"UDP","dns":{"type":"answer","id":31633,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":546}}
{"timestamp":"2017-12-12T18:33:29.788585+0100","flow_id":1821921149257471,"pcap_cnt":6017,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64399,"proto":"UDP","dns":{"type":"answer","id":63092,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":546}}
{"timestamp":"2017-12-12T18:33:26.188845+0100","flow_id":2009097971360173,"pcap_cnt":4616,"event_type":"dns","src_ip":"192.168.1.100","src_port":63942,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49435,"rrname":"gatopuwenyq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.890772+0100","flow_id":919971574683540,"pcap_cnt":6038,"event_type":"dns","src_ip":"192.168.1.100","src_port":50477,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":61620,"rrname":"rydinivoloh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:32.147322+0100","flow_id":1943526706003581,"pcap_cnt":6647,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53159,"proto":"UDP","dns":{"type":"answer","id":25751,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:31.566884+0100","flow_id":293462547866979,"pcap_cnt":6383,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56605,"proto":"UDP","dns":{"type":"answer","id":10453,"rcode":"NXDOMAIN","rrname":"lyvevonifun.eu"}}
{"timestamp":"2017-12-12T18:33:28.978513+0100","flow_id":1328833132200055,"pcap_cnt":5649,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64453,"proto":"UDP","dns":{"type":"answer","id":39216,"rcode":"NXDOMAIN","rrname":"ryceziqofig.eu"}}
{"timestamp":"2017-12-12T18:33:31.566884+0100","flow_id":293462547866979,"pcap_cnt":6383,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56605,"proto":"UDP","dns":{"type":"answer","id":10453,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:28.978513+0100","flow_id":1328833132200055,"pcap_cnt":5649,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64453,"proto":"UDP","dns":{"type":"answer","id":39216,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:28.324222+0100","flow_id":272994881041022,"pcap_cnt":5340,"event_type":"dns","src_ip":"192.168.1.100","src_port":61398,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":57264,"rrname":"jejurijogut.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.134296+0100","flow_id":1891078712659096,"pcap_cnt":5720,"event_type":"dns","src_ip":"192.168.1.100","src_port":60972,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30912,"rrname":"tunakupycut.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.759203+0100","flow_id":2093603600700835,"pcap_cnt":6472,"event_type":"dns","src_ip":"192.168.1.100","src_port":63701,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51323,"rrname":"dirojubusux.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.909118+0100","flow_id":1210942724234824,"pcap_cnt":6543,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59783,"proto":"UDP","dns":{"type":"answer","id":29555,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":571}}
{"timestamp":"2017-12-12T18:33:28.388419+0100","flow_id":588080124324847,"pcap_cnt":5381,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59863,"proto":"UDP","dns":{"type":"answer","id":13430,"rcode":"NXDOMAIN","rrname":"tufukelityq.eu"}}
{"timestamp":"2017-12-12T18:33:28.324562+0100","flow_id":272994881041022,"pcap_cnt":5341,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61398,"proto":"UDP","dns":{"type":"answer","id":57264,"rcode":"NXDOMAIN","rrname":"jejurijogut.eu"}}
{"timestamp":"2017-12-12T18:33:28.388419+0100","flow_id":588080124324847,"pcap_cnt":5381,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59863,"proto":"UDP","dns":{"type":"answer","id":13430,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:28.324562+0100","flow_id":272994881041022,"pcap_cnt":5341,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61398,"proto":"UDP","dns":{"type":"answer","id":57264,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:29.195793+0100","flow_id":1485764796480465,"pcap_cnt":5753,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59175,"proto":"UDP","dns":{"type":"answer","id":3893,"rcode":"NXDOMAIN","rrname":"jejigenitos.eu"}}
{"timestamp":"2017-12-12T18:33:27.982352+0100","flow_id":1171592233614672,"pcap_cnt":5178,"event_type":"dns","src_ip":"192.168.1.100","src_port":55376,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13775,"rrname":"tujeqoqybar.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.539712+0100","flow_id":1391477379382336,"pcap_cnt":5920,"event_type":"dns","src_ip":"192.168.1.100","src_port":63667,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":13963,"rrname":"puvomegagep.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:32.008526+0100","flow_id":1019417247621454,"pcap_cnt":6582,"event_type":"dns","src_ip":"192.168.1.100","src_port":53466,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62976,"rrname":"marawukyqos.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.502036+0100","flow_id":430257256245524,"pcap_cnt":6348,"event_type":"dns","src_ip":"192.168.1.100","src_port":51243,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17084,"rrname":"fogynahidal.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.698960+0100","flow_id":2230887935224011,"pcap_cnt":5989,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60875,"proto":"UDP","dns":{"type":"answer","id":50546,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":546}}
{"timestamp":"2017-12-12T18:33:32.008813+0100","flow_id":1019417247621454,"pcap_cnt":6583,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53466,"proto":"UDP","dns":{"type":"answer","id":62976,"rcode":"NXDOMAIN","rrname":"marawukyqos.eu"}}
{"timestamp":"2017-12-12T18:33:31.612202+0100","flow_id":1880420750774817,"pcap_cnt":6407,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65406,"proto":"UDP","dns":{"type":"answer","id":7513,"rcode":"NXDOMAIN","rrname":"nojibukojoj.eu"}}
{"timestamp":"2017-12-12T18:33:32.008813+0100","flow_id":1019417247621454,"pcap_cnt":6583,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53466,"proto":"UDP","dns":{"type":"answer","id":62976,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:31.502298+0100","flow_id":430257256245524,"pcap_cnt":6349,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51243,"proto":"UDP","dns":{"type":"answer","id":17084,"rcode":"NXDOMAIN","rrname":"fogynahidal.eu"}}
{"timestamp":"2017-12-12T18:33:30.084327+0100","flow_id":2123631864465767,"pcap_cnt":6108,"event_type":"dns","src_ip":"192.168.1.100","src_port":53313,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34940,"rrname":"fotyriwavix.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.612202+0100","flow_id":1880420750774817,"pcap_cnt":6407,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65406,"proto":"UDP","dns":{"type":"answer","id":7513,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:28.548748+0100","flow_id":1983014635069324,"pcap_cnt":5448,"event_type":"dns","src_ip":"192.168.1.100","src_port":64590,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27380,"rrname":"jenegodelur.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.211651+0100","flow_id":97347898456771,"pcap_cnt":5290,"event_type":"dns","src_ip":"192.168.1.100","src_port":57239,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":54933,"rrname":"tunodavuqew.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.189138+0100","flow_id":2009097971360173,"pcap_cnt":4617,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63942,"proto":"UDP","dns":{"type":"answer","id":49435,"rcode":"NXDOMAIN","rrname":"gatopuwenyq.eu"}}
{"timestamp":"2017-12-12T18:33:30.224410+0100","flow_id":1827779482979993,"pcap_cnt":6166,"event_type":"dns","src_ip":"192.168.1.100","src_port":59869,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19297,"rrname":"jewezexigaf.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:30.084600+0100","flow_id":2123631864465767,"pcap_cnt":6109,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53313,"proto":"UDP","dns":{"type":"answer","id":34940,"rcode":"NXDOMAIN","rrname":"fotyriwavix.eu"}}
{"timestamp":"2017-12-12T18:33:31.543893+0100","flow_id":231206996888441,"pcap_cnt":6375,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51500,"proto":"UDP","dns":{"type":"answer","id":31161,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:29.006858+0100","flow_id":873265951937546,"pcap_cnt":5659,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49565,"proto":"UDP","dns":{"type":"answer","id":17673,"rcode":"NXDOMAIN","rrname":"qeqeqalitek.eu"}}
{"timestamp":"2017-12-12T18:33:29.134557+0100","flow_id":1891078712659096,"pcap_cnt":5721,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60972,"proto":"UDP","dns":{"type":"answer","id":30912,"rcode":"NXDOMAIN","rrname":"tunakupycut.eu"}}
{"timestamp":"2017-12-12T18:33:29.006858+0100","flow_id":873265951937546,"pcap_cnt":5659,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49565,"proto":"UDP","dns":{"type":"answer","id":17673,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:31.759447+0100","flow_id":2093603600700835,"pcap_cnt":6473,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63701,"proto":"UDP","dns":{"type":"answer","id":51323,"rcode":"NXDOMAIN","rrname":"dirojubusux.eu"}}
{"timestamp":"2017-12-12T18:33:31.944764+0100","flow_id":749646056745596,"pcap_cnt":6560,"event_type":"dns","src_ip":"192.168.1.100","src_port":51950,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11294,"rrname":"cihevykupoc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.475766+0100","flow_id":189013237973622,"pcap_cnt":5418,"event_type":"dns","src_ip":"192.168.1.100","src_port":51257,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36077,"rrname":"disytisycil.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.759447+0100","flow_id":2093603600700835,"pcap_cnt":6473,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63701,"proto":"UDP","dns":{"type":"answer","id":51323,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:29.195793+0100","flow_id":1485764796480465,"pcap_cnt":5753,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59175,"proto":"UDP","dns":{"type":"answer","id":3893,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:28.336815+0100","flow_id":1873540213646255,"pcap_cnt":5350,"event_type":"dns","src_ip":"192.168.1.100","src_port":62138,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34047,"rrname":"kefobojexyl.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.982647+0100","flow_id":1171592233614672,"pcap_cnt":5179,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55376,"proto":"UDP","dns":{"type":"answer","id":13775,"rcode":"NXDOMAIN","rrname":"tujeqoqybar.eu"}}
{"timestamp":"2017-12-12T18:33:31.828061+0100","flow_id":2155743187542685,"pcap_cnt":6504,"event_type":"dns","src_ip":"192.168.1.100","src_port":60815,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43081,"rrname":"digyxywifyq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.476093+0100","flow_id":189013237973622,"pcap_cnt":5419,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51257,"proto":"UDP","dns":{"type":"answer","id":36077,"rcode":"NXDOMAIN","rrname":"disytisycil.eu"}}
{"timestamp":"2017-12-12T18:33:27.982647+0100","flow_id":1171592233614672,"pcap_cnt":5179,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55376,"proto":"UDP","dns":{"type":"answer","id":13775,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:28.476093+0100","flow_id":189013237973622,"pcap_cnt":5419,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51257,"proto":"UDP","dns":{"type":"answer","id":36077,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:31.929169+0100","flow_id":688930251550097,"pcap_cnt":6552,"event_type":"dns","src_ip":"192.168.1.100","src_port":64909,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26894,"rrname":"jenabejurov.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.502298+0100","flow_id":430257256245524,"pcap_cnt":6349,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51243,"proto":"UDP","dns":{"type":"answer","id":17084,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:28.019413+0100","flow_id":1905516245175253,"pcap_cnt":5204,"event_type":"dns","src_ip":"192.168.1.100","src_port":65162,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40150,"rrname":"cidizakisuv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:32.201209+0100","flow_id":762286145540601,"pcap_cnt":6678,"event_type":"dns","src_ip":"192.168.1.100","src_port":62151,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47444,"rrname":"xutohonutyn.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.890975+0100","flow_id":919971574683540,"pcap_cnt":6039,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50477,"proto":"UDP","dns":{"type":"answer","id":61620,"rcode":"NXDOMAIN","rrname":"rydinivoloh.eu"}}
{"timestamp":"2017-12-12T18:33:32.040862+0100","flow_id":571881655410590,"pcap_cnt":6600,"event_type":"dns","src_ip":"192.168.1.100","src_port":62089,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47504,"rrname":"fogokozazit.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:26.189138+0100","flow_id":2009097971360173,"pcap_cnt":4617,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63942,"proto":"UDP","dns":{"type":"answer","id":49435,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:28.549014+0100","flow_id":1983014635069324,"pcap_cnt":5449,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64590,"proto":"UDP","dns":{"type":"answer","id":27380,"rcode":"NXDOMAIN","rrname":"jenegodelur.eu"}}
{"timestamp":"2017-12-12T18:33:30.084600+0100","flow_id":2123631864465767,"pcap_cnt":6109,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53313,"proto":"UDP","dns":{"type":"answer","id":34940,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:32.041155+0100","flow_id":571881655410590,"pcap_cnt":6601,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62089,"proto":"UDP","dns":{"type":"answer","id":47504,"rcode":"NXDOMAIN","rrname":"fogokozazit.eu"}}
{"timestamp":"2017-12-12T18:33:27.413898+0100","flow_id":2200492451516618,"pcap_cnt":4936,"event_type":"dns","src_ip":"192.168.1.100","src_port":50486,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":46170,"rrname":"qeguxylevus.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.549014+0100","flow_id":1983014635069324,"pcap_cnt":5449,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64590,"proto":"UDP","dns":{"type":"answer","id":27380,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:32.041155+0100","flow_id":571881655410590,"pcap_cnt":6601,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62089,"proto":"UDP","dns":{"type":"answer","id":47504,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:31.733026+0100","flow_id":1920933030473570,"pcap_cnt":6458,"event_type":"dns","src_ip":"192.168.1.100","src_port":65430,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60013,"rrname":"vocupotusyz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.087836+0100","flow_id":1988050483788341,"pcap_cnt":5688,"event_type":"dns","src_ip":"192.168.1.100","src_port":63231,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":678,"rrname":"xubehuxunag.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:27.414233+0100","flow_id":2200492451516618,"pcap_cnt":4937,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50486,"proto":"UDP","dns":{"type":"answer","id":46170,"rcode":"NXDOMAIN","rrname":"qeguxylevus.eu"}}
{"timestamp":"2017-12-12T18:33:28.402391+0100","flow_id":1858147050857119,"pcap_cnt":5383,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62509,"proto":"UDP","dns":{"type":"answer","id":23741,"rcode":"NXDOMAIN","rrname":"pupodylahej.eu"}}
{"timestamp":"2017-12-12T18:33:31.945087+0100","flow_id":749646056745596,"pcap_cnt":6561,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51950,"proto":"UDP","dns":{"type":"answer","id":11294,"rcode":"NXDOMAIN","rrname":"cihevykupoc.eu"}}
{"timestamp":"2017-12-12T18:33:31.733305+0100","flow_id":1920933030473570,"pcap_cnt":6459,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65430,"proto":"UDP","dns":{"type":"answer","id":60013,"rcode":"NXDOMAIN","rrname":"vocupotusyz.eu"}}
{"timestamp":"2017-12-12T18:33:29.539969+0100","flow_id":1391477379382336,"pcap_cnt":5921,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63667,"proto":"UDP","dns":{"type":"answer","id":13963,"rcode":"NXDOMAIN","rrname":"puvomegagep.eu"}}
{"timestamp":"2017-12-12T18:33:29.872802+0100","flow_id":241356004479330,"pcap_cnt":6032,"event_type":"dns","src_ip":"192.168.1.100","src_port":50086,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":24307,"rrname":"pumadypyruv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.733305+0100","flow_id":1920933030473570,"pcap_cnt":6459,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65430,"proto":"UDP","dns":{"type":"answer","id":60013,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:29.539969+0100","flow_id":1391477379382336,"pcap_cnt":5921,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63667,"proto":"UDP","dns":{"type":"answer","id":13963,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:31.828349+0100","flow_id":2155743187542685,"pcap_cnt":6505,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60815,"proto":"UDP","dns":{"type":"answer","id":43081,"rcode":"NXDOMAIN","rrname":"digyxywifyq.eu"}}
{"timestamp":"2017-12-12T18:33:28.544595+0100","flow_id":1173196403399289,"pcap_cnt":5446,"event_type":"dns","src_ip":"192.168.1.100","src_port":53558,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51116,"rrname":"lyvamynipox.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:31.929439+0100","flow_id":688930251550097,"pcap_cnt":6553,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64909,"proto":"UDP","dns":{"type":"answer","id":26894,"rcode":"NXDOMAIN","rrname":"jenabejurov.eu"}}
{"timestamp":"2017-12-12T18:33:31.609749+0100","flow_id":569242397920725,"pcap_cnt":6402,"event_type":"dns","src_ip":"192.168.1.100","src_port":51911,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26303,"rrname":"cicafykemaj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.575415+0100","flow_id":595877637506999,"pcap_cnt":5936,"event_type":"dns","src_ip":"192.168.1.100","src_port":58135,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29993,"rrname":"magowymafum.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.929439+0100","flow_id":688930251550097,"pcap_cnt":6553,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64909,"proto":"UDP","dns":{"type":"answer","id":26894,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:28.544843+0100","flow_id":1173196403399289,"pcap_cnt":5447,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53558,"proto":"UDP","dns":{"type":"answer","id":51116,"rcode":"NXDOMAIN","rrname":"lyvamynipox.eu"}}
{"timestamp":"2017-12-12T18:33:32.201504+0100","flow_id":762286145540601,"pcap_cnt":6679,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62151,"proto":"UDP","dns":{"type":"answer","id":47444,"rcode":"NXDOMAIN","rrname":"xutohonutyn.eu"}}
{"timestamp":"2017-12-12T18:33:27.076559+0100","flow_id":1806633213045519,"pcap_cnt":4752,"event_type":"dns","src_ip":"192.168.1.100","src_port":52186,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40254,"rrname":"citydekohiw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:30.224667+0100","flow_id":1827779482979993,"pcap_cnt":6167,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59869,"proto":"UDP","dns":{"type":"answer","id":19297,"rcode":"NXDOMAIN","rrname":"jewezexigaf.eu"}}
{"timestamp":"2017-12-12T18:33:29.134557+0100","flow_id":1891078712659096,"pcap_cnt":5721,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60972,"proto":"UDP","dns":{"type":"answer","id":30912,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:32.110253+0100","flow_id":683793470762669,"pcap_cnt":6628,"event_type":"dns","src_ip":"192.168.1.100","src_port":64873,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":22957,"rrname":"xuqufyduras.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:32.201504+0100","flow_id":762286145540601,"pcap_cnt":6679,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62151,"proto":"UDP","dns":{"type":"answer","id":47444,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:30.136449+0100","flow_id":1056212232312065,"pcap_cnt":6128,"event_type":"dns","src_ip":"192.168.1.100","src_port":62662,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38220,"rrname":"maravatudur.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.570703+0100","flow_id":1303482089387343,"pcap_cnt":5462,"event_type":"dns","src_ip":"192.168.1.100","src_port":51559,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":39392,"rrname":"masuximakot.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.402391+0100","flow_id":1858147050857119,"pcap_cnt":5383,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62509,"proto":"UDP","dns":{"type":"answer","id":23741,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:31.945087+0100","flow_id":749646056745596,"pcap_cnt":6561,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51950,"proto":"UDP","dns":{"type":"answer","id":11294,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:27.414233+0100","flow_id":2200492451516618,"pcap_cnt":4937,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50486,"proto":"UDP","dns":{"type":"answer","id":46170,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":579}}
{"timestamp":"2017-12-12T18:33:28.337079+0100","flow_id":1873540213646255,"pcap_cnt":5351,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62138,"proto":"UDP","dns":{"type":"answer","id":34047,"rcode":"NXDOMAIN","rrname":"kefobojexyl.eu"}}
{"timestamp":"2017-12-12T18:33:28.589447+0100","flow_id":1482955887804039,"pcap_cnt":5472,"event_type":"dns","src_ip":"192.168.1.100","src_port":57683,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42390,"rrname":"ryqepiqiror.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.720728+0100","flow_id":574280394342232,"pcap_cnt":5062,"event_type":"dns","src_ip":"192.168.1.100","src_port":59429,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":16239,"rrname":"gadekewexac.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:32.045721+0100","flow_id":2055814331019929,"pcap_cnt":6602,"event_type":"dns","src_ip":"192.168.1.100","src_port":65161,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":1757,"rrname":"gadedozymiz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.887230+0100","flow_id":38998620473790,"pcap_cnt":6532,"event_type":"dns","src_ip":"192.168.1.100","src_port":54705,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17355,"rrname":"vowagufifam.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.019693+0100","flow_id":1905516245175253,"pcap_cnt":5205,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65162,"proto":"UDP","dns":{"type":"answer","id":40150,"rcode":"NXDOMAIN","rrname":"cidizakisuv.eu"}}
{"timestamp":"2017-12-12T18:33:28.589713+0100","flow_id":1482955887804039,"pcap_cnt":5473,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57683,"proto":"UDP","dns":{"type":"answer","id":42390,"rcode":"NXDOMAIN","rrname":"ryqepiqiror.eu"}}
{"timestamp":"2017-12-12T18:33:29.890975+0100","flow_id":919971574683540,"pcap_cnt":6039,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50477,"proto":"UDP","dns":{"type":"answer","id":61620,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":547}}
{"timestamp":"2017-12-12T18:33:28.211965+0100","flow_id":97347898456771,"pcap_cnt":5291,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57239,"proto":"UDP","dns":{"type":"answer","id":54933,"rcode":"NXDOMAIN","rrname":"tunodavuqew.eu"}}
{"timestamp":"2017-12-12T18:33:31.610031+0100","flow_id":569242397920725,"pcap_cnt":6403,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51911,"proto":"UDP","dns":{"type":"answer","id":26303,"rcode":"NXDOMAIN","rrname":"cicafykemaj.eu"}}
{"timestamp":"2017-12-12T18:33:29.575659+0100","flow_id":595877637506999,"pcap_cnt":5937,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58135,"proto":"UDP","dns":{"type":"answer","id":29993,"rcode":"NXDOMAIN","rrname":"magowymafum.eu"}}
{"timestamp":"2017-12-12T18:33:31.610031+0100","flow_id":569242397920725,"pcap_cnt":6403,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51911,"proto":"UDP","dns":{"type":"answer","id":26303,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:30.224667+0100","flow_id":1827779482979993,"pcap_cnt":6167,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59869,"proto":"UDP","dns":{"type":"answer","id":19297,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":569}}
{"timestamp":"2017-12-12T18:33:27.076871+0100","flow_id":1806633213045519,"pcap_cnt":4753,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52186,"proto":"UDP","dns":{"type":"answer","id":40254,"rcode":"NXDOMAIN","rrname":"citydekohiw.eu"}}
{"timestamp":"2017-12-12T18:33:29.230812+0100","flow_id":79455064786332,"pcap_cnt":5766,"event_type":"dns","src_ip":"192.168.1.100","src_port":60186,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4187,"rrname":"lysenenyxis.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.076871+0100","flow_id":1806633213045519,"pcap_cnt":4753,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52186,"proto":"UDP","dns":{"type":"answer","id":40254,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:29.276274+0100","flow_id":900521815258930,"pcap_cnt":5784,"event_type":"dns","src_ip":"192.168.1.100","src_port":61889,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":54303,"rrname":"ryhyruqeliz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:32.110561+0100","flow_id":683793470762669,"pcap_cnt":6629,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64873,"proto":"UDP","dns":{"type":"answer","id":22957,"rcode":"NXDOMAIN","rrname":"xuqufyduras.eu"}}
{"timestamp":"2017-12-12T18:33:30.136745+0100","flow_id":1056212232312065,"pcap_cnt":6129,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62662,"proto":"UDP","dns":{"type":"answer","id":38220,"rcode":"NXDOMAIN","rrname":"maravatudur.eu"}}
{"timestamp":"2017-12-12T18:33:29.231193+0100","flow_id":79455064786332,"pcap_cnt":5767,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60186,"proto":"UDP","dns":{"type":"answer","id":4187,"rcode":"NXDOMAIN","rrname":"lysenenyxis.eu"}}
{"timestamp":"2017-12-12T18:33:29.088077+0100","flow_id":1988050483788341,"pcap_cnt":5689,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63231,"proto":"UDP","dns":{"type":"answer","id":678,"rcode":"NXDOMAIN","rrname":"xubehuxunag.eu"}}
{"timestamp":"2017-12-12T18:33:29.276528+0100","flow_id":900521815258930,"pcap_cnt":5785,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61889,"proto":"UDP","dns":{"type":"answer","id":54303,"rcode":"NXDOMAIN","rrname":"ryhyruqeliz.eu"}}
{"timestamp":"2017-12-12T18:33:30.136745+0100","flow_id":1056212232312065,"pcap_cnt":6129,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62662,"proto":"UDP","dns":{"type":"answer","id":38220,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:29.873036+0100","flow_id":241356004479330,"pcap_cnt":6033,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50086,"proto":"UDP","dns":{"type":"answer","id":24307,"rcode":"NXDOMAIN","rrname":"pumadypyruv.eu"}}
{"timestamp":"2017-12-12T18:33:29.276528+0100","flow_id":900521815258930,"pcap_cnt":5785,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61889,"proto":"UDP","dns":{"type":"answer","id":54303,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:27.721016+0100","flow_id":574280394342232,"pcap_cnt":5063,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59429,"proto":"UDP","dns":{"type":"answer","id":16239,"rcode":"NXDOMAIN","rrname":"gadekewexac.eu"}}
{"timestamp":"2017-12-12T18:33:30.130413+0100","flow_id":2036815543074157,"pcap_cnt":6118,"event_type":"dns","src_ip":"192.168.1.100","src_port":60708,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5687,"rrname":"kevedorozup.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.721016+0100","flow_id":574280394342232,"pcap_cnt":5063,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59429,"proto":"UDP","dns":{"type":"answer","id":16239,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:31.887472+0100","flow_id":38998620473790,"pcap_cnt":6533,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54705,"proto":"UDP","dns":{"type":"answer","id":17355,"rcode":"NXDOMAIN","rrname":"vowagufifam.eu"}}
{"timestamp":"2017-12-12T18:33:30.130716+0100","flow_id":2036815543074157,"pcap_cnt":6119,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60708,"proto":"UDP","dns":{"type":"answer","id":5687,"rcode":"NXDOMAIN","rrname":"kevedorozup.eu"}}
{"timestamp":"2017-12-12T18:33:28.019693+0100","flow_id":1905516245175253,"pcap_cnt":5205,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65162,"proto":"UDP","dns":{"type":"answer","id":40150,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:30.130716+0100","flow_id":2036815543074157,"pcap_cnt":6119,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60708,"proto":"UDP","dns":{"type":"answer","id":5687,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:28.544843+0100","flow_id":1173196403399289,"pcap_cnt":5447,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53558,"proto":"UDP","dns":{"type":"answer","id":51116,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:29.903455+0100","flow_id":1641715058985247,"pcap_cnt":6044,"event_type":"dns","src_ip":"192.168.1.100","src_port":59736,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36276,"rrname":"jejedudupuc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.549998+0100","flow_id":1912785477330030,"pcap_cnt":5450,"event_type":"dns","src_ip":"192.168.1.100","src_port":57853,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":54892,"rrname":"kevutodybuk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.990756+0100","flow_id":1545776226901540,"pcap_cnt":5652,"event_type":"dns","src_ip":"192.168.1.100","src_port":54412,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14220,"rrname":"vofecokoder.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.575659+0100","flow_id":595877637506999,"pcap_cnt":5937,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58135,"proto":"UDP","dns":{"type":"answer","id":29993,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:28.211965+0100","flow_id":97347898456771,"pcap_cnt":5291,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57239,"proto":"UDP","dns":{"type":"answer","id":54933,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:31.663619+0100","flow_id":1215703695433795,"pcap_cnt":6430,"event_type":"dns","src_ip":"192.168.1.100","src_port":49979,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4954,"rrname":"lyrimirohyp.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.862312+0100","flow_id":83007002716264,"pcap_cnt":6022,"event_type":"dns","src_ip":"192.168.1.100","src_port":52575,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40783,"rrname":"cinepycusaw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.325490+0100","flow_id":2023080237725554,"pcap_cnt":6266,"event_type":"dns","src_ip":"192.168.1.100","src_port":64420,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":21668,"rrname":"jejomejoled.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.234040+0100","flow_id":808353964528184,"pcap_cnt":5300,"event_type":"dns","src_ip":"192.168.1.100","src_port":56302,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":22898,"rrname":"voluzefexus.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.722393+0100","flow_id":358037380859353,"pcap_cnt":5064,"event_type":"dns","src_ip":"192.168.1.100","src_port":54190,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34188,"rrname":"kerowyripac.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.862565+0100","flow_id":83007002716264,"pcap_cnt":6023,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52575,"proto":"UDP","dns":{"type":"answer","id":40783,"rcode":"NXDOMAIN","rrname":"cinepycusaw.eu"}}
{"timestamp":"2017-12-12T18:33:29.231193+0100","flow_id":79455064786332,"pcap_cnt":5767,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60186,"proto":"UDP","dns":{"type":"answer","id":4187,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:29.862565+0100","flow_id":83007002716264,"pcap_cnt":6023,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52575,"proto":"UDP","dns":{"type":"answer","id":40783,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":546}}
{"timestamp":"2017-12-12T18:33:31.828349+0100","flow_id":2155743187542685,"pcap_cnt":6505,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60815,"proto":"UDP","dns":{"type":"answer","id":43081,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:27.723409+0100","flow_id":358037380859353,"pcap_cnt":5065,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54190,"proto":"UDP","dns":{"type":"answer","id":34188,"rcode":"NXDOMAIN","rrname":"kerowyripac.eu"}}
{"timestamp":"2017-12-12T18:33:29.892815+0100","flow_id":1182157853269903,"pcap_cnt":6040,"event_type":"dns","src_ip":"192.168.1.100","src_port":54446,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7758,"rrname":"tupazivenom.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.337079+0100","flow_id":1873540213646255,"pcap_cnt":5351,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62138,"proto":"UDP","dns":{"type":"answer","id":34047,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:30.153995+0100","flow_id":2248752851736971,"pcap_cnt":6134,"event_type":"dns","src_ip":"192.168.1.100","src_port":56253,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":46014,"rrname":"vopepukaxej.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.873036+0100","flow_id":241356004479330,"pcap_cnt":6033,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50086,"proto":"UDP","dns":{"type":"answer","id":24307,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":546}}
{"timestamp":"2017-12-12T18:33:29.893042+0100","flow_id":1182157853269903,"pcap_cnt":6041,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54446,"proto":"UDP","dns":{"type":"answer","id":7758,"rcode":"NXDOMAIN","rrname":"tupazivenom.eu"}}
{"timestamp":"2017-12-12T18:33:27.931993+0100","flow_id":860359575943321,"pcap_cnt":5152,"event_type":"dns","src_ip":"192.168.1.100","src_port":52456,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":54145,"rrname":"gacovybybec.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:30.090988+0100","flow_id":1817849519804298,"pcap_cnt":6112,"event_type":"dns","src_ip":"192.168.1.100","src_port":53238,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":637,"rrname":"gaquviwyrup.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:31.887472+0100","flow_id":38998620473790,"pcap_cnt":6533,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54705,"proto":"UDP","dns":{"type":"answer","id":17355,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":571}}
{"timestamp":"2017-12-12T18:33:28.061604+0100","flow_id":2123717762588825,"pcap_cnt":5220,"event_type":"dns","src_ip":"192.168.1.100","src_port":59814,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4467,"rrname":"kevajerajoq.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:29.903661+0100","flow_id":1641715058985247,"pcap_cnt":6045,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59736,"proto":"UDP","dns":{"type":"answer","id":36276,"rcode":"NXDOMAIN","rrname":"jejedudupuc.eu"}}
{"timestamp":"2017-12-12T18:33:30.091270+0100","flow_id":1817849519804298,"pcap_cnt":6113,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53238,"proto":"UDP","dns":{"type":"answer","id":637,"rcode":"NXDOMAIN","rrname":"gaquviwyrup.eu"}}
{"timestamp":"2017-12-12T18:33:28.550294+0100","flow_id":1912785477330030,"pcap_cnt":5451,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57853,"proto":"UDP","dns":{"type":"answer","id":54892,"rcode":"NXDOMAIN","rrname":"kevutodybuk.eu"}}
{"timestamp":"2017-12-12T18:33:28.991031+0100","flow_id":1545776226901540,"pcap_cnt":5653,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54412,"proto":"UDP","dns":{"type":"answer","id":14220,"rcode":"NXDOMAIN","rrname":"vofecokoder.eu"}}
{"timestamp":"2017-12-12T18:33:28.570955+0100","flow_id":1303482089387343,"pcap_cnt":5463,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51559,"proto":"UDP","dns":{"type":"answer","id":39392,"rcode":"NXDOMAIN","rrname":"masuximakot.eu"}}
{"timestamp":"2017-12-12T18:33:30.091270+0100","flow_id":1817849519804298,"pcap_cnt":6113,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53238,"proto":"UDP","dns":{"type":"answer","id":637,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:31.663863+0100","flow_id":1215703695433795,"pcap_cnt":6431,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49979,"proto":"UDP","dns":{"type":"answer","id":4954,"rcode":"NXDOMAIN","rrname":"lyrimirohyp.eu"}}
{"timestamp":"2017-12-12T18:33:28.570955+0100","flow_id":1303482089387343,"pcap_cnt":5463,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51559,"proto":"UDP","dns":{"type":"answer","id":39392,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:28.234325+0100","flow_id":808353964528184,"pcap_cnt":5301,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56302,"proto":"UDP","dns":{"type":"answer","id":22898,"rcode":"NXDOMAIN","rrname":"voluzefexus.eu"}}
{"timestamp":"2017-12-12T18:33:28.603762+0100","flow_id":157790973212274,"pcap_cnt":5480,"event_type":"dns","src_ip":"192.168.1.100","src_port":60115,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":54070,"rrname":"puvixoqezor.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.325845+0100","flow_id":2023080237725554,"pcap_cnt":6267,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64420,"proto":"UDP","dns":{"type":"answer","id":21668,"rcode":"NXDOMAIN","rrname":"jejomejoled.eu"}}
{"timestamp":"2017-12-12T18:33:28.234325+0100","flow_id":808353964528184,"pcap_cnt":5301,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56302,"proto":"UDP","dns":{"type":"answer","id":22898,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:27.723409+0100","flow_id":358037380859353,"pcap_cnt":5065,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54190,"proto":"UDP","dns":{"type":"answer","id":34188,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:31.880931+0100","flow_id":1132819416576291,"pcap_cnt":6528,"event_type":"dns","src_ip":"192.168.1.100","src_port":61443,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5351,"rrname":"xudunudeveq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.604111+0100","flow_id":157790973212274,"pcap_cnt":5481,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60115,"proto":"UDP","dns":{"type":"answer","id":54070,"rcode":"NXDOMAIN","rrname":"puvixoqezor.eu"}}
{"timestamp":"2017-12-12T18:33:32.045985+0100","flow_id":2055814331019929,"pcap_cnt":6603,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65161,"proto":"UDP","dns":{"type":"answer","id":1757,"rcode":"NXDOMAIN","rrname":"gadedozymiz.eu"}}
{"timestamp":"2017-12-12T18:33:27.763441+0100","flow_id":269853112378929,"pcap_cnt":5078,"event_type":"dns","src_ip":"192.168.1.100","src_port":65171,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":52589,"rrname":"volaqutodox.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.452719+0100","flow_id":864188539398255,"pcap_cnt":5406,"event_type":"dns","src_ip":"192.168.1.100","src_port":61316,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":57794,"rrname":"xugokixofen.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:32.045985+0100","flow_id":2055814331019929,"pcap_cnt":6603,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65161,"proto":"UDP","dns":{"type":"answer","id":1757,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:31.198156+0100","flow_id":1881629782584499,"pcap_cnt":6192,"event_type":"dns","src_ip":"192.168.1.100","src_port":51595,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60857,"rrname":"tunarivutop.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:27.763765+0100","flow_id":269853112378929,"pcap_cnt":5079,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65171,"proto":"UDP","dns":{"type":"answer","id":52589,"rcode":"NXDOMAIN","rrname":"volaqutodox.eu"}}
{"timestamp":"2017-12-12T18:33:32.172400+0100","flow_id":1107534944182640,"pcap_cnt":6658,"event_type":"dns","src_ip":"192.168.1.100","src_port":62245,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14202,"rrname":"gacokahurol.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.763765+0100","flow_id":269853112378929,"pcap_cnt":5079,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65171,"proto":"UDP","dns":{"type":"answer","id":52589,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":580}}
{"timestamp":"2017-12-12T18:33:29.903661+0100","flow_id":1641715058985247,"pcap_cnt":6045,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59736,"proto":"UDP","dns":{"type":"answer","id":36276,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":547}}
{"timestamp":"2017-12-12T18:33:28.550294+0100","flow_id":1912785477330030,"pcap_cnt":5451,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57853,"proto":"UDP","dns":{"type":"answer","id":54892,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:32.172660+0100","flow_id":1107534944182640,"pcap_cnt":6659,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62245,"proto":"UDP","dns":{"type":"answer","id":14202,"rcode":"NXDOMAIN","rrname":"gacokahurol.eu"}}
{"timestamp":"2017-12-12T18:33:28.061879+0100","flow_id":2123717762588825,"pcap_cnt":5221,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59814,"proto":"UDP","dns":{"type":"answer","id":4467,"rcode":"NXDOMAIN","rrname":"kevajerajoq.eu"}}
{"timestamp":"2017-12-12T18:33:28.991031+0100","flow_id":1545776226901540,"pcap_cnt":5653,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54412,"proto":"UDP","dns":{"type":"answer","id":14220,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:27.175639+0100","flow_id":882184452288023,"pcap_cnt":4812,"event_type":"dns","src_ip":"192.168.1.100","src_port":61689,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7756,"rrname":"cihihacakuf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:30.186414+0100","flow_id":174131176462382,"pcap_cnt":6146,"event_type":"dns","src_ip":"192.168.1.100","src_port":56030,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5591,"rrname":"qebahilojam.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.624477+0100","flow_id":1836197620516701,"pcap_cnt":5492,"event_type":"dns","src_ip":"192.168.1.100","src_port":50857,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23555,"rrname":"puzulugelyh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.088077+0100","flow_id":1988050483788341,"pcap_cnt":5689,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63231,"proto":"UDP","dns":{"type":"answer","id":678,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:27.175879+0100","flow_id":882184452288023,"pcap_cnt":4813,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61689,"proto":"UDP","dns":{"type":"answer","id":7756,"rcode":"NXDOMAIN","rrname":"cihihacakuf.eu"}}
{"timestamp":"2017-12-12T18:33:30.186654+0100","flow_id":174131176462382,"pcap_cnt":6147,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56030,"proto":"UDP","dns":{"type":"answer","id":5591,"rcode":"NXDOMAIN","rrname":"qebahilojam.eu"}}
{"timestamp":"2017-12-12T18:33:28.624742+0100","flow_id":1836197620516701,"pcap_cnt":5493,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50857,"proto":"UDP","dns":{"type":"answer","id":23555,"rcode":"NXDOMAIN","rrname":"puzulugelyh.eu"}}
{"timestamp":"2017-12-12T18:33:29.102731+0100","flow_id":1266856755827019,"pcap_cnt":5696,"event_type":"dns","src_ip":"192.168.1.100","src_port":65487,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40430,"rrname":"volimucagog.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.589713+0100","flow_id":1482955887804039,"pcap_cnt":5473,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57683,"proto":"UDP","dns":{"type":"answer","id":42390,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:31.881288+0100","flow_id":1132819416576291,"pcap_cnt":6529,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61443,"proto":"UDP","dns":{"type":"answer","id":5351,"rcode":"NXDOMAIN","rrname":"xudunudeveq.eu"}}
{"timestamp":"2017-12-12T18:33:30.154321+0100","flow_id":2248752851736971,"pcap_cnt":6135,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56253,"proto":"UDP","dns":{"type":"answer","id":46014,"rcode":"NXDOMAIN","rrname":"vopepukaxej.eu"}}
{"timestamp":"2017-12-12T18:33:28.706386+0100","flow_id":795726758906228,"pcap_cnt":5524,"event_type":"dns","src_ip":"192.168.1.100","src_port":53886,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14126,"rrname":"lyruterodiq.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:28.453018+0100","flow_id":864188539398255,"pcap_cnt":5407,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61316,"proto":"UDP","dns":{"type":"answer","id":57794,"rcode":"NXDOMAIN","rrname":"xugokixofen.eu"}}
{"timestamp":"2017-12-12T18:33:31.881288+0100","flow_id":1132819416576291,"pcap_cnt":6529,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61443,"proto":"UDP","dns":{"type":"answer","id":5351,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:27.932261+0100","flow_id":860359575943321,"pcap_cnt":5153,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52456,"proto":"UDP","dns":{"type":"answer","id":54145,"rcode":"NXDOMAIN","rrname":"gacovybybec.eu"}}
{"timestamp":"2017-12-12T18:33:28.453018+0100","flow_id":864188539398255,"pcap_cnt":5407,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61316,"proto":"UDP","dns":{"type":"answer","id":57794,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:31.198370+0100","flow_id":1881629782584499,"pcap_cnt":6193,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51595,"proto":"UDP","dns":{"type":"answer","id":60857,"rcode":"NXDOMAIN","rrname":"tunarivutop.eu"}}
{"timestamp":"2017-12-12T18:33:27.932261+0100","flow_id":860359575943321,"pcap_cnt":5153,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52456,"proto":"UDP","dns":{"type":"answer","id":54145,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:32.110561+0100","flow_id":683793470762669,"pcap_cnt":6629,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64873,"proto":"UDP","dns":{"type":"answer","id":22957,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:31.198370+0100","flow_id":1881629782584499,"pcap_cnt":6193,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51595,"proto":"UDP","dns":{"type":"answer","id":60857,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:27.836099+0100","flow_id":1942296197579267,"pcap_cnt":5114,"event_type":"dns","src_ip":"192.168.1.100","src_port":62521,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":56583,"rrname":"kepatixidyg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.540733+0100","flow_id":128205090996285,"pcap_cnt":5444,"event_type":"dns","src_ip":"192.168.1.100","src_port":55705,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":20892,"rrname":"kemipynunap.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.061879+0100","flow_id":2123717762588825,"pcap_cnt":5221,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59814,"proto":"UDP","dns":{"type":"answer","id":4467,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:31.663863+0100","flow_id":1215703695433795,"pcap_cnt":6431,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49979,"proto":"UDP","dns":{"type":"answer","id":4954,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:28.540986+0100","flow_id":128205090996285,"pcap_cnt":5445,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55705,"proto":"UDP","dns":{"type":"answer","id":20892,"rcode":"NXDOMAIN","rrname":"kemipynunap.eu"}}
{"timestamp":"2017-12-12T18:33:29.601817+0100","flow_id":265566734268505,"pcap_cnt":5944,"event_type":"dns","src_ip":"192.168.1.100","src_port":61064,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":46080,"rrname":"tuwiduqotug.eu","rrtype":"A","tx_id":2}}
{"timestamp":"2017-12-12T18:33:28.433385+0100","flow_id":678839225720041,"pcap_cnt":5396,"event_type":"dns","src_ip":"192.168.1.100","src_port":49177,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6475,"rrname":"jecaduxakeh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.787780+0100","flow_id":1638397196592761,"pcap_cnt":6484,"event_type":"dns","src_ip":"192.168.1.100","src_port":54973,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11965,"rrname":"xugiqonenuz.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:27.175879+0100","flow_id":882184452288023,"pcap_cnt":4813,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61689,"proto":"UDP","dns":{"type":"answer","id":7756,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:28.433718+0100","flow_id":678839225720041,"pcap_cnt":5397,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49177,"proto":"UDP","dns":{"type":"answer","id":6475,"rcode":"NXDOMAIN","rrname":"jecaduxakeh.eu"}}
{"timestamp":"2017-12-12T18:33:28.689627+0100","flow_id":2147473227810267,"pcap_cnt":5516,"event_type":"dns","src_ip":"192.168.1.100","src_port":55159,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":39826,"rrname":"fokytowipiw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.624742+0100","flow_id":1836197620516701,"pcap_cnt":5493,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50857,"proto":"UDP","dns":{"type":"answer","id":23555,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:30.186654+0100","flow_id":174131176462382,"pcap_cnt":6147,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56030,"proto":"UDP","dns":{"type":"answer","id":5591,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":569}}
{"timestamp":"2017-12-12T18:33:29.103109+0100","flow_id":1266856755827019,"pcap_cnt":5697,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65487,"proto":"UDP","dns":{"type":"answer","id":40430,"rcode":"NXDOMAIN","rrname":"volimucagog.eu"}}
{"timestamp":"2017-12-12T18:33:28.740815+0100","flow_id":1916736847236559,"pcap_cnt":5536,"event_type":"dns","src_ip":"192.168.1.100","src_port":61770,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7912,"rrname":"makanytezih.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.893042+0100","flow_id":1182157853269903,"pcap_cnt":6041,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54446,"proto":"UDP","dns":{"type":"answer","id":7758,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":547}}
{"timestamp":"2017-12-12T18:33:30.154321+0100","flow_id":2248752851736971,"pcap_cnt":6135,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56253,"proto":"UDP","dns":{"type":"answer","id":46014,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":569}}
{"timestamp":"2017-12-12T18:33:29.103109+0100","flow_id":1266856755827019,"pcap_cnt":5697,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65487,"proto":"UDP","dns":{"type":"answer","id":40430,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:28.706672+0100","flow_id":795726758906228,"pcap_cnt":5525,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53886,"proto":"UDP","dns":{"type":"answer","id":14126,"rcode":"NXDOMAIN","rrname":"lyruterodiq.eu"}}
{"timestamp":"2017-12-12T18:33:32.185802+0100","flow_id":137888095065546,"pcap_cnt":6666,"event_type":"dns","src_ip":"192.168.1.100","src_port":54259,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":57400,"rrname":"pumipuvupuj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:30.155199+0100","flow_id":669252858830399,"pcap_cnt":6136,"event_type":"dns","src_ip":"192.168.1.100","src_port":60670,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":65462,"rrname":"norumikemem.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.166917+0100","flow_id":1146666391014405,"pcap_cnt":5738,"event_type":"dns","src_ip":"192.168.1.100","src_port":50575,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":39141,"rrname":"tuwezovyvov.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:32.172660+0100","flow_id":1107534944182640,"pcap_cnt":6659,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62245,"proto":"UDP","dns":{"type":"answer","id":14202,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:30.155520+0100","flow_id":669252858830399,"pcap_cnt":6137,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60670,"proto":"UDP","dns":{"type":"answer","id":65462,"rcode":"NXDOMAIN","rrname":"norumikemem.eu"}}
{"timestamp":"2017-12-12T18:33:27.836382+0100","flow_id":1942296197579267,"pcap_cnt":5115,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62521,"proto":"UDP","dns":{"type":"answer","id":56583,"rcode":"NXDOMAIN","rrname":"kepatixidyg.eu"}}
{"timestamp":"2017-12-12T18:33:31.325845+0100","flow_id":2023080237725554,"pcap_cnt":6267,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64420,"proto":"UDP","dns":{"type":"answer","id":21668,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:27.836382+0100","flow_id":1942296197579267,"pcap_cnt":5115,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62521,"proto":"UDP","dns":{"type":"answer","id":56583,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:28.540986+0100","flow_id":128205090996285,"pcap_cnt":5445,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55705,"proto":"UDP","dns":{"type":"answer","id":20892,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:31.469781+0100","flow_id":408911268752149,"pcap_cnt":6332,"event_type":"dns","src_ip":"192.168.1.100","src_port":63804,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":16204,"rrname":"nopexifigep.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.986126+0100","flow_id":1364142059883534,"pcap_cnt":5180,"event_type":"dns","src_ip":"192.168.1.100","src_port":54378,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6311,"rrname":"lygowunezep.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.602049+0100","flow_id":265566734268505,"pcap_cnt":5945,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61064,"proto":"UDP","dns":{"type":"answer","id":46080,"rcode":"NXDOMAIN","rrname":"tuwiduqotug.eu"}}
{"timestamp":"2017-12-12T18:33:31.470036+0100","flow_id":408911268752149,"pcap_cnt":6333,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63804,"proto":"UDP","dns":{"type":"answer","id":16204,"rcode":"NXDOMAIN","rrname":"nopexifigep.eu"}}
{"timestamp":"2017-12-12T18:33:31.788069+0100","flow_id":1638397196592761,"pcap_cnt":6485,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54973,"proto":"UDP","dns":{"type":"answer","id":11965,"rcode":"NXDOMAIN","rrname":"xugiqonenuz.eu"}}
{"timestamp":"2017-12-12T18:33:31.470036+0100","flow_id":408911268752149,"pcap_cnt":6333,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63804,"proto":"UDP","dns":{"type":"answer","id":16204,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:29.602049+0100","flow_id":265566734268505,"pcap_cnt":5945,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61064,"proto":"UDP","dns":{"type":"answer","id":46080,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:31.788069+0100","flow_id":1638397196592761,"pcap_cnt":6485,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54973,"proto":"UDP","dns":{"type":"answer","id":11965,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:27.259879+0100","flow_id":1614734074312487,"pcap_cnt":4866,"event_type":"dns","src_ip":"192.168.1.100","src_port":49574,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35961,"rrname":"tuniqigison.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.560477+0100","flow_id":380512945016157,"pcap_cnt":6378,"event_type":"dns","src_ip":"192.168.1.100","src_port":52179,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":22665,"rrname":"jewidonevin.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:32.085100+0100","flow_id":2073838161251436,"pcap_cnt":6618,"event_type":"dns","src_ip":"192.168.1.100","src_port":49384,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5273,"rrname":"gahyfesyqad.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.611768+0100","flow_id":281561193338296,"pcap_cnt":5952,"event_type":"dns","src_ip":"192.168.1.100","src_port":50784,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":29194,"rrname":"cinenikekar.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.741115+0100","flow_id":1916736847236559,"pcap_cnt":5537,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61770,"proto":"UDP","dns":{"type":"answer","id":7912,"rcode":"NXDOMAIN","rrname":"makanytezih.eu"}}
{"timestamp":"2017-12-12T18:33:29.612140+0100","flow_id":281561193338296,"pcap_cnt":5953,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50784,"proto":"UDP","dns":{"type":"answer","id":29194,"rcode":"NXDOMAIN","rrname":"cinenikekar.eu"}}
{"timestamp":"2017-12-12T18:33:28.741115+0100","flow_id":1916736847236559,"pcap_cnt":5537,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61770,"proto":"UDP","dns":{"type":"answer","id":7912,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:29.612140+0100","flow_id":281561193338296,"pcap_cnt":5953,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50784,"proto":"UDP","dns":{"type":"answer","id":29194,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:31.985755+0100","flow_id":831982726626272,"pcap_cnt":6572,"event_type":"dns","src_ip":"192.168.1.100","src_port":54993,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14978,"rrname":"lyvoguraxeh.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:29.925696+0100","flow_id":209405742751744,"pcap_cnt":6054,"event_type":"dns","src_ip":"192.168.1.100","src_port":53300,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47119,"rrname":"gacezobeqon.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.986020+0100","flow_id":831982726626272,"pcap_cnt":6573,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54993,"proto":"UDP","dns":{"type":"answer","id":14978,"rcode":"NXDOMAIN","rrname":"lyvoguraxeh.eu"}}
{"timestamp":"2017-12-12T18:33:29.925946+0100","flow_id":209405742751744,"pcap_cnt":6055,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53300,"proto":"UDP","dns":{"type":"answer","id":47119,"rcode":"NXDOMAIN","rrname":"gacezobeqon.eu"}}
{"timestamp":"2017-12-12T18:33:31.238894+0100","flow_id":1331564733244718,"pcap_cnt":6222,"event_type":"dns","src_ip":"192.168.1.100","src_port":56929,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45855,"rrname":"nojepofyren.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.167291+0100","flow_id":1146666391014405,"pcap_cnt":5739,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50575,"proto":"UDP","dns":{"type":"answer","id":39141,"rcode":"NXDOMAIN","rrname":"tuwezovyvov.eu"}}
{"timestamp":"2017-12-12T18:33:32.223974+0100","flow_id":2051912351363840,"pcap_cnt":6690,"event_type":"dns","src_ip":"192.168.1.100","src_port":55308,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":56210,"rrname":"qeketaqojyf.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:29.167291+0100","flow_id":1146666391014405,"pcap_cnt":5739,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50575,"proto":"UDP","dns":{"type":"answer","id":39141,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:30.155520+0100","flow_id":669252858830399,"pcap_cnt":6137,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60670,"proto":"UDP","dns":{"type":"answer","id":65462,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:32.224267+0100","flow_id":2051912351363840,"pcap_cnt":6691,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55308,"proto":"UDP","dns":{"type":"answer","id":56210,"rcode":"NXDOMAIN","rrname":"qeketaqojyf.eu"}}
{"timestamp":"2017-12-12T18:33:29.170489+0100","flow_id":1363682498550265,"pcap_cnt":5740,"event_type":"dns","src_ip":"192.168.1.100","src_port":55545,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14568,"rrname":"xuqykodumyw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.196097+0100","flow_id":322683357888001,"pcap_cnt":6188,"event_type":"dns","src_ip":"192.168.1.100","src_port":63780,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51410,"rrname":"xubeqidudyh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.433718+0100","flow_id":678839225720041,"pcap_cnt":5397,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49177,"proto":"UDP","dns":{"type":"answer","id":6475,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:29.170757+0100","flow_id":1363682498550265,"pcap_cnt":5741,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55545,"proto":"UDP","dns":{"type":"answer","id":14568,"rcode":"NXDOMAIN","rrname":"xuqykodumyw.eu"}}
{"timestamp":"2017-12-12T18:33:28.604111+0100","flow_id":157790973212274,"pcap_cnt":5481,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60115,"proto":"UDP","dns":{"type":"answer","id":54070,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:29.170757+0100","flow_id":1363682498550265,"pcap_cnt":5741,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55545,"proto":"UDP","dns":{"type":"answer","id":14568,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:28.689959+0100","flow_id":2147473227810267,"pcap_cnt":5517,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55159,"proto":"UDP","dns":{"type":"answer","id":39826,"rcode":"NXDOMAIN","rrname":"fokytowipiw.eu"}}
{"timestamp":"2017-12-12T18:33:28.441836+0100","flow_id":469227641814508,"pcap_cnt":5400,"event_type":"dns","src_ip":"192.168.1.100","src_port":64860,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14847,"rrname":"kezywuxyven.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:32.085415+0100","flow_id":2073838161251436,"pcap_cnt":6619,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49384,"proto":"UDP","dns":{"type":"answer","id":5273,"rcode":"NXDOMAIN","rrname":"gahyfesyqad.eu"}}
{"timestamp":"2017-12-12T18:33:27.260213+0100","flow_id":1614734074312487,"pcap_cnt":4867,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49574,"proto":"UDP","dns":{"type":"answer","id":35961,"rcode":"NXDOMAIN","rrname":"tuniqigison.eu"}}
{"timestamp":"2017-12-12T18:33:28.689959+0100","flow_id":2147473227810267,"pcap_cnt":5517,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55159,"proto":"UDP","dns":{"type":"answer","id":39826,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:31.529481+0100","flow_id":1734610906715209,"pcap_cnt":6366,"event_type":"dns","src_ip":"192.168.1.100","src_port":64483,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44931,"rrname":"rycovuvutiq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.260213+0100","flow_id":1614734074312487,"pcap_cnt":4867,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49574,"proto":"UDP","dns":{"type":"answer","id":35961,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":578}}
{"timestamp":"2017-12-12T18:33:28.796806+0100","flow_id":1963064511965318,"pcap_cnt":5562,"event_type":"dns","src_ip":"192.168.1.100","src_port":51907,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25702,"rrname":"kejilodirub.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:27.703415+0100","flow_id":685749828041655,"pcap_cnt":5048,"event_type":"dns","src_ip":"192.168.1.100","src_port":59342,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25162,"rrname":"dikiwewutav.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.529725+0100","flow_id":1734610906715209,"pcap_cnt":6367,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64483,"proto":"UDP","dns":{"type":"answer","id":44931,"rcode":"NXDOMAIN","rrname":"rycovuvutiq.eu"}}
{"timestamp":"2017-12-12T18:33:28.797138+0100","flow_id":1963064511965318,"pcap_cnt":5563,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51907,"proto":"UDP","dns":{"type":"answer","id":25702,"rcode":"NXDOMAIN","rrname":"kejilodirub.eu"}}
{"timestamp":"2017-12-12T18:33:27.703754+0100","flow_id":685749828041655,"pcap_cnt":5049,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59342,"proto":"UDP","dns":{"type":"answer","id":25162,"rcode":"NXDOMAIN","rrname":"dikiwewutav.eu"}}
{"timestamp":"2017-12-12T18:33:31.986020+0100","flow_id":831982726626272,"pcap_cnt":6573,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54993,"proto":"UDP","dns":{"type":"answer","id":14978,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:29.925946+0100","flow_id":209405742751744,"pcap_cnt":6055,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53300,"proto":"UDP","dns":{"type":"answer","id":47119,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":567}}
{"timestamp":"2017-12-12T18:33:31.239199+0100","flow_id":1331564733244718,"pcap_cnt":6223,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56929,"proto":"UDP","dns":{"type":"answer","id":45855,"rcode":"NXDOMAIN","rrname":"nojepofyren.eu"}}
{"timestamp":"2017-12-12T18:33:29.511754+0100","flow_id":2189194540207882,"pcap_cnt":5904,"event_type":"dns","src_ip":"192.168.1.100","src_port":54274,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34391,"rrname":"qetoxagekec.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.640990+0100","flow_id":2139177498494942,"pcap_cnt":5500,"event_type":"dns","src_ip":"192.168.1.100","src_port":60739,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":58910,"rrname":"keradijumyn.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.239199+0100","flow_id":1331564733244718,"pcap_cnt":6223,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56929,"proto":"UDP","dns":{"type":"answer","id":45855,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:27.986416+0100","flow_id":1364142059883534,"pcap_cnt":5181,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54378,"proto":"UDP","dns":{"type":"answer","id":6311,"rcode":"NXDOMAIN","rrname":"lygowunezep.eu"}}
{"timestamp":"2017-12-12T18:33:31.480531+0100","flow_id":2029015882328289,"pcap_cnt":6336,"event_type":"dns","src_ip":"192.168.1.100","src_port":50679,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25962,"rrname":"marugofazez.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:29.512011+0100","flow_id":2189194540207882,"pcap_cnt":5905,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54274,"proto":"UDP","dns":{"type":"answer","id":34391,"rcode":"NXDOMAIN","rrname":"qetoxagekec.eu"}}
{"timestamp":"2017-12-12T18:33:31.480770+0100","flow_id":2029015882328289,"pcap_cnt":6337,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50679,"proto":"UDP","dns":{"type":"answer","id":25962,"rcode":"NXDOMAIN","rrname":"marugofazez.eu"}}
{"timestamp":"2017-12-12T18:33:28.621189+0100","flow_id":1435629643135621,"pcap_cnt":5488,"event_type":"dns","src_ip":"192.168.1.100","src_port":54471,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6547,"rrname":"tucebygodym.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.343923+0100","flow_id":1999286118727539,"pcap_cnt":5808,"event_type":"dns","src_ip":"192.168.1.100","src_port":58059,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62312,"rrname":"foqurowyxul.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.560841+0100","flow_id":380512945016157,"pcap_cnt":6379,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52179,"proto":"UDP","dns":{"type":"answer","id":22665,"rcode":"NXDOMAIN","rrname":"jewidonevin.eu"}}
{"timestamp":"2017-12-12T18:33:28.466173+0100","flow_id":278166021610749,"pcap_cnt":5412,"event_type":"dns","src_ip":"192.168.1.100","src_port":51390,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7107,"rrname":"tujizipipiz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.621509+0100","flow_id":1435629643135621,"pcap_cnt":5489,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54471,"proto":"UDP","dns":{"type":"answer","id":6547,"rcode":"NXDOMAIN","rrname":"tucebygodym.eu"}}
{"timestamp":"2017-12-12T18:33:28.706672+0100","flow_id":795726758906228,"pcap_cnt":5525,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53886,"proto":"UDP","dns":{"type":"answer","id":14126,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:28.621509+0100","flow_id":1435629643135621,"pcap_cnt":5489,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54471,"proto":"UDP","dns":{"type":"answer","id":6547,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:28.466452+0100","flow_id":278166021610749,"pcap_cnt":5413,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51390,"proto":"UDP","dns":{"type":"answer","id":7107,"rcode":"NXDOMAIN","rrname":"tujizipipiz.eu"}}
{"timestamp":"2017-12-12T18:33:28.850682+0100","flow_id":138122169776888,"pcap_cnt":5590,"event_type":"dns","src_ip":"192.168.1.100","src_port":59306,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19301,"rrname":"vonujicitat.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:32.186110+0100","flow_id":137888095065546,"pcap_cnt":6667,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54259,"proto":"UDP","dns":{"type":"answer","id":57400,"rcode":"NXDOMAIN","rrname":"pumipuvupuj.eu"}}
{"timestamp":"2017-12-12T18:33:31.529725+0100","flow_id":1734610906715209,"pcap_cnt":6367,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64483,"proto":"UDP","dns":{"type":"answer","id":44931,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:28.797138+0100","flow_id":1963064511965318,"pcap_cnt":5563,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51907,"proto":"UDP","dns":{"type":"answer","id":25702,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:27.703754+0100","flow_id":685749828041655,"pcap_cnt":5049,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59342,"proto":"UDP","dns":{"type":"answer","id":25162,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:30.198403+0100","flow_id":1998242439877163,"pcap_cnt":6150,"event_type":"dns","src_ip":"192.168.1.100","src_port":62746,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63789,"rrname":"rycypolavag.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:28.838641+0100","flow_id":1010664104053745,"pcap_cnt":5584,"event_type":"dns","src_ip":"192.168.1.100","src_port":65023,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8807,"rrname":"xutaquxelat.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.196339+0100","flow_id":322683357888001,"pcap_cnt":6189,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63780,"proto":"UDP","dns":{"type":"answer","id":51410,"rcode":"NXDOMAIN","rrname":"xubeqidudyh.eu"}}
{"timestamp":"2017-12-12T18:33:28.488833+0100","flow_id":1374611042760065,"pcap_cnt":5422,"event_type":"dns","src_ip":"192.168.1.100","src_port":61668,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6103,"rrname":"mamajocahab.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.182789+0100","flow_id":1680685444876805,"pcap_cnt":6186,"event_type":"dns","src_ip":"192.168.1.100","src_port":57076,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37326,"rrname":"kerijudacyj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.838953+0100","flow_id":1010664104053745,"pcap_cnt":5585,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65023,"proto":"UDP","dns":{"type":"answer","id":8807,"rcode":"NXDOMAIN","rrname":"xutaquxelat.eu"}}
{"timestamp":"2017-12-12T18:33:28.641345+0100","flow_id":2139177498494942,"pcap_cnt":5501,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60739,"proto":"UDP","dns":{"type":"answer","id":58910,"rcode":"NXDOMAIN","rrname":"keradijumyn.eu"}}
{"timestamp":"2017-12-12T18:33:28.489063+0100","flow_id":1374611042760065,"pcap_cnt":5423,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61668,"proto":"UDP","dns":{"type":"answer","id":6103,"rcode":"NXDOMAIN","rrname":"mamajocahab.eu"}}
{"timestamp":"2017-12-12T18:33:28.838953+0100","flow_id":1010664104053745,"pcap_cnt":5585,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65023,"proto":"UDP","dns":{"type":"answer","id":8807,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:31.183054+0100","flow_id":1680685444876805,"pcap_cnt":6187,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57076,"proto":"UDP","dns":{"type":"answer","id":37326,"rcode":"NXDOMAIN","rrname":"kerijudacyj.eu"}}
{"timestamp":"2017-12-12T18:33:28.489063+0100","flow_id":1374611042760065,"pcap_cnt":5423,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61668,"proto":"UDP","dns":{"type":"answer","id":6103,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:32.085415+0100","flow_id":2073838161251436,"pcap_cnt":6619,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49384,"proto":"UDP","dns":{"type":"answer","id":5273,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:28.896538+0100","flow_id":300637290540570,"pcap_cnt":5620,"event_type":"dns","src_ip":"192.168.1.100","src_port":61301,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62946,"rrname":"jecumenunoq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.560841+0100","flow_id":380512945016157,"pcap_cnt":6379,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52179,"proto":"UDP","dns":{"type":"answer","id":22665,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":569}}
{"timestamp":"2017-12-12T18:33:30.196115+0100","flow_id":998861534068243,"pcap_cnt":6148,"event_type":"dns","src_ip":"192.168.1.100","src_port":54747,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38784,"rrname":"pujoxolufag.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.896859+0100","flow_id":300637290540570,"pcap_cnt":5621,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61301,"proto":"UDP","dns":{"type":"answer","id":62946,"rcode":"NXDOMAIN","rrname":"jecumenunoq.eu"}}
{"timestamp":"2017-12-12T18:33:28.715537+0100","flow_id":212349941328461,"pcap_cnt":5528,"event_type":"dns","src_ip":"192.168.1.100","src_port":58298,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":30919,"rrname":"rytydelitec.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:28.896859+0100","flow_id":300637290540570,"pcap_cnt":5621,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61301,"proto":"UDP","dns":{"type":"answer","id":62946,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:30.196393+0100","flow_id":998861534068243,"pcap_cnt":6149,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54747,"proto":"UDP","dns":{"type":"answer","id":38784,"rcode":"NXDOMAIN","rrname":"pujoxolufag.eu"}}
{"timestamp":"2017-12-12T18:33:28.850939+0100","flow_id":138122169776888,"pcap_cnt":5591,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59306,"proto":"UDP","dns":{"type":"answer","id":19301,"rcode":"NXDOMAIN","rrname":"vonujicitat.eu"}}
{"timestamp":"2017-12-12T18:33:30.196393+0100","flow_id":998861534068243,"pcap_cnt":6149,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54747,"proto":"UDP","dns":{"type":"answer","id":38784,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":569}}
{"timestamp":"2017-12-12T18:33:32.224267+0100","flow_id":2051912351363840,"pcap_cnt":6691,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55308,"proto":"UDP","dns":{"type":"answer","id":56210,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:31.870335+0100","flow_id":363949403621311,"pcap_cnt":6526,"event_type":"dns","src_ip":"192.168.1.100","src_port":58687,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7651,"rrname":"kejogydideq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:30.212097+0100","flow_id":2107031815863425,"pcap_cnt":6154,"event_type":"dns","src_ip":"192.168.1.100","src_port":61665,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":3439,"rrname":"rynudepebur.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:30.198700+0100","flow_id":1998242439877163,"pcap_cnt":6151,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62746,"proto":"UDP","dns":{"type":"answer","id":63789,"rcode":"NXDOMAIN","rrname":"rycypolavag.eu"}}
{"timestamp":"2017-12-12T18:33:31.196339+0100","flow_id":322683357888001,"pcap_cnt":6189,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63780,"proto":"UDP","dns":{"type":"answer","id":51410,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:31.870581+0100","flow_id":363949403621311,"pcap_cnt":6527,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58687,"proto":"UDP","dns":{"type":"answer","id":7651,"rcode":"NXDOMAIN","rrname":"kejogydideq.eu"}}
{"timestamp":"2017-12-12T18:33:28.641345+0100","flow_id":2139177498494942,"pcap_cnt":5501,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60739,"proto":"UDP","dns":{"type":"answer","id":58910,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:29.512011+0100","flow_id":2189194540207882,"pcap_cnt":5905,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54274,"proto":"UDP","dns":{"type":"answer","id":34391,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:31.480770+0100","flow_id":2029015882328289,"pcap_cnt":6337,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50679,"proto":"UDP","dns":{"type":"answer","id":25962,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:28.909819+0100","flow_id":1703616275079675,"pcap_cnt":5626,"event_type":"dns","src_ip":"192.168.1.100","src_port":52501,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2076,"rrname":"kezoxenitoj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.700564+0100","flow_id":1808437099475092,"pcap_cnt":5990,"event_type":"dns","src_ip":"192.168.1.100","src_port":63890,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47419,"rrname":"tunujolavez.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.644109+0100","flow_id":1472920696902669,"pcap_cnt":6420,"event_type":"dns","src_ip":"192.168.1.100","src_port":59561,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14625,"rrname":"tuwobiloloh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.032088+0100","flow_id":1152458152370992,"pcap_cnt":5672,"event_type":"dns","src_ip":"192.168.1.100","src_port":62695,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":10607,"rrname":"fogixezajaq.eu","rrtype":"A","tx_id":2}}
{"timestamp":"2017-12-12T18:33:29.700917+0100","flow_id":1808437099475092,"pcap_cnt":5991,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63890,"proto":"UDP","dns":{"type":"answer","id":47419,"rcode":"NXDOMAIN","rrname":"tunujolavez.eu"}}
{"timestamp":"2017-12-12T18:33:31.644358+0100","flow_id":1472920696902669,"pcap_cnt":6421,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59561,"proto":"UDP","dns":{"type":"answer","id":14625,"rcode":"NXDOMAIN","rrname":"tuwobiloloh.eu"}}
{"timestamp":"2017-12-12T18:33:29.344193+0100","flow_id":1999286118727539,"pcap_cnt":5809,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58059,"proto":"UDP","dns":{"type":"answer","id":62312,"rcode":"NXDOMAIN","rrname":"foqurowyxul.eu"}}
{"timestamp":"2017-12-12T18:33:28.466452+0100","flow_id":278166021610749,"pcap_cnt":5413,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51390,"proto":"UDP","dns":{"type":"answer","id":7107,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:31.724037+0100","flow_id":63200761154629,"pcap_cnt":6454,"event_type":"dns","src_ip":"192.168.1.100","src_port":63410,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47585,"rrname":"vonodecidid.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.775660+0100","flow_id":1546285180573164,"pcap_cnt":5550,"event_type":"dns","src_ip":"192.168.1.100","src_port":54331,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64992,"rrname":"pumocelexec.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.906893+0100","flow_id":608517726197389,"pcap_cnt":5624,"event_type":"dns","src_ip":"192.168.1.100","src_port":58811,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60106,"rrname":"xugutynyxoh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.536322+0100","flow_id":1494621018926850,"pcap_cnt":5440,"event_type":"dns","src_ip":"192.168.1.100","src_port":55539,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37422,"rrname":"jewujenezac.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.715784+0100","flow_id":212349941328461,"pcap_cnt":5529,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58298,"proto":"UDP","dns":{"type":"answer","id":30919,"rcode":"NXDOMAIN","rrname":"rytydelitec.eu"}}
{"timestamp":"2017-12-12T18:33:28.850939+0100","flow_id":138122169776888,"pcap_cnt":5591,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59306,"proto":"UDP","dns":{"type":"answer","id":19301,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:28.775986+0100","flow_id":1546285180573164,"pcap_cnt":5551,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54331,"proto":"UDP","dns":{"type":"answer","id":64992,"rcode":"NXDOMAIN","rrname":"pumocelexec.eu"}}
{"timestamp":"2017-12-12T18:33:28.715784+0100","flow_id":212349941328461,"pcap_cnt":5529,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58298,"proto":"UDP","dns":{"type":"answer","id":30919,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:28.536588+0100","flow_id":1494621018926850,"pcap_cnt":5441,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55539,"proto":"UDP","dns":{"type":"answer","id":37422,"rcode":"NXDOMAIN","rrname":"jewujenezac.eu"}}
{"timestamp":"2017-12-12T18:33:31.870581+0100","flow_id":363949403621311,"pcap_cnt":6527,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58687,"proto":"UDP","dns":{"type":"answer","id":7651,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:31.214121+0100","flow_id":1902733104496865,"pcap_cnt":6204,"event_type":"dns","src_ip":"192.168.1.100","src_port":53537,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":46803,"rrname":"kepolonavit.eu","rrtype":"A","tx_id":2}}
{"timestamp":"2017-12-12T18:33:28.536588+0100","flow_id":1494621018926850,"pcap_cnt":5441,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55539,"proto":"UDP","dns":{"type":"answer","id":37422,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:28.442097+0100","flow_id":469227641814508,"pcap_cnt":5401,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64860,"proto":"UDP","dns":{"type":"answer","id":14847,"rcode":"NXDOMAIN","rrname":"kezywuxyven.eu"}}
{"timestamp":"2017-12-12T18:33:28.910061+0100","flow_id":1703616275079675,"pcap_cnt":5627,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52501,"proto":"UDP","dns":{"type":"answer","id":2076,"rcode":"NXDOMAIN","rrname":"kezoxenitoj.eu"}}
{"timestamp":"2017-12-12T18:33:28.442097+0100","flow_id":469227641814508,"pcap_cnt":5401,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64860,"proto":"UDP","dns":{"type":"answer","id":14847,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:31.214417+0100","flow_id":1902733104496865,"pcap_cnt":6205,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53537,"proto":"UDP","dns":{"type":"answer","id":46803,"rcode":"NXDOMAIN","rrname":"kepolonavit.eu"}}
{"timestamp":"2017-12-12T18:33:28.910061+0100","flow_id":1703616275079675,"pcap_cnt":5627,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52501,"proto":"UDP","dns":{"type":"answer","id":2076,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:28.536764+0100","flow_id":458163806023868,"pcap_cnt":5442,"event_type":"dns","src_ip":"192.168.1.100","src_port":60612,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":16737,"rrname":"gaqozosodul.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:32.186110+0100","flow_id":137888095065546,"pcap_cnt":6667,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54259,"proto":"UDP","dns":{"type":"answer","id":57400,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:31.724388+0100","flow_id":63200761154629,"pcap_cnt":6455,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63410,"proto":"UDP","dns":{"type":"answer","id":47585,"rcode":"NXDOMAIN","rrname":"vonodecidid.eu"}}
{"timestamp":"2017-12-12T18:33:29.110953+0100","flow_id":1703616275079675,"pcap_cnt":5706,"event_type":"dns","src_ip":"192.168.1.100","src_port":52501,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6299,"rrname":"masafytunux.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:28.907141+0100","flow_id":608517726197389,"pcap_cnt":5625,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58811,"proto":"UDP","dns":{"type":"answer","id":60106,"rcode":"NXDOMAIN","rrname":"xugutynyxoh.eu"}}
{"timestamp":"2017-12-12T18:33:32.190923+0100","flow_id":1892450953389769,"pcap_cnt":6674,"event_type":"dns","src_ip":"192.168.1.100","src_port":63884,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48487,"rrname":"jejopiniduh.eu","rrtype":"A","tx_id":2}}
{"timestamp":"2017-12-12T18:33:30.198700+0100","flow_id":1998242439877163,"pcap_cnt":6151,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62746,"proto":"UDP","dns":{"type":"answer","id":63789,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:27.986416+0100","flow_id":1364142059883534,"pcap_cnt":5181,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54378,"proto":"UDP","dns":{"type":"answer","id":6311,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":581}}
{"timestamp":"2017-12-12T18:33:32.191179+0100","flow_id":1892450953389769,"pcap_cnt":6675,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63884,"proto":"UDP","dns":{"type":"answer","id":48487,"rcode":"NXDOMAIN","rrname":"jejopiniduh.eu"}}
{"timestamp":"2017-12-12T18:33:31.244737+0100","flow_id":1418696734784513,"pcap_cnt":6228,"event_type":"dns","src_ip":"192.168.1.100","src_port":65093,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":24484,"rrname":"purowuqokuq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.222615+0100","flow_id":229377340630423,"pcap_cnt":5294,"event_type":"dns","src_ip":"192.168.1.100","src_port":62895,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50222,"rrname":"cicynefogic.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:32.191179+0100","flow_id":1892450953389769,"pcap_cnt":6675,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63884,"proto":"UDP","dns":{"type":"answer","id":48487,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:31.953869+0100","flow_id":745840715730445,"pcap_cnt":6564,"event_type":"dns","src_ip":"192.168.1.100","src_port":54264,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34096,"rrname":"nopodykecoc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.223307+0100","flow_id":229377340630423,"pcap_cnt":5295,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62895,"proto":"UDP","dns":{"type":"answer","id":50222,"rcode":"NXDOMAIN","rrname":"cicynefogic.eu"}}
{"timestamp":"2017-12-12T18:33:29.700917+0100","flow_id":1808437099475092,"pcap_cnt":5991,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63890,"proto":"UDP","dns":{"type":"answer","id":47419,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":546}}
{"timestamp":"2017-12-12T18:33:28.557936+0100","flow_id":1120254489559920,"pcap_cnt":5452,"event_type":"dns","src_ip":"192.168.1.100","src_port":50030,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":52308,"rrname":"cilihumecox.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.954096+0100","flow_id":745840715730445,"pcap_cnt":6565,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54264,"proto":"UDP","dns":{"type":"answer","id":34096,"rcode":"NXDOMAIN","rrname":"nopodykecoc.eu"}}
{"timestamp":"2017-12-12T18:33:28.558247+0100","flow_id":1120254489559920,"pcap_cnt":5453,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50030,"proto":"UDP","dns":{"type":"answer","id":52308,"rcode":"NXDOMAIN","rrname":"cilihumecox.eu"}}
{"timestamp":"2017-12-12T18:33:31.954096+0100","flow_id":745840715730445,"pcap_cnt":6565,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54264,"proto":"UDP","dns":{"type":"answer","id":34096,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:31.214417+0100","flow_id":1902733104496865,"pcap_cnt":6205,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53537,"proto":"UDP","dns":{"type":"answer","id":46803,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":569}}
{"timestamp":"2017-12-12T18:33:30.212349+0100","flow_id":2107031815863425,"pcap_cnt":6155,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61665,"proto":"UDP","dns":{"type":"answer","id":3439,"rcode":"NXDOMAIN","rrname":"rynudepebur.eu"}}
{"timestamp":"2017-12-12T18:33:32.125852+0100","flow_id":1952760885734300,"pcap_cnt":6634,"event_type":"dns","src_ip":"192.168.1.100","src_port":54341,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9869,"rrname":"vocebufazap.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.537003+0100","flow_id":458163806023868,"pcap_cnt":5443,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60612,"proto":"UDP","dns":{"type":"answer","id":16737,"rcode":"NXDOMAIN","rrname":"gaqozosodul.eu"}}
{"timestamp":"2017-12-12T18:33:32.126119+0100","flow_id":1952760885734300,"pcap_cnt":6635,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54341,"proto":"UDP","dns":{"type":"answer","id":9869,"rcode":"NXDOMAIN","rrname":"vocebufazap.eu"}}
{"timestamp":"2017-12-12T18:33:31.360141+0100","flow_id":690246659047117,"pcap_cnt":6284,"event_type":"dns","src_ip":"192.168.1.100","src_port":58254,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63845,"rrname":"ryhuzilywax.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:32.126119+0100","flow_id":1952760885734300,"pcap_cnt":6635,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54341,"proto":"UDP","dns":{"type":"answer","id":9869,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:29.111231+0100","flow_id":1703616275079675,"pcap_cnt":5707,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52501,"proto":"UDP","dns":{"type":"answer","id":6299,"rcode":"NXDOMAIN","rrname":"masafytunux.eu"}}
{"timestamp":"2017-12-12T18:33:28.907141+0100","flow_id":608517726197389,"pcap_cnt":5625,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58811,"proto":"UDP","dns":{"type":"answer","id":60106,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:28.891243+0100","flow_id":1600369556232555,"pcap_cnt":5612,"event_type":"dns","src_ip":"192.168.1.100","src_port":59682,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63392,"rrname":"pupymavyvow.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.053852+0100","flow_id":1341788902773340,"pcap_cnt":5678,"event_type":"dns","src_ip":"192.168.1.100","src_port":64033,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45852,"rrname":"digenowipib.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.094845+0100","flow_id":495611623985033,"pcap_cnt":5692,"event_type":"dns","src_ip":"192.168.1.100","src_port":59794,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60138,"rrname":"kemybarodiv.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:31.183054+0100","flow_id":1680685444876805,"pcap_cnt":6187,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57076,"proto":"UDP","dns":{"type":"answer","id":37326,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:31.244976+0100","flow_id":1418696734784513,"pcap_cnt":6229,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65093,"proto":"UDP","dns":{"type":"answer","id":24484,"rcode":"NXDOMAIN","rrname":"purowuqokuq.eu"}}
{"timestamp":"2017-12-12T18:33:28.223307+0100","flow_id":229377340630423,"pcap_cnt":5295,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62895,"proto":"UDP","dns":{"type":"answer","id":50222,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:31.244976+0100","flow_id":1418696734784513,"pcap_cnt":6229,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65093,"proto":"UDP","dns":{"type":"answer","id":24484,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:29.032407+0100","flow_id":1152458152370992,"pcap_cnt":5673,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62695,"proto":"UDP","dns":{"type":"answer","id":10607,"rcode":"NXDOMAIN","rrname":"fogixezajaq.eu"}}
{"timestamp":"2017-12-12T18:33:31.644358+0100","flow_id":1472920696902669,"pcap_cnt":6421,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59561,"proto":"UDP","dns":{"type":"answer","id":14625,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":569}}
{"timestamp":"2017-12-12T18:33:29.736159+0100","flow_id":1800482820012959,"pcap_cnt":6006,"event_type":"dns","src_ip":"192.168.1.100","src_port":49611,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":20787,"rrname":"xubifaremin.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.661960+0100","flow_id":479168343565939,"pcap_cnt":6426,"event_type":"dns","src_ip":"192.168.1.100","src_port":61505,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2047,"rrname":"fokuquwifys.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:30.212349+0100","flow_id":2107031815863425,"pcap_cnt":6155,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61665,"proto":"UDP","dns":{"type":"answer","id":3439,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:29.736419+0100","flow_id":1800482820012959,"pcap_cnt":6007,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49611,"proto":"UDP","dns":{"type":"answer","id":20787,"rcode":"NXDOMAIN","rrname":"xubifaremin.eu"}}
{"timestamp":"2017-12-12T18:33:31.662198+0100","flow_id":479168343565939,"pcap_cnt":6427,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61505,"proto":"UDP","dns":{"type":"answer","id":2047,"rcode":"NXDOMAIN","rrname":"fokuquwifys.eu"}}
{"timestamp":"2017-12-12T18:33:29.736419+0100","flow_id":1800482820012959,"pcap_cnt":6007,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49611,"proto":"UDP","dns":{"type":"answer","id":20787,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":546}}
{"timestamp":"2017-12-12T18:33:28.537003+0100","flow_id":458163806023868,"pcap_cnt":5443,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60612,"proto":"UDP","dns":{"type":"answer","id":16737,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:31.662198+0100","flow_id":479168343565939,"pcap_cnt":6427,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61505,"proto":"UDP","dns":{"type":"answer","id":2047,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":569}}
{"timestamp":"2017-12-12T18:33:28.775986+0100","flow_id":1546285180573164,"pcap_cnt":5551,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54331,"proto":"UDP","dns":{"type":"answer","id":64992,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:31.739849+0100","flow_id":1705433046403593,"pcap_cnt":6462,"event_type":"dns","src_ip":"192.168.1.100","src_port":54519,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28332,"rrname":"qekikyvutic.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.111231+0100","flow_id":1703616275079675,"pcap_cnt":5707,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52501,"proto":"UDP","dns":{"type":"answer","id":6299,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:28.832181+0100","flow_id":2195100120167093,"pcap_cnt":5578,"event_type":"dns","src_ip":"192.168.1.100","src_port":50403,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11002,"rrname":"nomedefajys.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.013993+0100","flow_id":894841721009833,"pcap_cnt":5664,"event_type":"dns","src_ip":"192.168.1.100","src_port":58954,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53930,"rrname":"pujotiqunif.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.367742+0100","flow_id":1317395635813493,"pcap_cnt":5832,"event_type":"dns","src_ip":"192.168.1.100","src_port":59016,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42058,"rrname":"pujycupodyn.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:28.832529+0100","flow_id":2195100120167093,"pcap_cnt":5579,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50403,"proto":"UDP","dns":{"type":"answer","id":11002,"rcode":"NXDOMAIN","rrname":"nomedefajys.eu"}}
{"timestamp":"2017-12-12T18:33:29.054207+0100","flow_id":1341788902773340,"pcap_cnt":5679,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64033,"proto":"UDP","dns":{"type":"answer","id":45852,"rcode":"NXDOMAIN","rrname":"digenowipib.eu"}}
{"timestamp":"2017-12-12T18:33:29.014259+0100","flow_id":894841721009833,"pcap_cnt":5665,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58954,"proto":"UDP","dns":{"type":"answer","id":53930,"rcode":"NXDOMAIN","rrname":"pujotiqunif.eu"}}
{"timestamp":"2017-12-12T18:33:29.367989+0100","flow_id":1317395635813493,"pcap_cnt":5833,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59016,"proto":"UDP","dns":{"type":"answer","id":42058,"rcode":"NXDOMAIN","rrname":"pujycupodyn.eu"}}
{"timestamp":"2017-12-12T18:33:29.032407+0100","flow_id":1152458152370992,"pcap_cnt":5673,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62695,"proto":"UDP","dns":{"type":"answer","id":10607,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:29.344193+0100","flow_id":1999286118727539,"pcap_cnt":5809,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58059,"proto":"UDP","dns":{"type":"answer","id":62312,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:31.335705+0100","flow_id":1337607752195929,"pcap_cnt":6272,"event_type":"dns","src_ip":"192.168.1.100","src_port":51789,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38809,"rrname":"xutityjigac.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.558247+0100","flow_id":1120254489559920,"pcap_cnt":5453,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50030,"proto":"UDP","dns":{"type":"answer","id":52308,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:29.399164+0100","flow_id":628057679927100,"pcap_cnt":5850,"event_type":"dns","src_ip":"192.168.1.100","src_port":59438,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":52835,"rrname":"tujomalumav.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.724388+0100","flow_id":63200761154629,"pcap_cnt":6455,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63410,"proto":"UDP","dns":{"type":"answer","id":47585,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:31.335989+0100","flow_id":1337607752195929,"pcap_cnt":6273,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51789,"proto":"UDP","dns":{"type":"answer","id":38809,"rcode":"NXDOMAIN","rrname":"xutityjigac.eu"}}
{"timestamp":"2017-12-12T18:33:28.622547+0100","flow_id":1436415622152147,"pcap_cnt":5490,"event_type":"dns","src_ip":"192.168.1.100","src_port":50803,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31020,"rrname":"dikofuhybym.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.997540+0100","flow_id":1640761576208548,"pcap_cnt":6084,"event_type":"dns","src_ip":"192.168.1.100","src_port":54874,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47798,"rrname":"qekusagigyz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.335989+0100","flow_id":1337607752195929,"pcap_cnt":6273,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51789,"proto":"UDP","dns":{"type":"answer","id":38809,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":567}}
{"timestamp":"2017-12-12T18:33:31.360420+0100","flow_id":690246659047117,"pcap_cnt":6285,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58254,"proto":"UDP","dns":{"type":"answer","id":63845,"rcode":"NXDOMAIN","rrname":"ryhuzilywax.eu"}}
{"timestamp":"2017-12-12T18:33:29.997775+0100","flow_id":1640761576208548,"pcap_cnt":6085,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54874,"proto":"UDP","dns":{"type":"answer","id":47798,"rcode":"NXDOMAIN","rrname":"qekusagigyz.eu"}}
{"timestamp":"2017-12-12T18:33:28.891502+0100","flow_id":1600369556232555,"pcap_cnt":5613,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59682,"proto":"UDP","dns":{"type":"answer","id":63392,"rcode":"NXDOMAIN","rrname":"pupymavyvow.eu"}}
{"timestamp":"2017-12-12T18:33:29.997775+0100","flow_id":1640761576208548,"pcap_cnt":6085,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54874,"proto":"UDP","dns":{"type":"answer","id":47798,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":567}}
{"timestamp":"2017-12-12T18:33:28.832529+0100","flow_id":2195100120167093,"pcap_cnt":5579,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50403,"proto":"UDP","dns":{"type":"answer","id":11002,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:31.363409+0100","flow_id":1817042066574225,"pcap_cnt":6286,"event_type":"dns","src_ip":"192.168.1.100","src_port":61067,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17765,"rrname":"tufigolidat.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.891502+0100","flow_id":1600369556232555,"pcap_cnt":5613,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59682,"proto":"UDP","dns":{"type":"answer","id":63392,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:29.054207+0100","flow_id":1341788902773340,"pcap_cnt":5679,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64033,"proto":"UDP","dns":{"type":"answer","id":45852,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:29.367989+0100","flow_id":1317395635813493,"pcap_cnt":5833,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59016,"proto":"UDP","dns":{"type":"answer","id":42058,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:31.363768+0100","flow_id":1817042066574225,"pcap_cnt":6287,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61067,"proto":"UDP","dns":{"type":"answer","id":17765,"rcode":"NXDOMAIN","rrname":"tufigolidat.eu"}}
{"timestamp":"2017-12-12T18:33:29.211131+0100","flow_id":76205922007227,"pcap_cnt":5760,"event_type":"dns","src_ip":"192.168.1.100","src_port":61020,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":10206,"rrname":"kefatenahic.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.106114+0100","flow_id":494443394866818,"pcap_cnt":5704,"event_type":"dns","src_ip":"192.168.1.100","src_port":51412,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38662,"rrname":"rytonovejof.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.363768+0100","flow_id":1817042066574225,"pcap_cnt":6287,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61067,"proto":"UDP","dns":{"type":"answer","id":17765,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":567}}
{"timestamp":"2017-12-12T18:33:29.399515+0100","flow_id":628057679927100,"pcap_cnt":5851,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59438,"proto":"UDP","dns":{"type":"answer","id":52835,"rcode":"NXDOMAIN","rrname":"tujomalumav.eu"}}
{"timestamp":"2017-12-12T18:33:31.223160+0100","flow_id":1525166826547128,"pcap_cnt":6214,"event_type":"dns","src_ip":"192.168.1.100","src_port":56417,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33911,"rrname":"makiwemihiw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.799958+0100","flow_id":1057485690189014,"pcap_cnt":6490,"event_type":"dns","src_ip":"192.168.1.100","src_port":61262,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":15277,"rrname":"norupamaxur.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.563137+0100","flow_id":725209840326593,"pcap_cnt":6380,"event_type":"dns","src_ip":"192.168.1.100","src_port":52528,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":195,"rrname":"kemawonywig.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.622824+0100","flow_id":1436415622152147,"pcap_cnt":5491,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50803,"proto":"UDP","dns":{"type":"answer","id":31020,"rcode":"NXDOMAIN","rrname":"dikofuhybym.eu"}}
{"timestamp":"2017-12-12T18:33:31.573040+0100","flow_id":115706734525224,"pcap_cnt":6386,"event_type":"dns","src_ip":"192.168.1.100","src_port":63501,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40183,"rrname":"cilodamenub.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:31.800180+0100","flow_id":1057485690189014,"pcap_cnt":6491,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61262,"proto":"UDP","dns":{"type":"answer","id":15277,"rcode":"NXDOMAIN","rrname":"norupamaxur.eu"}}
{"timestamp":"2017-12-12T18:33:31.360420+0100","flow_id":690246659047117,"pcap_cnt":6285,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58254,"proto":"UDP","dns":{"type":"answer","id":63845,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":567}}
{"timestamp":"2017-12-12T18:33:31.216982+0100","flow_id":2038286569394070,"pcap_cnt":6208,"event_type":"dns","src_ip":"192.168.1.100","src_port":49569,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35216,"rrname":"xuquranifir.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.573279+0100","flow_id":115706734525224,"pcap_cnt":6387,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63501,"proto":"UDP","dns":{"type":"answer","id":40183,"rcode":"NXDOMAIN","rrname":"cilodamenub.eu"}}
{"timestamp":"2017-12-12T18:33:31.376499+0100","flow_id":956757969714867,"pcap_cnt":6292,"event_type":"dns","src_ip":"192.168.1.100","src_port":58513,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8432,"rrname":"nomojatudyn.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.386012+0100","flow_id":499307445281756,"pcap_cnt":5376,"event_type":"dns","src_ip":"192.168.1.100","src_port":58919,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34653,"rrname":"ryhevelynyj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.573279+0100","flow_id":115706734525224,"pcap_cnt":6387,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63501,"proto":"UDP","dns":{"type":"answer","id":40183,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:31.217272+0100","flow_id":2038286569394070,"pcap_cnt":6209,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49569,"proto":"UDP","dns":{"type":"answer","id":35216,"rcode":"NXDOMAIN","rrname":"xuquranifir.eu"}}
{"timestamp":"2017-12-12T18:33:28.386231+0100","flow_id":499307445281756,"pcap_cnt":5377,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58919,"proto":"UDP","dns":{"type":"answer","id":34653,"rcode":"NXDOMAIN","rrname":"ryhevelynyj.eu"}}
{"timestamp":"2017-12-12T18:33:29.211413+0100","flow_id":76205922007227,"pcap_cnt":5761,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61020,"proto":"UDP","dns":{"type":"answer","id":10206,"rcode":"NXDOMAIN","rrname":"kefatenahic.eu"}}
{"timestamp":"2017-12-12T18:33:28.386231+0100","flow_id":499307445281756,"pcap_cnt":5377,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58919,"proto":"UDP","dns":{"type":"answer","id":34653,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":582}}
{"timestamp":"2017-12-12T18:33:31.842880+0100","flow_id":236618655718528,"pcap_cnt":6512,"event_type":"dns","src_ip":"192.168.1.100","src_port":55769,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36511,"rrname":"tupamapazer.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.740171+0100","flow_id":1705433046403593,"pcap_cnt":6463,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54519,"proto":"UDP","dns":{"type":"answer","id":28332,"rcode":"NXDOMAIN","rrname":"qekikyvutic.eu"}}
{"timestamp":"2017-12-12T18:33:28.441367+0100","flow_id":1730554309216230,"pcap_cnt":5398,"event_type":"dns","src_ip":"192.168.1.100","src_port":56665,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":54674,"rrname":"mavogutogip.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:29.095155+0100","flow_id":495611623985033,"pcap_cnt":5693,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59794,"proto":"UDP","dns":{"type":"answer","id":60138,"rcode":"NXDOMAIN","rrname":"kemybarodiv.eu"}}
{"timestamp":"2017-12-12T18:33:31.223431+0100","flow_id":1525166826547128,"pcap_cnt":6215,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56417,"proto":"UDP","dns":{"type":"answer","id":33911,"rcode":"NXDOMAIN","rrname":"makiwemihiw.eu"}}
{"timestamp":"2017-12-12T18:33:29.095155+0100","flow_id":495611623985033,"pcap_cnt":5693,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59794,"proto":"UDP","dns":{"type":"answer","id":60138,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:31.563434+0100","flow_id":725209840326593,"pcap_cnt":6381,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52528,"proto":"UDP","dns":{"type":"answer","id":195,"rcode":"NXDOMAIN","rrname":"kemawonywig.eu"}}
{"timestamp":"2017-12-12T18:33:31.223431+0100","flow_id":1525166826547128,"pcap_cnt":6215,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56417,"proto":"UDP","dns":{"type":"answer","id":33911,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":569}}
{"timestamp":"2017-12-12T18:33:28.622824+0100","flow_id":1436415622152147,"pcap_cnt":5491,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50803,"proto":"UDP","dns":{"type":"answer","id":31020,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:31.493911+0100","flow_id":1319317633993047,"pcap_cnt":6344,"event_type":"dns","src_ip":"192.168.1.100","src_port":54975,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6245,"rrname":"dikatahyqar.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.234256+0100","flow_id":522880372783627,"pcap_cnt":5768,"event_type":"dns","src_ip":"192.168.1.100","src_port":58138,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41406,"rrname":"xutulenuqix.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:29.018032+0100","flow_id":1132194498692720,"pcap_cnt":5666,"event_type":"dns","src_ip":"192.168.1.100","src_port":54104,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":24131,"rrname":"tucijalexaj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.494253+0100","flow_id":1319317633993047,"pcap_cnt":6346,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54975,"proto":"UDP","dns":{"type":"answer","id":6245,"rcode":"NXDOMAIN","rrname":"dikatahyqar.eu"}}
{"timestamp":"2017-12-12T18:33:29.118821+0100","flow_id":1925552267710501,"pcap_cnt":5714,"event_type":"dns","src_ip":"192.168.1.100","src_port":52328,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":20244,"rrname":"vojubetafuc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.494253+0100","flow_id":1319317633993047,"pcap_cnt":6346,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54975,"proto":"UDP","dns":{"type":"answer","id":6245,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:31.376767+0100","flow_id":956757969714867,"pcap_cnt":6293,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58513,"proto":"UDP","dns":{"type":"answer","id":8432,"rcode":"NXDOMAIN","rrname":"nomojatudyn.eu"}}
{"timestamp":"2017-12-12T18:33:31.217272+0100","flow_id":2038286569394070,"pcap_cnt":6209,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49569,"proto":"UDP","dns":{"type":"answer","id":35216,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":569}}
{"timestamp":"2017-12-12T18:33:29.106370+0100","flow_id":494443394866818,"pcap_cnt":5705,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51412,"proto":"UDP","dns":{"type":"answer","id":38662,"rcode":"NXDOMAIN","rrname":"rytonovejof.eu"}}
{"timestamp":"2017-12-12T18:33:29.399515+0100","flow_id":628057679927100,"pcap_cnt":5851,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59438,"proto":"UDP","dns":{"type":"answer","id":52835,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:29.106370+0100","flow_id":494443394866818,"pcap_cnt":5705,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51412,"proto":"UDP","dns":{"type":"answer","id":38662,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:31.225969+0100","flow_id":686213684753073,"pcap_cnt":6218,"event_type":"dns","src_ip":"192.168.1.100","src_port":49991,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6997,"rrname":"gaherobusit.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.843162+0100","flow_id":236618655718528,"pcap_cnt":6513,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55769,"proto":"UDP","dns":{"type":"answer","id":36511,"rcode":"NXDOMAIN","rrname":"tupamapazer.eu"}}
{"timestamp":"2017-12-12T18:33:31.740171+0100","flow_id":1705433046403593,"pcap_cnt":6463,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54519,"proto":"UDP","dns":{"type":"answer","id":28332,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:31.843162+0100","flow_id":236618655718528,"pcap_cnt":6513,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55769,"proto":"UDP","dns":{"type":"answer","id":36511,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:31.753815+0100","flow_id":25241840222359,"pcap_cnt":6468,"event_type":"dns","src_ip":"192.168.1.100","src_port":56985,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43426,"rrname":"pupucuvymup.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.504525+0100","flow_id":1255064923124429,"pcap_cnt":5902,"event_type":"dns","src_ip":"192.168.1.100","src_port":54572,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":32342,"rrname":"masimafoded.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.800180+0100","flow_id":1057485690189014,"pcap_cnt":6491,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61262,"proto":"UDP","dns":{"type":"answer","id":15277,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:29.014259+0100","flow_id":894841721009833,"pcap_cnt":5665,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58954,"proto":"UDP","dns":{"type":"answer","id":53930,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:31.754079+0100","flow_id":25241840222359,"pcap_cnt":6469,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56985,"proto":"UDP","dns":{"type":"answer","id":43426,"rcode":"NXDOMAIN","rrname":"pupucuvymup.eu"}}
{"timestamp":"2017-12-12T18:33:29.504887+0100","flow_id":1255064923124429,"pcap_cnt":5903,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54572,"proto":"UDP","dns":{"type":"answer","id":32342,"rcode":"NXDOMAIN","rrname":"masimafoded.eu"}}
{"timestamp":"2017-12-12T18:33:29.018295+0100","flow_id":1132194498692720,"pcap_cnt":5667,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54104,"proto":"UDP","dns":{"type":"answer","id":24131,"rcode":"NXDOMAIN","rrname":"tucijalexaj.eu"}}
{"timestamp":"2017-12-12T18:33:31.754079+0100","flow_id":25241840222359,"pcap_cnt":6469,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56985,"proto":"UDP","dns":{"type":"answer","id":43426,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:29.504887+0100","flow_id":1255064923124429,"pcap_cnt":5903,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54572,"proto":"UDP","dns":{"type":"answer","id":32342,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:29.119168+0100","flow_id":1925552267710501,"pcap_cnt":5715,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52328,"proto":"UDP","dns":{"type":"answer","id":20244,"rcode":"NXDOMAIN","rrname":"vojubetafuc.eu"}}
{"timestamp":"2017-12-12T18:33:31.376767+0100","flow_id":956757969714867,"pcap_cnt":6293,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58513,"proto":"UDP","dns":{"type":"answer","id":8432,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":567}}
{"timestamp":"2017-12-12T18:33:29.119168+0100","flow_id":1925552267710501,"pcap_cnt":5715,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52328,"proto":"UDP","dns":{"type":"answer","id":20244,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:29.444142+0100","flow_id":1427969568194741,"pcap_cnt":5884,"event_type":"dns","src_ip":"192.168.1.100","src_port":53230,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4370,"rrname":"marynicosol.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:28.441630+0100","flow_id":1730554309216230,"pcap_cnt":5399,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56665,"proto":"UDP","dns":{"type":"answer","id":54674,"rcode":"NXDOMAIN","rrname":"mavogutogip.eu"}}
{"timestamp":"2017-12-12T18:33:31.563434+0100","flow_id":725209840326593,"pcap_cnt":6381,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52528,"proto":"UDP","dns":{"type":"answer","id":195,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:28.441630+0100","flow_id":1730554309216230,"pcap_cnt":5399,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56665,"proto":"UDP","dns":{"type":"answer","id":54674,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:29.359493+0100","flow_id":580548899208261,"pcap_cnt":5820,"event_type":"dns","src_ip":"192.168.1.100","src_port":58015,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":32402,"rrname":"cidykatafuj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.996449+0100","flow_id":1265435121759329,"pcap_cnt":6574,"event_type":"dns","src_ip":"192.168.1.100","src_port":65478,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60304,"rrname":"xuxetiryqem.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.234503+0100","flow_id":522880372783627,"pcap_cnt":5769,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58138,"proto":"UDP","dns":{"type":"answer","id":41406,"rcode":"NXDOMAIN","rrname":"xutulenuqix.eu"}}
{"timestamp":"2017-12-12T18:33:29.359814+0100","flow_id":580548899208261,"pcap_cnt":5821,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58015,"proto":"UDP","dns":{"type":"answer","id":32402,"rcode":"NXDOMAIN","rrname":"cidykatafuj.eu"}}
{"timestamp":"2017-12-12T18:33:32.120771+0100","flow_id":1477121174984643,"pcap_cnt":6632,"event_type":"dns","src_ip":"192.168.1.100","src_port":55853,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42587,"rrname":"ciciqacidir.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.234503+0100","flow_id":522880372783627,"pcap_cnt":5769,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58138,"proto":"UDP","dns":{"type":"answer","id":41406,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:31.296903+0100","flow_id":951464422508487,"pcap_cnt":6250,"event_type":"dns","src_ip":"192.168.1.100","src_port":62926,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":63761,"rrname":"citeqotacyn.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.103449+0100","flow_id":1000119959393305,"pcap_cnt":5698,"event_type":"dns","src_ip":"192.168.1.100","src_port":63954,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49217,"rrname":"magygicumof.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.617343+0100","flow_id":1819973381745535,"pcap_cnt":6408,"event_type":"dns","src_ip":"192.168.1.100","src_port":53158,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":20595,"rrname":"tunicyqokuv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.018295+0100","flow_id":1132194498692720,"pcap_cnt":5667,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54104,"proto":"UDP","dns":{"type":"answer","id":24131,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:32.121050+0100","flow_id":1477121174984643,"pcap_cnt":6633,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55853,"proto":"UDP","dns":{"type":"answer","id":42587,"rcode":"NXDOMAIN","rrname":"ciciqacidir.eu"}}
{"timestamp":"2017-12-12T18:33:29.211413+0100","flow_id":76205922007227,"pcap_cnt":5761,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61020,"proto":"UDP","dns":{"type":"answer","id":10206,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:32.121050+0100","flow_id":1477121174984643,"pcap_cnt":6633,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55853,"proto":"UDP","dns":{"type":"answer","id":42587,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:29.119875+0100","flow_id":811394801456195,"pcap_cnt":5716,"event_type":"dns","src_ip":"192.168.1.100","src_port":56449,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38017,"rrname":"nofoletezup.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.434605+0100","flow_id":1293230002512301,"pcap_cnt":5876,"event_type":"dns","src_ip":"192.168.1.100","src_port":55561,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":159,"rrname":"gaqaneziwoc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.444422+0100","flow_id":1427969568194741,"pcap_cnt":5885,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53230,"proto":"UDP","dns":{"type":"answer","id":4370,"rcode":"NXDOMAIN","rrname":"marynicosol.eu"}}
{"timestamp":"2017-12-12T18:33:31.226182+0100","flow_id":686213684753073,"pcap_cnt":6219,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49991,"proto":"UDP","dns":{"type":"answer","id":6997,"rcode":"NXDOMAIN","rrname":"gaherobusit.eu"}}
{"timestamp":"2017-12-12T18:33:29.434869+0100","flow_id":1293230002512301,"pcap_cnt":5877,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55561,"proto":"UDP","dns":{"type":"answer","id":159,"rcode":"NXDOMAIN","rrname":"gaqaneziwoc.eu"}}
{"timestamp":"2017-12-12T18:33:31.835010+0100","flow_id":59713247755714,"pcap_cnt":6508,"event_type":"dns","src_ip":"192.168.1.100","src_port":58784,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64890,"rrname":"fodihywalyj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.434869+0100","flow_id":1293230002512301,"pcap_cnt":5877,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55561,"proto":"UDP","dns":{"type":"answer","id":159,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:29.359814+0100","flow_id":580548899208261,"pcap_cnt":5821,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58015,"proto":"UDP","dns":{"type":"answer","id":32402,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:31.835317+0100","flow_id":59713247755714,"pcap_cnt":6509,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58784,"proto":"UDP","dns":{"type":"answer","id":64890,"rcode":"NXDOMAIN","rrname":"fodihywalyj.eu"}}
{"timestamp":"2017-12-12T18:33:29.603606+0100","flow_id":1313467888383446,"pcap_cnt":5948,"event_type":"dns","src_ip":"192.168.1.100","src_port":65081,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34457,"rrname":"lyrugujiqat.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.835317+0100","flow_id":59713247755714,"pcap_cnt":6509,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58784,"proto":"UDP","dns":{"type":"answer","id":64890,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:29.103786+0100","flow_id":1000119959393305,"pcap_cnt":5699,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63954,"proto":"UDP","dns":{"type":"answer","id":49217,"rcode":"NXDOMAIN","rrname":"magygicumof.eu"}}
{"timestamp":"2017-12-12T18:33:29.688236+0100","flow_id":1116732614743275,"pcap_cnt":5980,"event_type":"dns","src_ip":"192.168.1.100","src_port":52852,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":56563,"rrname":"dikoniwudim.eu","rrtype":"A","tx_id":2}}
{"timestamp":"2017-12-12T18:33:31.297215+0100","flow_id":951464422508487,"pcap_cnt":6251,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62926,"proto":"UDP","dns":{"type":"answer","id":63761,"rcode":"NXDOMAIN","rrname":"citeqotacyn.eu"}}
{"timestamp":"2017-12-12T18:33:31.854039+0100","flow_id":1865850073970970,"pcap_cnt":6518,"event_type":"dns","src_ip":"192.168.1.100","src_port":50990,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":5911,"rrname":"fobatesohek.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:29.688486+0100","flow_id":1116732614743275,"pcap_cnt":5981,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52852,"proto":"UDP","dns":{"type":"answer","id":56563,"rcode":"NXDOMAIN","rrname":"dikoniwudim.eu"}}
{"timestamp":"2017-12-12T18:33:29.688486+0100","flow_id":1116732614743275,"pcap_cnt":5981,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52852,"proto":"UDP","dns":{"type":"answer","id":56563,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":546}}
{"timestamp":"2017-12-12T18:33:31.854343+0100","flow_id":1865850073970970,"pcap_cnt":6519,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50990,"proto":"UDP","dns":{"type":"answer","id":5911,"rcode":"NXDOMAIN","rrname":"fobatesohek.eu"}}
{"timestamp":"2017-12-12T18:33:29.523364+0100","flow_id":1662028106824804,"pcap_cnt":5912,"event_type":"dns","src_ip":"192.168.1.100","src_port":51289,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49126,"rrname":"ryqehegubes.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.444422+0100","flow_id":1427969568194741,"pcap_cnt":5885,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53230,"proto":"UDP","dns":{"type":"answer","id":4370,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:31.226182+0100","flow_id":686213684753073,"pcap_cnt":6219,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49991,"proto":"UDP","dns":{"type":"answer","id":6997,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":569}}
{"timestamp":"2017-12-12T18:33:29.523697+0100","flow_id":1662028106824804,"pcap_cnt":5913,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51289,"proto":"UDP","dns":{"type":"answer","id":49126,"rcode":"NXDOMAIN","rrname":"ryqehegubes.eu"}}
{"timestamp":"2017-12-12T18:33:28.484998+0100","flow_id":1748507273225862,"pcap_cnt":5420,"event_type":"dns","src_ip":"192.168.1.100","src_port":58928,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36974,"rrname":"norococitef.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.996724+0100","flow_id":1265435121759329,"pcap_cnt":6575,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65478,"proto":"UDP","dns":{"type":"answer","id":60304,"rcode":"NXDOMAIN","rrname":"xuxetiryqem.eu"}}
{"timestamp":"2017-12-12T18:33:31.345419+0100","flow_id":2054487186031947,"pcap_cnt":6276,"event_type":"dns","src_ip":"192.168.1.100","src_port":65448,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62021,"rrname":"vonezukemac.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.485361+0100","flow_id":1748507273225862,"pcap_cnt":5421,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58928,"proto":"UDP","dns":{"type":"answer","id":36974,"rcode":"NXDOMAIN","rrname":"norococitef.eu"}}
{"timestamp":"2017-12-12T18:33:31.996724+0100","flow_id":1265435121759329,"pcap_cnt":6575,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65478,"proto":"UDP","dns":{"type":"answer","id":60304,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:31.345726+0100","flow_id":2054487186031947,"pcap_cnt":6277,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65448,"proto":"UDP","dns":{"type":"answer","id":62021,"rcode":"NXDOMAIN","rrname":"vonezukemac.eu"}}
{"timestamp":"2017-12-12T18:33:31.617607+0100","flow_id":1819973381745535,"pcap_cnt":6409,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53158,"proto":"UDP","dns":{"type":"answer","id":20595,"rcode":"NXDOMAIN","rrname":"tunicyqokuv.eu"}}
{"timestamp":"2017-12-12T18:33:31.465477+0100","flow_id":1254158685116997,"pcap_cnt":6328,"event_type":"dns","src_ip":"192.168.1.100","src_port":58643,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":20875,"rrname":"cihipifebep.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.617607+0100","flow_id":1819973381745535,"pcap_cnt":6409,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53158,"proto":"UDP","dns":{"type":"answer","id":20595,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":569}}
{"timestamp":"2017-12-12T18:33:32.154201+0100","flow_id":1477121174984643,"pcap_cnt":6650,"event_type":"dns","src_ip":"192.168.1.100","src_port":55853,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34279,"rrname":"purodogidot.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:31.297215+0100","flow_id":951464422508487,"pcap_cnt":6251,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62926,"proto":"UDP","dns":{"type":"answer","id":63761,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:31.465723+0100","flow_id":1254158685116997,"pcap_cnt":6329,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58643,"proto":"UDP","dns":{"type":"answer","id":20875,"rcode":"NXDOMAIN","rrname":"cihipifebep.eu"}}
{"timestamp":"2017-12-12T18:33:29.120146+0100","flow_id":811394801456195,"pcap_cnt":5717,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56449,"proto":"UDP","dns":{"type":"answer","id":38017,"rcode":"NXDOMAIN","rrname":"nofoletezup.eu"}}
{"timestamp":"2017-12-12T18:33:31.854343+0100","flow_id":1865850073970970,"pcap_cnt":6519,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50990,"proto":"UDP","dns":{"type":"answer","id":5911,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:29.120146+0100","flow_id":811394801456195,"pcap_cnt":5717,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56449,"proto":"UDP","dns":{"type":"answer","id":38017,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:29.260887+0100","flow_id":2078569067399445,"pcap_cnt":5778,"event_type":"dns","src_ip":"192.168.1.100","src_port":64588,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49229,"rrname":"purijygirem.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:29.174398+0100","flow_id":530211882510654,"pcap_cnt":5742,"event_type":"dns","src_ip":"192.168.1.100","src_port":62878,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47216,"rrname":"pumugoviwod.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.850137+0100","flow_id":1161415308867801,"pcap_cnt":6516,"event_type":"dns","src_ip":"192.168.1.100","src_port":54692,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":36824,"rrname":"dimigesupew.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.518239+0100","flow_id":1791660957231199,"pcap_cnt":5910,"event_type":"dns","src_ip":"192.168.1.100","src_port":49188,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7901,"rrname":"keralanyxiq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.174668+0100","flow_id":530211882510654,"pcap_cnt":5743,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62878,"proto":"UDP","dns":{"type":"answer","id":47216,"rcode":"NXDOMAIN","rrname":"pumugoviwod.eu"}}
{"timestamp":"2017-12-12T18:33:29.261145+0100","flow_id":2078569067399445,"pcap_cnt":5779,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64588,"proto":"UDP","dns":{"type":"answer","id":49229,"rcode":"NXDOMAIN","rrname":"purijygirem.eu"}}
{"timestamp":"2017-12-12T18:33:29.603862+0100","flow_id":1313467888383446,"pcap_cnt":5949,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65081,"proto":"UDP","dns":{"type":"answer","id":34457,"rcode":"NXDOMAIN","rrname":"lyrugujiqat.eu"}}
{"timestamp":"2017-12-12T18:33:31.850446+0100","flow_id":1161415308867801,"pcap_cnt":6517,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54692,"proto":"UDP","dns":{"type":"answer","id":36824,"rcode":"NXDOMAIN","rrname":"dimigesupew.eu"}}
{"timestamp":"2017-12-12T18:33:31.345726+0100","flow_id":2054487186031947,"pcap_cnt":6277,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65448,"proto":"UDP","dns":{"type":"answer","id":62021,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":567}}
{"timestamp":"2017-12-12T18:33:31.808603+0100","flow_id":1740086990034587,"pcap_cnt":6494,"event_type":"dns","src_ip":"192.168.1.100","src_port":57312,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31168,"rrname":"qebexequsyw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.603862+0100","flow_id":1313467888383446,"pcap_cnt":5949,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65081,"proto":"UDP","dns":{"type":"answer","id":34457,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:30.226282+0100","flow_id":871816400798337,"pcap_cnt":6168,"event_type":"dns","src_ip":"192.168.1.100","src_port":55926,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":61032,"rrname":"kemygexaxab.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:31.673070+0100","flow_id":28825990415662,"pcap_cnt":6436,"event_type":"dns","src_ip":"192.168.1.100","src_port":52646,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":15509,"rrname":"xuqaxiraxyx.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.712646+0100","flow_id":1910483374956486,"pcap_cnt":5996,"event_type":"dns","src_ip":"192.168.1.100","src_port":59920,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40593,"rrname":"jepororyrih.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.310475+0100","flow_id":2095918588083403,"pcap_cnt":6260,"event_type":"dns","src_ip":"192.168.1.100","src_port":62659,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18199,"rrname":"divoxehaceb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.673377+0100","flow_id":28825990415662,"pcap_cnt":6437,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52646,"proto":"UDP","dns":{"type":"answer","id":15509,"rcode":"NXDOMAIN","rrname":"xuqaxiraxyx.eu"}}
{"timestamp":"2017-12-12T18:33:29.523697+0100","flow_id":1662028106824804,"pcap_cnt":5913,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51289,"proto":"UDP","dns":{"type":"answer","id":49126,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:31.940043+0100","flow_id":1428759843133451,"pcap_cnt":6558,"event_type":"dns","src_ip":"192.168.1.100","src_port":54455,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53412,"rrname":"xukorejymod.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.174668+0100","flow_id":530211882510654,"pcap_cnt":5743,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62878,"proto":"UDP","dns":{"type":"answer","id":47216,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:29.994381+0100","flow_id":2053179368352845,"pcap_cnt":6082,"event_type":"dns","src_ip":"192.168.1.100","src_port":52064,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47819,"rrname":"xudylenyrob.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.215528+0100","flow_id":1885755099002357,"pcap_cnt":5762,"event_type":"dns","src_ip":"192.168.1.100","src_port":58445,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38092,"rrname":"qegosegodej.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:31.940270+0100","flow_id":1428759843133451,"pcap_cnt":6559,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54455,"proto":"UDP","dns":{"type":"answer","id":53412,"rcode":"NXDOMAIN","rrname":"xukorejymod.eu"}}
{"timestamp":"2017-12-12T18:33:29.518475+0100","flow_id":1791660957231199,"pcap_cnt":5911,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49188,"proto":"UDP","dns":{"type":"answer","id":7901,"rcode":"NXDOMAIN","rrname":"keralanyxiq.eu"}}
{"timestamp":"2017-12-12T18:33:29.215798+0100","flow_id":1885755099002357,"pcap_cnt":5763,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58445,"proto":"UDP","dns":{"type":"answer","id":38092,"rcode":"NXDOMAIN","rrname":"qegosegodej.eu"}}
{"timestamp":"2017-12-12T18:33:29.518475+0100","flow_id":1791660957231199,"pcap_cnt":5911,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49188,"proto":"UDP","dns":{"type":"answer","id":7901,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:31.850446+0100","flow_id":1161415308867801,"pcap_cnt":6517,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54692,"proto":"UDP","dns":{"type":"answer","id":36824,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:31.465723+0100","flow_id":1254158685116997,"pcap_cnt":6329,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58643,"proto":"UDP","dns":{"type":"answer","id":20875,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":569}}
{"timestamp":"2017-12-12T18:33:31.271057+0100","flow_id":1796703248351931,"pcap_cnt":6240,"event_type":"dns","src_ip":"192.168.1.100","src_port":52306,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41194,"rrname":"gaciduwifuh.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:30.226554+0100","flow_id":871816400798337,"pcap_cnt":6169,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55926,"proto":"UDP","dns":{"type":"answer","id":61032,"rcode":"NXDOMAIN","rrname":"kemygexaxab.eu"}}
{"timestamp":"2017-12-12T18:33:31.494245+0100","flow_id":2096006634900133,"pcap_cnt":6345,"event_type":"dns","src_ip":"192.168.1.100","src_port":56855,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2409,"rrname":"puzigagacal.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.673377+0100","flow_id":28825990415662,"pcap_cnt":6437,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52646,"proto":"UDP","dns":{"type":"answer","id":15509,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":569}}
{"timestamp":"2017-12-12T18:33:29.103786+0100","flow_id":1000119959393305,"pcap_cnt":5699,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63954,"proto":"UDP","dns":{"type":"answer","id":49217,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:31.310712+0100","flow_id":2095918588083403,"pcap_cnt":6261,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62659,"proto":"UDP","dns":{"type":"answer","id":18199,"rcode":"NXDOMAIN","rrname":"divoxehaceb.eu"}}
{"timestamp":"2017-12-12T18:33:28.485361+0100","flow_id":1748507273225862,"pcap_cnt":5421,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58928,"proto":"UDP","dns":{"type":"answer","id":36974,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":583}}
{"timestamp":"2017-12-12T18:33:32.002592+0100","flow_id":2148959286725152,"pcap_cnt":6580,"event_type":"dns","src_ip":"192.168.1.100","src_port":61774,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":32270,"rrname":"masytoturen.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.261145+0100","flow_id":2078569067399445,"pcap_cnt":5779,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64588,"proto":"UDP","dns":{"type":"answer","id":49229,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:28.637830+0100","flow_id":1643589812140934,"pcap_cnt":5498,"event_type":"dns","src_ip":"192.168.1.100","src_port":62326,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31718,"rrname":"jepikijexyg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:32.002859+0100","flow_id":2148959286725152,"pcap_cnt":6581,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61774,"proto":"UDP","dns":{"type":"answer","id":32270,"rcode":"NXDOMAIN","rrname":"masytoturen.eu"}}
{"timestamp":"2017-12-12T18:33:29.364515+0100","flow_id":670781867134947,"pcap_cnt":5826,"event_type":"dns","src_ip":"192.168.1.100","src_port":61870,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":23812,"rrname":"mamevetopym.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.808905+0100","flow_id":1740086990034587,"pcap_cnt":6495,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57312,"proto":"UDP","dns":{"type":"answer","id":31168,"rcode":"NXDOMAIN","rrname":"qebexequsyw.eu"}}
{"timestamp":"2017-12-12T18:33:32.148674+0100","flow_id":543902090937538,"pcap_cnt":6648,"event_type":"dns","src_ip":"192.168.1.100","src_port":60658,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":16945,"rrname":"magusecutuk.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.207537+0100","flow_id":1090413056961201,"pcap_cnt":6198,"event_type":"dns","src_ip":"192.168.1.100","src_port":65445,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":3614,"rrname":"fokafobeqix.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.712907+0100","flow_id":1910483374956486,"pcap_cnt":5997,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59920,"proto":"UDP","dns":{"type":"answer","id":40593,"rcode":"NXDOMAIN","rrname":"jepororyrih.eu"}}
{"timestamp":"2017-12-12T18:33:31.271281+0100","flow_id":1796703248351931,"pcap_cnt":6241,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52306,"proto":"UDP","dns":{"type":"answer","id":41194,"rcode":"NXDOMAIN","rrname":"gaciduwifuh.eu"}}
{"timestamp":"2017-12-12T18:33:32.148912+0100","flow_id":543902090937538,"pcap_cnt":6649,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60658,"proto":"UDP","dns":{"type":"answer","id":16945,"rcode":"NXDOMAIN","rrname":"magusecutuk.eu"}}
{"timestamp":"2017-12-12T18:33:30.226554+0100","flow_id":871816400798337,"pcap_cnt":6169,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55926,"proto":"UDP","dns":{"type":"answer","id":61032,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:31.271281+0100","flow_id":1796703248351931,"pcap_cnt":6241,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52306,"proto":"UDP","dns":{"type":"answer","id":41194,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:31.310712+0100","flow_id":2095918588083403,"pcap_cnt":6261,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62659,"proto":"UDP","dns":{"type":"answer","id":18199,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:29.657776+0100","flow_id":1865607409109360,"pcap_cnt":5970,"event_type":"dns","src_ip":"192.168.1.100","src_port":50133,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40299,"rrname":"galodiwosuf.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.543106+0100","flow_id":1946666327034242,"pcap_cnt":6372,"event_type":"dns","src_ip":"192.168.1.100","src_port":57557,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":24175,"rrname":"digowibymih.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.610319+0100","flow_id":797429715390479,"pcap_cnt":6404,"event_type":"dns","src_ip":"192.168.1.100","src_port":52746,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42303,"rrname":"volyrukupoq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.940270+0100","flow_id":1428759843133451,"pcap_cnt":6559,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54455,"proto":"UDP","dns":{"type":"answer","id":53412,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:31.543415+0100","flow_id":1946666327034242,"pcap_cnt":6373,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57557,"proto":"UDP","dns":{"type":"answer","id":24175,"rcode":"NXDOMAIN","rrname":"digowibymih.eu"}}
{"timestamp":"2017-12-12T18:33:28.638067+0100","flow_id":1643589812140934,"pcap_cnt":5499,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62326,"proto":"UDP","dns":{"type":"answer","id":31718,"rcode":"NXDOMAIN","rrname":"jepikijexyg.eu"}}
{"timestamp":"2017-12-12T18:33:29.215798+0100","flow_id":1885755099002357,"pcap_cnt":5763,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58445,"proto":"UDP","dns":{"type":"answer","id":38092,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:28.638067+0100","flow_id":1643589812140934,"pcap_cnt":5499,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62326,"proto":"UDP","dns":{"type":"answer","id":31718,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":584}}
{"timestamp":"2017-12-12T18:33:32.002859+0100","flow_id":2148959286725152,"pcap_cnt":6581,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61774,"proto":"UDP","dns":{"type":"answer","id":32270,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:29.364770+0100","flow_id":670781867134947,"pcap_cnt":5827,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61870,"proto":"UDP","dns":{"type":"answer","id":23812,"rcode":"NXDOMAIN","rrname":"mamevetopym.eu"}}
{"timestamp":"2017-12-12T18:33:29.286237+0100","flow_id":2169944496758301,"pcap_cnt":5788,"event_type":"dns","src_ip":"192.168.1.100","src_port":53512,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59593,"rrname":"dimasyhageh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.808905+0100","flow_id":1740086990034587,"pcap_cnt":6495,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57312,"proto":"UDP","dns":{"type":"answer","id":31168,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:29.364770+0100","flow_id":670781867134947,"pcap_cnt":5827,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61870,"proto":"UDP","dns":{"type":"answer","id":23812,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:29.712907+0100","flow_id":1910483374956486,"pcap_cnt":5997,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59920,"proto":"UDP","dns":{"type":"answer","id":40593,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":546}}
{"timestamp":"2017-12-12T18:33:31.207754+0100","flow_id":1090413056961201,"pcap_cnt":6199,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65445,"proto":"UDP","dns":{"type":"answer","id":3614,"rcode":"NXDOMAIN","rrname":"fokafobeqix.eu"}}
{"timestamp":"2017-12-12T18:33:29.286498+0100","flow_id":2169944496758301,"pcap_cnt":5789,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53512,"proto":"UDP","dns":{"type":"answer","id":59593,"rcode":"NXDOMAIN","rrname":"dimasyhageh.eu"}}
{"timestamp":"2017-12-12T18:33:31.494537+0100","flow_id":2096006634900133,"pcap_cnt":6347,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56855,"proto":"UDP","dns":{"type":"answer","id":2409,"rcode":"NXDOMAIN","rrname":"puzigagacal.eu"}}
{"timestamp":"2017-12-12T18:33:32.163432+0100","flow_id":1112111231827560,"pcap_cnt":6656,"event_type":"dns","src_ip":"192.168.1.100","src_port":49715,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":15372,"rrname":"fobuvohevor.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.207754+0100","flow_id":1090413056961201,"pcap_cnt":6199,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65445,"proto":"UDP","dns":{"type":"answer","id":3614,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:31.610558+0100","flow_id":797429715390479,"pcap_cnt":6405,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52746,"proto":"UDP","dns":{"type":"answer","id":42303,"rcode":"NXDOMAIN","rrname":"volyrukupoq.eu"}}
{"timestamp":"2017-12-12T18:33:32.163701+0100","flow_id":1112111231827560,"pcap_cnt":6657,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49715,"proto":"UDP","dns":{"type":"answer","id":15372,"rcode":"NXDOMAIN","rrname":"fobuvohevor.eu"}}
{"timestamp":"2017-12-12T18:33:32.154449+0100","flow_id":1477121174984643,"pcap_cnt":6651,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55853,"proto":"UDP","dns":{"type":"answer","id":34279,"rcode":"NXDOMAIN","rrname":"purodogidot.eu"}}
{"timestamp":"2017-12-12T18:33:31.242972+0100","flow_id":1455055780427036,"pcap_cnt":6226,"event_type":"dns","src_ip":"192.168.1.100","src_port":52875,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":57834,"rrname":"tupudyqusuj.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:32.089059+0100","flow_id":1993496503016419,"pcap_cnt":6620,"event_type":"dns","src_ip":"192.168.1.100","src_port":56871,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":52084,"rrname":"jefiredisav.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:28.822256+0100","flow_id":97796722559984,"pcap_cnt":5576,"event_type":"dns","src_ip":"192.168.1.100","src_port":53682,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31553,"rrname":"vowokafopyv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.243223+0100","flow_id":1455055780427036,"pcap_cnt":6227,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52875,"proto":"UDP","dns":{"type":"answer","id":57834,"rcode":"NXDOMAIN","rrname":"tupudyqusuj.eu"}}
{"timestamp":"2017-12-12T18:33:32.089399+0100","flow_id":1993496503016419,"pcap_cnt":6621,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56871,"proto":"UDP","dns":{"type":"answer","id":52084,"rcode":"NXDOMAIN","rrname":"jefiredisav.eu"}}
{"timestamp":"2017-12-12T18:33:28.822508+0100","flow_id":97796722559984,"pcap_cnt":5577,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53682,"proto":"UDP","dns":{"type":"answer","id":31553,"rcode":"NXDOMAIN","rrname":"vowokafopyv.eu"}}
{"timestamp":"2017-12-12T18:33:32.089399+0100","flow_id":1993496503016419,"pcap_cnt":6621,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56871,"proto":"UDP","dns":{"type":"answer","id":52084,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:29.994631+0100","flow_id":2053179368352845,"pcap_cnt":6083,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52064,"proto":"UDP","dns":{"type":"answer","id":47819,"rcode":"NXDOMAIN","rrname":"xudylenyrob.eu"}}
{"timestamp":"2017-12-12T18:33:29.436044+0100","flow_id":783447449249612,"pcap_cnt":5878,"event_type":"dns","src_ip":"192.168.1.100","src_port":58989,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":58098,"rrname":"kevigyxelox.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.286498+0100","flow_id":2169944496758301,"pcap_cnt":5789,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53512,"proto":"UDP","dns":{"type":"answer","id":59593,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:29.658069+0100","flow_id":1865607409109360,"pcap_cnt":5971,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50133,"proto":"UDP","dns":{"type":"answer","id":40299,"rcode":"NXDOMAIN","rrname":"galodiwosuf.eu"}}
{"timestamp":"2017-12-12T18:33:31.494537+0100","flow_id":2096006634900133,"pcap_cnt":6347,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56855,"proto":"UDP","dns":{"type":"answer","id":2409,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:29.930875+0100","flow_id":521181713740859,"pcap_cnt":6056,"event_type":"dns","src_ip":"192.168.1.100","src_port":61401,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44581,"rrname":"xutekidywyp.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:32.097289+0100","flow_id":2122480813374473,"pcap_cnt":6622,"event_type":"dns","src_ip":"192.168.1.100","src_port":58944,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9349,"rrname":"kepabydokas.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:32.163701+0100","flow_id":1112111231827560,"pcap_cnt":6657,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49715,"proto":"UDP","dns":{"type":"answer","id":15372,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:32.097565+0100","flow_id":2122480813374473,"pcap_cnt":6623,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58944,"proto":"UDP","dns":{"type":"answer","id":9349,"rcode":"NXDOMAIN","rrname":"kepabydokas.eu"}}
{"timestamp":"2017-12-12T18:33:31.543415+0100","flow_id":1946666327034242,"pcap_cnt":6373,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57557,"proto":"UDP","dns":{"type":"answer","id":24175,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:32.097565+0100","flow_id":2122480813374473,"pcap_cnt":6623,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58944,"proto":"UDP","dns":{"type":"answer","id":9349,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:32.154449+0100","flow_id":1477121174984643,"pcap_cnt":6651,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":55853,"proto":"UDP","dns":{"type":"answer","id":34279,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:32.148912+0100","flow_id":543902090937538,"pcap_cnt":6649,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60658,"proto":"UDP","dns":{"type":"answer","id":16945,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:31.259996+0100","flow_id":1816881005328284,"pcap_cnt":6236,"event_type":"dns","src_ip":"192.168.1.100","src_port":61377,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50532,"rrname":"fobykuwyruq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:32.210108+0100","flow_id":91839603160252,"pcap_cnt":6684,"event_type":"dns","src_ip":"192.168.1.100","src_port":60508,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49921,"rrname":"vonymomaxyb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.243223+0100","flow_id":1455055780427036,"pcap_cnt":6227,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52875,"proto":"UDP","dns":{"type":"answer","id":57834,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:28.822508+0100","flow_id":97796722559984,"pcap_cnt":5577,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53682,"proto":"UDP","dns":{"type":"answer","id":31553,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":585}}
{"timestamp":"2017-12-12T18:33:31.260331+0100","flow_id":1816881005328284,"pcap_cnt":6237,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61377,"proto":"UDP","dns":{"type":"answer","id":50532,"rcode":"NXDOMAIN","rrname":"fobykuwyruq.eu"}}
{"timestamp":"2017-12-12T18:33:32.189309+0100","flow_id":879021209215869,"pcap_cnt":6670,"event_type":"dns","src_ip":"192.168.1.100","src_port":59759,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":24142,"rrname":"galuhubywum.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.994631+0100","flow_id":2053179368352845,"pcap_cnt":6083,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52064,"proto":"UDP","dns":{"type":"answer","id":47819,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:29.436333+0100","flow_id":783447449249612,"pcap_cnt":5879,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58989,"proto":"UDP","dns":{"type":"answer","id":58098,"rcode":"NXDOMAIN","rrname":"kevigyxelox.eu"}}
{"timestamp":"2017-12-12T18:33:29.115713+0100","flow_id":422908567077889,"pcap_cnt":5710,"event_type":"dns","src_ip":"192.168.1.100","src_port":63176,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":18720,"rrname":"xuxoferyvuc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.658069+0100","flow_id":1865607409109360,"pcap_cnt":5971,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50133,"proto":"UDP","dns":{"type":"answer","id":40299,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:32.189581+0100","flow_id":879021209215869,"pcap_cnt":6671,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59759,"proto":"UDP","dns":{"type":"answer","id":24142,"rcode":"NXDOMAIN","rrname":"galuhubywum.eu"}}
{"timestamp":"2017-12-12T18:33:29.931111+0100","flow_id":521181713740859,"pcap_cnt":6057,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61401,"proto":"UDP","dns":{"type":"answer","id":44581,"rcode":"NXDOMAIN","rrname":"xutekidywyp.eu"}}
{"timestamp":"2017-12-12T18:33:32.143963+0100","flow_id":1310323972518491,"pcap_cnt":6644,"event_type":"dns","src_ip":"192.168.1.100","src_port":57411,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":39328,"rrname":"rydyvigecot.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.870007+0100","flow_id":750547999591425,"pcap_cnt":6028,"event_type":"dns","src_ip":"192.168.1.100","src_port":59214,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":40239,"rrname":"nozoxucavaq.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:31.272948+0100","flow_id":1722786861754932,"pcap_cnt":6242,"event_type":"dns","src_ip":"192.168.1.100","src_port":49401,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64816,"rrname":"jelaqirozum.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:32.144227+0100","flow_id":1310323972518491,"pcap_cnt":6645,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57411,"proto":"UDP","dns":{"type":"answer","id":39328,"rcode":"NXDOMAIN","rrname":"rydyvigecot.eu"}}
{"timestamp":"2017-12-12T18:33:29.304572+0100","flow_id":867727592498620,"pcap_cnt":5794,"event_type":"dns","src_ip":"192.168.1.100","src_port":51383,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":26449,"rrname":"gacucuhumeg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.610558+0100","flow_id":797429715390479,"pcap_cnt":6405,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52746,"proto":"UDP","dns":{"type":"answer","id":42303,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:29.436333+0100","flow_id":783447449249612,"pcap_cnt":5879,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58989,"proto":"UDP","dns":{"type":"answer","id":58098,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:30.100439+0100","flow_id":494157779601495,"pcap_cnt":6116,"event_type":"dns","src_ip":"192.168.1.100","src_port":63750,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48556,"rrname":"xuguxujytej.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.922511+0100","flow_id":2038333813483290,"pcap_cnt":6050,"event_type":"dns","src_ip":"192.168.1.100","src_port":50998,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":55150,"rrname":"dimutobihom.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:29.115938+0100","flow_id":422908567077889,"pcap_cnt":5711,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63176,"proto":"UDP","dns":{"type":"answer","id":18720,"rcode":"NXDOMAIN","rrname":"xuxoferyvuc.eu"}}
{"timestamp":"2017-12-12T18:33:29.922762+0100","flow_id":2038333813483290,"pcap_cnt":6051,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50998,"proto":"UDP","dns":{"type":"answer","id":55150,"rcode":"NXDOMAIN","rrname":"dimutobihom.eu"}}
{"timestamp":"2017-12-12T18:33:31.597321+0100","flow_id":1796703248351931,"pcap_cnt":6396,"event_type":"dns","src_ip":"192.168.1.100","src_port":52306,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":27215,"rrname":"lymunyjigak.eu","rrtype":"A","tx_id":2}}
{"timestamp":"2017-12-12T18:33:29.922762+0100","flow_id":2038333813483290,"pcap_cnt":6051,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50998,"proto":"UDP","dns":{"type":"answer","id":55150,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":547}}
{"timestamp":"2017-12-12T18:33:32.189581+0100","flow_id":879021209215869,"pcap_cnt":6671,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59759,"proto":"UDP","dns":{"type":"answer","id":24142,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:29.931111+0100","flow_id":521181713740859,"pcap_cnt":6057,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61401,"proto":"UDP","dns":{"type":"answer","id":44581,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":547}}
{"timestamp":"2017-12-12T18:33:31.260331+0100","flow_id":1816881005328284,"pcap_cnt":6237,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61377,"proto":"UDP","dns":{"type":"answer","id":50532,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:32.209472+0100","flow_id":726206272778816,"pcap_cnt":6682,"event_type":"dns","src_ip":"192.168.1.100","src_port":49853,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6632,"rrname":"ciqapomogyg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.248454+0100","flow_id":1228305129097089,"pcap_cnt":6232,"event_type":"dns","src_ip":"192.168.1.100","src_port":57196,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19923,"rrname":"qetuluvolos.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:32.144227+0100","flow_id":1310323972518491,"pcap_cnt":6645,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57411,"proto":"UDP","dns":{"type":"answer","id":39328,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:31.278271+0100","flow_id":1868351893356287,"pcap_cnt":6244,"event_type":"dns","src_ip":"192.168.1.100","src_port":57913,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":55803,"rrname":"kejycirenuh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.907572+0100","flow_id":1816900332673332,"pcap_cnt":6540,"event_type":"dns","src_ip":"192.168.1.100","src_port":58263,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":28817,"rrname":"rylefogohan.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.115938+0100","flow_id":422908567077889,"pcap_cnt":5711,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63176,"proto":"UDP","dns":{"type":"answer","id":18720,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:31.278633+0100","flow_id":1868351893356287,"pcap_cnt":6245,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57913,"proto":"UDP","dns":{"type":"answer","id":55803,"rcode":"NXDOMAIN","rrname":"kejycirenuh.eu"}}
{"timestamp":"2017-12-12T18:33:30.100687+0100","flow_id":494157779601495,"pcap_cnt":6117,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63750,"proto":"UDP","dns":{"type":"answer","id":48556,"rcode":"NXDOMAIN","rrname":"xuguxujytej.eu"}}
{"timestamp":"2017-12-12T18:33:31.907847+0100","flow_id":1816900332673332,"pcap_cnt":6541,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58263,"proto":"UDP","dns":{"type":"answer","id":28817,"rcode":"NXDOMAIN","rrname":"rylefogohan.eu"}}
{"timestamp":"2017-12-12T18:33:30.100687+0100","flow_id":494157779601495,"pcap_cnt":6117,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63750,"proto":"UDP","dns":{"type":"answer","id":48556,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:31.907847+0100","flow_id":1816900332673332,"pcap_cnt":6541,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":58263,"proto":"UDP","dns":{"type":"answer","id":28817,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":571}}
{"timestamp":"2017-12-12T18:33:31.597616+0100","flow_id":1796703248351931,"pcap_cnt":6397,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52306,"proto":"UDP","dns":{"type":"answer","id":27215,"rcode":"NXDOMAIN","rrname":"lymunyjigak.eu"}}
{"timestamp":"2017-12-12T18:33:29.870231+0100","flow_id":750547999591425,"pcap_cnt":6029,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59214,"proto":"UDP","dns":{"type":"answer","id":40239,"rcode":"NXDOMAIN","rrname":"nozoxucavaq.eu"}}
{"timestamp":"2017-12-12T18:33:31.273194+0100","flow_id":1722786861754932,"pcap_cnt":6243,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49401,"proto":"UDP","dns":{"type":"answer","id":64816,"rcode":"NXDOMAIN","rrname":"jelaqirozum.eu"}}
{"timestamp":"2017-12-12T18:33:31.392984+0100","flow_id":604727417765656,"pcap_cnt":6300,"event_type":"dns","src_ip":"192.168.1.100","src_port":60422,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":21521,"rrname":"foqilozutoz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.273194+0100","flow_id":1722786861754932,"pcap_cnt":6243,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49401,"proto":"UDP","dns":{"type":"answer","id":64816,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:31.278633+0100","flow_id":1868351893356287,"pcap_cnt":6245,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57913,"proto":"UDP","dns":{"type":"answer","id":55803,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:32.210396+0100","flow_id":91839603160252,"pcap_cnt":6685,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60508,"proto":"UDP","dns":{"type":"answer","id":49921,"rcode":"NXDOMAIN","rrname":"vonymomaxyb.eu"}}
{"timestamp":"2017-12-12T18:33:29.695938+0100","flow_id":992300971433602,"pcap_cnt":5984,"event_type":"dns","src_ip":"192.168.1.100","src_port":50064,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9985,"rrname":"fogeliwokih.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:32.210396+0100","flow_id":91839603160252,"pcap_cnt":6685,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60508,"proto":"UDP","dns":{"type":"answer","id":49921,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":573}}
{"timestamp":"2017-12-12T18:33:31.597616+0100","flow_id":1796703248351931,"pcap_cnt":6397,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52306,"proto":"UDP","dns":{"type":"answer","id":27215,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:29.304864+0100","flow_id":867727592498620,"pcap_cnt":5795,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51383,"proto":"UDP","dns":{"type":"answer","id":26449,"rcode":"NXDOMAIN","rrname":"gacucuhumeg.eu"}}
{"timestamp":"2017-12-12T18:33:29.696177+0100","flow_id":992300971433602,"pcap_cnt":5985,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50064,"proto":"UDP","dns":{"type":"answer","id":9985,"rcode":"NXDOMAIN","rrname":"fogeliwokih.eu"}}
{"timestamp":"2017-12-12T18:33:29.870231+0100","flow_id":750547999591425,"pcap_cnt":6029,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59214,"proto":"UDP","dns":{"type":"answer","id":40239,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":546}}
{"timestamp":"2017-12-12T18:33:31.997885+0100","flow_id":1492344686459389,"pcap_cnt":6576,"event_type":"dns","src_ip":"192.168.1.100","src_port":56079,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":12866,"rrname":"vojizitoken.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.304864+0100","flow_id":867727592498620,"pcap_cnt":5795,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51383,"proto":"UDP","dns":{"type":"answer","id":26449,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:31.248651+0100","flow_id":1228305129097089,"pcap_cnt":6233,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57196,"proto":"UDP","dns":{"type":"answer","id":19923,"rcode":"NXDOMAIN","rrname":"qetuluvolos.eu"}}
{"timestamp":"2017-12-12T18:33:32.209782+0100","flow_id":726206272778816,"pcap_cnt":6683,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49853,"proto":"UDP","dns":{"type":"answer","id":6632,"rcode":"NXDOMAIN","rrname":"ciqapomogyg.eu"}}
{"timestamp":"2017-12-12T18:33:31.393233+0100","flow_id":604727417765656,"pcap_cnt":6301,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60422,"proto":"UDP","dns":{"type":"answer","id":21521,"rcode":"NXDOMAIN","rrname":"foqilozutoz.eu"}}
{"timestamp":"2017-12-12T18:33:31.303976+0100","flow_id":1720673737876328,"pcap_cnt":6254,"event_type":"dns","src_ip":"192.168.1.100","src_port":50900,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":6573,"rrname":"vowucotyqyg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.294663+0100","flow_id":1371703350099719,"pcap_cnt":6248,"event_type":"dns","src_ip":"192.168.1.100","src_port":64522,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":51314,"rrname":"xudosorihug.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.696177+0100","flow_id":992300971433602,"pcap_cnt":5985,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50064,"proto":"UDP","dns":{"type":"answer","id":9985,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":546}}
{"timestamp":"2017-12-12T18:33:31.304308+0100","flow_id":1720673737876328,"pcap_cnt":6255,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50900,"proto":"UDP","dns":{"type":"answer","id":6573,"rcode":"NXDOMAIN","rrname":"vowucotyqyg.eu"}}
{"timestamp":"2017-12-12T18:33:32.103507+0100","flow_id":140918190765828,"pcap_cnt":6624,"event_type":"dns","src_ip":"192.168.1.100","src_port":53204,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":56574,"rrname":"lyrelydevac.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:31.294942+0100","flow_id":1371703350099719,"pcap_cnt":6249,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64522,"proto":"UDP","dns":{"type":"answer","id":51314,"rcode":"NXDOMAIN","rrname":"xudosorihug.eu"}}
{"timestamp":"2017-12-12T18:33:29.701826+0100","flow_id":1618988239533442,"pcap_cnt":5992,"event_type":"dns","src_ip":"192.168.1.100","src_port":65234,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":53802,"rrname":"puvopalywet.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.312663+0100","flow_id":1129050582664535,"pcap_cnt":5800,"event_type":"dns","src_ip":"192.168.1.100","src_port":56674,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":24552,"rrname":"lygumujycen.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:32.103778+0100","flow_id":140918190765828,"pcap_cnt":6625,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53204,"proto":"UDP","dns":{"type":"answer","id":56574,"rcode":"NXDOMAIN","rrname":"lyrelydevac.eu"}}
{"timestamp":"2017-12-12T18:33:31.998147+0100","flow_id":1492344686459389,"pcap_cnt":6577,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56079,"proto":"UDP","dns":{"type":"answer","id":12866,"rcode":"NXDOMAIN","rrname":"vojizitoken.eu"}}
{"timestamp":"2017-12-12T18:33:32.103778+0100","flow_id":140918190765828,"pcap_cnt":6625,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53204,"proto":"UDP","dns":{"type":"answer","id":56574,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:31.248651+0100","flow_id":1228305129097089,"pcap_cnt":6233,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57196,"proto":"UDP","dns":{"type":"answer","id":19923,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:29.312975+0100","flow_id":1129050582664535,"pcap_cnt":5801,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56674,"proto":"UDP","dns":{"type":"answer","id":24552,"rcode":"NXDOMAIN","rrname":"lygumujycen.eu"}}
{"timestamp":"2017-12-12T18:33:31.713315+0100","flow_id":1554739821711240,"pcap_cnt":6444,"event_type":"dns","src_ip":"192.168.1.100","src_port":49813,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":48700,"rrname":"kefidaxupif.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:29.896340+0100","flow_id":841944903822676,"pcap_cnt":6042,"event_type":"dns","src_ip":"192.168.1.100","src_port":54566,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":54821,"rrname":"puregivytoh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.294942+0100","flow_id":1371703350099719,"pcap_cnt":6249,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64522,"proto":"UDP","dns":{"type":"answer","id":51314,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:31.713641+0100","flow_id":1554739821711240,"pcap_cnt":6445,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49813,"proto":"UDP","dns":{"type":"answer","id":48700,"rcode":"NXDOMAIN","rrname":"kefidaxupif.eu"}}
{"timestamp":"2017-12-12T18:33:29.702165+0100","flow_id":1618988239533442,"pcap_cnt":5993,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65234,"proto":"UDP","dns":{"type":"answer","id":53802,"rcode":"NXDOMAIN","rrname":"puvopalywet.eu"}}
{"timestamp":"2017-12-12T18:33:31.713641+0100","flow_id":1554739821711240,"pcap_cnt":6445,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49813,"proto":"UDP","dns":{"type":"answer","id":48700,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:29.896651+0100","flow_id":841944903822676,"pcap_cnt":6043,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54566,"proto":"UDP","dns":{"type":"answer","id":54821,"rcode":"NXDOMAIN","rrname":"puregivytoh.eu"}}
{"timestamp":"2017-12-12T18:33:31.393233+0100","flow_id":604727417765656,"pcap_cnt":6301,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60422,"proto":"UDP","dns":{"type":"answer","id":21521,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":567}}
{"timestamp":"2017-12-12T18:33:29.896651+0100","flow_id":841944903822676,"pcap_cnt":6043,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54566,"proto":"UDP","dns":{"type":"answer","id":54821,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":547}}
{"timestamp":"2017-12-12T18:33:31.776003+0100","flow_id":920063916627779,"pcap_cnt":6478,"event_type":"dns","src_ip":"192.168.1.100","src_port":53913,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":38357,"rrname":"jecocinywut.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.312975+0100","flow_id":1129050582664535,"pcap_cnt":5801,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56674,"proto":"UDP","dns":{"type":"answer","id":24552,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:31.450020+0100","flow_id":1650466054987236,"pcap_cnt":6320,"event_type":"dns","src_ip":"192.168.1.100","src_port":62801,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19599,"rrname":"gaqehysohec.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.660083+0100","flow_id":230629322403149,"pcap_cnt":6424,"event_type":"dns","src_ip":"192.168.1.100","src_port":64409,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":4291,"rrname":"gahocuwalyc.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:30.229080+0100","flow_id":556226499477208,"pcap_cnt":6174,"event_type":"dns","src_ip":"192.168.1.100","src_port":65227,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31111,"rrname":"masenucifoc.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.410849+0100","flow_id":822630435650584,"pcap_cnt":5854,"event_type":"dns","src_ip":"192.168.1.100","src_port":56694,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":20196,"rrname":"jenyzexodop.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:31.310091+0100","flow_id":611975175060299,"pcap_cnt":6258,"event_type":"dns","src_ip":"192.168.1.100","src_port":57002,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":31172,"rrname":"pumumagojef.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:30.229329+0100","flow_id":556226499477208,"pcap_cnt":6175,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65227,"proto":"UDP","dns":{"type":"answer","id":31111,"rcode":"NXDOMAIN","rrname":"masenucifoc.eu"}}
{"timestamp":"2017-12-12T18:33:29.411130+0100","flow_id":822630435650584,"pcap_cnt":5855,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56694,"proto":"UDP","dns":{"type":"answer","id":20196,"rcode":"NXDOMAIN","rrname":"jenyzexodop.eu"}}
{"timestamp":"2017-12-12T18:33:31.304308+0100","flow_id":1720673737876328,"pcap_cnt":6255,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50900,"proto":"UDP","dns":{"type":"answer","id":6573,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:31.776261+0100","flow_id":920063916627779,"pcap_cnt":6479,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53913,"proto":"UDP","dns":{"type":"answer","id":38357,"rcode":"NXDOMAIN","rrname":"jecocinywut.eu"}}
{"timestamp":"2017-12-12T18:33:32.209782+0100","flow_id":726206272778816,"pcap_cnt":6683,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49853,"proto":"UDP","dns":{"type":"answer","id":6632,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:31.372858+0100","flow_id":2248061362090106,"pcap_cnt":6290,"event_type":"dns","src_ip":"192.168.1.100","src_port":50966,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":25740,"rrname":"dirynozebot.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.450321+0100","flow_id":1650466054987236,"pcap_cnt":6321,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62801,"proto":"UDP","dns":{"type":"answer","id":19599,"rcode":"NXDOMAIN","rrname":"gaqehysohec.eu"}}
{"timestamp":"2017-12-12T18:33:31.373143+0100","flow_id":2248061362090106,"pcap_cnt":6291,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50966,"proto":"UDP","dns":{"type":"answer","id":25740,"rcode":"NXDOMAIN","rrname":"dirynozebot.eu"}}
{"timestamp":"2017-12-12T18:33:31.450321+0100","flow_id":1650466054987236,"pcap_cnt":6321,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62801,"proto":"UDP","dns":{"type":"answer","id":19599,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:29.702165+0100","flow_id":1618988239533442,"pcap_cnt":5993,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65234,"proto":"UDP","dns":{"type":"answer","id":53802,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":546}}
{"timestamp":"2017-12-12T18:33:31.998147+0100","flow_id":1492344686459389,"pcap_cnt":6577,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56079,"proto":"UDP","dns":{"type":"answer","id":12866,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:31.766205+0100","flow_id":1044789766893821,"pcap_cnt":6474,"event_type":"dns","src_ip":"192.168.1.100","src_port":49751,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14700,"rrname":"foqesibojup.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.918851+0100","flow_id":873880133109059,"pcap_cnt":6048,"event_type":"dns","src_ip":"192.168.1.100","src_port":61531,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9203,"rrname":"lysovidacyx.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.411130+0100","flow_id":822630435650584,"pcap_cnt":5855,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56694,"proto":"UDP","dns":{"type":"answer","id":20196,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":586}}
{"timestamp":"2017-12-12T18:33:31.310331+0100","flow_id":611975175060299,"pcap_cnt":6259,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57002,"proto":"UDP","dns":{"type":"answer","id":31172,"rcode":"NXDOMAIN","rrname":"pumumagojef.eu"}}
{"timestamp":"2017-12-12T18:33:29.919162+0100","flow_id":873880133109059,"pcap_cnt":6049,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61531,"proto":"UDP","dns":{"type":"answer","id":9203,"rcode":"NXDOMAIN","rrname":"lysovidacyx.eu"}}
{"timestamp":"2017-12-12T18:33:31.776261+0100","flow_id":920063916627779,"pcap_cnt":6479,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53913,"proto":"UDP","dns":{"type":"answer","id":38357,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:31.660347+0100","flow_id":230629322403149,"pcap_cnt":6425,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64409,"proto":"UDP","dns":{"type":"answer","id":4291,"rcode":"NXDOMAIN","rrname":"gahocuwalyc.eu"}}
{"timestamp":"2017-12-12T18:33:31.373143+0100","flow_id":2248061362090106,"pcap_cnt":6291,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50966,"proto":"UDP","dns":{"type":"answer","id":25740,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":567}}
{"timestamp":"2017-12-12T18:33:30.229329+0100","flow_id":556226499477208,"pcap_cnt":6175,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":65227,"proto":"UDP","dns":{"type":"answer","id":31111,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":569}}
{"timestamp":"2017-12-12T18:33:32.051577+0100","flow_id":2084034413644153,"pcap_cnt":6604,"event_type":"dns","src_ip":"192.168.1.100","src_port":64636,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41977,"rrname":"jepuqoxupit.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.766505+0100","flow_id":1044789766893821,"pcap_cnt":6475,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49751,"proto":"UDP","dns":{"type":"answer","id":14700,"rcode":"NXDOMAIN","rrname":"foqesibojup.eu"}}
{"timestamp":"2017-12-12T18:33:31.310331+0100","flow_id":611975175060299,"pcap_cnt":6259,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57002,"proto":"UDP","dns":{"type":"answer","id":31172,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:31.766505+0100","flow_id":1044789766893821,"pcap_cnt":6475,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49751,"proto":"UDP","dns":{"type":"answer","id":14700,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:29.541774+0100","flow_id":1622181547689038,"pcap_cnt":5924,"event_type":"dns","src_ip":"192.168.1.100","src_port":57644,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":22243,"rrname":"cicavemejih.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.783776+0100","flow_id":479915667438757,"pcap_cnt":6482,"event_type":"dns","src_ip":"192.168.1.100","src_port":59006,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41997,"rrname":"lykysonalut.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:31.510071+0100","flow_id":1455575471474807,"pcap_cnt":6354,"event_type":"dns","src_ip":"192.168.1.100","src_port":60180,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9506,"rrname":"keretejuraw.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.585161+0100","flow_id":297338754221071,"pcap_cnt":6392,"event_type":"dns","src_ip":"192.168.1.100","src_port":61188,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":10383,"rrname":"masijemaxud.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:30.231711+0100","flow_id":960142403864863,"pcap_cnt":6178,"event_type":"dns","src_ip":"192.168.1.100","src_port":62838,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62960,"rrname":"cilyzycojod.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.510312+0100","flow_id":1455575471474807,"pcap_cnt":6355,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60180,"proto":"UDP","dns":{"type":"answer","id":9506,"rcode":"NXDOMAIN","rrname":"keretejuraw.eu"}}
{"timestamp":"2017-12-12T18:33:31.585434+0100","flow_id":297338754221071,"pcap_cnt":6393,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61188,"proto":"UDP","dns":{"type":"answer","id":10383,"rcode":"NXDOMAIN","rrname":"masijemaxud.eu"}}
{"timestamp":"2017-12-12T18:33:31.510312+0100","flow_id":1455575471474807,"pcap_cnt":6355,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60180,"proto":"UDP","dns":{"type":"answer","id":9506,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:31.999009+0100","flow_id":2181858735581621,"pcap_cnt":6578,"event_type":"dns","src_ip":"192.168.1.100","src_port":56795,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":14960,"rrname":"cilynitiseg.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:31.585434+0100","flow_id":297338754221071,"pcap_cnt":6393,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61188,"proto":"UDP","dns":{"type":"answer","id":10383,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":569}}
{"timestamp":"2017-12-12T18:33:31.784026+0100","flow_id":479915667438757,"pcap_cnt":6483,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59006,"proto":"UDP","dns":{"type":"answer","id":41997,"rcode":"NXDOMAIN","rrname":"lykysonalut.eu"}}
{"timestamp":"2017-12-12T18:33:29.542064+0100","flow_id":1622181547689038,"pcap_cnt":5925,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57644,"proto":"UDP","dns":{"type":"answer","id":22243,"rcode":"NXDOMAIN","rrname":"cicavemejih.eu"}}
{"timestamp":"2017-12-12T18:33:31.999237+0100","flow_id":2181858735581621,"pcap_cnt":6579,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56795,"proto":"UDP","dns":{"type":"answer","id":14960,"rcode":"NXDOMAIN","rrname":"cilynitiseg.eu"}}
{"timestamp":"2017-12-12T18:33:29.542064+0100","flow_id":1622181547689038,"pcap_cnt":5925,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57644,"proto":"UDP","dns":{"type":"answer","id":22243,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:31.999237+0100","flow_id":2181858735581621,"pcap_cnt":6579,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56795,"proto":"UDP","dns":{"type":"answer","id":14960,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:31.632594+0100","flow_id":1295922946757409,"pcap_cnt":6414,"event_type":"dns","src_ip":"192.168.1.100","src_port":61743,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9265,"rrname":"qedefulywoh.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:32.061168+0100","flow_id":863492754960112,"pcap_cnt":6608,"event_type":"dns","src_ip":"192.168.1.100","src_port":61294,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":24760,"rrname":"tunegapenef.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.660347+0100","flow_id":230629322403149,"pcap_cnt":6425,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64409,"proto":"UDP","dns":{"type":"answer","id":4291,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:31.634440+0100","flow_id":1329659914559700,"pcap_cnt":6416,"event_type":"dns","src_ip":"192.168.1.100","src_port":53436,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":32888,"rrname":"ryturilidom.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:31.632902+0100","flow_id":1295922946757409,"pcap_cnt":6415,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61743,"proto":"UDP","dns":{"type":"answer","id":9265,"rcode":"NXDOMAIN","rrname":"qedefulywoh.eu"}}
{"timestamp":"2017-12-12T18:33:32.061479+0100","flow_id":863492754960112,"pcap_cnt":6609,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61294,"proto":"UDP","dns":{"type":"answer","id":24760,"rcode":"NXDOMAIN","rrname":"tunegapenef.eu"}}
{"timestamp":"2017-12-12T18:33:31.632902+0100","flow_id":1295922946757409,"pcap_cnt":6415,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61743,"proto":"UDP","dns":{"type":"answer","id":9265,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:30.231973+0100","flow_id":960142403864863,"pcap_cnt":6179,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62838,"proto":"UDP","dns":{"type":"answer","id":62960,"rcode":"NXDOMAIN","rrname":"cilyzycojod.eu"}}
{"timestamp":"2017-12-12T18:33:31.634672+0100","flow_id":1329659914559700,"pcap_cnt":6417,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53436,"proto":"UDP","dns":{"type":"answer","id":32888,"rcode":"NXDOMAIN","rrname":"ryturilidom.eu"}}
{"timestamp":"2017-12-12T18:33:31.732523+0100","flow_id":279355727752555,"pcap_cnt":6456,"event_type":"dns","src_ip":"192.168.1.100","src_port":52564,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":57230,"rrname":"novewecoliv.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.634672+0100","flow_id":1329659914559700,"pcap_cnt":6417,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53436,"proto":"UDP","dns":{"type":"answer","id":32888,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:32.051860+0100","flow_id":2084034413644153,"pcap_cnt":6605,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64636,"proto":"UDP","dns":{"type":"answer","id":41977,"rcode":"NXDOMAIN","rrname":"jepuqoxupit.eu"}}
{"timestamp":"2017-12-12T18:33:31.770063+0100","flow_id":1784033095434255,"pcap_cnt":6476,"event_type":"dns","src_ip":"192.168.1.100","src_port":63659,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":62512,"rrname":"ganuqibevux.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.919162+0100","flow_id":873880133109059,"pcap_cnt":6049,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61531,"proto":"UDP","dns":{"type":"answer","id":9203,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":547}}
{"timestamp":"2017-12-12T18:33:32.061479+0100","flow_id":863492754960112,"pcap_cnt":6609,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61294,"proto":"UDP","dns":{"type":"answer","id":24760,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:31.784026+0100","flow_id":479915667438757,"pcap_cnt":6483,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59006,"proto":"UDP","dns":{"type":"answer","id":41997,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:30.004571+0100","flow_id":1866172196772175,"pcap_cnt":6086,"event_type":"dns","src_ip":"192.168.1.100","src_port":59786,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7007,"rrname":"ryhoqagoxyr.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:29.567144+0100","flow_id":633016219707240,"pcap_cnt":5932,"event_type":"dns","src_ip":"192.168.1.100","src_port":59251,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":8838,"rrname":"gahipyhopax.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:32.066091+0100","flow_id":569648272376363,"pcap_cnt":6610,"event_type":"dns","src_ip":"192.168.1.100","src_port":54974,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":55429,"rrname":"puvutaputeb.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:30.231973+0100","flow_id":960142403864863,"pcap_cnt":6179,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62838,"proto":"UDP","dns":{"type":"answer","id":62960,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:32.066338+0100","flow_id":569648272376363,"pcap_cnt":6611,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54974,"proto":"UDP","dns":{"type":"answer","id":55429,"rcode":"NXDOMAIN","rrname":"puvutaputeb.eu"}}
{"timestamp":"2017-12-12T18:33:29.567446+0100","flow_id":633016219707240,"pcap_cnt":5933,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59251,"proto":"UDP","dns":{"type":"answer","id":8838,"rcode":"NXDOMAIN","rrname":"gahipyhopax.eu"}}
{"timestamp":"2017-12-12T18:33:32.066338+0100","flow_id":569648272376363,"pcap_cnt":6611,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54974,"proto":"UDP","dns":{"type":"answer","id":55429,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:32.051860+0100","flow_id":2084034413644153,"pcap_cnt":6605,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64636,"proto":"UDP","dns":{"type":"answer","id":41977,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:31.770371+0100","flow_id":1784033095434255,"pcap_cnt":6477,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63659,"proto":"UDP","dns":{"type":"answer","id":62512,"rcode":"NXDOMAIN","rrname":"ganuqibevux.eu"}}
{"timestamp":"2017-12-12T18:33:30.004867+0100","flow_id":1866172196772175,"pcap_cnt":6087,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59786,"proto":"UDP","dns":{"type":"answer","id":7007,"rcode":"NXDOMAIN","rrname":"ryhoqagoxyr.eu"}}
{"timestamp":"2017-12-12T18:33:31.770371+0100","flow_id":1784033095434255,"pcap_cnt":6477,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":63659,"proto":"UDP","dns":{"type":"answer","id":62512,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:31.932039+0100","flow_id":737682425329863,"pcap_cnt":6554,"event_type":"dns","src_ip":"192.168.1.100","src_port":61402,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":22732,"rrname":"kevylejigod.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:30.004867+0100","flow_id":1866172196772175,"pcap_cnt":6087,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59786,"proto":"UDP","dns":{"type":"answer","id":7007,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":567}}
{"timestamp":"2017-12-12T18:33:32.009837+0100","flow_id":2066109367592557,"pcap_cnt":6584,"event_type":"dns","src_ip":"192.168.1.100","src_port":51102,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":22135,"rrname":"nofagoteveg.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.732804+0100","flow_id":279355727752555,"pcap_cnt":6457,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52564,"proto":"UDP","dns":{"type":"answer","id":57230,"rcode":"NXDOMAIN","rrname":"novewecoliv.eu"}}
{"timestamp":"2017-12-12T18:33:29.567446+0100","flow_id":633016219707240,"pcap_cnt":5933,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59251,"proto":"UDP","dns":{"type":"answer","id":8838,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:30.051915+0100","flow_id":130232315726539,"pcap_cnt":6098,"event_type":"dns","src_ip":"192.168.1.100","src_port":54192,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35274,"rrname":"disafuwokis.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.196502+0100","flow_id":1198633347973014,"pcap_cnt":6190,"event_type":"dns","src_ip":"192.168.1.100","src_port":61486,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":3162,"rrname":"puvybivihox.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.720387+0100","flow_id":1555214417486881,"pcap_cnt":6450,"event_type":"dns","src_ip":"192.168.1.100","src_port":50970,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45373,"rrname":"ciqukecywiv.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:30.052160+0100","flow_id":130232315726539,"pcap_cnt":6099,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54192,"proto":"UDP","dns":{"type":"answer","id":35274,"rcode":"NXDOMAIN","rrname":"disafuwokis.eu"}}
{"timestamp":"2017-12-12T18:33:31.932288+0100","flow_id":737682425329863,"pcap_cnt":6555,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61402,"proto":"UDP","dns":{"type":"answer","id":22732,"rcode":"NXDOMAIN","rrname":"kevylejigod.eu"}}
{"timestamp":"2017-12-12T18:33:31.732804+0100","flow_id":279355727752555,"pcap_cnt":6457,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52564,"proto":"UDP","dns":{"type":"answer","id":57230,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:31.196710+0100","flow_id":1198633347973014,"pcap_cnt":6191,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61486,"proto":"UDP","dns":{"type":"answer","id":3162,"rcode":"NXDOMAIN","rrname":"puvybivihox.eu"}}
{"timestamp":"2017-12-12T18:33:31.720676+0100","flow_id":1555214417486881,"pcap_cnt":6451,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50970,"proto":"UDP","dns":{"type":"answer","id":45373,"rcode":"NXDOMAIN","rrname":"ciqukecywiv.eu"}}
{"timestamp":"2017-12-12T18:33:29.604528+0100","flow_id":1377694828513102,"pcap_cnt":5950,"event_type":"dns","src_ip":"192.168.1.100","src_port":52776,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":35276,"rrname":"xuqotujodaz.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:31.196710+0100","flow_id":1198633347973014,"pcap_cnt":6191,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61486,"proto":"UDP","dns":{"type":"answer","id":3162,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:32.010106+0100","flow_id":2066109367592557,"pcap_cnt":6585,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51102,"proto":"UDP","dns":{"type":"answer","id":22135,"rcode":"NXDOMAIN","rrname":"nofagoteveg.eu"}}
{"timestamp":"2017-12-12T18:33:31.720676+0100","flow_id":1555214417486881,"pcap_cnt":6451,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50970,"proto":"UDP","dns":{"type":"answer","id":45373,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:32.129569+0100","flow_id":403877566395065,"pcap_cnt":6636,"event_type":"dns","src_ip":"192.168.1.100","src_port":52854,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":2606,"rrname":"nozulufynax.eu","rrtype":"A","tx_id":3}}
{"timestamp":"2017-12-12T18:33:31.932288+0100","flow_id":737682425329863,"pcap_cnt":6555,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61402,"proto":"UDP","dns":{"type":"answer","id":22732,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:31.863469+0100","flow_id":2190319821729005,"pcap_cnt":6522,"event_type":"dns","src_ip":"192.168.1.100","src_port":61104,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":3220,"rrname":"jeluzydyqej.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:32.129848+0100","flow_id":403877566395065,"pcap_cnt":6637,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52854,"proto":"UDP","dns":{"type":"answer","id":2606,"rcode":"NXDOMAIN","rrname":"nozulufynax.eu"}}
{"timestamp":"2017-12-12T18:33:32.010106+0100","flow_id":2066109367592557,"pcap_cnt":6585,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51102,"proto":"UDP","dns":{"type":"answer","id":22135,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:31.215399+0100","flow_id":684285244426599,"pcap_cnt":6206,"event_type":"dns","src_ip":"192.168.1.100","src_port":64408,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":43940,"rrname":"lyrefanyril.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:32.027916+0100","flow_id":628807151938828,"pcap_cnt":6594,"event_type":"dns","src_ip":"192.168.1.100","src_port":60632,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":19547,"rrname":"tucadilebix.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:30.052160+0100","flow_id":130232315726539,"pcap_cnt":6099,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54192,"proto":"UDP","dns":{"type":"answer","id":35274,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:31.215664+0100","flow_id":684285244426599,"pcap_cnt":6207,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64408,"proto":"UDP","dns":{"type":"answer","id":43940,"rcode":"NXDOMAIN","rrname":"lyrefanyril.eu"}}
{"timestamp":"2017-12-12T18:33:32.129848+0100","flow_id":403877566395065,"pcap_cnt":6637,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52854,"proto":"UDP","dns":{"type":"answer","id":2606,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:30.091922+0100","flow_id":1874195196307218,"pcap_cnt":6114,"event_type":"dns","src_ip":"192.168.1.100","src_port":57849,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":7626,"rrname":"jenokirifux.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.863730+0100","flow_id":2190319821729005,"pcap_cnt":6523,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61104,"proto":"UDP","dns":{"type":"answer","id":3220,"rcode":"NXDOMAIN","rrname":"jeluzydyqej.eu"}}
{"timestamp":"2017-12-12T18:33:29.604771+0100","flow_id":1377694828513102,"pcap_cnt":5951,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52776,"proto":"UDP","dns":{"type":"answer","id":35276,"rcode":"NXDOMAIN","rrname":"xuqotujodaz.eu"}}
{"timestamp":"2017-12-12T18:33:31.863730+0100","flow_id":2190319821729005,"pcap_cnt":6523,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61104,"proto":"UDP","dns":{"type":"answer","id":3220,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:31.849625+0100","flow_id":1226207038011097,"pcap_cnt":6514,"event_type":"dns","src_ip":"192.168.1.100","src_port":59625,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":17187,"rrname":"puryxepenek.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:29.604771+0100","flow_id":1377694828513102,"pcap_cnt":5951,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52776,"proto":"UDP","dns":{"type":"answer","id":35276,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":587}}
{"timestamp":"2017-12-12T18:33:31.215664+0100","flow_id":684285244426599,"pcap_cnt":6207,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64408,"proto":"UDP","dns":{"type":"answer","id":43940,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":569}}
{"timestamp":"2017-12-12T18:33:30.092212+0100","flow_id":1874195196307218,"pcap_cnt":6115,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57849,"proto":"UDP","dns":{"type":"answer","id":7626,"rcode":"NXDOMAIN","rrname":"jenokirifux.eu"}}
{"timestamp":"2017-12-12T18:33:31.219725+0100","flow_id":1218510456576589,"pcap_cnt":6210,"event_type":"dns","src_ip":"192.168.1.100","src_port":61701,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":39153,"rrname":"cinivamolil.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:30.092212+0100","flow_id":1874195196307218,"pcap_cnt":6115,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57849,"proto":"UDP","dns":{"type":"answer","id":7626,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:32.068077+0100","flow_id":1851945118337517,"pcap_cnt":6612,"event_type":"dns","src_ip":"192.168.1.100","src_port":61031,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44761,"rrname":"lymajaxecir.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.220556+0100","flow_id":1218510456576589,"pcap_cnt":6211,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61701,"proto":"UDP","dns":{"type":"answer","id":39153,"rcode":"NXDOMAIN","rrname":"cinivamolil.eu"}}
{"timestamp":"2017-12-12T18:33:30.175871+0100","flow_id":1371031187664639,"pcap_cnt":6142,"event_type":"dns","src_ip":"192.168.1.100","src_port":50472,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":24826,"rrname":"fogisysemyq.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:32.028176+0100","flow_id":628807151938828,"pcap_cnt":6595,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60632,"proto":"UDP","dns":{"type":"answer","id":19547,"rcode":"NXDOMAIN","rrname":"tucadilebix.eu"}}
{"timestamp":"2017-12-12T18:33:31.849887+0100","flow_id":1226207038011097,"pcap_cnt":6515,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59625,"proto":"UDP","dns":{"type":"answer","id":17187,"rcode":"NXDOMAIN","rrname":"puryxepenek.eu"}}
{"timestamp":"2017-12-12T18:33:32.068346+0100","flow_id":1851945118337517,"pcap_cnt":6613,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61031,"proto":"UDP","dns":{"type":"answer","id":44761,"rcode":"NXDOMAIN","rrname":"lymajaxecir.eu"}}
{"timestamp":"2017-12-12T18:33:31.849887+0100","flow_id":1226207038011097,"pcap_cnt":6515,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59625,"proto":"UDP","dns":{"type":"answer","id":17187,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:32.068346+0100","flow_id":1851945118337517,"pcap_cnt":6613,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61031,"proto":"UDP","dns":{"type":"answer","id":44761,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:31.220556+0100","flow_id":1218510456576589,"pcap_cnt":6211,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61701,"proto":"UDP","dns":{"type":"answer","id":39153,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":569}}
{"timestamp":"2017-12-12T18:33:32.028176+0100","flow_id":628807151938828,"pcap_cnt":6595,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60632,"proto":"UDP","dns":{"type":"answer","id":19547,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:30.176215+0100","flow_id":1371031187664639,"pcap_cnt":6143,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50472,"proto":"UDP","dns":{"type":"answer","id":24826,"rcode":"NXDOMAIN","rrname":"fogisysemyq.eu"}}
{"timestamp":"2017-12-12T18:33:29.956502+0100","flow_id":372174265882710,"pcap_cnt":6064,"event_type":"dns","src_ip":"192.168.1.100","src_port":54394,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":3190,"rrname":"voniqofolyt.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:32.078452+0100","flow_id":2193858874847860,"pcap_cnt":6616,"event_type":"dns","src_ip":"192.168.1.100","src_port":60416,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":47219,"rrname":"fokalesaxav.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.868563+0100","flow_id":1940889596018899,"pcap_cnt":6524,"event_type":"dns","src_ip":"192.168.1.100","src_port":57847,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":64470,"rrname":"lygetudokej.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:30.176215+0100","flow_id":1371031187664639,"pcap_cnt":6143,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50472,"proto":"UDP","dns":{"type":"answer","id":24826,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":569}}
{"timestamp":"2017-12-12T18:33:31.221723+0100","flow_id":367179219034651,"pcap_cnt":6212,"event_type":"dns","src_ip":"192.168.1.100","src_port":56481,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":50851,"rrname":"nozydemutik.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.868820+0100","flow_id":1940889596018899,"pcap_cnt":6525,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57847,"proto":"UDP","dns":{"type":"answer","id":64470,"rcode":"NXDOMAIN","rrname":"lygetudokej.eu"}}
{"timestamp":"2017-12-12T18:33:30.230262+0100","flow_id":1305060489986934,"pcap_cnt":6176,"event_type":"dns","src_ip":"192.168.1.100","src_port":62664,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":58060,"rrname":"xuxanexusov.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.868820+0100","flow_id":1940889596018899,"pcap_cnt":6525,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57847,"proto":"UDP","dns":{"type":"answer","id":64470,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":571}}
{"timestamp":"2017-12-12T18:33:32.078770+0100","flow_id":2193858874847860,"pcap_cnt":6617,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60416,"proto":"UDP","dns":{"type":"answer","id":47219,"rcode":"NXDOMAIN","rrname":"fokalesaxav.eu"}}
{"timestamp":"2017-12-12T18:33:31.221951+0100","flow_id":367179219034651,"pcap_cnt":6213,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56481,"proto":"UDP","dns":{"type":"answer","id":50851,"rcode":"NXDOMAIN","rrname":"nozydemutik.eu"}}
{"timestamp":"2017-12-12T18:33:30.230496+0100","flow_id":1305060489986934,"pcap_cnt":6177,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62664,"proto":"UDP","dns":{"type":"answer","id":58060,"rcode":"NXDOMAIN","rrname":"xuxanexusov.eu"}}
{"timestamp":"2017-12-12T18:33:32.078770+0100","flow_id":2193858874847860,"pcap_cnt":6617,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":60416,"proto":"UDP","dns":{"type":"answer","id":47219,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:30.230496+0100","flow_id":1305060489986934,"pcap_cnt":6177,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":62664,"proto":"UDP","dns":{"type":"answer","id":58060,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:29.956781+0100","flow_id":372174265882710,"pcap_cnt":6065,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54394,"proto":"UDP","dns":{"type":"answer","id":3190,"rcode":"NXDOMAIN","rrname":"voniqofolyt.eu"}}
{"timestamp":"2017-12-12T18:33:31.332450+0100","flow_id":992300971433602,"pcap_cnt":6270,"event_type":"dns","src_ip":"192.168.1.100","src_port":50064,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":65184,"rrname":"lysygyjytad.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:31.221951+0100","flow_id":367179219034651,"pcap_cnt":6213,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":56481,"proto":"UDP","dns":{"type":"answer","id":50851,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:29.956781+0100","flow_id":372174265882710,"pcap_cnt":6065,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54394,"proto":"UDP","dns":{"type":"answer","id":3190,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":546}}
{"timestamp":"2017-12-12T18:33:31.332649+0100","flow_id":992300971433602,"pcap_cnt":6271,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50064,"proto":"UDP","dns":{"type":"answer","id":65184,"rcode":"NXDOMAIN","rrname":"lysygyjytad.eu"}}
{"timestamp":"2017-12-12T18:33:31.464361+0100","flow_id":343488179410409,"pcap_cnt":6326,"event_type":"dns","src_ip":"192.168.1.100","src_port":57560,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":22448,"rrname":"xukyhudokex.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.332649+0100","flow_id":992300971433602,"pcap_cnt":6271,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50064,"proto":"UDP","dns":{"type":"answer","id":65184,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":567}}
{"timestamp":"2017-12-12T18:33:30.063979+0100","flow_id":2014930537216491,"pcap_cnt":6104,"event_type":"dns","src_ip":"192.168.1.100","src_port":51631,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60694,"rrname":"jecijyjudew.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.409865+0100","flow_id":1973769718153481,"pcap_cnt":6308,"event_type":"dns","src_ip":"192.168.1.100","src_port":54787,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":39793,"rrname":"lykolexusol.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.464591+0100","flow_id":343488179410409,"pcap_cnt":6327,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57560,"proto":"UDP","dns":{"type":"answer","id":22448,"rcode":"NXDOMAIN","rrname":"xukyhudokex.eu"}}
{"timestamp":"2017-12-12T18:33:31.410177+0100","flow_id":1973769718153481,"pcap_cnt":6309,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54787,"proto":"UDP","dns":{"type":"answer","id":39793,"rcode":"NXDOMAIN","rrname":"lykolexusol.eu"}}
{"timestamp":"2017-12-12T18:33:30.064296+0100","flow_id":2014930537216491,"pcap_cnt":6105,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51631,"proto":"UDP","dns":{"type":"answer","id":60694,"rcode":"NXDOMAIN","rrname":"jecijyjudew.eu"}}
{"timestamp":"2017-12-12T18:33:31.464591+0100","flow_id":343488179410409,"pcap_cnt":6327,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":57560,"proto":"UDP","dns":{"type":"answer","id":22448,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":569}}
{"timestamp":"2017-12-12T18:33:30.064296+0100","flow_id":2014930537216491,"pcap_cnt":6105,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":51631,"proto":"UDP","dns":{"type":"answer","id":60694,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:31.410177+0100","flow_id":1973769718153481,"pcap_cnt":6309,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54787,"proto":"UDP","dns":{"type":"answer","id":39793,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":567}}
{"timestamp":"2017-12-12T18:33:31.720909+0100","flow_id":287773863641101,"pcap_cnt":6452,"event_type":"dns","src_ip":"192.168.1.100","src_port":49952,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":37801,"rrname":"xutevexecif.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.206786+0100","flow_id":1436415622152147,"pcap_cnt":6196,"event_type":"dns","src_ip":"192.168.1.100","src_port":50803,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":60253,"rrname":"dixilibaxop.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:31.483970+0100","flow_id":1117782734408404,"pcap_cnt":6340,"event_type":"dns","src_ip":"192.168.1.100","src_port":64029,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":44892,"rrname":"rynenogupez.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:31.721188+0100","flow_id":287773863641101,"pcap_cnt":6453,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49952,"proto":"UDP","dns":{"type":"answer","id":37801,"rcode":"NXDOMAIN","rrname":"xutevexecif.eu"}}
{"timestamp":"2017-12-12T18:33:31.207036+0100","flow_id":1436415622152147,"pcap_cnt":6197,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50803,"proto":"UDP","dns":{"type":"answer","id":60253,"rcode":"NXDOMAIN","rrname":"dixilibaxop.eu"}}
{"timestamp":"2017-12-12T18:33:31.484221+0100","flow_id":1117782734408404,"pcap_cnt":6341,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64029,"proto":"UDP","dns":{"type":"answer","id":44892,"rcode":"NXDOMAIN","rrname":"rynenogupez.eu"}}
{"timestamp":"2017-12-12T18:33:31.207036+0100","flow_id":1436415622152147,"pcap_cnt":6197,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":50803,"proto":"UDP","dns":{"type":"answer","id":60253,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:31.721188+0100","flow_id":287773863641101,"pcap_cnt":6453,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49952,"proto":"UDP","dns":{"type":"answer","id":37801,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:31.484221+0100","flow_id":1117782734408404,"pcap_cnt":6341,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64029,"proto":"UDP","dns":{"type":"answer","id":44892,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:31.515452+0100","flow_id":1677036870163836,"pcap_cnt":6356,"event_type":"dns","src_ip":"192.168.1.100","src_port":52384,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":42678,"rrname":"cidyrecavok.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.666561+0100","flow_id":50861320121281,"pcap_cnt":6434,"event_type":"dns","src_ip":"192.168.1.100","src_port":64434,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11714,"rrname":"kepypirutyx.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.740900+0100","flow_id":866357498039844,"pcap_cnt":6464,"event_type":"dns","src_ip":"192.168.1.100","src_port":61491,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":45537,"rrname":"ryhadyvigis.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.666802+0100","flow_id":50861320121281,"pcap_cnt":6435,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64434,"proto":"UDP","dns":{"type":"answer","id":11714,"rcode":"NXDOMAIN","rrname":"kepypirutyx.eu"}}
{"timestamp":"2017-12-12T18:33:31.515783+0100","flow_id":1677036870163836,"pcap_cnt":6357,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52384,"proto":"UDP","dns":{"type":"answer","id":42678,"rcode":"NXDOMAIN","rrname":"cidyrecavok.eu"}}
{"timestamp":"2017-12-12T18:33:31.666802+0100","flow_id":50861320121281,"pcap_cnt":6435,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":64434,"proto":"UDP","dns":{"type":"answer","id":11714,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":569}}
{"timestamp":"2017-12-12T18:33:31.515783+0100","flow_id":1677036870163836,"pcap_cnt":6357,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52384,"proto":"UDP","dns":{"type":"answer","id":42678,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":568}}
{"timestamp":"2017-12-12T18:33:32.188269+0100","flow_id":212352090562413,"pcap_cnt":6668,"event_type":"dns","src_ip":"192.168.1.100","src_port":54125,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":33580,"rrname":"foxyxubecuh.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.741222+0100","flow_id":866357498039844,"pcap_cnt":6465,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61491,"proto":"UDP","dns":{"type":"answer","id":45537,"rcode":"NXDOMAIN","rrname":"ryhadyvigis.eu"}}
{"timestamp":"2017-12-12T18:33:32.188530+0100","flow_id":212352090562413,"pcap_cnt":6669,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54125,"proto":"UDP","dns":{"type":"answer","id":33580,"rcode":"NXDOMAIN","rrname":"foxyxubecuh.eu"}}
{"timestamp":"2017-12-12T18:33:32.188530+0100","flow_id":212352090562413,"pcap_cnt":6669,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54125,"proto":"UDP","dns":{"type":"answer","id":33580,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:31.741222+0100","flow_id":866357498039844,"pcap_cnt":6465,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61491,"proto":"UDP","dns":{"type":"answer","id":45537,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:31.665567+0100","flow_id":1849350958032863,"pcap_cnt":6432,"event_type":"dns","src_ip":"192.168.1.100","src_port":52490,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":59174,"rrname":"cinyhotyqyt.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.806893+0100","flow_id":1218510456576589,"pcap_cnt":6492,"event_type":"dns","src_ip":"192.168.1.100","src_port":61701,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":9014,"rrname":"mamomamymyl.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:31.665826+0100","flow_id":1849350958032863,"pcap_cnt":6433,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52490,"proto":"UDP","dns":{"type":"answer","id":59174,"rcode":"NXDOMAIN","rrname":"cinyhotyqyt.eu"}}
{"timestamp":"2017-12-12T18:33:31.665826+0100","flow_id":1849350958032863,"pcap_cnt":6433,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52490,"proto":"UDP","dns":{"type":"answer","id":59174,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:31.807176+0100","flow_id":1218510456576589,"pcap_cnt":6493,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61701,"proto":"UDP","dns":{"type":"answer","id":9014,"rcode":"NXDOMAIN","rrname":"mamomamymyl.eu"}}
{"timestamp":"2017-12-12T18:33:31.807176+0100","flow_id":1218510456576589,"pcap_cnt":6493,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":61701,"proto":"UDP","dns":{"type":"answer","id":9014,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:31.717806+0100","flow_id":1119601654756334,"pcap_cnt":6448,"event_type":"dns","src_ip":"192.168.1.100","src_port":54158,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":54066,"rrname":"lysowaxojib.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.985151+0100","flow_id":1956918413953087,"pcap_cnt":6570,"event_type":"dns","src_ip":"192.168.1.100","src_port":53183,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":11552,"rrname":"kemuxurohym.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.718155+0100","flow_id":1119601654756334,"pcap_cnt":6449,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54158,"proto":"UDP","dns":{"type":"answer","id":54066,"rcode":"NXDOMAIN","rrname":"lysowaxojib.eu"}}
{"timestamp":"2017-12-12T18:33:31.985471+0100","flow_id":1956918413953087,"pcap_cnt":6571,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53183,"proto":"UDP","dns":{"type":"answer","id":11552,"rcode":"NXDOMAIN","rrname":"kemuxurohym.eu"}}
{"timestamp":"2017-12-12T18:33:31.718155+0100","flow_id":1119601654756334,"pcap_cnt":6449,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":54158,"proto":"UDP","dns":{"type":"answer","id":54066,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:31.985471+0100","flow_id":1956918413953087,"pcap_cnt":6571,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53183,"proto":"UDP","dns":{"type":"answer","id":11552,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:31.798730+0100","flow_id":1976447630258186,"pcap_cnt":6488,"event_type":"dns","src_ip":"192.168.1.100","src_port":59850,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":49785,"rrname":"vopejamogul.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:31.798991+0100","flow_id":1976447630258186,"pcap_cnt":6489,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59850,"proto":"UDP","dns":{"type":"answer","id":49785,"rcode":"NXDOMAIN","rrname":"vopejamogul.eu"}}
{"timestamp":"2017-12-12T18:33:31.798991+0100","flow_id":1976447630258186,"pcap_cnt":6489,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":59850,"proto":"UDP","dns":{"type":"answer","id":49785,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":570}}
{"timestamp":"2017-12-12T18:33:32.033547+0100","flow_id":952252549071627,"pcap_cnt":6596,"event_type":"dns","src_ip":"192.168.1.100","src_port":53409,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":41676,"rrname":"puzewilurip.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:32.033877+0100","flow_id":952252549071627,"pcap_cnt":6597,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53409,"proto":"UDP","dns":{"type":"answer","id":41676,"rcode":"NXDOMAIN","rrname":"puzewilurip.eu"}}
{"timestamp":"2017-12-12T18:33:32.033877+0100","flow_id":952252549071627,"pcap_cnt":6597,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":53409,"proto":"UDP","dns":{"type":"answer","id":41676,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:32.038261+0100","flow_id":489667391427957,"pcap_cnt":6598,"event_type":"dns","src_ip":"192.168.1.100","src_port":49309,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":34305,"rrname":"dikuvizigiz.eu","rrtype":"A","tx_id":0}}
{"timestamp":"2017-12-12T18:33:32.038568+0100","flow_id":489667391427957,"pcap_cnt":6599,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49309,"proto":"UDP","dns":{"type":"answer","id":34305,"rcode":"NXDOMAIN","rrname":"dikuvizigiz.eu"}}
{"timestamp":"2017-12-12T18:33:32.038568+0100","flow_id":489667391427957,"pcap_cnt":6599,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":49309,"proto":"UDP","dns":{"type":"answer","id":34305,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}
{"timestamp":"2017-12-12T18:33:32.211459+0100","flow_id":1677036870163836,"pcap_cnt":6686,"event_type":"dns","src_ip":"192.168.1.100","src_port":52384,"dest_ip":"192.168.61.2","dest_port":53,"proto":"UDP","dns":{"type":"query","id":10052,"rrname":"novixamymyf.eu","rrtype":"A","tx_id":1}}
{"timestamp":"2017-12-12T18:33:32.211717+0100","flow_id":1677036870163836,"pcap_cnt":6687,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52384,"proto":"UDP","dns":{"type":"answer","id":10052,"rcode":"NXDOMAIN","rrname":"novixamymyf.eu"}}
{"timestamp":"2017-12-12T18:33:32.211717+0100","flow_id":1677036870163836,"pcap_cnt":6687,"event_type":"dns","src_ip":"192.168.61.2","src_port":53,"dest_ip":"192.168.1.100","dest_port":52384,"proto":"UDP","dns":{"type":"answer","id":10052,"flags":"8183","qr":true,"rd":true,"ra":true,"rcode":"NXDOMAIN","rrname":"eu","rrtype":"SOA","ttl":572}}