StartTime Dur Proto SrcAddr Sport Dir DstAddr Dport State sTos dTos TotPkts TotBytes SrcBytes SrcPkts Label 2018/07/22 13:01:34.892833 0.034161 man 0 0 0 0 STA 0 0 0 0 1970/01/01 01:00:00.000000 0.000000 llc 00:00:00:00:00:00 0 -> 00:00:00:00:00:00 0 INT 1 60 60 1 flow=Background 1970/01/01 01:00:10.084566 0.007371 udp 0.0.0.0 68 -> 255.255.255.255 67 INT 0 2 698 698 2 flow=Normal-UDP-Attempt 1970/01/01 01:00:10.091482 1898.945312 udp 10.0.2.2 67 -> 10.0.2.15 68 INT 16 6 3540 3540 6 flow=Normal-UDP-Attempt 1970/01/01 01:00:10.099535 56.008423 ipv6-icmp fe80::353e:6fce:ee32:1a73 143 -> ff02::16 0 MHR 0 14 1300 1300 14 flow=Background 1970/01/01 01:00:10.100214 0.000000 igmp 10.0.2.15 -> 0.0.0.1 INT 0 1 54 54 1 flow=Normal-IGMP 1970/01/01 01:00:10.101140 3495.553223 udp fe80::353e:6fce:ee32:1a73 546 -> ff02::1:2 547 INT 0 63 9513 9513 63 flow=Normal-UDP-Attempt 1970/01/01 01:00:10.101379 5.624037 arp 10.0.2.15 who 10.0.2.2 CON 12 504 252 6 flow=Normal-ARP 1970/01/01 01:00:10.102071 0.097484 udp fe80::353e:6fce:ee32:1a73 58516 -> ff02::1:3 5355 INT 0 2 178 178 2 flow=Normal-UDP-Attempt 1970/01/01 01:00:10.102334 0.097760 udp 10.0.2.15 56149 -> 224.0.0.252 5355 INT 0 2 138 138 2 flow=Normal-UDP-Attempt 1970/01/01 01:00:10.118784 2.002953 arp 0.0.0.0 who 10.0.2.15 INT 3 126 126 3 flow=Normal-ARP 1970/01/01 01:00:10.118943 0.000000 igmp 10.0.2.15 -> 0.0.0.1 INT 0 1 54 54 1 flow=Normal-IGMP 1970/01/01 01:00:10.119042 0.000000 ipv6-icmp :: 135 -> ff02::1:ff32:1a73 0 NNS 0 1 78 78 1 flow=Background 1970/01/01 01:00:10.119102 8.001277 ipv6-icmp fe80::353e:6fce:ee32:1a73 133 -> ff02::2 0 NRS 0 3 210 210 3 flow=Background 1970/01/01 01:00:10.353109 0.095919 udp fe80::353e:6fce:ee32:1a73 57421 -> ff02::1:3 5355 INT 0 2 172 172 2 flow=Normal-UDP-Attempt 1970/01/01 01:00:10.353381 0.095969 udp 10.0.2.15 55299 -> 224.0.0.252 5355 INT 0 2 132 132 2 flow=Normal-UDP-Attempt 1970/01/01 01:00:10.444583 0.087136 udp 10.0.2.15 57948 <-> 1.1.1.1 53 CON 0 0 2 170 85 1 flow=Normal-UDP-DNS 1970/01/01 01:00:10.649964 0.086339 udp 10.0.2.15 51034 <-> 1.1.1.1 53 CON 0 0 2 168 76 1 flow=Normal-UDP-DNS 1970/01/01 01:00:10.736980 0.044315 udp 10.0.2.15 51326 <-> 1.1.1.1 53 CON 0 0 2 180 76 1 flow=Normal-UDP-DNS 1970/01/01 01:00:11.122807 0.000000 igmp 10.0.2.15 -> 0.0.0.1 INT 0 1 54 54 1 flow=Normal-IGMP 1970/01/01 01:00:11.138397 0.000000 igmp 10.0.2.15 -> 0.0.0.1 INT 0 1 54 54 1 flow=Normal-IGMP 1970/01/01 01:00:11.139228 0.091459 udp fe80::353e:6fce:ee32:1a73 64384 -> ff02::1:3 5355 INT 0 2 178 178 2 flow=Normal-UDP-Attempt 1970/01/01 01:00:11.139609 0.091350 udp 10.0.2.15 61860 -> 224.0.0.252 5355 INT 0 2 138 138 2 flow=Normal-UDP-Attempt 1970/01/01 01:00:11.318786 0.000000 igmp 10.0.2.15 -> 0.0.0.1 INT 0 1 54 54 1 flow=Normal-IGMP 1970/01/01 01:00:11.332559 4.545616 udp 10.0.2.15 62539 -> 239.255.255.250 3702 INT 0 4 4128 4128 4 flow=Normal-UDP-Attempt 1970/01/01 01:00:11.333296 4.624799 udp fe80::353e:6fce:ee32:1a73 62540 -> ff02::c 3702 INT 0 4 4208 4208 4 flow=Normal-UDP-Attempt 1970/01/01 01:00:11.362499 3597.530518 udp fe80::353e:6fce:ee32:1a73 61861 -> ff02::c 1900 INT 0 1104 228750 228750 1104 flow=Normal-UDP-Attempt 1970/01/01 01:00:11.362840 3507.646240 udp 10.0.2.15 61863 -> 239.255.255.250 1900 INT 0 37 6125 6125 37 flow=Normal-UDP-Attempt 1970/01/01 01:00:11.382624 3571.345947 udp 10.0.2.15 1900 -> 239.255.255.250 1900 INT 0 162 83943 83943 162 flow=Normal-UDP-Attempt 1970/01/01 01:00:11.383886 3571.345215 udp fe80::353e:6fce:ee32:1a73 1900 -> ff02::c 1900 INT 0 162 89127 89127 162 flow=Normal-UDP-Attempt 1970/01/01 01:00:11.621537 0.000000 igmp 10.0.2.15 -> 0.0.0.2 INT 0 1 62 62 1 flow=Normal-IGMP 1970/01/01 01:00:11.832662 6.519527 udp 10.0.2.15 61865 -> 239.255.255.250 3702 INT 0 4 2792 2792 4 flow=Normal-UDP-Attempt 1970/01/01 01:00:11.833088 6.598138 udp fe80::353e:6fce:ee32:1a73 61866 -> ff02::c 3702 INT 0 4 2872 2872 4 flow=Normal-UDP-Attempt 1970/01/01 01:00:12.778468 0.075324 udp 10.0.2.15 65109 -> 239.255.255.250 3702 INT 0 2 1332 1332 2 flow=Normal-UDP-Attempt 1970/01/01 01:00:12.779100 0.103592 udp fe80::353e:6fce:ee32:1a73 65110 -> ff02::c 3702 INT 0 2 1372 1372 2 flow=Normal-UDP-Attempt 1970/01/01 01:00:13.126387 0.000000 igmp 10.0.2.15 -> 0.0.0.1 INT 0 1 54 54 1 flow=Normal-IGMP 1970/01/01 01:00:13.134942 0.000000 igmp 10.0.2.15 -> 0.0.0.1 INT 0 1 54 54 1 flow=Normal-IGMP 1970/01/01 01:00:13.135372 0.098720 udp fe80::353e:6fce:ee32:1a73 54443 -> ff02::1:3 5355 INT 0 2 178 178 2 flow=Normal-UDP-Attempt 1970/01/01 01:00:13.135627 0.098685 udp 10.0.2.15 51169 -> 224.0.0.252 5355 INT 0 2 138 138 2 flow=Normal-UDP-Attempt 1970/01/01 01:00:13.160907 0.092346 udp fe80::353e:6fce:ee32:1a73 64205 -> ff02::1:3 5355 INT 0 2 172 172 2 flow=Normal-UDP-Attempt 1970/01/01 01:00:13.161248 0.092239 udp 10.0.2.15 49841 -> 224.0.0.252 5355 INT 0 2 132 132 2 flow=Normal-UDP-Attempt 1970/01/01 01:00:13.164583 0.005371 udp 10.0.2.15 63049 <-> 1.1.1.1 53 CON 0 0 2 170 85 1 flow=Normal-UDP-DNS 1970/01/01 01:00:13.203610 2949.326172 udp 10.0.2.15 137 -> 10.0.2.255 137 INT 0 118 11360 11360 118 flow=Normal-UDP-Attempt-NetBIOS 1970/01/01 01:00:13.434473 0.000000 igmp 10.0.2.15 -> 0.0.0.1 INT 0 1 54 54 1 flow=Normal-IGMP 1970/01/01 01:00:13.435075 0.000000 igmp 10.0.2.15 -> 0.0.0.1 INT 0 1 54 54 1 flow=Normal-IGMP 1970/01/01 01:00:13.435688 0.098300 udp fe80::353e:6fce:ee32:1a73 57418 -> ff02::1:3 5355 INT 0 2 178 178 2 flow=Normal-UDP-Attempt 1970/01/01 01:00:13.435994 0.098186 udp 10.0.2.15 53608 -> 224.0.0.252 5355 INT 0 2 138 138 2 flow=Normal-UDP-Attempt 1970/01/01 01:00:13.614655 0.000000 igmp 10.0.2.15 -> 0.0.0.1 INT 0 1 54 54 1 flow=Normal-IGMP 1970/01/01 01:00:19.212617 3308.077393 udp 10.0.2.15 138 -> 10.0.2.255 138 INT 0 47 10962 10962 47 flow=Normal-UDP-Attempt 1970/01/01 01:00:30.202897 621.448486 udp 10.0.2.2 137 -> 10.0.2.15 137 INT 0 3 312 312 3 flow=Normal-UDP-Attempt-NetBIOS 1970/01/01 01:01:04.411919 0.047930 udp 10.0.2.15 58012 <-> 1.1.1.1 53 CON 0 0 2 214 79 1 flow=Normal-UDP-DNS 1970/01/01 01:01:04.443633 0.068057 udp 10.0.2.15 57876 <-> 1.1.1.1 53 CON 0 0 2 187 75 1 flow=Normal-UDP-DNS 1970/01/01 01:01:04.492083 3.017760 udp 10.0.2.15 58013 -> 239.255.255.250 1900 INT 0 4 864 864 4 flow=Normal-UDP-Attempt 1970/01/01 01:01:04.492660 0.038008 udp 10.0.2.15 65336 <-> 1.1.1.1 53 CON 0 0 2 293 78 1 flow=Normal-UDP-DNS 1970/01/01 01:01:04.572345 0.046995 udp 10.0.2.15 53199 <-> 1.1.1.1 53 CON 0 0 2 172 78 1 flow=Normal-UDP-DNS 1970/01/01 01:01:04.576399 0.043469 udp 10.0.2.15 62873 <-> 1.1.1.1 53 CON 0 0 2 189 72 1 flow=Normal-UDP-DNS 1970/01/01 01:01:04.592243 0.033239 udp 10.0.2.15 64427 <-> 1.1.1.1 53 CON 0 0 2 166 75 1 flow=Normal-UDP-DNS 1970/01/01 01:01:04.621145 0.081737 udp 10.0.2.15 59303 <-> 1.1.1.1 53 CON 0 0 2 243 89 1 flow=Normal-UDP-DNS 1970/01/01 01:01:04.621813 0.056930 udp 10.0.2.15 53130 <-> 1.1.1.1 53 CON 0 0 2 162 73 1 flow=Normal-UDP-DNS 1970/01/01 01:01:04.626567 0.000000 udp 10.0.2.15 53295 -> 1.1.1.1 53 INT 0 1 75 75 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:01:04.720731 0.000000 udp 10.0.2.15 57927 -> 1.1.1.1 53 INT 0 1 77 77 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:01:04.783854 4.540991 tcp 10.0.2.15 49293 -> 216.58.201.110 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-Google-Net-8 1970/01/01 01:01:04.784455 4.234781 tcp 10.0.2.15 49294 -> 216.58.201.99 443 FSRPA_SPA 0 0 20 6632 1327 10 flow=Normal-Google-Net-8 1970/01/01 01:01:04.784781 4.304343 tcp 10.0.2.15 49295 -> 172.217.16.67 443 FSPA_FSPA 0 0 31 7203 2225 14 flow=Normal-Google-Net-9 1970/01/01 01:01:04.790081 0.000000 udp 10.0.2.15 63850 -> 1.1.1.1 53 INT 0 1 89 89 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:01:04.801270 0.079071 udp 10.0.2.15 54772 <-> 1.1.1.1 53 CON 0 0 2 184 84 1 flow=Normal-UDP-DNS 1970/01/01 01:01:04.881643 4.453009 tcp 10.0.2.15 49296 -> 216.58.201.106 443 FSPA_FSPA 0 0 27 6962 1674 12 flow=Normal-Google-Net-8 1970/01/01 01:01:05.037792 3.980938 tcp 10.0.2.15 49297 -> 216.58.201.110 443 FSRPA_SPA 0 0 19 5167 1327 10 flow=Normal-Google-Net-8 1970/01/01 01:01:05.613229 0.003778 udp 10.0.2.15 53295 <-> 1.0.0.1 53 CON 0 0 2 166 75 1 flow=Normal-UDP-DNS 1970/01/01 01:01:05.617677 3.402310 tcp 10.0.2.15 49298 -> 216.58.201.99 443 FSRPA_SRPA 0 0 20 6631 1327 10 flow=Normal-Google-Net-8 1970/01/01 01:01:05.619533 0.000000 igmp 10.0.2.15 -> 0.0.0.1 INT 0 1 54 54 1 flow=Normal-IGMP 1970/01/01 01:01:05.621410 3.005773 udp 10.0.2.15 5353 -> 224.0.0.251 5353 INT 0 3 246 246 3 flow=Normal-UDP-Attempt 1970/01/01 01:01:05.621590 3.006074 udp fe80::353e:6fce:ee32:1a73 5353 -> ff02::fb 5353 INT 0 3 306 306 3 flow=Normal-UDP-Attempt 1970/01/01 01:01:05.713917 0.063445 udp 10.0.2.15 57927 <-> 1.0.0.1 53 CON 0 0 2 321 77 1 flow=Normal-UDP-DNS 1970/01/01 01:01:05.792230 0.071556 udp 10.0.2.15 63850 <-> 1.0.0.1 53 CON 0 0 2 194 89 1 flow=Normal-UDP-DNS 1970/01/01 01:01:05.905226 3.419492 tcp 10.0.2.15 49299 -> 216.58.201.99 443 FSPA_FSPA 0 0 42 19068 1974 17 flow=Normal-Google-Net-8 1970/01/01 01:01:05.939584 14.608108 udp 10.0.2.15 54774 <-> 172.217.16.67 443 CON 0 0 191 91455 15630 94 flow=Normal-Google-Net-9 1970/01/01 01:01:06.107796 0.000000 igmp 10.0.2.15 -> 0.0.0.1 INT 0 1 54 54 1 flow=Normal-IGMP 1970/01/01 01:01:09.232168 0.033072 udp 10.0.2.15 61793 <-> 1.0.0.1 53 CON 0 0 2 164 74 1 flow=Normal-UDP-DNS 1970/01/01 01:01:09.268418 15.481550 udp 10.0.2.15 61794 <-> 172.217.16.68 443 CON 0 0 22 10265 5181 12 flow=Normal-Google-Net-9 1970/01/01 01:01:09.348850 9.682186 tcp 10.0.2.15 49300 -> 172.217.16.68 443 FSRPA_SRPA 0 0 18 5798 1237 9 flow=Normal-Google-Net-9 1970/01/01 01:01:09.739222 15.560773 udp 10.0.2.15 61795 <-> 216.58.201.110 443 CON 0 0 87 65751 7761 40 flow=Normal-Google-Net-8 1970/01/01 01:01:09.830608 9.199743 tcp 10.0.2.15 49301 -> 216.58.201.110 443 FSRPA_SRPA 0 0 20 5221 1327 10 flow=Normal-Google-Net-8 1970/01/01 01:01:11.288184 0.105787 udp fe80::353e:6fce:ee32:1a73 62587 -> ff02::1:3 5355 INT 0 2 182 182 2 flow=Normal-UDP-Attempt 1970/01/01 01:01:11.288466 0.106158 udp 10.0.2.15 51386 -> 224.0.0.252 5355 INT 0 2 142 142 2 flow=Normal-UDP-Attempt 1970/01/01 01:01:11.290291 0.106732 udp fe80::353e:6fce:ee32:1a73 58461 -> ff02::1:3 5355 INT 0 2 178 178 2 flow=Normal-UDP-Attempt 1970/01/01 01:01:11.290972 0.106660 udp 10.0.2.15 61651 -> 224.0.0.252 5355 INT 0 2 138 138 2 flow=Normal-UDP-Attempt 1970/01/01 01:01:11.291779 0.106021 udp fe80::353e:6fce:ee32:1a73 55647 -> ff02::1:3 5355 INT 0 2 184 184 2 flow=Normal-UDP-Attempt 1970/01/01 01:01:11.292025 0.105907 udp 10.0.2.15 50532 -> 224.0.0.252 5355 INT 0 2 144 144 2 flow=Normal-UDP-Attempt 1970/01/01 01:01:14.256170 4.808042 tcp 10.0.2.15 49302 -> 216.58.201.99 443 FSPA_FSPA 0 0 174 157815 4108 56 flow=Normal-Google-Net-8 1970/01/01 01:01:14.257216 0.154419 tcp 10.0.2.15 49303 -> 216.58.201.99 443 FSRPA_SRPA 0 0 20 6425 1108 9 flow=Normal-Google-Net-8 1970/01/01 01:01:14.279242 15.164608 udp 10.0.2.15 50534 <-> 172.217.16.67 443 CON 0 0 164 133295 10072 71 flow=Normal-Google-Net-9 1970/01/01 01:01:14.281163 0.222992 udp 10.0.2.15 50535 <-> 216.58.201.99 443 CON 0 0 11 7925 3415 6 flow=Normal-Google-Net-8 1970/01/01 01:01:14.343845 4.684799 tcp 10.0.2.15 49304 -> 216.58.201.99 443 FSRPA_SRPA 0 0 21 6479 1162 10 flow=Normal-Google-Net-8 1970/01/01 01:01:14.362831 4.666701 tcp 10.0.2.15 49305 -> 172.217.16.67 443 FSRPA_SRPA 0 0 19 4872 1162 10 flow=Normal-Google-Net-9 1970/01/01 01:01:20.600275 0.032510 udp 10.0.2.15 50177 <-> 1.0.0.1 53 CON 0 0 2 197 76 1 flow=Normal-UDP-DNS 1970/01/01 01:01:20.634285 8.453409 tcp 10.0.2.15 49306 -> 31.13.84.36 443 FSPA_FSPA 0 0 134 110424 3841 45 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:01:21.153756 0.093413 udp 10.0.2.15 59286 <-> 1.0.0.1 53 CON 0 0 2 197 79 1 flow=Normal-UDP-DNS 1970/01/01 01:01:21.250972 0.201517 tcp 10.0.2.15 49307 -> 31.13.84.4 443 FSRPA_SPA 0 0 15 4838 971 7 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:01:21.251251 0.200395 tcp 10.0.2.15 49308 -> 31.13.84.4 443 FSRPA_SPA 0 0 17 5020 1025 8 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:01:21.251639 27.831526 tcp 10.0.2.15 49309 -> 31.13.84.4 443 FSPA_FSPA 0 0 791 745808 15911 240 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:01:21.251974 0.239345 tcp 10.0.2.15 49310 -> 31.13.84.4 443 FSRPA_SPA 0 0 15 4838 971 7 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:01:21.252420 0.216165 tcp 10.0.2.15 49311 -> 31.13.84.4 443 FSRPA_SRPA 0 0 18 5075 1025 8 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:01:21.252763 0.264247 tcp 10.0.2.15 49312 -> 31.13.84.4 443 FSRPA_SRPA 0 0 18 5073 1025 8 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:01:21.615868 7.473518 tcp 10.0.2.15 49313 -> 31.13.84.4 443 FSPA_FSPA 0 0 48 20765 2316 19 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:01:23.384622 0.114008 udp 10.0.2.15 49357 <-> 1.0.0.1 53 CON 0 0 2 196 90 1 flow=Normal-UDP-DNS 1970/01/01 01:01:23.500246 5.586514 tcp 10.0.2.15 49314 -> 90.182.114.17 443 FSPA_FSPA 0 0 37 13064 2148 16 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:01:25.132831 0.031841 udp 10.0.2.15 51516 <-> 1.0.0.1 53 CON 0 0 2 160 72 1 flow=Normal-UDP-DNS 1970/01/01 01:01:27.154219 2.046284 udp 10.0.2.15 50673 <-> 1.0.0.1 53 CON 0 0 3 277 158 2 flow=Normal-UDP-DNS 1970/01/01 01:01:28.157008 0.000000 udp 10.0.2.15 50673 -> 1.1.1.1 53 INT 0 1 79 79 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:01:29.201766 15.395925 udp 10.0.2.15 50674 <-> 216.58.201.110 443 CON 0 0 24 13023 5283 13 flow=Normal-Google-Net-8 1970/01/01 01:01:29.271375 9.764946 tcp 10.0.2.15 49315 -> 216.58.201.110 443 FSRPA_SRPA 0 0 21 6478 1162 10 flow=Normal-Google-Net-8 1970/01/01 01:01:43.003371 6.081479 tcp 10.0.2.15 49316 -> 31.13.84.4 443 FSPA_FSPA 0 0 32 10295 1788 14 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:01:43.281769 5.800157 tcp 10.0.2.15 49317 -> 31.13.84.36 443 FSPA_FSPA 0 0 28 5791 3366 13 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:01:43.534967 5.549370 tcp 10.0.2.15 49318 -> 31.13.84.36 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:01:43.654949 5.426880 tcp 10.0.2.15 49319 -> 31.13.84.36 443 FSPA_FSPA 0 0 28 7395 1531 12 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:01:51.031950 8.228688 tcp 10.0.2.15 49320 -> 31.13.84.36 443 FSPA_FSPA 0 0 30 5931 3417 14 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:01:58.026809 0.000000 udp 10.0.2.15 50020 -> 1.0.0.1 53 INT 0 1 78 78 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:01:59.039864 0.015278 udp 10.0.2.15 50020 <-> 1.1.1.1 53 CON 0 0 2 195 78 1 flow=Normal-UDP-DNS 1970/01/01 01:01:59.056404 10.214638 tcp 10.0.2.15 49321 -> 31.13.84.37 443 FSPA_FSPA 0 0 50 12355 4166 22 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:02:04.068421 5.081196 tcp 10.0.2.15 49322 -> 216.58.201.99 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-Google-Net-8 1970/01/01 01:02:04.328596 4.820915 tcp 10.0.2.15 49323 -> 216.58.201.99 443 FSPA_FSPA 0 0 35 10117 1799 15 flow=Normal-Google-Net-8 1970/01/01 01:02:13.054067 6.117651 tcp 10.0.2.15 49324 -> 31.13.84.37 443 FSPA_FSPA 0 0 39 7237 3207 17 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:02:18.253782 0.386462 udp 10.0.2.15 50029 <-> 172.217.16.67 443 CON 0 0 17 7428 5377 10 flow=Normal-Google-Net-9 1970/01/01 01:02:23.074554 6.099676 tcp 10.0.2.15 49325 -> 31.13.84.37 443 FSPA_FSPA 0 0 29 5277 2304 13 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:02:27.892784 0.004491 udp 10.0.2.15 64697 <-> 1.1.1.1 53 CON 0 0 2 197 76 1 flow=Normal-UDP-DNS 1970/01/01 01:02:27.897994 1.276156 tcp 10.0.2.15 49326 -> 31.13.84.36 443 FSPA_FSPA 0 0 36 8607 4368 16 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:02:27.944768 0.030921 udp 10.0.2.15 54774 <-> 1.1.1.1 53 CON 0 0 2 174 79 1 flow=Normal-UDP-DNS 1970/01/01 01:02:27.977584 1.179846 tcp 10.0.2.15 49327 -> 216.58.201.110 443 FSPA_FSPA 0 0 33 8557 1755 14 flow=Normal-Google-Net-8 1970/01/01 01:02:28.539129 0.000000 udp 10.0.2.15 62891 -> 1.1.1.1 53 INT 0 1 88 88 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:02:29.551067 0.004485 udp 10.0.2.15 62891 <-> 1.0.0.1 53 CON 0 0 2 224 88 1 flow=Normal-UDP-DNS 1970/01/01 01:02:29.556389 9.619027 tcp 10.0.2.15 49328 -> 90.182.119.82 443 FSPA_FSPA 0 0 652 488591 10349 172 flow=Normal-Google-Net-10 1970/01/01 01:02:31.859990 17.300350 tcp 10.0.2.15 49329 -> 31.13.84.36 443 FSPA_FSPA 0 0 378 293419 31524 130 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:02:34.428467 0.030023 udp 10.0.2.15 63407 <-> 1.0.0.1 53 CON 0 0 2 197 79 1 flow=Normal-UDP-DNS 1970/01/01 01:02:34.462192 4.635351 tcp 10.0.2.15 49330 -> 31.13.84.4 443 FSRPA_SPA 0 0 13 1732 971 7 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:02:34.707586 39.529068 tcp 10.0.2.15 49331 -> 31.13.84.4 443 FSPA_FSPA 0 0 1451 1359329 29827 431 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:02:34.713134 4.385099 tcp 10.0.2.15 49332 -> 31.13.84.4 443 FSRPA_SRPA 0 0 19 5127 1133 10 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:02:35.247054 14.126535 tcp 10.0.2.15 49333 -> 31.13.84.4 443 FSPA_FSPA 0 0 190 129953 6420 64 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:02:35.258827 0.053478 udp 10.0.2.15 49267 <-> 1.0.0.1 53 CON 0 0 2 196 90 1 flow=Normal-UDP-DNS 1970/01/01 01:02:35.313490 24.037727 tcp 10.0.2.15 49334 -> 90.182.114.17 443 FSPA_FSPA 0 0 459 355530 17747 159 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:02:37.028515 0.046489 udp 10.0.2.15 62856 <-> 1.0.0.1 53 CON 0 0 2 190 87 1 flow=Normal-UDP-DNS 1970/01/01 01:02:37.075959 2.370073 tcp 10.0.2.15 49335 -> 216.58.201.106 443 FSPA_FSPA 0 0 33 8475 2955 14 flow=Normal-Google-Net-8 1970/01/01 01:02:37.076218 2.023015 tcp 10.0.2.15 49336 -> 216.58.201.106 443 FSRPA_SRPA 0 0 18 4812 1273 9 flow=Normal-Google-Net-8 1970/01/01 01:02:39.574723 4.106958 udp 10.0.2.15 62860 <-> 172.217.16.67 443 CON 0 0 233 116403 16928 114 flow=Normal-Google-Net-9 1970/01/01 01:02:39.575560 26.281685 udp 10.0.2.15 62861 <-> 216.58.201.99 443 CON 0 0 16 17065 4387 5 flow=Normal-Google-Net-8 1970/01/01 01:02:39.602931 111.456963 udp 10.0.2.15 62862 <-> 216.58.201.110 443 CON 0 0 2795 2184679 129356 1215 flow=Normal-Google-Net-8 1970/01/01 01:02:39.611086 109.409973 udp 10.0.2.15 62863 <-> 216.58.201.99 443 CON 0 0 288 183943 18977 143 flow=Normal-Google-Net-8 1970/01/01 01:02:40.132630 25.724613 icmp 10.0.2.15 0x0303 -> 216.58.201.99 0x8df5 URP 0 7 4130 4130 7 flow=Normal-Google-Net-8 1970/01/01 01:02:40.891265 41.651428 udp 10.0.2.15 62865 <-> 216.58.201.99 443 CON 0 0 251 187038 14420 114 flow=Normal-Google-Net-8 1970/01/01 01:02:41.773658 0.000000 udp 10.0.2.15 51714 -> 1.0.0.1 53 INT 0 1 81 81 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:02:42.777425 0.088529 udp 10.0.2.15 51714 <-> 1.1.1.1 53 CON 0 0 2 178 81 1 flow=Normal-UDP-DNS 1970/01/01 01:02:43.279057 0.000000 udp 10.0.2.15 64305 -> 1.1.1.1 53 INT 0 1 75 75 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:02:44.290211 0.048648 udp 10.0.2.15 64305 <-> 1.0.0.1 53 CON 0 0 2 193 75 1 flow=Normal-UDP-DNS 1970/01/01 01:02:44.341970 4.757892 tcp 10.0.2.15 49337 -> 216.58.201.101 443 FSRPA_SRPA 0 0 18 5044 1237 9 flow=Normal-Google-Net-8 1970/01/01 01:02:44.342229 4.756885 tcp 10.0.2.15 49338 -> 216.58.201.101 443 FSRPA_SRPA 0 0 16 2500 1240 8 flow=Normal-Google-Net-8 1970/01/01 01:02:44.342558 4.756074 tcp 10.0.2.15 49339 -> 216.58.201.101 443 FSRPA_SRPA 0 0 16 2500 1240 8 flow=Normal-Google-Net-8 1970/01/01 01:02:44.342800 5.109197 tcp 10.0.2.15 49340 -> 216.58.201.101 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-Google-Net-8 1970/01/01 01:02:44.531885 4.920357 tcp 10.0.2.15 49341 -> 216.58.201.101 443 FSPA_FSPA 0 0 41 9257 2462 18 flow=Normal-Google-Net-8 1970/01/01 01:02:45.564814 0.024180 udp 10.0.2.15 52982 <-> 1.0.0.1 53 CON 0 0 2 174 79 1 flow=Normal-UDP-DNS 1970/01/01 01:02:45.600902 66.632347 udp 10.0.2.15 52983 <-> 216.58.201.109 443 CON 0 0 523 407813 32546 204 flow=Normal-Google-Net-8 1970/01/01 01:02:45.676485 3.421601 tcp 10.0.2.15 49342 -> 216.58.201.109 443 FSRPA_SRPA 0 0 18 5977 1273 9 flow=Normal-Google-Net-8 1970/01/01 01:02:46.034930 69.845543 udp 10.0.2.15 52985 <-> 172.217.16.68 443 CON 0 0 2244 1930688 80235 875 flow=Normal-Google-Net-9 1970/01/01 01:02:47.028507 0.060060 udp 10.0.2.15 60019 <-> 1.0.0.1 53 CON 0 0 2 228 84 1 flow=Normal-UDP-DNS 1970/01/01 01:02:47.092018 16.685186 udp 10.0.2.15 60020 <-> 216.58.201.110 443 CON 0 0 27 15881 6721 16 flow=Normal-Google-Net-8 1970/01/01 01:02:47.170594 1.989663 tcp 10.0.2.15 49343 -> 216.58.201.110 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-Google-Net-8 1970/01/01 01:02:47.423975 1.676601 tcp 10.0.2.15 49344 -> 216.58.201.110 443 FSRPA_SRPA 0 0 19 5338 1273 9 flow=Normal-Google-Net-8 1970/01/01 01:02:48.113527 0.079611 udp 10.0.2.15 55367 <-> 1.0.0.1 53 CON 0 0 2 208 84 1 flow=Normal-UDP-DNS 1970/01/01 01:02:48.194363 11.183992 tcp 10.0.2.15 49345 -> 31.13.84.8 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:02:48.364536 891.581177 tcp 10.0.2.15 49346 -> 31.13.84.8 443 FSPA_FSPA 0 0 301 65146 39981 130 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:02:49.002462 0.000000 udp 10.0.2.15 57980 -> 1.0.0.1 53 INT 0 1 79 79 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:02:49.046247 0.042600 udp 10.0.2.15 60532 <-> 1.0.0.1 53 CON 0 0 2 228 84 1 flow=Normal-UDP-DNS 1970/01/01 01:02:49.090241 10.369352 tcp 10.0.2.15 49347 -> 216.58.201.72 443 FSPA_FSPA 0 0 42 24968 1991 15 flow=Normal-Google-Net-8 1970/01/01 01:02:50.002320 0.050283 udp 10.0.2.15 57980 <-> 1.1.1.1 53 CON 0 0 2 240 79 1 flow=Normal-UDP-DNS 1970/01/01 01:02:50.053859 9.048447 tcp 10.0.2.15 49348 -> 172.217.23.234 443 FSRPA_SRPA 0 0 19 4866 1327 10 flow=Normal-Google-Net-9 1970/01/01 01:02:50.054239 9.048804 tcp 10.0.2.15 49349 -> 172.217.23.234 443 FSRPA_SRPA 0 0 19 4865 1327 10 flow=Normal-Google-Net-9 1970/01/01 01:02:50.055013 9.406036 tcp 10.0.2.15 49350 -> 172.217.23.234 443 FSPA_FSPA 0 0 101 85897 3115 31 flow=Normal-Google-Net-9 1970/01/01 01:02:51.330464 23.860205 udp 10.0.2.15 60535 <-> 216.58.201.72 443 CON 0 0 28 13852 8505 16 flow=Normal-Google-Net-8 1970/01/01 01:02:52.847101 0.034915 udp 10.0.2.15 53281 <-> 1.1.1.1 53 CON 0 0 2 212 80 1 flow=Normal-UDP-DNS 1970/01/01 01:02:52.882774 15.362686 udp 10.0.2.15 53282 <-> 216.58.201.106 443 CON 0 0 25 11366 4004 14 flow=Normal-Google-Net-8 1970/01/01 01:02:53.290410 0.060084 udp 10.0.2.15 63847 <-> 1.1.1.1 53 CON 0 0 2 206 77 1 flow=Normal-UDP-DNS 1970/01/01 01:02:57.628787 1.554593 tcp 10.0.2.15 49351 -> 31.13.84.36 443 FSPA_FSPA 0 0 26 5217 2119 12 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:02:58.796732 0.072367 udp 10.0.2.15 51398 <-> 1.1.1.1 53 CON 0 0 2 243 73 1 flow=Normal-UDP-DNS 1970/01/01 01:02:59.375321 9.770606 tcp 10.0.2.15 49352 -> 90.182.114.17 443 FSPA_FSPA 0 0 146 104768 6366 51 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:02:59.711175 9.435986 tcp 10.0.2.15 49353 -> 31.13.84.36 443 FSPA_FSPA 0 0 28 5768 3148 14 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:03:00.014236 9.088212 tcp 10.0.2.15 49354 -> 31.13.84.36 443 FSRPA_SRPA 0 0 20 5182 1133 10 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:03:00.264508 0.074585 udp 10.0.2.15 60376 <-> 1.1.1.1 53 CON 0 0 2 270 78 1 flow=Normal-UDP-DNS 1970/01/01 01:03:00.412300 0.000000 udp 10.0.2.15 55642 -> 1.1.1.1 53 INT 0 1 74 74 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:03:00.415387 1.049235 tcp 10.0.2.15 49355 -> 52.174.193.75 443 FSPA_FSPA 0 0 23 5903 1178 10 flow=Normal-To-Microsoft-26 1970/01/01 01:03:00.415837 3.357082 tcp 10.0.2.15 49356 -> 191.233.80.151 443 FSPA_FSPA 0 0 25 6664 1290 11 flow=Normal-To-Microsoft-30 1970/01/01 01:03:01.413753 0.052087 udp 10.0.2.15 55642 <-> 1.0.0.1 53 CON 0 0 2 240 74 1 flow=Normal-UDP-DNS 1970/01/01 01:03:01.478647 6.613967 tcp 10.0.2.15 49357 -> 40.115.1.44 443 FSPA_FSPA 0 0 24 7231 2304 10 flow=Normal-To-Microsoft-13 1970/01/01 01:03:03.796297 41.111965 tcp 10.0.2.15 49358 -> 52.174.193.75 443 SR_SA 0 0 5 306 248 4 flow=Normal-To-Microsoft-26 1970/01/01 01:03:07.841792 3.024604 udp 10.0.2.15 55646 -> 239.255.255.250 1900 INT 0 4 864 864 4 flow=Normal-UDP-Attempt 1970/01/01 01:03:15.697147 3.607172 tcp 10.0.2.15 49359 -> 90.182.114.17 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:03:15.948046 3.359166 tcp 10.0.2.15 49360 -> 90.182.114.17 443 FSPA_FSPA 0 0 24 7027 1624 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:03:15.981419 2.030651 udp 10.0.2.15 65032 <-> 1.0.0.1 53 CON 0 0 3 425 182 2 flow=Normal-UDP-DNS 1970/01/01 01:03:16.530695 2.723600 tcp 10.0.2.15 49361 -> 31.13.84.36 443 FSRPA_SPA 0 0 14 1786 971 7 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:03:16.592656 2.660024 tcp 10.0.2.15 49362 -> 31.13.84.4 443 FSRPA_SPA 0 0 16 4965 1025 8 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:03:16.782908 12.403026 tcp 10.0.2.15 49363 -> 31.13.84.36 443 FSPA_FSPA 0 0 212 161639 14579 75 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:03:16.843891 12.276611 tcp 10.0.2.15 49364 -> 31.13.84.4 443 FSRPA_SRPA 0 0 21 5236 1187 11 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:03:16.850634 2.406191 tcp 10.0.2.15 49365 -> 31.13.84.36 443 FSRPA_SRPA 0 0 18 5074 1079 9 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:03:16.866310 2.389942 tcp 10.0.2.15 49366 -> 31.13.84.36 443 FSRPA_SRPA 0 0 19 5127 1079 9 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:03:16.891132 2.418032 tcp 10.0.2.15 49367 -> 31.13.84.36 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:03:16.895596 2.413492 tcp 10.0.2.15 49368 -> 31.13.84.4 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:03:16.910285 12.281151 tcp 10.0.2.15 49369 -> 31.13.84.4 443 FSPA_FSPA 0 0 472 392892 11836 154 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:03:16.981505 0.000000 udp 10.0.2.15 65032 -> 1.1.1.1 53 INT 0 1 91 91 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:03:18.013977 11.669908 tcp 10.0.2.15 49370 -> 40.115.1.44 443 FSPA_FSPA 0 0 36 15496 8450 16 flow=Normal-To-Microsoft-13 1970/01/01 01:03:18.461135 110.478157 udp 10.0.2.15 65037 <-> 216.58.201.110 443 CON 0 0 118 20586 12031 65 flow=Normal-Google-Net-8 1970/01/01 01:03:18.900378 0.000000 udp 10.0.2.15 56050 -> 1.0.0.1 53 INT 0 1 80 80 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:03:19.544710 0.045708 udp 10.0.2.15 58784 <-> 1.0.0.1 53 CON 0 0 2 187 75 1 flow=Normal-UDP-DNS 1970/01/01 01:03:19.591110 9.594522 tcp 10.0.2.15 49371 -> 216.58.201.110 443 FSPA_FSPA 0 0 31 9566 2792 14 flow=Normal-Google-Net-8 1970/01/01 01:03:19.902745 0.054934 udp 10.0.2.15 56050 <-> 1.1.1.1 53 CON 0 0 2 204 80 1 flow=Normal-UDP-DNS 1970/01/01 01:03:19.958552 9.227268 tcp 10.0.2.15 49372 -> 216.58.201.110 443 FSPA_FSPA 0 0 34 10293 2293 15 flow=Normal-Google-Net-8 1970/01/01 01:03:19.958958 9.226758 tcp 10.0.2.15 49373 -> 216.58.201.110 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-Google-Net-8 1970/01/01 01:03:20.014495 9.107342 tcp 10.0.2.15 49374 -> 216.58.201.110 443 FSRPA_SPA 0 0 18 6523 1273 9 flow=Normal-Google-Net-8 1970/01/01 01:03:20.718661 8.467222 tcp 10.0.2.15 49375 -> 90.182.114.17 443 FSPA_FSPA 0 0 60 24917 3662 25 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:03:21.022958 8.103240 tcp 10.0.2.15 49376 -> 90.182.114.17 443 FSRPA_SPA 0 0 19 5005 1133 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:03:21.024670 8.101170 tcp 10.0.2.15 49377 -> 90.182.114.17 443 FSRPA_SRPA 0 0 19 5004 1079 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:03:21.025178 8.099440 tcp 10.0.2.15 49378 -> 90.182.114.17 443 FSRPA_SPA 0 0 17 4897 1079 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:03:21.026693 8.097326 tcp 10.0.2.15 49379 -> 90.182.114.17 443 FSRPA_SPA 0 0 16 4842 1025 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:03:21.033454 8.091889 tcp 10.0.2.15 49380 -> 90.182.114.17 443 FSRPA_SRPA 0 0 19 5004 1079 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:03:21.508865 2.279782 udp 10.0.2.15 58786 <-> 216.58.201.106 443 CON 0 0 314 273998 16736 124 flow=Normal-Google-Net-8 1970/01/01 01:03:21.515411 7.613939 tcp 10.0.2.15 49381 -> 216.58.201.106 443 FSRPA_SRPA 0 0 17 4759 1273 9 flow=Normal-Google-Net-8 1970/01/01 01:03:22.180848 0.037559 udp 10.0.2.15 64248 <-> 1.1.1.1 53 CON 0 0 2 215 85 1 flow=Normal-UDP-DNS 1970/01/01 01:03:22.226494 53.403889 udp 10.0.2.15 64249 <-> 216.58.201.97 443 CON 0 0 106 48225 8683 54 flow=Normal-Google-Net-8 1970/01/01 01:03:22.427392 41.770458 tcp 10.0.2.15 49382 -> 216.58.201.101 443 FSPA_FSPA 0 0 2273 2230510 59872 656 flow=Normal-Google-Net-8 1970/01/01 01:03:23.080078 0.000000 udp 10.0.2.15 56057 -> 1.1.1.1 53 INT 0 1 78 78 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:03:24.085875 0.038428 udp 10.0.2.15 56057 <-> 1.0.0.1 53 CON 0 0 2 195 78 1 flow=Normal-UDP-DNS 1970/01/01 01:03:24.125178 5.079794 tcp 10.0.2.15 49383 -> 31.13.84.37 443 FSPA_FSPA 0 0 48 15498 6167 21 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:03:24.125555 4.998005 tcp 10.0.2.15 49384 -> 31.13.84.37 443 FSRPA_SPA 0 0 16 4965 1025 8 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:03:24.126044 4.996878 tcp 10.0.2.15 49385 -> 31.13.84.37 443 FSRPA_SRPA 0 0 18 5074 1079 9 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:03:24.126409 4.996004 tcp 10.0.2.15 49386 -> 31.13.84.37 443 FSRPA_SRPA 0 0 18 5074 1079 9 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:03:24.126801 0.347097 tcp 10.0.2.15 49387 -> 31.13.84.37 443 FSRPA_SPA 0 0 15 4912 971 7 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:03:27.468136 15.197448 udp 10.0.2.15 56062 <-> 216.58.201.110 443 CON 0 0 18 11794 5503 10 flow=Normal-Google-Net-8 1970/01/01 01:03:27.618422 0.087730 udp 10.0.2.15 52959 <-> 1.0.0.1 53 CON 0 0 2 213 78 1 flow=Normal-UDP-DNS 1970/01/01 01:03:27.710686 1.410356 tcp 10.0.2.15 49388 -> 216.58.201.99 443 FSRPA_SPA 0 0 18 5093 1273 9 flow=Normal-Google-Net-8 1970/01/01 01:03:27.712124 1.473647 tcp 10.0.2.15 49389 -> 216.58.201.99 443 FSPA_FSPA 0 0 32 9319 2667 14 flow=Normal-Google-Net-8 1970/01/01 01:03:27.929832 0.000000 udp 10.0.2.15 56320 -> 1.0.0.1 53 INT 0 1 73 73 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:03:28.931669 0.129604 udp 10.0.2.15 56320 <-> 1.1.1.1 53 CON 0 0 2 243 73 1 flow=Normal-UDP-DNS 1970/01/01 01:03:29.188271 1.104751 tcp 10.0.2.15 49390 -> 52.174.193.75 443 FSPA_FSPA 0 0 22 5849 1178 10 flow=Normal-To-Microsoft-26 1970/01/01 01:03:32.648643 7.014593 tcp 10.0.2.15 49391 -> 40.115.1.44 443 FSPA_FSPA 0 0 29 10403 3573 13 flow=Normal-To-Microsoft-13 1970/01/01 01:03:35.658797 0.096342 udp 10.0.2.15 55669 <-> 1.1.1.1 53 CON 0 0 2 250 74 1 flow=Normal-UDP-DNS 1970/01/01 01:03:35.757699 8.783957 tcp 10.0.2.15 49392 -> 131.253.61.98 443 FSPA_FSPA 0 0 38 16201 2043 15 flow=Normal-To-Microsoft-21 1970/01/01 01:03:35.869178 3.875464 tcp 10.0.2.15 49393 -> 131.253.61.98 443 FSA_SRA 0 0 6 340 174 3 flow=Normal-To-Microsoft-21 1970/01/01 01:03:39.012547 0.036176 udp 10.0.2.15 57200 <-> 1.1.1.1 53 CON 0 0 2 198 79 1 flow=Normal-UDP-DNS 1970/01/01 01:03:39.035790 0.005528 udp 10.0.2.15 56068 <-> 1.1.1.1 53 CON 0 0 2 185 74 1 flow=Normal-UDP-DNS 1970/01/01 01:03:39.042135 5.161469 tcp 10.0.2.15 49394 -> 216.58.201.110 443 FSPA_FSPA 0 0 51 16857 3662 22 flow=Normal-Google-Net-8 1970/01/01 01:03:39.053118 5.073500 tcp 10.0.2.15 49395 -> 216.58.201.110 443 FSRPA_SRPA 0 0 22 6739 1381 11 flow=Normal-Google-Net-8 1970/01/01 01:03:39.060239 0.904436 tcp 10.0.2.15 49396 -> 216.58.201.110 443 FSRPA_SPA 0 0 17 6401 1219 8 flow=Normal-Google-Net-8 1970/01/01 01:03:39.062288 0.646582 tcp 10.0.2.15 49397 -> 216.58.201.110 443 FSRPA_SPA 0 0 17 6401 1219 8 flow=Normal-Google-Net-8 1970/01/01 01:03:39.192141 0.000000 udp 10.0.2.15 50734 -> 1.1.1.1 53 INT 0 1 79 79 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:03:39.672643 0.400248 udp 10.0.2.15 50736 <-> 172.217.16.67 443 CON 0 0 18 10844 8727 10 flow=Normal-Google-Net-9 1970/01/01 01:03:40.207690 0.048284 udp 10.0.2.15 50734 <-> 1.0.0.1 53 CON 0 0 2 198 79 1 flow=Normal-UDP-DNS 1970/01/01 01:03:41.725708 0.050433 udp 10.0.2.15 64486 <-> 1.0.0.1 53 CON 0 0 2 215 87 1 flow=Normal-UDP-DNS 1970/01/01 01:03:41.777806 15.316040 udp 10.0.2.15 64487 <-> 172.217.23.194 443 CON 0 0 23 14720 6603 12 flow=Normal-Google-Net-9 1970/01/01 01:03:41.830077 2.371884 tcp 10.0.2.15 49398 -> 172.217.23.194 443 FSPA_FSPA 0 0 21 5258 1458 10 flow=Normal-Google-Net-9 1970/01/01 01:03:43.933966 0.057499 udp 10.0.2.15 55608 <-> 1.0.0.1 53 CON 0 0 2 205 84 1 flow=Normal-UDP-DNS 1970/01/01 01:03:43.992207 0.514402 tcp 10.0.2.15 49399 -> 216.58.201.110 443 FSRPA_SRPA 0 0 20 6632 1273 9 flow=Normal-Google-Net-8 1970/01/01 01:03:43.992622 16.298908 tcp 10.0.2.15 49400 -> 216.58.201.110 443 FSPA_FSPA 0 0 67 28163 5173 26 flow=Normal-Google-Net-8 1970/01/01 01:03:45.949743 0.079319 udp 10.0.2.15 54716 <-> 1.0.0.1 53 CON 0 0 2 272 71 1 flow=Normal-UDP-DNS 1970/01/01 01:03:46.029865 3.607861 tcp 10.0.2.15 49401 -> 104.96.45.48 443 FSRPA_SPA 0 0 35 13461 1906 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:03:46.030489 3.608155 tcp 10.0.2.15 49402 -> 104.96.45.48 443 FSRPA_SPA 0 0 166 128799 3459 44 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:03:46.031132 3.605347 tcp 10.0.2.15 49403 -> 104.96.45.48 443 FSRPA_SPA 0 0 54 26440 2175 20 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:03:47.077101 7.158014 tcp 10.0.2.15 49404 -> 31.13.84.37 443 FSPA_FSPA 0 0 31 8975 2728 13 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:03:47.331842 7.969837 tcp 10.0.2.15 49405 -> 31.13.84.37 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:03:51.827062 0.000000 udp 10.0.2.15 52516 -> 1.0.0.1 53 INT 0 1 79 79 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:03:52.558818 0.000000 udp 10.0.2.15 51657 -> 1.0.0.1 53 INT 0 1 79 79 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:03:52.821301 2.322227 tcp 10.0.2.15 49406 -> 104.96.45.48 443 FSRPA_FSRPA 0 0 25 6319 2811 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:03:52.825087 2.318602 tcp 10.0.2.15 49407 -> 104.96.45.48 443 FSRPA_SPA 0 0 16 3146 1831 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:03:52.827413 2.468006 tcp 10.0.2.15 49408 -> 104.96.45.48 443 FSRPA_FSRPA 0 0 15 1577 958 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:03:52.828360 0.021765 udp 10.0.2.15 52516 <-> 1.1.1.1 53 CON 0 0 2 198 79 1 flow=Normal-UDP-DNS 1970/01/01 01:03:52.829814 2.313811 tcp 10.0.2.15 49409 -> 104.96.45.48 443 FSRPA_SPA 0 0 22 6776 1938 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:03:52.831466 6.908717 tcp 10.0.2.15 49410 -> 104.96.45.48 443 FSRPA_SPA 0 0 21 5780 1944 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:03:52.851123 1.368908 tcp 10.0.2.15 49411 -> 216.58.201.110 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-Google-Net-8 1970/01/01 01:03:52.851495 1.371345 tcp 10.0.2.15 49412 -> 216.58.201.110 443 FSRPA_FSRPA 0 0 23 6793 1327 10 flow=Normal-Google-Net-8 1970/01/01 01:03:53.001212 6.134618 tcp 10.0.2.15 49413 -> 216.58.201.110 443 FSRPA_SPA 0 0 20 6631 1327 10 flow=Normal-Google-Net-8 1970/01/01 01:03:53.052288 0.053673 udp 10.0.2.15 62012 <-> 1.1.1.1 53 CON 0 0 2 206 80 1 flow=Normal-UDP-DNS 1970/01/01 01:03:53.107850 66.424759 udp 10.0.2.15 62013 <-> 216.58.201.99 443 CON 0 0 49 14820 8804 25 flow=Normal-Google-Net-8 1970/01/01 01:03:53.156302 5.978727 tcp 10.0.2.15 49414 -> 216.58.201.99 443 FSRPA_SRPA 0 0 21 6479 1216 11 flow=Normal-Google-Net-8 1970/01/01 01:03:53.561750 0.110030 udp 10.0.2.15 51657 <-> 1.1.1.1 53 CON 0 0 2 195 79 1 flow=Normal-UDP-DNS 1970/01/01 01:03:53.672818 0.410678 tcp 10.0.2.15 49415 -> 216.58.201.110 443 FSRPA_SPA 0 0 17 6400 1219 8 flow=Normal-Google-Net-8 1970/01/01 01:03:53.772234 0.448710 tcp 10.0.2.15 49416 -> 216.58.201.110 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-Google-Net-8 1970/01/01 01:03:55.043169 5.166162 tcp 10.0.2.15 49417 -> 40.115.1.44 443 FSPA_FSPA 0 0 30 10543 3660 13 flow=Normal-To-Microsoft-13 1970/01/01 01:03:59.282226 0.097275 udp 10.0.2.15 55024 <-> 1.1.1.1 53 CON 0 0 2 197 76 1 flow=Normal-UDP-DNS 1970/01/01 01:03:59.380906 4.822350 tcp 10.0.2.15 49418 -> 31.13.84.36 443 FSPA_FSPA 0 0 171 116558 50727 70 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:03:59.573767 4.624691 tcp 10.0.2.15 49419 -> 31.13.84.37 443 FSA_FSA 0 0 8 460 294 5 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:03:59.824657 4.373272 tcp 10.0.2.15 49420 -> 31.13.84.37 443 FSPA_FSPA 0 0 29 8947 2764 13 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:04:01.838146 0.493993 udp 10.0.2.15 55028 <-> 172.217.23.194 443 CON 0 0 18 10280 5144 11 flow=Normal-Google-Net-9 1970/01/01 01:04:03.105323 15.084762 udp 10.0.2.15 55030 <-> 216.58.201.106 443 CON 0 0 14 4686 2593 8 flow=Normal-Google-Net-8 1970/01/01 01:04:03.185686 0.000000 udp 10.0.2.15 58051 -> 1.1.1.1 53 INT 0 1 90 90 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:04:03.260729 0.080804 udp 10.0.2.15 53811 <-> 1.1.1.1 53 CON 0 0 2 197 79 1 flow=Normal-UDP-DNS 1970/01/01 01:04:03.343094 6.164834 tcp 10.0.2.15 49421 -> 31.13.84.4 443 FSPA_FSPA 0 0 56 15385 2833 25 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:04:03.370324 6.137695 tcp 10.0.2.15 49422 -> 31.13.84.4 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:04:03.427732 0.709710 tcp 10.0.2.15 49423 -> 31.13.84.4 443 FSRPA_SRPA 0 0 19 5128 1079 9 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:04:04.201371 0.024344 udp 10.0.2.15 58051 <-> 1.0.0.1 53 CON 0 0 2 196 90 1 flow=Normal-UDP-DNS 1970/01/01 01:04:04.226466 4.913734 tcp 10.0.2.15 49424 -> 90.182.114.17 443 FSRPA_SRPA 0 0 21 5112 1187 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:04:04.227048 5.153680 tcp 10.0.2.15 49425 -> 90.182.114.17 443 FSPA_FSPA 0 0 290 235921 9611 96 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:04:04.227371 4.911859 tcp 10.0.2.15 49426 -> 90.182.114.17 443 FSRPA_SPA 0 0 17 4895 1079 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:04:04.227590 4.913588 tcp 10.0.2.15 49427 -> 90.182.114.17 443 FSRPA_SRPA 0 0 20 5057 1133 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:04:04.227796 4.912404 tcp 10.0.2.15 49428 -> 90.182.114.17 443 FSRPA_SRPA 0 0 16 1894 1025 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:04:04.227992 4.909843 tcp 10.0.2.15 49429 -> 90.182.114.17 443 FSRPA_SRPA 0 0 20 5058 1133 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:04:04.383173 0.033616 udp 10.0.2.15 62683 <-> 1.0.0.1 53 CON 0 0 2 244 86 1 flow=Normal-UDP-DNS 1970/01/01 01:04:04.418733 5.060701 tcp 10.0.2.15 49430 -> 172.217.23.238 443 FSPA_FSPA 0 0 31 8836 1886 14 flow=Normal-Google-Net-9 1970/01/01 01:04:04.544101 9.667476 tcp 10.0.2.15 49431 -> 31.13.84.4 443 FSPA_FSPA 0 0 317 280035 7377 106 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:04:04.796120 4.763224 tcp 10.0.2.15 49432 -> 31.13.84.4 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:04:04.845415 4.614194 tcp 10.0.2.15 49433 -> 216.58.201.101 443 FSPA_FSPA 0 0 79 57992 4338 27 flow=Normal-Google-Net-8 1970/01/01 01:04:05.308976 3.910345 tcp 10.0.2.15 49434 -> 31.13.84.36 443 FSPA_FSPA 0 0 80 25739 12159 36 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:04:05.560576 3.583933 tcp 10.0.2.15 49435 -> 31.13.84.36 443 FSRPA_SRPA 0 0 16 1894 1025 8 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:04:05.563856 0.037165 udp 10.0.2.15 64652 <-> 1.0.0.1 53 CON 0 0 2 197 76 1 flow=Normal-UDP-DNS 1970/01/01 01:04:05.616550 3561.771240 tcp 10.0.2.15 49436 -> 74.125.133.188 5228 SPA_SPA 0 0 187 16313 6115 92 flow=Normal-Google-Net-6 1970/01/01 01:04:05.621394 3.523797 tcp 10.0.2.15 49437 -> 31.13.84.36 443 FSRPA_SRPA 0 0 19 5129 1079 9 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:04:05.734760 3.407013 tcp 10.0.2.15 49438 -> 31.13.84.36 443 FSRPA_SRPA 0 0 19 5127 1079 9 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:04:05.739779 3.404751 tcp 10.0.2.15 49439 -> 31.13.84.36 443 FSRPA_SRPA 0 0 19 5128 1079 9 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:04:05.746953 3.395376 tcp 10.0.2.15 49440 -> 31.13.84.36 443 FSRPA_SRPA 0 0 18 5073 1079 9 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:04:09.436276 9.781231 tcp 10.0.2.15 49441 -> 31.13.84.36 443 FSPA_FSPA 0 0 138 47102 16894 59 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:04:10.210309 13.988037 tcp 10.0.2.15 49442 -> 90.182.114.17 443 FSPA_FSPA 0 0 788 686500 23855 250 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:04:11.190692 0.060082 udp 10.0.2.15 60412 <-> 1.0.0.1 53 CON 0 0 2 182 75 1 flow=Normal-UDP-DNS 1970/01/01 01:04:11.253815 8.060963 tcp 10.0.2.15 49443 -> 173.194.192.94 443 FSPA_FSPA 0 0 34 8532 2323 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:04:11.293889 0.060924 udp 10.0.2.15 54896 <-> 1.0.0.1 53 CON 0 0 2 166 75 1 flow=Normal-UDP-DNS 1970/01/01 01:04:11.358735 2.836801 tcp 10.0.2.15 49444 -> 216.58.201.110 443 FSPA_FSPA 0 0 32 10442 2589 14 flow=Normal-Google-Net-8 1970/01/01 01:04:11.442876 3.352506 tcp 10.0.2.15 49445 -> 173.194.192.94 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:04:13.231379 0.962695 tcp 10.0.2.15 49446 -> 216.58.201.101 443 FSPA_FSPA 0 0 38 11522 3608 17 flow=Normal-Google-Net-8 1970/01/01 01:04:13.968131 5.175668 tcp 10.0.2.15 49447 -> 31.13.84.4 443 FSRPA_SRPA 0 0 19 5128 1079 9 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:04:14.132904 0.047576 udp 10.0.2.15 65382 <-> 1.0.0.1 53 CON 0 0 2 215 85 1 flow=Normal-UDP-DNS 1970/01/01 01:04:14.135052 0.000000 udp 10.0.2.15 62337 -> 1.0.0.1 53 INT 0 1 85 85 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:04:14.225710 0.054028 udp 10.0.2.15 57292 <-> 1.0.0.1 53 CON 0 0 2 215 85 1 flow=Normal-UDP-DNS 1970/01/01 01:04:14.278636 4.939357 tcp 10.0.2.15 49448 -> 31.13.84.4 443 FSPA_FSPA 0 0 47 19337 2324 20 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:04:14.361488 4.856277 tcp 10.0.2.15 49449 -> 31.13.84.4 443 FSPA_FSPA 0 0 91 46308 3978 37 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:04:14.426519 5.402784 tcp 10.0.2.15 49450 -> 40.115.1.44 443 FSPA_FSPA 0 0 30 9453 2569 13 flow=Normal-To-Microsoft-13 1970/01/01 01:04:14.456464 0.000000 udp 10.0.2.15 55045 -> 1.0.0.1 53 INT 0 1 87 87 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:04:14.459835 0.034304 udp 10.0.2.15 62395 <-> 1.0.0.1 53 CON 0 0 2 198 79 1 flow=Normal-UDP-DNS 1970/01/01 01:04:15.138934 0.047562 udp 10.0.2.15 62337 <-> 1.1.1.1 53 CON 0 0 2 215 85 1 flow=Normal-UDP-DNS 1970/01/01 01:04:15.462503 0.037731 udp 10.0.2.15 55045 <-> 1.1.1.1 53 CON 0 0 2 190 87 1 flow=Normal-UDP-DNS 1970/01/01 01:04:15.501038 4.016860 tcp 10.0.2.15 49451 -> 66.102.1.189 443 FSPA_FSPA 0 0 35 9398 3569 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:04:15.501556 3.642048 tcp 10.0.2.15 49452 -> 66.102.1.189 443 FSRPA_SRPA 0 0 19 5401 1273 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:04:16.091165 0.469098 udp 10.0.2.15 62398 <-> 66.102.1.189 443 CON 0 0 66 55756 6000 27 flow=Normal-UDP-Established 1970/01/01 01:04:19.358967 4.930078 tcp 10.0.2.15 49453 -> 31.13.84.4 443 FSPA_FSPA 0 0 37 14886 1928 15 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:04:20.633094 13.556812 tcp 10.0.2.15 49454 -> 31.13.84.36 443 FSPA_FSPA 0 0 296 130460 40159 120 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:04:22.633140 1.656709 tcp 10.0.2.15 49455 -> 31.13.84.37 443 FSPA_FSPA 0 0 29 8865 3091 13 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:04:22.681942 1.707669 tcp 10.0.2.15 49456 -> 31.13.84.4 443 FSPA_FSPA 0 0 116 84787 3817 42 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:04:27.941100 15.198099 udp 10.0.2.15 62409 <-> 216.58.201.109 443 CON 0 0 21 9785 3939 10 flow=Normal-Google-Net-8 1970/01/01 01:04:29.246504 0.079857 udp 10.0.2.15 60542 <-> 1.1.1.1 53 CON 0 0 2 195 78 1 flow=Normal-UDP-DNS 1970/01/01 01:04:29.328174 4.826583 tcp 10.0.2.15 49457 -> 31.13.84.37 443 FSRPA_SRPA 0 0 20 5182 1133 10 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:04:29.535124 4.653450 tcp 10.0.2.15 49458 -> 31.13.84.37 443 FSPA_FSPA 0 0 32 9027 3176 14 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:04:30.061109 4.128021 tcp 10.0.2.15 49459 -> 31.13.84.4 443 FSPA_FSPA 0 0 373 329438 8772 115 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:04:33.006771 6.182179 tcp 10.0.2.15 49460 -> 31.13.84.4 443 FSPA_FSPA 0 0 116 104449 2979 36 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:04:34.752550 4.435957 tcp 10.0.2.15 49461 -> 31.13.84.36 443 FSPA_FSPA 0 0 36 11383 3526 16 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:04:38.725380 0.463032 tcp 10.0.2.15 49462 -> 31.13.84.4 443 FSPA_FSPA 0 0 39 17583 1926 16 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:04:39.837042 9.516539 tcp 10.0.2.15 49463 -> 31.13.84.36 443 FSPA_FSPA 0 0 161 59152 27640 67 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:04:42.452597 1.753574 tcp 10.0.2.15 49464 -> 31.13.84.37 443 FSPA_FSPA 0 0 31 9025 3230 14 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:04:42.504685 6.745351 tcp 10.0.2.15 49465 -> 31.13.84.4 443 FSPA_FSPA 0 0 126 79867 4301 46 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:04:43.532712 0.667413 tcp 10.0.2.15 49466 -> 216.58.201.101 443 FSPA_FSPA 0 0 39 10230 5159 18 flow=Normal-Google-Net-8 1970/01/01 01:04:43.787622 0.661087 udp 10.0.2.15 60553 <-> 172.217.16.68 443 CON 0 0 18 9990 3566 10 flow=Normal-Google-Net-9 1970/01/01 01:04:45.379061 3.864751 tcp 10.0.2.15 49467 -> 90.182.114.17 443 FSPA_FSPA 0 0 92 38176 5255 38 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:04:45.383043 3.867440 tcp 10.0.2.15 49468 -> 31.13.84.4 443 FSPA_FSPA 0 0 35 10671 2207 16 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:04:53.537883 0.697815 tcp 10.0.2.15 49469 -> 31.13.84.36 443 FSPA_FSPA 0 0 26 8872 3425 12 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:04:53.874855 0.007622 udp 10.0.2.15 49911 <-> 1.1.1.1 53 CON 0 0 2 187 75 1 flow=Normal-UDP-DNS 1970/01/01 01:04:58.501684 0.061079 udp 10.0.2.15 54078 <-> 1.1.1.1 53 CON 0 0 2 250 74 1 flow=Normal-UDP-DNS 1970/01/01 01:04:58.563689 1.848898 tcp 10.0.2.15 49470 -> 131.253.61.96 443 FSPA_FSPA 0 0 29 10792 3134 12 flow=Normal-To-Microsoft-21 1970/01/01 01:05:00.501950 0.034852 udp 10.0.2.15 60027 <-> 1.1.1.1 53 CON 0 0 2 272 71 1 flow=Normal-UDP-DNS 1970/01/01 01:05:00.537886 4.412252 tcp 10.0.2.15 49471 -> 104.96.45.48 443 FSRPA_FSRPA 0 0 25 8184 1746 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:05:04.367165 3.007428 udp 10.0.2.15 60028 -> 239.255.255.250 1900 INT 0 4 864 864 4 flow=Normal-UDP-Attempt 1970/01/01 01:05:04.624649 5.129120 tcp 10.0.2.15 49472 -> 131.253.61.96 443 FSPA_FSPA 0 0 43 13724 3746 18 flow=Normal-To-Microsoft-21 1970/01/01 01:05:09.952135 0.814131 tcp 10.0.2.15 49473 -> 131.253.61.96 443 FSPA_FSPA 0 0 34 13617 3327 13 flow=Normal-To-Microsoft-21 1970/01/01 01:05:11.469825 3.448194 tcp 10.0.2.15 49474 -> 104.96.45.48 443 FSRPA_SPA 0 0 156 101422 6199 48 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:05:11.471080 3.405461 tcp 10.0.2.15 49475 -> 104.96.45.48 443 FSRPA_SRPA 0 0 23 6614 931 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:05:11.472735 3.444890 tcp 10.0.2.15 49476 -> 104.96.45.48 443 FSRPA_FSRPA 0 0 35 13178 3351 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:05:37.083147 0.066622 udp 10.0.2.15 54538 <-> 1.1.1.1 53 CON 0 0 2 206 80 1 flow=Normal-UDP-DNS 1970/01/01 01:05:37.157285 26.547384 udp 10.0.2.15 54539 <-> 216.58.201.99 443 CON 0 0 24 8064 4319 12 flow=Normal-Google-Net-8 1970/01/01 01:05:39.504746 0.228661 udp 10.0.2.15 54541 <-> 216.58.201.110 443 CON 0 0 8 4562 3022 5 flow=Normal-Google-Net-8 1970/01/01 01:05:39.542547 0.000000 udp 10.0.2.15 55076 -> 1.1.1.1 53 INT 0 1 79 79 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:05:39.554729 0.000000 udp 10.0.2.15 55223 -> 1.1.1.1 53 INT 0 1 78 78 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:05:39.555494 4.096272 udp 10.0.2.15 62914 <-> 1.1.1.1 53 CON 0 0 4 333 216 3 flow=Normal-UDP-DNS 1970/01/01 01:05:39.556292 0.045778 udp 10.0.2.15 62874 <-> 1.1.1.1 53 CON 0 0 2 166 75 1 flow=Normal-UDP-DNS 1970/01/01 01:05:39.570154 18.359495 udp 10.0.2.15 62875 <-> 172.217.16.67 443 CON 0 0 115 75857 8391 50 flow=Normal-Google-Net-9 1970/01/01 01:05:39.572444 4.079261 udp 10.0.2.15 51152 <-> 1.1.1.1 53 CON 0 0 4 316 225 3 flow=Normal-UDP-DNS 1970/01/01 01:05:39.614203 0.143302 udp 10.0.2.15 51153 <-> 216.58.201.99 443 CON 0 0 6 3090 1553 3 flow=Normal-Google-Net-8 1970/01/01 01:05:40.425733 0.043743 udp 10.0.2.15 65312 <-> 1.1.1.1 53 CON 0 0 2 341 76 1 flow=Normal-UDP-DNS 1970/01/01 01:05:40.636145 3.651257 tcp 10.0.2.15 49477 -> 104.45.0.18 80 FSPA_FSPA 0 0 11 2112 708 6 flow=Normal-TCP-WEB-Established 1970/01/01 01:05:40.636588 3.653740 tcp 10.0.2.15 49478 -> 104.45.0.18 80 FSA_SRA 0 0 6 340 174 3 flow=Normal-TCP-WEB-Established 1970/01/01 01:05:40.637198 0.047651 udp 10.0.2.15 55076 <-> 1.0.0.1 53 CON 0 0 2 214 79 1 flow=Normal-UDP-DNS 1970/01/01 01:05:40.637375 3.016122 udp 10.0.2.15 62914 <-> 1.0.0.1 53 CON 0 0 3 261 144 2 flow=Normal-UDP-DNS 1970/01/01 01:05:40.637641 0.048041 udp 10.0.2.15 55223 <-> 1.0.0.1 53 CON 0 0 2 172 78 1 flow=Normal-UDP-DNS 1970/01/01 01:05:40.637789 3.016658 udp 10.0.2.15 51152 <-> 1.0.0.1 53 CON 0 0 3 241 150 2 flow=Normal-UDP-DNS 1970/01/01 01:05:40.887605 3.388917 tcp 10.0.2.15 49479 -> 104.45.0.18 443 FSPA_FSPA 0 0 26 8876 1654 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:05:40.887949 3.390346 tcp 10.0.2.15 49480 -> 104.45.0.18 443 FSPA_SRPA 0 0 22 6950 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:05:41.361480 0.065757 udp 10.0.2.15 52368 <-> 1.0.0.1 53 CON 0 0 2 258 81 1 flow=Normal-UDP-DNS 1970/01/01 01:05:41.428112 2.845717 tcp 10.0.2.15 49481 -> 23.7.194.20 443 FSRPA_FSRPA 0 0 33 12066 1976 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:05:41.428575 2.807893 tcp 10.0.2.15 49482 -> 23.7.194.20 443 FSRPA_SRPA 0 0 24 8353 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:05:41.937890 0.041189 udp 10.0.2.15 50356 <-> 1.0.0.1 53 CON 0 0 2 272 71 1 flow=Normal-UDP-DNS 1970/01/01 01:05:41.938305 0.035756 udp 10.0.2.15 63589 <-> 1.0.0.1 53 CON 0 0 2 250 74 1 flow=Normal-UDP-DNS 1970/01/01 01:05:41.974850 4.519376 tcp 10.0.2.15 49483 -> 131.253.61.96 443 FSPA_FSPA 0 0 34 10460 2464 14 flow=Normal-To-Microsoft-21 1970/01/01 01:05:41.980824 2.302662 tcp 10.0.2.15 49484 -> 104.96.45.48 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:05:42.180905 2.055584 tcp 10.0.2.15 49485 -> 104.96.45.48 443 FSRPA_SRPA 0 0 23 6932 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:05:43.653497 0.000000 icmp 10.0.2.15 0x0303 -> 1.0.0.1 0xc2f5 URP 0 1 145 145 1 flow=Normal-ICMP 1970/01/01 01:05:46.495607 2.795080 tcp 10.0.2.15 49486 -> 23.7.194.20 443 FSRPA_SPA 0 0 107 56883 7262 34 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:05:46.496159 13.669235 tcp 10.0.2.15 49487 -> 23.7.194.20 443 FSRPA_FSRPA 0 0 421 269095 10428 126 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:05:48.766174 12.245306 tcp 10.0.2.15 49488 -> 23.7.194.20 443 FSRPA_SPA 0 0 31 12101 4461 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:05:48.808321 0.043941 udp 10.0.2.15 54902 <-> 1.1.1.1 53 CON 0 0 2 293 78 1 flow=Normal-UDP-DNS 1970/01/01 01:05:48.808780 0.033756 udp 10.0.2.15 50167 <-> 1.1.1.1 53 CON 0 0 2 243 89 1 flow=Normal-UDP-DNS 1970/01/01 01:05:48.818193 0.036896 udp 10.0.2.15 51615 <-> 1.1.1.1 53 CON 0 0 2 238 78 1 flow=Normal-UDP-DNS 1970/01/01 01:05:48.818471 0.040891 udp 10.0.2.15 52476 <-> 1.1.1.1 53 CON 0 0 2 172 78 1 flow=Normal-UDP-DNS 1970/01/01 01:05:48.819266 0.039392 udp 10.0.2.15 57021 <-> 1.1.1.1 53 CON 0 0 2 271 103 1 flow=Normal-UDP-DNS 1970/01/01 01:05:48.843232 5.475319 tcp 10.0.2.15 49489 -> 2.21.74.40 443 FSRPA_SPA 0 0 23 6531 1844 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:05:48.843485 10.474345 tcp 10.0.2.15 49490 -> 2.21.74.40 443 FSRPA_SPA 0 0 107 61541 4194 36 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:05:48.853198 6.437285 tcp 10.0.2.15 49491 -> 104.108.13.83 443 FSRPA_FSRPA 0 0 169 98972 4099 54 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:05:48.856039 8.447837 tcp 10.0.2.15 49492 -> 152.199.19.160 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:05:48.859606 6.219331 tcp 10.0.2.15 49493 -> 2.21.74.33 443 FSRPA_SPA 0 0 30 11332 1866 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:05:48.860511 5.470537 tcp 10.0.2.15 49494 -> 104.107.240.41 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:05:49.019491 5.580168 tcp 10.0.2.15 49495 -> 152.199.19.160 443 FSPA_FSPA 0 0 90 49123 2710 29 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:05:49.042458 6.984101 tcp 10.0.2.15 49496 -> 104.107.240.41 443 FSRPA_SPA 0 0 121 91899 3022 34 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:05:53.370580 7.913663 tcp 10.0.2.15 49497 -> 23.7.194.20 443 FSRPA_SPA 0 0 36 15098 2548 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:05:53.372537 5.870534 tcp 10.0.2.15 49498 -> 23.7.194.20 443 FSRPA_SRPA 0 0 24 8353 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:05:53.374526 10.912349 tcp 10.0.2.15 49499 -> 23.7.194.20 443 FSRPA_FSRPA 0 0 488 345670 9024 136 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:05:53.418907 2.048088 udp 10.0.2.15 50554 <-> 1.1.1.1 53 CON 0 0 3 404 170 2 flow=Normal-UDP-DNS 1970/01/01 01:05:53.436692 0.000000 udp 10.0.2.15 55845 -> 1.1.1.1 53 INT 0 1 77 77 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:05:53.994961 0.100245 udp 10.0.2.15 64396 <-> 1.1.1.1 53 CON 0 0 2 282 90 1 flow=Normal-UDP-DNS 1970/01/01 01:05:54.097335 6.525231 tcp 10.0.2.15 49500 -> 104.108.12.181 443 FSRPA_SPA 0 0 25 8325 1919 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:05:54.097783 5.144775 tcp 10.0.2.15 49501 -> 104.108.12.181 443 FSRPA_SRPA 0 0 20 5690 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:05:54.251334 0.079658 udp 10.0.2.15 60612 <-> 1.1.1.1 53 CON 0 0 2 273 70 1 flow=Normal-UDP-DNS 1970/01/01 01:05:54.264496 2.056490 udp 10.0.2.15 52272 <-> 1.1.1.1 53 CON 0 0 3 422 158 2 flow=Normal-UDP-DNS 1970/01/01 01:05:54.332067 3566.058838 tcp 10.0.2.15 49502 -> 23.4.248.228 443 FSA_SA 0 0 163 8897 4519 82 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:05:54.419362 0.000000 udp 10.0.2.15 50554 -> 1.0.0.1 53 INT 0 1 85 85 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:05:54.439001 0.046228 udp 10.0.2.15 55845 <-> 1.0.0.1 53 CON 0 0 2 321 77 1 flow=Normal-UDP-DNS 1970/01/01 01:05:54.486715 5.523236 tcp 10.0.2.15 49503 -> 23.38.84.178 443 FSRPA_SPA 0 0 55 31007 2248 20 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:05:54.503759 4.809450 tcp 10.0.2.15 49504 -> 23.4.248.228 443 FSRPA_FSRPA 0 0 35 14537 1952 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:05:55.267671 0.000000 udp 10.0.2.15 52272 -> 1.0.0.1 53 INT 0 1 79 79 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:05:55.472262 8.817088 tcp 10.0.2.15 49505 -> 23.9.9.225 443 FSRPA_FSRPA 0 0 299 184632 7280 91 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:05:55.472659 8.817443 tcp 10.0.2.15 49506 -> 23.9.9.225 443 FSRPA_FSRPA 0 0 151 111697 3747 42 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:05:55.473028 23.469294 tcp 10.0.2.15 49507 -> 23.9.9.225 443 FSPA_FSPA 0 0 16 2542 1923 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:05:55.473389 13.868909 tcp 10.0.2.15 49508 -> 23.9.9.225 443 FSRPA_SPA 0 0 18 4955 1956 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:05:55.473750 4.283192 tcp 10.0.2.15 49509 -> 23.9.9.225 443 FSRPA_FSRPA 0 0 152 98163 6700 46 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:05:55.475230 8.813768 tcp 10.0.2.15 49510 -> 23.9.9.225 443 FSRPA_FSRPA 0 0 400 283077 13832 112 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:05:56.322431 3.564353 tcp 10.0.2.15 49511 -> 52.0.229.30 443 FSRPA_FSRPA 0 0 25 6908 2627 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:06:03.479634 0.076104 udp 10.0.2.15 55430 <-> 1.1.1.1 53 CON 0 0 2 253 80 1 flow=Normal-UDP-DNS 1970/01/01 01:06:03.507942 0.070992 udp 10.0.2.15 61966 <-> 1.1.1.1 53 CON 0 0 2 284 89 1 flow=Normal-UDP-DNS 1970/01/01 01:06:03.559689 6.178222 tcp 10.0.2.15 49512 -> 104.107.249.88 443 FSRPA_SPA 0 0 36 14950 1977 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:06:03.592703 0.735862 tcp 10.0.2.15 49513 -> 40.77.226.250 443 FSPA_FSPA 0 0 26 9734 2542 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:06:03.593088 0.722318 tcp 10.0.2.15 49514 -> 40.77.226.250 443 FSPA_FSPA 0 0 26 9718 2526 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:06:03.593439 0.721509 tcp 10.0.2.15 49515 -> 40.77.226.250 443 FSPA_SRPA 0 0 18 7244 1057 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:06:03.593798 0.748458 tcp 10.0.2.15 49516 -> 40.77.226.250 443 FSPA_FSPA 0 0 29 13026 4937 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:06:04.762998 4.815255 tcp 10.0.2.15 49517 -> 104.107.249.88 443 FSRPA_SPA 0 0 28 10904 1902 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:06:04.764012 4.822178 tcp 10.0.2.15 49518 -> 104.107.249.88 443 FSRPA_SPA 0 0 94 46864 3538 32 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:06:05.017680 0.033988 udp 10.0.2.15 54647 <-> 1.1.1.1 53 CON 0 0 2 380 86 1 flow=Normal-UDP-DNS 1970/01/01 01:06:05.052751 4.339509 tcp 10.0.2.15 49519 -> 52.206.168.245 443 FSRPA_FSRPA 0 0 27 8607 1874 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:06:09.535835 4.739803 tcp 10.0.2.15 49520 -> 2.21.74.33 443 FSRPA_SRPA 0 0 19 5414 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:06:09.537577 4.860083 tcp 10.0.2.15 49521 -> 131.253.61.96 443 FSPA_SRPA 0 0 29 8276 1327 12 flow=Normal-To-Microsoft-21 1970/01/01 01:06:09.538294 4.860060 tcp 10.0.2.15 49522 -> 131.253.61.96 443 FSPA_SRPA 0 0 29 8276 1327 12 flow=Normal-To-Microsoft-21 1970/01/01 01:06:09.539004 4.738013 tcp 10.0.2.15 49523 -> 23.4.248.228 443 FSRPA_SRPA 0 0 25 8722 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:06:09.539300 4.738051 tcp 10.0.2.15 49524 -> 23.4.248.228 443 FSRPA_SRPA 0 0 25 8722 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:06:09.539564 4.740010 tcp 10.0.2.15 49525 -> 23.4.248.228 443 FSRPA_SRPA 0 0 25 8722 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:06:09.541547 4.799447 tcp 10.0.2.15 49526 -> 40.77.226.250 443 FSPA_SRPA 0 0 22 7460 1165 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:06:09.542068 4.800236 tcp 10.0.2.15 49527 -> 40.77.226.250 443 FSPA_SRPA 0 0 20 7352 1111 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:06:09.542535 4.797452 tcp 10.0.2.15 49528 -> 40.77.226.250 443 FSPA_SRPA 0 0 20 7352 1111 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:06:09.543170 4.793576 tcp 10.0.2.15 49529 -> 23.38.84.178 443 FSRPA_SPA 0 0 32 10234 2324 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:06:09.551385 0.030922 udp 10.0.2.15 59039 <-> 1.1.1.1 53 CON 0 0 2 208 82 1 flow=Normal-UDP-DNS 1970/01/01 01:06:09.551889 0.043777 udp 10.0.2.15 59928 <-> 1.1.1.1 53 CON 0 0 2 342 77 1 flow=Normal-UDP-DNS 1970/01/01 01:06:09.552484 0.036575 udp 10.0.2.15 51311 <-> 1.1.1.1 53 CON 0 0 2 337 82 1 flow=Normal-UDP-DNS 1970/01/01 01:06:09.555273 0.043116 udp 10.0.2.15 61268 <-> 1.1.1.1 53 CON 0 0 2 243 89 1 flow=Normal-UDP-DNS 1970/01/01 01:06:09.556626 0.045730 udp 10.0.2.15 59013 <-> 1.1.1.1 53 CON 0 0 2 250 77 1 flow=Normal-UDP-DNS 1970/01/01 01:06:09.584912 4.751778 tcp 10.0.2.15 49530 -> 152.199.20.1 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:06:09.589882 4.684769 tcp 10.0.2.15 49531 -> 104.127.49.77 443 FSRPA_SRPA 0 0 21 5837 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:06:09.590137 4.684863 tcp 10.0.2.15 49532 -> 104.127.49.77 443 FSRPA_SRPA 0 0 21 5837 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:06:09.597094 4.677051 tcp 10.0.2.15 49533 -> 23.38.84.178 443 FSRPA_SRPA 0 0 24 7908 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:06:09.599837 4.681777 tcp 10.0.2.15 49534 -> 2.21.74.72 443 FSRPA_SRPA 0 0 19 5421 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:06:09.600566 4.680415 tcp 10.0.2.15 49535 -> 2.21.74.72 443 FSRPA_SRPA 0 0 21 5529 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:06:09.602662 4.679518 tcp 10.0.2.15 49536 -> 2.21.74.72 443 FSRPA_SRPA 0 0 20 5474 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:06:09.603415 5.036006 tcp 10.0.2.15 49537 -> 104.108.6.3 443 FSRPA_SPA 0 0 32 10547 2322 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:06:09.787505 4.482435 tcp 10.0.2.15 49538 -> 152.199.20.1 443 FSRPA_SPA 0 0 29 11478 1303 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:06:09.787852 15.023573 tcp 10.0.2.15 49539 -> 104.127.49.77 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:06:09.795032 4.541586 tcp 10.0.2.15 49540 -> 2.21.74.72 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:06:18.976516 5.385521 tcp 10.0.2.15 49541 -> 40.77.226.250 443 FSPA_FSPA 0 0 38 19453 11548 17 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:06:18.977613 5.365454 tcp 10.0.2.15 49542 -> 40.77.226.250 443 FSPA_FSPA 0 0 39 19006 11373 18 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:06:19.018338 5.297158 tcp 10.0.2.15 49543 -> 23.7.194.20 443 FSRPA_FSRPA 0 0 63 32619 4220 19 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:06:19.031284 0.030275 udp 10.0.2.15 56619 <-> 1.1.1.1 53 CON 0 0 2 244 75 1 flow=Normal-UDP-DNS 1970/01/01 01:06:19.046717 5.233985 tcp 10.0.2.15 49544 -> 23.7.194.20 443 FSRPA_SPA 0 0 21 8191 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:06:19.062392 5.250185 tcp 10.0.2.15 49545 -> 23.38.91.7 443 FSRPA_SPA 0 0 87 46626 3643 30 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:06:19.099194 2.700274 tcp 10.0.2.15 49546 -> 131.253.61.96 443 FSPA_FSPA 0 0 35 11906 2640 14 flow=Normal-To-Microsoft-21 1970/01/01 01:06:19.253806 5.090480 tcp 10.0.2.15 49547 -> 40.77.226.250 443 FSPA_SRPA 0 0 22 7460 1165 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:06:19.370285 5.200240 tcp 10.0.2.15 49548 -> 40.77.226.250 443 FSPA_SRPA 0 0 22 7460 1165 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:06:19.951780 0.035502 udp 10.0.2.15 64170 <-> 1.1.1.1 53 CON 0 0 2 249 78 1 flow=Normal-UDP-DNS 1970/01/01 01:06:19.988090 4.318609 tcp 10.0.2.15 49549 -> 23.38.91.7 443 FSRPA_SPA 0 0 33 16372 11988 16 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:06:21.815459 2.502827 tcp 10.0.2.15 49550 -> 104.96.45.48 443 FSRPA_SPA 0 0 24 7921 1839 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:06:44.352514 4.995224 tcp 10.0.2.15 49551 -> 40.77.226.250 443 FSPA_SRPA 0 0 22 7460 1165 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:06:44.376888 4.938169 tcp 10.0.2.15 49552 -> 23.38.91.7 443 FSRPA_SPA 0 0 22 6765 2750 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:06:44.412894 0.071291 udp 10.0.2.15 64966 <-> 1.1.1.1 53 CON 0 0 2 272 71 1 flow=Normal-UDP-DNS 1970/01/01 01:06:44.413625 4.999061 tcp 10.0.2.15 49553 -> 131.253.61.96 443 FSA_SRA 0 0 6 340 174 3 flow=Normal-To-Microsoft-21 1970/01/01 01:06:44.562404 4.783794 tcp 10.0.2.15 49554 -> 40.77.226.250 443 FSPA_FSPA 0 0 37 17415 9510 16 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:06:44.646889 4.717508 tcp 10.0.2.15 49555 -> 131.253.61.96 443 FSPA_FSPA 0 0 44 18520 3036 16 flow=Normal-To-Microsoft-21 1970/01/01 01:06:44.808143 0.004071 udp 10.0.2.15 58750 <-> 1.1.1.1 53 CON 0 0 2 162 73 1 flow=Normal-UDP-DNS 1970/01/01 01:06:44.819253 15.168301 udp 10.0.2.15 58751 <-> 172.217.16.67 443 CON 0 0 14 4803 2755 7 flow=Normal-Google-Net-9 1970/01/01 01:06:47.050000 0.008342 udp 10.0.2.15 65491 <-> 1.1.1.1 53 CON 0 0 2 193 75 1 flow=Normal-UDP-DNS 1970/01/01 01:06:47.059499 2.260226 tcp 10.0.2.15 49556 -> 216.58.201.101 443 FSPA_FSPA 0 0 93 67523 4942 31 flow=Normal-Google-Net-8 1970/01/01 01:06:49.061156 465.783447 udp 10.0.2.15 65493 <-> 66.102.1.189 443 CON 0 0 155 26590 11703 80 flow=Normal-UDP-Established 1970/01/01 01:06:49.461521 10.134987 tcp 10.0.2.15 49557 -> 104.96.45.48 443 FSRPA_FSRPA 0 0 519 326305 11324 156 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:06:49.468774 4.868851 tcp 10.0.2.15 49558 -> 104.96.45.48 443 FSRPA_SPA 0 0 161 136704 5654 42 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:06:49.473764 14.176163 tcp 10.0.2.15 49559 -> 104.96.45.48 443 FSRPA_FSRPA 0 0 15 1577 958 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:06:49.488951 2.056495 udp 10.0.2.15 50981 <-> 1.1.1.1 53 CON 0 0 3 277 174 2 flow=Normal-UDP-DNS 1970/01/01 01:06:49.716976 4.629567 tcp 10.0.2.15 49560 -> 104.96.45.48 443 FSRPA_SPA 0 0 84 43015 8221 30 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:06:50.491723 0.000000 udp 10.0.2.15 50981 -> 1.0.0.1 53 INT 0 1 87 87 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:06:51.557919 38.786804 udp 10.0.2.15 50983 <-> 216.58.201.106 443 CON 0 0 21 6135 3249 10 flow=Normal-Google-Net-8 1970/01/01 01:06:53.163762 6.131169 tcp 10.0.2.15 49561 -> 104.96.45.48 443 FSRPA_SRPA 0 0 21 6824 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:06:53.165732 1.173701 tcp 10.0.2.15 49562 -> 104.96.45.48 443 FSRPA_FSRPA 0 0 15 1577 958 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:06:55.295030 5.455259 tcp 10.0.2.15 49563 -> 131.253.61.96 443 FSA_SRA 0 0 6 340 174 3 flow=Normal-To-Microsoft-21 1970/01/01 01:06:55.545274 0.948783 tcp 10.0.2.15 49564 -> 131.253.61.96 443 FSPA_FSPA 0 0 33 11819 3919 13 flow=Normal-To-Microsoft-21 1970/01/01 01:06:57.076843 0.074381 udp 10.0.2.15 51049 <-> 1.1.1.1 53 CON 0 0 2 198 79 1 flow=Normal-UDP-DNS 1970/01/01 01:06:57.154244 165.195251 udp 10.0.2.15 51050 <-> 216.58.201.110 443 CON 0 0 112 28085 11148 61 flow=Normal-Google-Net-8 1970/01/01 01:06:57.253396 2.100025 tcp 10.0.2.15 49565 -> 216.58.201.110 443 FSPA_FSPA 0 0 30 8508 2130 14 flow=Normal-Google-Net-8 1970/01/01 01:06:57.254089 2.040351 tcp 10.0.2.15 49566 -> 216.58.201.110 443 FSRPA_SRPA 0 0 21 6479 1162 10 flow=Normal-Google-Net-8 1970/01/01 01:06:58.199951 16.546225 udp 10.0.2.15 51052 <-> 216.58.201.110 443 CON 0 0 76 28101 16908 43 flow=Normal-Google-Net-8 1970/01/01 01:06:58.290752 1.005368 tcp 10.0.2.15 49567 -> 216.58.201.110 443 FSRPA_SPA 0 0 19 6578 1273 9 flow=Normal-Google-Net-8 1970/01/01 01:06:58.303268 0.993748 tcp 10.0.2.15 49568 -> 216.58.201.110 443 FSRPA_SRPA 0 0 21 6684 1327 10 flow=Normal-Google-Net-8 1970/01/01 01:07:01.053440 0.068467 udp 10.0.2.15 50435 <-> 1.1.1.1 53 CON 0 0 2 198 79 1 flow=Normal-UDP-DNS 1970/01/01 01:07:02.078070 0.014295 udp 10.0.2.15 51881 <-> 1.1.1.1 53 CON 0 0 2 187 75 1 flow=Normal-UDP-DNS 1970/01/01 01:07:02.806482 2.684622 tcp 10.0.2.15 49569 -> 131.253.61.96 443 FSPA_FSPA 0 0 42 15281 4535 17 flow=Normal-To-Microsoft-21 1970/01/01 01:07:04.371698 3.010972 udp 10.0.2.15 51882 -> 239.255.255.250 1900 INT 0 4 864 864 4 flow=Normal-UDP-Attempt 1970/01/01 01:07:04.965894 0.032844 udp 10.0.2.15 65025 <-> 1.1.1.1 53 CON 0 0 2 178 81 1 flow=Normal-UDP-DNS 1970/01/01 01:07:04.999360 4.342649 tcp 10.0.2.15 49570 -> 216.58.201.99 443 FSPA_FSPA 0 0 37 12405 5494 17 flow=Normal-Google-Net-8 1970/01/01 01:07:05.426566 0.067974 udp 10.0.2.15 61386 <-> 1.1.1.1 53 CON 0 0 2 174 79 1 flow=Normal-UDP-DNS 1970/01/01 01:07:05.505106 736.284058 tcp 10.0.2.15 49571 -> 216.58.201.110 80 SRPA_SPA 0 0 969 391431 106166 484 flow=Normal-Google-Net-8 1970/01/01 01:07:05.598688 3.873680 tcp 10.0.2.15 49572 -> 131.253.61.96 443 FSPA_SRPA 0 0 25 8060 1219 10 flow=Normal-To-Microsoft-21 1970/01/01 01:07:05.599196 5.143870 tcp 10.0.2.15 49573 -> 131.253.61.96 443 FSA_SRA 0 0 6 340 174 3 flow=Normal-To-Microsoft-21 1970/01/01 01:07:05.599964 2.984237 tcp 10.0.2.15 49574 -> 131.253.61.96 443 FSPA_FSPA 0 0 48 28885 3506 17 flow=Normal-To-Microsoft-21 1970/01/01 01:07:05.604376 0.068897 udp 10.0.2.15 65150 <-> 1.1.1.1 53 CON 0 0 2 258 81 1 flow=Normal-UDP-DNS 1970/01/01 01:07:05.614559 3.746493 tcp 10.0.2.15 49575 -> 104.45.0.18 443 FSA_SRA 0 0 7 406 240 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:05.671495 0.000000 udp 10.0.2.15 57600 -> 1.1.1.1 53 INT 0 1 88 88 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:07:05.677352 3.624354 tcp 10.0.2.15 49576 -> 23.7.194.20 443 FSRPA_SRPA 0 0 25 8407 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:05.677762 3.618115 tcp 10.0.2.15 49577 -> 23.7.194.20 443 FSRPA_SRPA 0 0 25 8407 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:05.678181 3.619951 tcp 10.0.2.15 49578 -> 23.7.194.20 443 FSRPA_SRPA 0 0 24 8353 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:05.678456 3.618762 tcp 10.0.2.15 49579 -> 23.7.194.20 443 FSRPA_SRPA 0 0 25 8407 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:05.851955 4.227996 tcp 10.0.2.15 49580 -> 131.253.61.96 443 FSPA_SRPA 0 0 23 7952 1165 9 flow=Normal-To-Microsoft-21 1970/01/01 01:07:05.853839 13.491211 tcp 10.0.2.15 49581 -> 104.45.0.18 443 FSPA_FSPA 0 0 123 74101 15325 43 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:06.678503 0.107333 udp 10.0.2.15 57600 <-> 1.0.0.1 53 CON 0 0 2 224 88 1 flow=Normal-UDP-DNS 1970/01/01 01:07:06.788576 0.021393 udp 10.0.2.15 59113 <-> 1.0.0.1 53 CON 0 0 2 224 88 1 flow=Normal-UDP-DNS 1970/01/01 01:07:06.810766 277.280609 tcp 10.0.2.15 49582 -> 90.182.119.82 80 FSPA_FSPA 0 0 9232 6497203 187594 2561 flow=Normal-Google-Net-10 1970/01/01 01:07:08.855836 0.033824 udp 10.0.2.15 59984 <-> 1.0.0.1 53 CON 0 0 2 294 81 1 flow=Normal-UDP-DNS 1970/01/01 01:07:09.537507 6.354156 tcp 10.0.2.15 49583 -> 104.123.135.92 443 FSRPA_FSRPA 0 0 236 151451 6144 70 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:09.556205 4.740853 tcp 10.0.2.15 49584 -> 104.123.135.92 443 FSRPA_SRPA 0 0 24 7897 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:09.564105 4.914526 tcp 10.0.2.15 49585 -> 104.123.135.92 443 FSRPA_SPA 0 0 12 1455 904 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:09.565789 4.919650 tcp 10.0.2.15 49586 -> 104.123.135.92 443 FSRPA_SPA 0 0 12 1455 904 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:09.569106 4.727263 tcp 10.0.2.15 49587 -> 104.123.135.92 443 FSRPA_SRPA 0 0 24 7897 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:09.572583 5.055539 tcp 10.0.2.15 49588 -> 104.123.135.92 443 FSRPA_SPA 0 0 12 1424 904 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:09.893808 4.405719 tcp 10.0.2.15 49589 -> 104.123.135.92 443 FSRPA_SRPA 0 0 25 7951 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:10.147094 4.550015 tcp 10.0.2.15 49590 -> 104.123.135.92 443 FSRPA_FSRPA 0 0 18 1779 1012 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:10.195193 14.685946 tcp 10.0.2.15 49591 -> 104.123.135.92 443 FSRPA_FSRPA 0 0 533 340253 10655 161 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:10.195931 13.509940 tcp 10.0.2.15 49592 -> 104.123.135.92 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:10.396864 86.486557 udp 10.0.2.15 59986 <-> 172.217.16.67 443 CON 0 0 1213 780446 64171 552 flow=Normal-Google-Net-9 1970/01/01 01:07:10.506954 45.804626 udp 10.0.2.15 59987 <-> 216.58.201.99 443 CON 0 0 403 301616 19505 179 flow=Normal-Google-Net-8 1970/01/01 01:07:12.197983 0.181571 udp 10.0.2.15 50954 <-> 1.0.0.1 53 CON 0 0 2 294 76 1 flow=Normal-UDP-DNS 1970/01/01 01:07:12.380936 2.076225 tcp 10.0.2.15 49593 -> 157.55.109.224 443 FSPA_FSPA 0 0 36 13479 3142 15 flow=Normal-To-Microsoft-3 1970/01/01 01:07:12.454652 2.010298 tcp 10.0.2.15 49594 -> 157.55.109.224 443 FSA_SRA 0 0 6 340 174 3 flow=Normal-To-Microsoft-3 1970/01/01 01:07:13.083310 0.054498 udp 10.0.2.15 54002 <-> 1.0.0.1 53 CON 0 0 2 248 81 1 flow=Normal-UDP-DNS 1970/01/01 01:07:13.098595 0.043853 udp 10.0.2.15 64696 <-> 1.0.0.1 53 CON 0 0 2 158 71 1 flow=Normal-UDP-DNS 1970/01/01 01:07:13.099054 0.043867 udp 10.0.2.15 62758 <-> 1.0.0.1 53 CON 0 0 2 226 81 1 flow=Normal-UDP-DNS 1970/01/01 01:07:13.099413 0.043909 udp 10.0.2.15 62731 <-> 1.0.0.1 53 CON 0 0 2 196 75 1 flow=Normal-UDP-DNS 1970/01/01 01:07:13.106263 0.025468 udp 10.0.2.15 53038 <-> 1.0.0.1 53 CON 0 0 2 164 74 1 flow=Normal-UDP-DNS 1970/01/01 01:07:13.146021 83.737862 udp 10.0.2.15 53039 <-> 172.217.16.68 443 CON 0 0 255 125519 27249 115 flow=Normal-Google-Net-9 1970/01/01 01:07:13.149868 6.248377 tcp 10.0.2.15 49595 -> 104.16.99.29 443 FSPA_FSPA 0 0 262 126921 7883 92 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:13.150535 1.529802 tcp 10.0.2.15 49596 -> 162.125.248.1 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:13.151311 6.178591 tcp 10.0.2.15 49597 -> 13.32.121.150 443 FSPA_FSPA 0 0 25 9019 1783 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:13.151944 6.148347 tcp 10.0.2.15 49598 -> 13.32.121.150 443 FSRPA_SRPA 0 0 20 6040 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:13.154300 1.500167 tcp 10.0.2.15 49599 -> 162.125.66.1 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:13.318019 5.981700 tcp 10.0.2.15 49600 -> 162.125.248.1 443 FSRPA_SPA 0 0 19 5697 1108 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:13.318360 6.100482 tcp 10.0.2.15 49601 -> 162.125.66.1 443 FSPA_FSPA 0 0 121 66396 3874 41 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:14.452383 0.005211 udp 10.0.2.15 58756 <-> 1.0.0.1 53 CON 0 0 2 198 79 1 flow=Normal-UDP-DNS 1970/01/01 01:07:14.452923 0.005884 udp 10.0.2.15 57223 <-> 1.0.0.1 53 CON 0 0 2 185 74 1 flow=Normal-UDP-DNS 1970/01/01 01:07:14.666678 0.003847 udp 10.0.2.15 55501 <-> 1.0.0.1 53 CON 0 0 2 202 77 1 flow=Normal-UDP-DNS 1970/01/01 01:07:14.668196 0.004374 udp 10.0.2.15 53209 <-> 1.0.0.1 53 CON 0 0 2 202 77 1 flow=Normal-UDP-DNS 1970/01/01 01:07:14.672649 220.189285 tcp 10.0.2.15 49602 -> 93.184.220.29 80 FSPA_FSPA 0 0 22 5402 1652 11 flow=Normal-TCP-WEB-Established 1970/01/01 01:07:14.674222 87.958267 tcp 10.0.2.15 49603 -> 93.184.220.29 80 SRPA_SPA 0 0 8 1583 629 5 flow=Normal-TCP-WEB-Established 1970/01/01 01:07:14.770216 0.073133 udp 10.0.2.15 51727 <-> 1.0.0.1 53 CON 0 0 2 208 78 1 flow=Normal-UDP-DNS 1970/01/01 01:07:14.844421 4.574347 tcp 10.0.2.15 49604 -> 162.125.66.2 443 FSPA_FSPA 0 0 44 18012 13172 20 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:16.501634 2.893438 tcp 10.0.2.15 49605 -> 104.16.99.29 443 FSPA_FSPA 0 0 29 7518 1713 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:17.326957 0.045157 udp 10.0.2.15 62190 <-> 1.0.0.1 53 CON 0 0 2 236 72 1 flow=Normal-UDP-DNS 1970/01/01 01:07:17.345723 0.021171 udp 10.0.2.15 58689 <-> 1.0.0.1 53 CON 0 0 2 208 80 1 flow=Normal-UDP-DNS 1970/01/01 01:07:17.346008 0.020868 udp 10.0.2.15 63736 <-> 1.0.0.1 53 CON 0 0 2 215 87 1 flow=Normal-UDP-DNS 1970/01/01 01:07:17.346671 0.043605 udp 10.0.2.15 59928 <-> 1.0.0.1 53 CON 0 0 2 227 82 1 flow=Normal-UDP-DNS 1970/01/01 01:07:17.347231 0.044628 udp 10.0.2.15 59018 <-> 1.0.0.1 53 CON 0 0 2 160 64 1 flow=Normal-UDP-DNS 1970/01/01 01:07:17.348706 0.018112 udp 10.0.2.15 49296 <-> 1.0.0.1 53 CON 0 0 2 197 76 1 flow=Normal-UDP-DNS 1970/01/01 01:07:17.367933 1.934782 tcp 10.0.2.15 49606 -> 31.13.84.36 443 FSRPA_SRPA 0 0 19 5129 1079 9 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:07:17.375055 16.555319 udp 10.0.2.15 49297 <-> 172.217.23.226 443 CON 0 0 35 14676 4768 17 flow=Normal-Google-Net-9 1970/01/01 01:07:17.383251 16.341082 udp 10.0.2.15 49298 <-> 172.217.23.226 443 CON 0 0 15 4645 2298 8 flow=Normal-Google-Net-9 1970/01/01 01:07:17.383785 7.382977 tcp 10.0.2.15 49607 -> 31.13.84.4 443 FSPA_FSPA 0 0 77 49937 2671 29 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:07:17.393130 2.028493 udp 10.0.2.15 49299 <-> 216.58.201.110 443 CON 0 0 21 5509 3114 12 flow=Normal-Google-Net-8 1970/01/01 01:07:17.393531 1.905722 tcp 10.0.2.15 49608 -> 13.107.21.200 443 FSRPA_SPA 0 0 25 8897 1216 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:17.395150 1.905926 tcp 10.0.2.15 49609 -> 188.125.66.33 443 FSRPA_SRPA 0 0 24 6113 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:17.395458 1.906294 tcp 10.0.2.15 49610 -> 199.16.156.75 443 FSRPA_SRPA 0 0 20 5897 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:17.421463 0.005021 udp 10.0.2.15 64677 <-> 1.0.0.1 53 CON 0 0 2 228 84 1 flow=Normal-UDP-DNS 1970/01/01 01:07:17.427883 15.468947 udp 10.0.2.15 64678 <-> 216.58.201.104 443 CON 0 0 67 47310 7347 35 flow=Normal-Google-Net-8 1970/01/01 01:07:17.728371 1.643918 tcp 10.0.2.15 49611 -> 216.58.201.104 443 FSRPA_SPA 0 0 15 5053 1165 7 flow=Normal-Google-Net-8 1970/01/01 01:07:18.661525 0.031173 udp 10.0.2.15 62659 <-> 1.0.0.1 53 CON 0 0 2 212 82 1 flow=Normal-UDP-DNS 1970/01/01 01:07:18.661804 0.032874 udp 10.0.2.15 50737 <-> 1.0.0.1 53 CON 0 0 2 254 80 1 flow=Normal-UDP-DNS 1970/01/01 01:07:18.662223 0.034708 udp 10.0.2.15 51091 <-> 1.0.0.1 53 CON 0 0 2 207 70 1 flow=Normal-UDP-DNS 1970/01/01 01:07:18.662553 0.036493 udp 10.0.2.15 49302 <-> 1.0.0.1 53 CON 0 0 2 192 75 1 flow=Normal-UDP-DNS 1970/01/01 01:07:18.695400 6.182723 tcp 10.0.2.15 49612 -> 104.244.43.176 443 FSRPA_FSRPA 0 0 32 7423 1819 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:18.696249 5.773066 tcp 10.0.2.15 49613 -> 2.16.214.89 443 FSRPA_FSRPA 0 0 25 6844 1661 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:18.698259 6.071380 tcp 10.0.2.15 49614 -> 87.248.118.22 443 FSPA_FSPA 0 0 34 9635 1835 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:18.699803 7.663722 tcp 10.0.2.15 49615 -> 182.22.25.252 443 FSPA_FSPA 0 0 42 10001 2274 18 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:18.795734 0.000000 udp 10.0.2.15 53352 -> 1.0.0.1 53 INT 0 1 87 87 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:07:18.796490 0.000000 udp 10.0.2.15 50104 -> 1.0.0.1 53 INT 0 1 74 74 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:07:18.804418 5.663844 tcp 10.0.2.15 49616 -> 2.16.214.89 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:18.908945 0.732236 tcp 10.0.2.15 49617 -> 182.22.25.252 443 FSA_SRA 0 0 6 340 174 3 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:18.950841 0.044143 udp 10.0.2.15 50480 <-> 1.0.0.1 53 CON 0 0 2 174 79 1 flow=Normal-UDP-DNS 1970/01/01 01:07:18.951553 0.037100 udp 10.0.2.15 62168 <-> 1.0.0.1 53 CON 0 0 2 240 79 1 flow=Normal-UDP-DNS 1970/01/01 01:07:18.960069 0.136945 udp 10.0.2.15 62169 <-> 216.58.201.106 443 CON 0 0 7 3164 1627 4 flow=Normal-Google-Net-8 1970/01/01 01:07:18.961413 0.003756 udp 10.0.2.15 54425 <-> 1.0.0.1 53 CON 0 0 2 228 84 1 flow=Normal-UDP-DNS 1970/01/01 01:07:18.973213 0.262791 udp 10.0.2.15 54426 <-> 216.58.201.72 443 CON 0 0 8 4562 3022 5 flow=Normal-Google-Net-8 1970/01/01 01:07:18.990419 0.324340 udp 10.0.2.15 54427 <-> 172.217.23.234 443 CON 0 0 13 8879 4571 8 flow=Normal-Google-Net-9 1970/01/01 01:07:19.001472 0.427014 udp 10.0.2.15 54428 <-> 216.58.201.109 443 CON 0 0 11 4796 3183 7 flow=Normal-Google-Net-8 1970/01/01 01:07:19.120632 0.075958 udp 10.0.2.15 64129 <-> 1.0.0.1 53 CON 0 0 2 252 83 1 flow=Normal-UDP-DNS 1970/01/01 01:07:19.197391 0.715186 udp 10.0.2.15 64130 <-> 66.102.1.157 443 CON 0 0 23 11745 4050 11 flow=Normal-UDP-Established 1970/01/01 01:07:19.734383 0.177814 udp 10.0.2.15 56759 <-> 1.0.0.1 53 CON 0 0 2 198 79 1 flow=Normal-UDP-DNS 1970/01/01 01:07:19.795862 0.119288 udp 10.0.2.15 50104 <-> 1.1.1.1 53 CON 0 0 2 244 74 1 flow=Normal-UDP-DNS 1970/01/01 01:07:19.796053 0.119120 udp 10.0.2.15 53352 <-> 1.1.1.1 53 CON 0 0 2 211 87 1 flow=Normal-UDP-DNS 1970/01/01 01:07:19.799114 4.502416 tcp 10.0.2.15 49618 -> 188.125.66.33 443 FSRPA_SRPA 0 0 22 6005 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:19.935507 4.497166 tcp 10.0.2.15 49619 -> 23.4.252.109 443 FSRPA_FSRPA 0 0 25 6880 1672 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:19.937487 15.360861 udp 10.0.2.15 56760 <-> 216.58.201.102 443 CON 0 0 32 15972 7534 18 flow=Normal-Google-Net-8 1970/01/01 01:07:19.988966 4.311184 tcp 10.0.2.15 49620 -> 216.58.201.102 443 FSRPA_SRPA 0 0 19 5388 1273 9 flow=Normal-Google-Net-8 1970/01/01 01:07:20.053446 4.391007 tcp 10.0.2.15 49621 -> 23.4.252.109 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:20.057396 14.668283 tcp 10.0.2.15 49622 -> 162.125.66.1 443 FSPA_FSPA 0 0 666 401178 346821 308 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:20.201431 4.657659 tcp 10.0.2.15 49623 -> 188.125.66.33 443 FSPA_FSPA 0 0 36 11432 2215 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:20.307869 4.161318 tcp 10.0.2.15 49624 -> 162.125.66.1 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:20.861387 6.680709 tcp 10.0.2.15 49625 -> 31.13.84.36 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:07:20.950094 3.518991 tcp 10.0.2.15 49626 -> 104.45.0.18 443 FSPA_FSPA 0 0 40 20681 10437 18 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:21.112996 3.666575 tcp 10.0.2.15 49627 -> 31.13.84.36 443 FSPA_FSPA 0 0 31 7252 2362 14 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:07:21.244058 3.503963 tcp 10.0.2.15 49628 -> 162.125.66.2 443 FSPA_FSPA 0 0 47 18175 13280 22 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:23.101692 1.651050 tcp 10.0.2.15 49629 -> 13.107.21.200 443 FSPA_FSPA 0 0 53 16375 2541 21 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:23.203914 0.000000 udp 10.0.2.15 57488 -> 1.1.1.1 53 INT 0 1 79 79 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:07:24.211050 0.032352 udp 10.0.2.15 57488 <-> 1.0.0.1 53 CON 0 0 2 221 79 1 flow=Normal-UDP-DNS 1970/01/01 01:07:24.244036 5.139149 tcp 10.0.2.15 49630 -> 185.63.144.5 443 FSPA_FSPA 0 0 25 6523 1869 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:25.099966 4.239222 tcp 10.0.2.15 49631 -> 104.16.99.29 443 FSPA_FSPA 0 0 211 119721 5289 68 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:25.167765 4.137696 tcp 10.0.2.15 49632 -> 31.13.84.36 443 FSRPA_SRPA 0 0 20 5183 1133 10 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:07:25.333377 0.156404 udp 10.0.2.15 64507 <-> 1.0.0.1 53 CON 0 0 2 262 76 1 flow=Normal-UDP-DNS 1970/01/01 01:07:25.407439 3.896149 tcp 10.0.2.15 49633 -> 104.16.99.29 443 FSRPA_SRPA 0 0 21 6112 1162 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:25.490620 3.881015 tcp 10.0.2.15 49634 -> 185.63.144.1 443 FSPA_FSPA 0 0 28 7240 2033 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:25.584391 3.798435 tcp 10.0.2.15 49635 -> 185.63.144.1 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:26.387585 2.957293 tcp 10.0.2.15 49636 -> 31.13.84.36 443 FSPA_FSPA 0 0 26 7104 2445 12 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:07:26.973040 0.034642 udp 10.0.2.15 58964 <-> 1.0.0.1 53 CON 0 0 2 221 79 1 flow=Normal-UDP-DNS 1970/01/01 01:07:27.010217 2.372893 tcp 10.0.2.15 49637 -> 185.63.144.5 443 FSPA_FSPA 0 0 31 8074 2067 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:29.025952 0.130912 udp 10.0.2.15 64992 <-> 1.0.0.1 53 CON 0 0 2 265 82 1 flow=Normal-UDP-DNS 1970/01/01 01:07:29.157751 5.342728 tcp 10.0.2.15 49638 -> 104.42.232.32 443 FSPA_FSPA 0 0 77 41031 6716 25 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:29.263047 5.242155 tcp 10.0.2.15 49639 -> 104.42.232.32 443 FSPA_SRPA 0 0 25 8129 1251 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:29.493527 5.214827 tcp 10.0.2.15 49640 -> 104.45.0.18 443 FSPA_FSPA 0 0 40 20687 10393 17 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:35.315262 10.156196 tcp 10.0.2.15 49641 -> 199.16.156.75 443 FSRPA_FSRPA 0 0 34 7730 1930 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:35.333705 0.000000 udp 10.0.2.15 54696 -> 1.0.0.1 53 INT 0 1 81 81 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:07:35.393565 0.560352 udp 10.0.2.15 56692 <-> 1.0.0.1 53 CON 0 0 2 234 85 1 flow=Normal-UDP-DNS 1970/01/01 01:07:35.570444 3564.779785 tcp 10.0.2.15 49642 -> 199.16.156.75 443 FSA_SA 0 0 163 8897 4519 82 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:35.962546 3.402381 tcp 10.0.2.15 49643 -> 13.32.121.73 443 FSPA_FSPA 0 0 30 7810 1954 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:35.962998 3.353834 tcp 10.0.2.15 49644 -> 13.32.121.73 443 FSRPA_SRPA 0 0 22 6237 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:36.094282 3.252342 tcp 10.0.2.15 49645 -> 13.32.121.73 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:36.333146 0.005846 udp 10.0.2.15 54696 <-> 1.1.1.1 53 CON 0 0 2 212 81 1 flow=Normal-UDP-DNS 1970/01/01 01:07:36.341670 3.182865 tcp 10.0.2.15 49646 -> 199.16.156.105 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:36.569775 2.820010 tcp 10.0.2.15 49647 -> 162.125.66.1 443 FSPA_FSPA 0 0 40 10248 2653 17 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:36.578590 2.939079 tcp 10.0.2.15 49648 -> 199.16.156.105 443 FSRPA_SPA 0 0 30 7403 1949 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:36.714808 2.674016 tcp 10.0.2.15 49649 -> 162.125.66.2 443 FSPA_FSPA 0 0 47 18174 13280 22 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:42.014863 2.386139 tcp 10.0.2.15 49650 -> 162.125.66.1 443 FSPA_FSPA 0 0 31 8865 2185 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:42.261635 0.000000 udp 10.0.2.15 57629 -> 1.1.1.1 53 INT 0 1 78 78 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:07:43.266992 0.003747 udp 10.0.2.15 57629 <-> 1.0.0.1 53 CON 0 0 2 208 78 1 flow=Normal-UDP-DNS 1970/01/01 01:07:43.271992 1.135430 tcp 10.0.2.15 49651 -> 162.125.66.2 443 FSPA_FSPA 0 0 45 18067 13226 21 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:46.065387 120.139587 tcp 10.0.2.15 49652 -> 93.184.220.29 80 SRPA_SPA 0 0 32 11963 3841 13 flow=Normal-TCP-WEB-Established 1970/01/01 01:07:47.399502 32.669468 tcp 10.0.2.15 49653 -> 162.125.66.1 443 FSPA_FSPA 0 0 1638 999663 739939 722 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:47.498396 0.057109 udp 10.0.2.15 53643 <-> 1.0.0.1 53 CON 0 0 2 193 73 1 flow=Normal-UDP-DNS 1970/01/01 01:07:47.558750 118.645966 tcp 10.0.2.15 49654 -> 216.58.201.110 80 SRPA_SPA 0 0 25 7225 2206 12 flow=Normal-Google-Net-8 1970/01/01 01:07:47.651349 1.745516 tcp 10.0.2.15 49655 -> 162.125.66.2 443 FSPA_FSPA 0 0 44 18012 13172 20 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:48.635952 0.032229 udp 10.0.2.15 64430 <-> 1.0.0.1 53 CON 0 0 2 244 71 1 flow=Normal-UDP-DNS 1970/01/01 01:07:48.670182 21.109114 tcp 10.0.2.15 49656 -> 23.51.123.27 80 FSPA_FSPA 0 0 13 2772 644 6 flow=Normal-TCP-WEB-Established 1970/01/01 01:07:48.771470 0.037165 udp 10.0.2.15 59010 <-> 1.0.0.1 53 CON 0 0 2 246 72 1 flow=Normal-UDP-DNS 1970/01/01 01:07:48.812459 17.228563 tcp 10.0.2.15 49657 -> 23.51.123.27 80 FSPA_FSPA 0 0 19 5890 1074 8 flow=Normal-TCP-WEB-Established 1970/01/01 01:07:49.176045 0.062289 udp 10.0.2.15 51740 <-> 1.0.0.1 53 CON 0 0 2 252 75 1 flow=Normal-UDP-DNS 1970/01/01 01:07:49.242734 18.582428 tcp 10.0.2.15 49658 -> 23.51.123.27 80 FSPA_FSPA 0 0 14 3006 708 7 flow=Normal-TCP-WEB-Established 1970/01/01 01:07:49.805428 0.035786 udp 10.0.2.15 63522 <-> 1.0.0.1 53 CON 0 0 2 246 72 1 flow=Normal-UDP-DNS 1970/01/01 01:07:49.852523 21.186790 tcp 10.0.2.15 49659 -> 23.51.123.27 80 FSPA_FSPA 0 0 12 2945 651 6 flow=Normal-TCP-WEB-Established 1970/01/01 01:07:50.093531 0.000000 udp 10.0.2.15 58489 -> 1.0.0.1 53 INT 0 1 72 72 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:07:50.679294 118.486595 udp 10.0.2.15 58490 <-> 216.58.201.110 443 CON 0 0 97 29986 13981 52 flow=Normal-Google-Net-8 1970/01/01 01:07:50.756853 0.003528 udp 10.0.2.15 57977 <-> 1.0.0.1 53 CON 0 0 2 215 85 1 flow=Normal-UDP-DNS 1970/01/01 01:07:50.767603 0.130822 udp 10.0.2.15 57978 <-> 172.217.16.97 443 CON 0 0 6 3090 1553 3 flow=Normal-Google-Net-9 1970/01/01 01:07:51.096456 0.043919 udp 10.0.2.15 58489 <-> 1.1.1.1 53 CON 0 0 2 246 72 1 flow=Normal-UDP-DNS 1970/01/01 01:07:51.154989 12.971674 tcp 10.0.2.15 49660 -> 23.51.123.27 80 FSPA_FSPA 0 0 14 2883 709 7 flow=Normal-TCP-WEB-Established 1970/01/01 01:07:51.931074 0.052783 udp 10.0.2.15 60233 <-> 1.1.1.1 53 CON 0 0 2 172 78 1 flow=Normal-UDP-DNS 1970/01/01 01:07:51.985006 0.169852 tcp 10.0.2.15 49661 -> 178.255.83.1 80 FSPA_FSPA 0 0 10 1731 597 5 flow=Normal-TCP-WEB-Established 1970/01/01 01:07:52.176349 0.058141 udp 10.0.2.15 56954 <-> 1.1.1.1 53 CON 0 0 2 170 77 1 flow=Normal-UDP-DNS 1970/01/01 01:07:52.235569 1.476837 tcp 10.0.2.15 49662 -> 178.255.83.1 80 FSPA_FSPA 0 0 10 1990 600 5 flow=Normal-TCP-WEB-Established 1970/01/01 01:07:52.533722 1.869262 tcp 10.0.2.15 49663 -> 104.16.99.29 443 FSPA_FSPA 0 0 112 49900 4335 40 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:53.725402 0.003416 udp 10.0.2.15 55903 <-> 1.1.1.1 53 CON 0 0 2 198 79 1 flow=Normal-UDP-DNS 1970/01/01 01:07:53.729523 0.003766 udp 10.0.2.15 50495 <-> 1.1.1.1 53 CON 0 0 2 198 79 1 flow=Normal-UDP-DNS 1970/01/01 01:07:53.733836 112.471344 tcp 10.0.2.15 49664 -> 216.58.201.110 80 SRPA_SPA 0 0 8 1427 543 5 flow=Normal-Google-Net-8 1970/01/01 01:07:56.772440 12.906573 tcp 10.0.2.15 49665 -> 104.16.99.29 443 FSPA_FSPA 0 0 988 620034 23464 305 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:57.061145 0.076924 udp 10.0.2.15 51183 <-> 1.1.1.1 53 CON 0 0 2 158 71 1 flow=Normal-UDP-DNS 1970/01/01 01:07:57.139886 0.726971 tcp 10.0.2.15 49666 -> 104.244.42.193 443 FSRPA_SRPA 0 0 19 5641 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:57.140313 12.766621 tcp 10.0.2.15 49667 -> 104.244.42.193 443 FSRPA_FSRPA 0 0 99 50176 3544 35 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:07:57.761425 35.610535 udp 10.0.2.15 51184 <-> 172.217.23.226 443 CON 0 0 24 12468 5857 13 flow=Normal-Google-Net-9 1970/01/01 01:07:57.820518 1.508527 tcp 10.0.2.15 49668 -> 172.217.23.226 443 FSRPA_SRPA 0 0 19 5147 1273 9 flow=Normal-Google-Net-9 1970/01/01 01:07:58.945865 0.162509 udp 10.0.2.15 53167 <-> 1.1.1.1 53 CON 0 0 2 206 80 1 flow=Normal-UDP-DNS 1970/01/01 01:07:59.117004 35.266293 udp 10.0.2.15 53168 <-> 216.58.201.99 443 CON 0 0 36 9973 5945 20 flow=Normal-Google-Net-8 1970/01/01 01:08:00.882679 0.170853 udp 10.0.2.15 57169 <-> 1.1.1.1 53 CON 0 0 2 185 73 1 flow=Normal-UDP-DNS 1970/01/01 01:08:00.913544 0.000000 udp 10.0.2.15 55866 -> 1.1.1.1 53 INT 0 1 73 73 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:08:01.058156 13.379723 tcp 10.0.2.15 49669 -> 104.244.46.7 443 FSRPA_SPA 0 0 1083 630515 19887 339 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:01.058668 8.277784 tcp 10.0.2.15 49670 -> 104.244.46.7 443 FSRPA_SRPA 0 0 22 6137 1261 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:01.060074 8.631152 tcp 10.0.2.15 49671 -> 104.244.46.7 443 FSA_FSA 0 0 8 460 294 5 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:01.060401 3.366949 tcp 10.0.2.15 49672 -> 104.244.46.7 443 FSRPA_SPA 0 0 12 1413 904 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:01.060816 3.596008 tcp 10.0.2.15 49673 -> 104.244.46.7 443 FSRPA_FSRPA 0 0 15 1575 958 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:01.135156 3.373993 tcp 10.0.2.15 49674 -> 104.244.46.7 443 FSRPA_SPA 0 0 12 1413 904 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:01.913962 0.005781 udp 10.0.2.15 55866 <-> 1.0.0.1 53 CON 0 0 2 299 73 1 flow=Normal-UDP-DNS 1970/01/01 01:08:04.180438 5.511524 tcp 10.0.2.15 49675 -> 104.244.46.7 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:04.437626 4.975054 tcp 10.0.2.15 49676 -> 104.244.46.7 443 FSRPA_SPA 0 0 65 34644 2305 23 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:05.016582 0.049381 udp 10.0.2.15 58095 <-> 1.0.0.1 53 CON 0 0 2 189 76 1 flow=Normal-UDP-DNS 1970/01/01 01:08:05.067363 4.431578 tcp 10.0.2.15 49677 -> 162.125.18.133 443 FSPA_FSPA 0 0 29 6288 1747 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:06.625572 12.901791 tcp 10.0.2.15 49678 -> 162.125.18.133 443 FSPA_FSPA 0 0 30 6725 2506 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:10.029693 4.340561 tcp 10.0.2.15 49682 -> 104.16.99.29 443 FSPA_FSPA 0 0 52 17378 2817 22 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:10.487735 3.951146 tcp 10.0.2.15 49683 -> 104.244.42.193 443 FSRPA_SPA 0 0 30 8085 1615 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:10.512493 15.242797 udp 10.0.2.15 58100 <-> 172.217.16.67 443 CON 0 0 28 16637 11663 17 flow=Normal-Google-Net-9 1970/01/01 01:08:13.117838 6.902124 tcp 10.0.2.15 49684 -> 199.16.156.105 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:13.182793 0.049612 udp 10.0.2.15 53198 <-> 1.0.0.1 53 CON 0 0 2 182 83 1 flow=Normal-UDP-DNS 1970/01/01 01:08:13.233364 1.750950 tcp 10.0.2.15 49685 -> 199.16.156.52 443 FSRPA_FSRPA 0 0 31 7724 2269 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:13.246970 77.915054 udp 10.0.2.15 53200 <-> 216.58.201.110 443 CON 0 0 45 9776 5939 23 flow=Normal-Google-Net-8 1970/01/01 01:08:13.374673 1.165255 tcp 10.0.2.15 49686 -> 199.16.156.105 443 FSRPA_SPA 0 0 26 7185 2032 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:18.244553 0.106750 udp 10.0.2.15 53205 <-> 172.217.23.226 443 CON 0 0 6 3090 1553 3 flow=Normal-Google-Net-9 1970/01/01 01:08:18.461729 6.186597 tcp 10.0.2.15 49687 -> 104.16.99.29 443 FSPA_FSPA 0 0 399 230678 8256 127 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:18.462481 0.030301 udp 10.0.2.15 61344 <-> 1.0.0.1 53 CON 0 0 2 158 71 1 flow=Normal-UDP-DNS 1970/01/01 01:08:18.465725 0.038088 udp 10.0.2.15 61099 <-> 1.0.0.1 53 CON 0 0 2 226 81 1 flow=Normal-UDP-DNS 1970/01/01 01:08:18.495716 0.852347 tcp 10.0.2.15 49688 -> 162.125.248.1 443 FSRPA_SRPA 0 0 22 5859 1162 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:18.505082 0.843244 tcp 10.0.2.15 49689 -> 13.32.121.104 443 FSRPA_SRPA 0 0 21 6094 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:18.505471 0.844318 tcp 10.0.2.15 49690 -> 13.32.121.104 443 FSRPA_SRPA 0 0 21 6094 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:18.980964 5.430290 tcp 10.0.2.15 49691 -> 104.16.99.29 443 FSPA_FSPA 0 0 40 13045 2122 17 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:19.013639 0.031538 udp 10.0.2.15 63879 <-> 1.0.0.1 53 CON 0 0 2 212 80 1 flow=Normal-UDP-DNS 1970/01/01 01:08:19.062562 15.109165 udp 10.0.2.15 63880 <-> 216.58.201.106 443 CON 0 0 19 6725 2781 11 flow=Normal-Google-Net-8 1970/01/01 01:08:19.235001 0.000000 udp 10.0.2.15 58208 -> 1.0.0.1 53 INT 0 1 77 77 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:08:20.212126 1.318053 udp 10.0.2.15 58210 <-> 172.217.23.226 443 CON 0 0 30 15019 4952 14 flow=Normal-Google-Net-9 1970/01/01 01:08:20.212934 4.219795 tcp 10.0.2.15 49692 -> 185.63.144.5 443 FSPA_FSPA 0 0 35 6816 2291 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:20.217978 4.189997 tcp 10.0.2.15 49693 -> 13.32.121.104 443 FSPA_FSPA 0 0 24 9331 2093 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:20.218625 0.054676 udp 10.0.2.15 55027 <-> 1.0.0.1 53 CON 0 0 2 192 75 1 flow=Normal-UDP-DNS 1970/01/01 01:08:20.219361 0.051230 udp 10.0.2.15 53786 <-> 1.0.0.1 53 CON 0 0 2 236 72 1 flow=Normal-UDP-DNS 1970/01/01 01:08:20.220252 0.036378 udp 10.0.2.15 51791 <-> 1.0.0.1 53 CON 0 0 2 208 80 1 flow=Normal-UDP-DNS 1970/01/01 01:08:20.220922 0.000000 udp 10.0.2.15 54399 -> 1.0.0.1 53 INT 0 1 82 82 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:08:20.221525 0.051745 udp 10.0.2.15 53206 <-> 1.0.0.1 53 CON 0 0 2 197 76 1 flow=Normal-UDP-DNS 1970/01/01 01:08:20.238122 0.024577 udp 10.0.2.15 58208 <-> 1.1.1.1 53 CON 0 0 2 206 77 1 flow=Normal-UDP-DNS 1970/01/01 01:08:20.260362 4.092445 tcp 10.0.2.15 49694 -> 31.13.84.4 443 FSRPA_SRPA 0 0 19 5128 1079 9 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:08:20.260865 0.070030 udp 10.0.2.15 58676 <-> 1.0.0.1 53 CON 0 0 2 196 75 1 flow=Normal-UDP-DNS 1970/01/01 01:08:20.271312 4.418317 tcp 10.0.2.15 49695 -> 13.107.21.200 443 FSPA_FSPA 0 0 37 10624 2187 16 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:20.278940 4.249335 tcp 10.0.2.15 49696 -> 31.13.84.36 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:08:20.279461 9.439289 tcp 10.0.2.15 49697 -> 183.79.248.252 443 FSPA_FSPA 0 0 35 9177 2039 16 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:20.332375 4.084134 tcp 10.0.2.15 49698 -> 162.125.66.1 443 FSPA_FSPA 0 0 49 14969 4241 20 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:20.452211 4.215569 tcp 10.0.2.15 49699 -> 183.79.248.252 443 FSA_SRA 0 0 6 340 174 3 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:20.485955 4.039201 tcp 10.0.2.15 49700 -> 31.13.84.36 443 FSPA_FSPA 0 0 41 8966 3421 18 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:08:20.543731 0.056708 udp 10.0.2.15 51185 <-> 1.1.1.1 53 CON 0 0 2 208 78 1 flow=Normal-UDP-DNS 1970/01/01 01:08:20.611251 4.056842 tcp 10.0.2.15 49701 -> 162.125.66.2 443 FSPA_FSPA 0 0 48 18229 13280 22 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:21.043203 0.048072 udp 10.0.2.15 53481 <-> 1.1.1.1 53 CON 0 0 2 212 82 1 flow=Normal-UDP-DNS 1970/01/01 01:08:21.093353 3.330824 tcp 10.0.2.15 49702 -> 104.244.43.16 443 FSRPA_FSRPA 0 0 31 7400 1795 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:21.156620 0.010489 udp 10.0.2.15 60057 <-> 1.1.1.1 53 CON 0 0 2 250 81 1 flow=Normal-UDP-DNS 1970/01/01 01:08:21.168005 3.183690 tcp 10.0.2.15 49703 -> 66.102.1.157 443 FSRPA_SRPA 0 0 18 4927 1273 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:21.168254 3.483973 tcp 10.0.2.15 49704 -> 66.102.1.157 443 FSPA_FSPA 0 0 31 7395 2279 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:21.235947 0.024261 udp 10.0.2.15 54399 <-> 1.1.1.1 53 CON 0 0 2 227 82 1 flow=Normal-UDP-DNS 1970/01/01 01:08:21.268658 3.203597 tcp 10.0.2.15 49705 -> 188.125.66.33 443 FSPA_FSPA 0 0 37 11636 2365 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:21.355601 3.057492 tcp 10.0.2.15 49706 -> 104.244.42.193 443 FSRPA_SPA 0 0 79 48910 3078 25 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:21.418194 0.219619 udp 10.0.2.15 60059 <-> 66.102.1.157 443 CON 0 0 13 4961 2372 6 flow=Normal-UDP-Established 1970/01/01 01:08:21.817052 0.014754 udp 10.0.2.15 65169 <-> 1.1.1.1 53 CON 0 0 2 199 80 1 flow=Normal-UDP-DNS 1970/01/01 01:08:21.832677 2.578503 tcp 10.0.2.15 49707 -> 172.217.23.226 443 FSPA_FSPA 0 0 34 8280 2384 15 flow=Normal-Google-Net-9 1970/01/01 01:08:21.832970 2.518959 tcp 10.0.2.15 49708 -> 172.217.23.226 443 FSRPA_SPA 0 0 13 1732 1175 7 flow=Normal-Google-Net-9 1970/01/01 01:08:22.066725 2.344217 tcp 10.0.2.15 49709 -> 172.217.23.226 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-Google-Net-9 1970/01/01 01:08:22.422672 2.105213 tcp 10.0.2.15 49710 -> 199.16.156.105 443 FSRPA_SPA 0 0 30 7892 2437 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:22.425509 2.099932 tcp 10.0.2.15 49711 -> 199.16.156.75 443 FSRPA_SPA 0 0 30 7583 1891 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:22.434101 0.007850 udp 10.0.2.15 60987 <-> 1.1.1.1 53 CON 0 0 2 321 72 1 flow=Normal-UDP-DNS 1970/01/01 01:08:22.434397 0.031767 udp 10.0.2.15 60106 <-> 1.1.1.1 53 CON 0 0 2 249 84 1 flow=Normal-UDP-DNS 1970/01/01 01:08:22.445043 2.201703 tcp 10.0.2.15 49712 -> 37.252.172.42 443 FSPA_FSPA 0 0 20 6159 1587 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:22.470871 2.098783 tcp 10.0.2.15 49713 -> 62.67.193.75 443 FSPA_FSPA 0 0 22 7001 2366 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:24.467239 5.304861 tcp 10.0.2.15 49714 -> 162.125.66.1 443 FSPA_FSPA 0 0 351 188874 155087 159 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:24.631529 4.832180 tcp 10.0.2.15 49715 -> 162.125.66.2 443 FSPA_FSPA 0 0 46 18092 13226 21 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:24.677725 4.880861 tcp 10.0.2.15 49716 -> 199.16.156.105 443 FSRPA_SPA 0 0 28 7349 2140 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:24.719973 3565.594971 tcp 10.0.2.15 49717 -> 199.16.156.52 443 FSPA_SPA 0 0 185 16148 6620 91 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:24.952771 2.037705 udp 10.0.2.15 59599 <-> 1.1.1.1 53 CON 0 0 3 291 156 2 flow=Normal-UDP-DNS 1970/01/01 01:08:25.956681 0.000000 udp 10.0.2.15 59599 -> 1.0.0.1 53 INT 0 1 78 78 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:08:26.572150 2.886073 tcp 10.0.2.15 49718 -> 104.244.42.193 443 FSRPA_SPA 0 0 43 17725 11969 19 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:26.991757 7.417895 tcp 10.0.2.15 49719 -> 162.125.66.6 443 FSPA_FSPA 0 0 815 741843 11806 187 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:26.992330 0.171243 tcp 10.0.2.15 49720 -> 162.125.66.6 443 FSRPA_SPA 0 0 18 5059 1054 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:29.757802 4.654489 tcp 10.0.2.15 49721 -> 162.125.66.1 443 FSPA_FSPA 0 0 29 9419 2776 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:30.766482 3.645448 tcp 10.0.2.15 49722 -> 162.125.66.2 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:31.014642 3.397025 tcp 10.0.2.15 49723 -> 162.125.66.2 443 FSPA_FSPA 0 0 43 17959 13172 20 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:31.192817 0.000000 udp 10.0.2.15 64043 -> 1.1.1.1 53 INT 0 1 75 75 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:08:32.149873 0.030972 udp 10.0.2.15 58443 <-> 1.1.1.1 53 CON 0 0 2 193 77 1 flow=Normal-UDP-DNS 1970/01/01 01:08:32.181781 2.214360 tcp 10.0.2.15 49724 -> 216.58.201.110 443 FSPA_FSPA 0 0 43 16491 9763 20 flow=Normal-Google-Net-8 1970/01/01 01:08:32.193829 0.003517 udp 10.0.2.15 64043 <-> 1.0.0.1 53 CON 0 0 2 187 75 1 flow=Normal-UDP-DNS 1970/01/01 01:08:35.038187 4.375190 tcp 10.0.2.15 49725 -> 162.125.66.1 443 FSPA_FSPA 0 0 35 9742 2884 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:35.239546 4.173915 tcp 10.0.2.15 49726 -> 162.125.66.2 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:35.489385 3.948887 tcp 10.0.2.15 49727 -> 162.125.66.2 443 FSPA_FSPA 0 0 48 18228 13280 22 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:41.110953 8.669071 tcp 10.0.2.15 49728 -> 104.244.42.193 443 FSRPA_FSRPA 0 0 253 148635 9463 77 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:41.344728 3.076235 tcp 10.0.2.15 49729 -> 104.244.42.193 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:44.642408 5.119425 tcp 10.0.2.15 49730 -> 104.244.46.7 443 FSRPA_FSRPA 0 0 187 120640 4705 59 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:45.401999 119.107323 tcp 10.0.2.15 49731 -> 93.184.220.70 443 FSPA_FSPA 0 0 10001 5952029 197025 3097 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:45.468682 3.901324 tcp 10.0.2.15 49732 -> 93.184.220.70 443 FSRPA_SRPA 0 0 20 5937 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:45.483176 3.887272 tcp 10.0.2.15 49733 -> 93.184.220.70 443 FSRPA_SPA 0 0 20 5937 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:45.551656 3.816610 tcp 10.0.2.15 49734 -> 93.184.220.70 443 FSRPA_SRPA 0 0 24 6153 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:45.554882 3.813558 tcp 10.0.2.15 49735 -> 93.184.220.70 443 FSRPA_SRPA 0 0 24 6153 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:45.556107 3.813090 tcp 10.0.2.15 49736 -> 93.184.220.70 443 FSRPA_SRPA 0 0 21 5991 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:49.709951 0.069261 udp 10.0.2.15 58783 <-> 1.0.0.1 53 CON 0 0 2 212 81 1 flow=Normal-UDP-DNS 1970/01/01 01:08:49.781048 4.739679 tcp 10.0.2.15 49737 -> 199.16.156.105 443 FSRPA_FSRPA 0 0 32 7828 2424 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:49.869304 4.501634 tcp 10.0.2.15 49738 -> 104.244.42.193 443 FSRPA_SRPA 0 0 21 5749 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:49.938973 4.576548 tcp 10.0.2.15 49739 -> 199.16.156.105 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:50.282095 4.377731 tcp 10.0.2.15 49740 -> 104.244.42.193 443 FSRPA_FSRPA 0 0 87 31667 5183 34 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:50.411696 4.107537 tcp 10.0.2.15 49741 -> 199.16.156.52 443 FSRPA_SPA 0 0 27 7757 2450 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:51.163986 3.540193 tcp 10.0.2.15 49742 -> 104.244.46.7 443 FSRPA_FSRPA 0 0 98 46347 3960 36 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:51.879250 7.580518 tcp 10.0.2.15 49743 -> 162.125.66.1 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:52.131673 2.614155 tcp 10.0.2.15 49744 -> 162.125.66.1 443 FSPA_FSPA 0 0 36 9796 2938 16 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:52.651106 0.081561 udp 10.0.2.15 53582 <-> 1.0.0.1 53 CON 0 0 2 208 78 1 flow=Normal-UDP-DNS 1970/01/01 01:08:52.783968 6.958763 tcp 10.0.2.15 49745 -> 162.125.66.2 443 FSPA_FSPA 0 0 47 18174 13226 21 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:56.501099 2.957303 tcp 10.0.2.15 49746 -> 104.244.46.7 443 FSRPA_SPA 0 0 76 26884 3440 30 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:56.847506 8.666373 tcp 10.0.2.15 49747 -> 104.244.42.193 443 FSRPA_FSRPA 0 0 307 165341 23890 104 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:56.978250 0.082310 udp 10.0.2.15 51507 <-> 1.0.0.1 53 CON 0 0 2 150 75 1 flow=Normal-UDP-DNS 1970/01/01 01:08:57.190452 7.203158 tcp 10.0.2.15 49748 -> 104.244.42.193 443 FSRPA_SRPA 0 0 21 5749 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:57.258501 2.114798 tcp 10.0.2.15 49749 -> 104.244.42.193 443 FSRPA_SRPA 0 0 21 5749 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:57.450231 1.923234 tcp 10.0.2.15 49750 -> 104.244.42.193 443 FSRPA_SPA 0 0 18 5587 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:08:59.521387 0.060746 udp 10.0.2.15 50161 <-> 1.0.0.1 53 CON 0 0 2 205 78 1 flow=Normal-UDP-DNS 1970/01/01 01:08:59.656834 3.045574 tcp 10.0.2.15 49751 -> 162.125.66.3 443 SRPA_SPA 0 0 22 6406 1986 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:09:00.304260 1368.729858 udp 10.0.2.15 68 -> 255.255.255.255 67 INT 0 4 1368 1368 4 flow=Normal-UDP-Attempt 1970/01/01 01:09:00.457389 0.104027 udp fe80::353e:6fce:ee32:1a73 64328 -> ff02::1:3 5355 INT 0 2 168 168 2 flow=Normal-UDP-Attempt 1970/01/01 01:09:00.457823 0.104153 udp 10.0.2.15 58613 -> 224.0.0.252 5355 INT 0 2 128 128 2 flow=Normal-UDP-Attempt 1970/01/01 01:09:01.260094 0.084185 udp 10.0.2.15 53849 <-> 1.0.0.1 53 CON 0 0 2 270 80 1 flow=Normal-UDP-DNS 1970/01/01 01:09:01.345584 1.357723 tcp 10.0.2.15 49752 -> 104.16.240.184 80 SRPA_SPA 0 0 11 2461 493 6 flow=Normal-TCP-WEB-Established 1970/01/01 01:09:01.516891 1.186196 tcp 10.0.2.15 49753 -> 93.184.220.29 80 SRPA_SPA 0 0 11 2654 804 6 flow=Normal-TCP-WEB-Established 1970/01/01 01:09:03.120563 6.435088 tcp 10.0.2.15 49754 -> 199.16.156.52 443 FSRPA_SPA 0 0 26 7697 2457 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:09:03.262383 1.538105 tcp 10.0.2.15 49755 -> 199.16.156.105 443 FSRPA_SPA 0 0 30 7720 2370 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:09:03.499478 79.349487 tcp 10.0.2.15 49756 -> 162.125.66.3 443 FSPA_SRPA 0 0 31 7798 2169 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:09:03.751062 0.031267 udp 10.0.2.15 55049 <-> 1.0.0.1 53 CON 0 0 2 185 73 1 flow=Normal-UDP-DNS 1970/01/01 01:09:03.785621 15.681882 tcp 10.0.2.15 49757 -> 104.244.46.167 443 FSRPA_FSRPA 0 0 573 334428 13128 181 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:09:04.634894 3.007373 udp 10.0.2.15 55051 -> 239.255.255.250 1900 INT 0 4 864 864 4 flow=Normal-UDP-Attempt 1970/01/01 01:09:04.648156 14.819622 tcp 10.0.2.15 49758 -> 104.244.42.193 443 FSRPA_FSRPA 0 0 168 90299 37007 68 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:09:04.934269 0.060844 udp 10.0.2.15 51430 <-> 1.0.0.1 53 CON 0 0 2 185 73 1 flow=Normal-UDP-DNS 1970/01/01 01:09:05.474163 0.103961 udp fe80::353e:6fce:ee32:1a73 54380 -> ff02::1:3 5355 INT 0 2 168 168 2 flow=Normal-UDP-Attempt 1970/01/01 01:09:05.474557 0.103772 udp 10.0.2.15 50176 -> 224.0.0.252 5355 INT 0 2 128 128 2 flow=Normal-UDP-Attempt 1970/01/01 01:09:06.084030 0.060326 udp 10.0.2.15 60114 <-> 1.0.0.1 53 CON 0 0 2 214 75 1 flow=Normal-UDP-DNS 1970/01/01 01:09:06.145657 3.327022 tcp 10.0.2.15 49759 -> 104.244.42.2 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:09:06.334154 3.570206 tcp 10.0.2.15 49760 -> 104.244.42.2 443 FSRPA_FSRPA 0 0 32 7181 1874 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:09:06.904892 7.868773 tcp 10.0.2.15 49761 -> 104.244.42.2 443 FSRPA_FSRPA 0 0 59 16981 4003 26 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:09:07.438979 1.940508 tcp 10.0.2.15 49762 -> 104.244.42.2 443 FSRPA_SRPA 0 0 23 5616 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:09:08.068340 0.105274 udp fe80::353e:6fce:ee32:1a73 60703 -> ff02::1:3 5355 INT 0 2 168 168 2 flow=Normal-UDP-Attempt 1970/01/01 01:09:08.068981 0.105392 udp 10.0.2.15 54851 -> 224.0.0.252 5355 INT 0 2 128 128 2 flow=Normal-UDP-Attempt 1970/01/01 01:09:10.778185 46.151836 tcp 10.0.2.15 49763 -> 104.16.240.184 80 FSPA_FSPA 0 0 12 2515 493 6 flow=Normal-TCP-WEB-Established 1970/01/01 01:09:10.937099 0.105507 udp fe80::353e:6fce:ee32:1a73 54420 -> ff02::1:3 5355 INT 0 2 168 168 2 flow=Normal-UDP-Attempt 1970/01/01 01:09:10.937355 0.105882 udp 10.0.2.15 63314 -> 224.0.0.252 5355 INT 0 2 128 128 2 flow=Normal-UDP-Attempt 1970/01/01 01:09:11.808504 2.676284 tcp 10.0.2.15 49764 -> 104.244.42.2 443 FSRPA_FSRPA 0 0 29 7018 1820 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:09:13.591405 15.232757 udp 10.0.2.15 63317 <-> 172.217.16.67 443 CON 0 0 22 12358 10087 12 flow=Normal-Google-Net-9 1970/01/01 01:09:13.631481 0.104709 udp fe80::353e:6fce:ee32:1a73 59670 -> ff02::1:3 5355 INT 0 2 168 168 2 flow=Normal-UDP-Attempt 1970/01/01 01:09:13.631826 0.104540 udp 10.0.2.15 57521 -> 224.0.0.252 5355 INT 0 2 128 128 2 flow=Normal-UDP-Attempt 1970/01/01 01:09:16.339093 107.194901 tcp 10.0.2.15 49765 -> 93.184.220.29 80 SRPA_SPA 0 0 12 2708 858 7 flow=Normal-TCP-WEB-Established 1970/01/01 01:09:16.574131 0.103733 udp fe80::353e:6fce:ee32:1a73 56744 -> ff02::1:3 5355 INT 0 2 168 168 2 flow=Normal-UDP-Attempt 1970/01/01 01:09:16.574480 0.103862 udp 10.0.2.15 57326 -> 224.0.0.252 5355 INT 0 2 128 128 2 flow=Normal-UDP-Attempt 1970/01/01 01:09:16.852615 0.083210 udp 10.0.2.15 58606 <-> 1.0.0.1 53 CON 0 0 2 304 75 1 flow=Normal-UDP-DNS 1970/01/01 01:09:16.936535 2.528058 tcp 10.0.2.15 49766 -> 192.229.220.133 443 FSPA_FSPA 0 0 34 7828 1819 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:09:17.216083 2.325394 tcp 10.0.2.15 49767 -> 199.16.156.105 443 FSRPA_SPA 0 0 30 7731 2380 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:09:17.238869 0.051195 udp 10.0.2.15 54648 <-> 1.0.0.1 53 CON 0 0 2 182 83 1 flow=Normal-UDP-DNS 1970/01/01 01:09:17.293547 7.276438 tcp 10.0.2.15 49768 -> 199.16.156.21 443 FSRPA_SPA 0 0 29 7872 2523 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:09:17.457623 2.071494 tcp 10.0.2.15 49769 -> 199.16.156.21 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:09:19.150481 0.118848 udp fe80::353e:6fce:ee32:1a73 58874 -> ff02::1:3 5355 INT 0 2 168 168 2 flow=Normal-UDP-Attempt 1970/01/01 01:09:19.150742 0.118925 udp 10.0.2.15 58866 -> 224.0.0.252 5355 INT 0 2 128 128 2 flow=Normal-UDP-Attempt 1970/01/01 01:09:20.035455 4.439696 tcp 10.0.2.15 49770 -> 162.125.66.1 443 FSPA_FSPA 0 0 36 9798 2938 16 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:09:20.166210 4.306605 tcp 10.0.2.15 49771 -> 162.125.66.2 443 FSPA_FSPA 0 0 47 18175 13280 22 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:09:22.698484 0.103362 udp fe80::353e:6fce:ee32:1a73 53416 -> ff02::1:3 5355 INT 0 2 168 168 2 flow=Normal-UDP-Attempt 1970/01/01 01:09:22.698746 0.103364 udp 10.0.2.15 60046 -> 224.0.0.252 5355 INT 0 2 128 128 2 flow=Normal-UDP-Attempt 1970/01/01 01:09:23.049766 6.390274 tcp 10.0.2.15 49772 -> 216.58.201.101 443 FSPA_FSPA 0 0 36 10350 3798 16 flow=Normal-Google-Net-8 1970/01/01 01:09:25.033880 0.061073 udp 10.0.2.15 64656 <-> 1.0.0.1 53 CON 0 0 2 196 75 1 flow=Normal-UDP-DNS 1970/01/01 01:09:25.045927 0.041934 udp 10.0.2.15 62987 <-> 1.0.0.1 53 CON 0 0 2 205 84 1 flow=Normal-UDP-DNS 1970/01/01 01:09:25.096922 4.379401 tcp 10.0.2.15 49773 -> 162.125.66.1 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:09:25.285538 4.184579 tcp 10.0.2.15 49774 -> 162.125.66.1 443 FSPA_FSPA 0 0 32 9603 2852 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:09:25.323140 0.100967 udp fe80::353e:6fce:ee32:1a73 50395 -> ff02::1:3 5355 INT 0 2 168 168 2 flow=Normal-UDP-Attempt 1970/01/01 01:09:25.323396 0.101094 udp 10.0.2.15 58357 -> 224.0.0.252 5355 INT 0 2 128 128 2 flow=Normal-UDP-Attempt 1970/01/01 01:09:25.460078 0.084793 udp 10.0.2.15 50976 <-> 1.0.0.1 53 CON 0 0 2 208 78 1 flow=Normal-UDP-DNS 1970/01/01 01:09:25.546578 4.295650 tcp 10.0.2.15 49775 -> 162.125.66.2 443 FSPA_FSPA 0 0 47 18175 13280 22 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:09:27.883523 0.086171 udp 10.0.2.15 64048 <-> 1.0.0.1 53 CON 0 0 2 246 91 1 flow=Normal-UDP-DNS 1970/01/01 01:09:27.974496 1390.326904 tcp 10.0.2.15 49776 -> 13.32.106.129 443 FSPA_FSPA 0 0 148173 91364042 2378248 44024 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:09:30.575539 4.140923 tcp 10.0.2.15 49777 -> 104.244.42.193 443 FSRPA_FSRPA 0 0 88 39526 17108 37 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:09:30.859112 3.727662 tcp 10.0.2.15 49778 -> 199.16.156.21 443 FSRPA_SPA 0 0 28 7804 2511 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:09:30.942424 8.871263 tcp 10.0.2.15 49779 -> 199.16.156.105 443 FSRPA_FSRPA 0 0 32 7828 2424 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:09:32.065379 2.414535 tcp 10.0.2.15 49780 -> 216.58.201.101 443 FSPA_FSPA 0 0 31 9738 3753 14 flow=Normal-Google-Net-8 1970/01/01 01:09:36.766050 2.707801 tcp 10.0.2.15 49781 -> 104.244.42.2 443 FSRPA_SPA 0 0 31 8787 2589 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:09:37.577892 2.181841 tcp 10.0.2.15 49782 -> 104.244.42.193 443 FSRPA_FSRPA 0 0 35 10604 2798 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:09:39.635503 4.849214 tcp 10.0.2.15 49783 -> 192.229.220.133 443 FSPA_FSPA 0 0 74 41582 2409 23 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:09:40.015074 4.475661 tcp 10.0.2.15 49784 -> 104.244.42.193 443 FSRPA_SPA 0 0 54 20752 3221 21 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:09:44.632386 4.825959 tcp 10.0.2.15 49785 -> 192.229.220.133 443 FSPA_FSPA 0 0 65 41639 2193 21 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:09:45.060655 0.105026 udp 10.0.2.15 56899 <-> 1.0.0.1 53 CON 0 0 2 174 71 1 flow=Normal-UDP-DNS 1970/01/01 01:09:45.167715 4.310443 tcp 10.0.2.15 49786 -> 104.244.42.65 443 FSRPA_SPA 0 0 54 23240 14639 25 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:09:45.416356 4.049650 tcp 10.0.2.15 49787 -> 104.244.42.2 443 FSRPA_FSRPA 0 0 33 7234 1874 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:09:45.744031 3.732095 tcp 10.0.2.15 49788 -> 104.244.42.2 443 FSRPA_SPA 0 0 36 9922 2851 16 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:09:50.553010 8.939218 tcp 10.0.2.15 49789 -> 192.229.220.133 443 FSPA_FSPA 0 0 156 94849 3756 47 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:09:52.107303 2.467777 tcp 10.0.2.15 49790 -> 104.244.42.65 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:09:52.358560 2.218591 tcp 10.0.2.15 49791 -> 104.244.42.65 443 FSRPA_FSRPA 0 0 48 19101 12379 21 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:09:54.657507 4.969856 tcp 10.0.2.15 49792 -> 104.244.42.2 443 FSRPA_FSRPA 0 0 29 7019 1822 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:09:55.538448 3.955330 tcp 10.0.2.15 49793 -> 104.244.42.2 443 FSRPA_FSRPA 0 0 44 11590 3385 19 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:09:56.136081 3.519161 tcp 10.0.2.15 49794 -> 104.244.42.65 443 FSRPA_FSRPA 0 0 44 18074 12319 20 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:09:59.876581 4.571538 tcp 10.0.2.15 49795 -> 104.244.42.65 443 FSRPA_SPA 0 0 50 20114 3564 21 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:10:03.908763 5.536345 tcp 10.0.2.15 49796 -> 104.244.42.2 443 FSRPA_SPA 0 0 40 12744 3167 18 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:10:05.033034 4.417542 tcp 10.0.2.15 49797 -> 104.244.42.65 443 FSRPA_SPA 0 0 29 11108 2376 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:10:11.980379 2.506240 tcp 10.0.2.15 49798 -> 104.244.42.2 443 FSRPA_SPA 0 0 32 9289 2702 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:10:12.044043 2.444538 tcp 10.0.2.15 49799 -> 104.244.42.65 443 FSRPA_FSRPA 0 0 46 15689 3325 19 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:10:14.518551 4.984533 tcp 10.0.2.15 49800 -> 104.244.42.65 443 FSRPA_SPA 0 0 96 47131 15125 39 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:10:16.823967 2.678524 tcp 10.0.2.15 49801 -> 104.244.42.2 443 FSRPA_SPA 0 0 32 9712 2694 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:10:20.001700 4.794609 tcp 10.0.2.15 49802 -> 104.244.42.2 443 FSRPA_FSRPA 0 0 36 9785 2845 16 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:10:20.091252 5.068991 tcp 10.0.2.15 49803 -> 162.125.66.1 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:10:20.344954 4.488392 tcp 10.0.2.15 49804 -> 162.125.66.1 443 FSPA_FSPA 0 0 36 9779 2921 16 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:10:20.561815 0.068097 udp 10.0.2.15 58892 <-> 1.0.0.1 53 CON 0 0 2 208 78 1 flow=Normal-UDP-DNS 1970/01/01 01:10:20.639755 4.193022 tcp 10.0.2.15 49805 -> 162.125.66.2 443 FSPA_FSPA 0 0 43 17957 13172 20 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:10:20.795687 3.952841 tcp 10.0.2.15 49806 -> 162.125.66.2 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:10:22.019679 2.490098 tcp 10.0.2.15 49807 -> 104.244.42.65 443 FSRPA_SPA 0 0 27 8438 2468 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:10:32.021986 0.533495 tcp 10.0.2.15 49808 -> 104.244.42.65 443 FSRPA_SPA 0 0 17 5489 1087 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:10:32.351870 2.153476 tcp 10.0.2.15 49809 -> 104.244.42.65 443 FSRPA_FSRPA 0 0 57 23619 16679 26 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:10:42.015735 2.801148 tcp 10.0.2.15 49810 -> 104.244.42.65 443 FSRPA_FSRPA 0 0 33 8762 2576 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:10:52.021930 2.523265 tcp 10.0.2.15 49811 -> 104.244.42.65 443 FSRPA_SPA 0 0 29 8547 2522 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:10:52.038195 0.108339 udp fe80::353e:6fce:ee32:1a73 64771 -> ff02::1:3 5355 INT 0 2 168 168 2 flow=Normal-UDP-Attempt 1970/01/01 01:10:52.038504 0.108200 udp 10.0.2.15 60101 -> 224.0.0.252 5355 INT 0 2 128 128 2 flow=Normal-UDP-Attempt 1970/01/01 01:10:54.613889 0.020491 udp 10.0.2.15 60499 <-> 1.0.0.1 53 CON 0 0 2 178 81 1 flow=Normal-UDP-DNS 1970/01/01 01:10:54.639611 3.749638 tcp 10.0.2.15 49812 -> 216.58.201.99 443 SRPA_SPA 0 0 19 7163 2575 9 flow=Normal-Google-Net-8 1970/01/01 01:10:55.222255 0.099663 udp fe80::353e:6fce:ee32:1a73 52319 -> ff02::1:3 5355 INT 0 2 168 168 2 flow=Normal-UDP-Attempt 1970/01/01 01:10:55.222601 0.099582 udp 10.0.2.15 57873 -> 224.0.0.252 5355 INT 0 2 128 128 2 flow=Normal-UDP-Attempt 1970/01/01 01:10:57.791182 0.060631 udp 10.0.2.15 63351 <-> 1.0.0.1 53 CON 0 0 2 198 79 1 flow=Normal-UDP-DNS 1970/01/01 01:10:57.860405 0.737628 tcp 10.0.2.15 49813 -> 172.217.23.238 443 SRPA_SPA 0 0 19 7251 2109 9 flow=Normal-Google-Net-9 1970/01/01 01:10:58.875090 0.101898 udp fe80::353e:6fce:ee32:1a73 53702 -> ff02::1:3 5355 INT 0 2 168 168 2 flow=Normal-UDP-Attempt 1970/01/01 01:10:58.875564 0.101632 udp 10.0.2.15 49693 -> 224.0.0.252 5355 INT 0 2 128 128 2 flow=Normal-UDP-Attempt 1970/01/01 01:11:01.443712 0.073410 udp 10.0.2.15 49174 <-> 1.0.0.1 53 CON 0 0 2 198 79 1 flow=Normal-UDP-DNS 1970/01/01 01:11:01.519629 1.344521 tcp 10.0.2.15 49814 -> 172.217.23.238 443 SRPA_SPA 0 0 17 6242 1266 8 flow=Normal-Google-Net-9 1970/01/01 01:11:02.067515 2.455562 tcp 10.0.2.15 49815 -> 104.244.42.65 443 FSRPA_SPA 0 0 30 8602 2576 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:11:04.405078 3.017190 udp 10.0.2.15 49176 -> 239.255.255.250 1900 INT 0 4 864 864 4 flow=Normal-UDP-Attempt 1970/01/01 01:11:12.015672 2.492191 tcp 10.0.2.15 49816 -> 104.244.42.65 443 FSRPA_FSRPA 0 0 32 8709 2576 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:11:12.333789 0.044929 udp 10.0.2.15 51325 <-> 1.0.0.1 53 CON 0 0 2 178 81 1 flow=Normal-UDP-DNS 1970/01/01 01:11:12.380588 35.566479 udp 10.0.2.15 51326 <-> 216.58.201.99 443 CON 0 0 44 16551 9324 22 flow=Normal-Google-Net-8 1970/01/01 01:11:12.523160 0.056030 udp 10.0.2.15 52482 <-> 1.0.0.1 53 CON 0 0 2 174 79 1 flow=Normal-UDP-DNS 1970/01/01 01:11:16.557961 0.071224 udp 10.0.2.15 53312 <-> 1.0.0.1 53 CON 0 0 2 224 88 1 flow=Normal-UDP-DNS 1970/01/01 01:11:16.630129 31.321844 tcp 10.0.2.15 49817 -> 90.182.119.16 80 FSPA_FSPA 0 0 54 24689 1809 20 flow=Normal-Google-Net-10 1970/01/01 01:11:20.692012 0.032886 udp 10.0.2.15 53942 <-> 1.0.0.1 53 CON 0 0 2 224 88 1 flow=Normal-UDP-DNS 1970/01/01 01:11:20.725818 31.581671 tcp 10.0.2.15 49818 -> 90.182.119.204 80 FSPA_FSPA 0 0 24 7969 1363 11 flow=Normal-Google-Net-10 1970/01/01 01:11:22.023843 2.532305 tcp 10.0.2.15 49819 -> 104.244.42.65 443 FSRPA_SPA 0 0 27 8452 2483 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:11:28.861937 0.029778 udp 10.0.2.15 64907 <-> 1.0.0.1 53 CON 0 0 2 224 88 1 flow=Normal-UDP-DNS 1970/01/01 01:11:28.893867 30.527716 tcp 10.0.2.15 49820 -> 90.182.119.18 80 FSPA_FSPA 0 0 21 7986 1231 9 flow=Normal-Google-Net-10 1970/01/01 01:11:32.058919 7.506926 tcp 10.0.2.15 49821 -> 104.244.42.65 443 FSRPA_FSRPA 0 0 31 8656 2522 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:11:38.070970 0.033852 udp 10.0.2.15 58537 <-> 1.0.0.1 53 CON 0 0 2 187 75 1 flow=Normal-UDP-DNS 1970/01/01 01:11:38.106250 15.207106 udp 10.0.2.15 58538 <-> 172.217.23.238 443 CON 0 0 18 10249 4979 9 flow=Normal-Google-Net-9 1970/01/01 01:11:41.176391 0.048196 udp 10.0.2.15 65411 <-> 1.0.0.1 53 CON 0 0 2 224 88 1 flow=Normal-UDP-DNS 1970/01/01 01:11:41.225565 335.666138 tcp 10.0.2.15 49822 -> 90.182.119.211 80 FSPA_FSPA 0 0 9179 6214313 201551 2635 flow=Normal-Google-Net-10 1970/01/01 01:11:42.020286 7.524659 tcp 10.0.2.15 49823 -> 104.244.42.65 443 FSRPA_FSRPA 0 0 25 4490 2339 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:11:52.024099 2.040207 udp 10.0.2.15 50287 <-> 1.0.0.1 53 CON 0 0 3 245 142 2 flow=Normal-UDP-DNS 1970/01/01 01:11:53.028236 0.000000 udp 10.0.2.15 50287 -> 1.1.1.1 53 INT 0 1 71 71 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:11:54.065947 5.547611 tcp 10.0.2.15 49824 -> 104.244.42.193 443 FSRPA_SPA 0 0 23 4382 2339 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:11:54.066526 5.546803 tcp 10.0.2.15 49825 -> 104.244.42.193 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:12:02.061054 7.525643 tcp 10.0.2.15 49826 -> 104.244.42.193 443 FSRPA_SPA 0 0 22 4327 2285 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:12:12.016750 7.548513 tcp 10.0.2.15 49827 -> 104.244.42.193 443 FSRPA_SPA 0 0 22 4327 2285 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:12:20.038085 0.064396 udp 10.0.2.15 52794 <-> 1.0.0.1 53 CON 0 0 2 196 75 1 flow=Normal-UDP-DNS 1970/01/01 01:12:20.104111 9.474576 tcp 10.0.2.15 49828 -> 162.125.66.1 443 FSPA_FSPA 0 0 32 9564 2813 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:12:20.280336 0.077053 udp 10.0.2.15 59990 <-> 1.0.0.1 53 CON 0 0 2 208 78 1 flow=Normal-UDP-DNS 1970/01/01 01:12:20.359127 9.217687 tcp 10.0.2.15 49829 -> 162.125.66.2 443 FSPA_FSPA 0 0 48 18228 13280 22 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:12:22.020661 7.554764 tcp 10.0.2.15 49830 -> 104.244.42.193 443 FSRPA_SPA 0 0 22 4328 2285 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:12:32.062083 7.539356 tcp 10.0.2.15 49831 -> 104.244.42.193 443 FSRPA_FSRPA 0 0 25 4512 2354 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:12:34.042629 0.086379 udp 10.0.2.15 54794 <-> 1.0.0.1 53 CON 0 0 2 193 75 1 flow=Normal-UDP-DNS 1970/01/01 01:12:34.130283 5.452215 tcp 10.0.2.15 49832 -> 172.217.23.229 443 FSPA_FSPA 0 0 35 10130 3930 16 flow=Normal-Google-Net-9 1970/01/01 01:12:40.045925 0.048190 udp 10.0.2.15 62142 <-> 1.0.0.1 53 CON 0 0 2 197 76 1 flow=Normal-UDP-DNS 1970/01/01 01:12:40.094981 9.623382 tcp 10.0.2.15 49833 -> 31.13.84.36 443 FSPA_FSPA 0 0 30 8383 2777 14 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:12:42.020328 7.620172 tcp 10.0.2.15 49834 -> 104.244.42.193 443 FSRPA_SPA 0 0 21 4288 2300 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:12:52.021882 7.631549 tcp 10.0.2.15 49835 -> 104.244.42.193 443 FSRPA_SPA 0 0 22 4328 2285 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:13:02.069638 7.550783 tcp 10.0.2.15 49836 -> 104.244.42.193 443 FSRPA_FSRPA 0 0 25 4490 2339 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:13:04.409556 3.020605 udp 10.0.2.15 62146 -> 239.255.255.250 1900 INT 0 4 864 864 4 flow=Normal-UDP-Attempt 1970/01/01 01:13:12.017579 7.606882 tcp 10.0.2.15 49837 -> 104.244.42.193 443 FSRPA_FSRPA 0 0 25 4493 2339 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:13:22.025684 7.622110 tcp 10.0.2.15 49838 -> 104.244.42.193 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:13:22.281014 7.367604 tcp 10.0.2.15 49839 -> 104.244.42.193 443 FSRPA_FSRPA 0 0 26 4544 2393 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:13:32.061863 2.636047 tcp 10.0.2.15 49840 -> 104.244.42.193 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:13:32.318133 2.379565 tcp 10.0.2.15 49841 -> 104.244.42.193 443 FSRPA_FSRPA 0 0 25 4491 2339 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:13:42.045618 3.749615 tcp 10.0.2.15 49842 -> 104.244.42.193 443 FSRPA_FSRPA 0 0 53 20386 13554 24 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:13:44.691318 0.030206 udp 10.0.2.15 52913 <-> 1.0.0.1 53 CON 0 0 2 166 75 1 flow=Normal-UDP-DNS 1970/01/01 01:13:44.727400 56.378075 udp 10.0.2.15 52914 <-> 172.217.23.227 443 CON 0 0 818 578146 41360 393 flow=Normal-Google-Net-9 1970/01/01 01:13:46.155789 0.035916 udp 10.0.2.15 56123 <-> 1.0.0.1 53 CON 0 0 2 187 75 1 flow=Normal-UDP-DNS 1970/01/01 01:13:46.194628 28.842968 udp 10.0.2.15 56124 <-> 172.217.23.238 443 CON 0 0 65 18947 10179 35 flow=Normal-Google-Net-9 1970/01/01 01:13:46.637710 71.071617 udp 10.0.2.15 56125 <-> 172.217.23.238 443 CON 0 0 5033 3990293 363930 2253 flow=Normal-Google-Net-9 1970/01/01 01:13:46.670577 8.011687 tcp 10.0.2.15 49843 -> 172.217.23.229 443 FSPA_FSPA 0 0 139 44130 13094 59 flow=Normal-Google-Net-9 1970/01/01 01:13:46.841270 0.113591 udp fe80::353e:6fce:ee32:1a73 60838 -> ff02::1:3 5355 INT 0 2 168 168 2 flow=Normal-UDP-Attempt 1970/01/01 01:13:46.841528 0.113844 udp 10.0.2.15 62426 -> 224.0.0.252 5355 INT 0 2 128 128 2 flow=Normal-UDP-Attempt 1970/01/01 01:13:49.472455 0.049366 udp 10.0.2.15 58285 <-> 1.0.0.1 53 CON 0 0 2 205 78 1 flow=Normal-UDP-DNS 1970/01/01 01:13:49.533133 0.908476 tcp 10.0.2.15 49844 -> 162.125.66.3 443 SRPA_SPA 0 0 19 5247 1153 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:13:49.561097 0.046650 udp 10.0.2.15 54476 <-> 1.0.0.1 53 CON 0 0 2 213 85 1 flow=Normal-UDP-DNS 1970/01/01 01:13:49.562194 0.044836 udp 10.0.2.15 59997 <-> 1.0.0.1 53 CON 0 0 2 213 85 1 flow=Normal-UDP-DNS 1970/01/01 01:13:49.562689 0.043659 udp 10.0.2.15 51624 <-> 1.0.0.1 53 CON 0 0 2 213 85 1 flow=Normal-UDP-DNS 1970/01/01 01:13:49.578044 0.047659 udp 10.0.2.15 58991 <-> 1.0.0.1 53 CON 0 0 2 166 75 1 flow=Normal-UDP-DNS 1970/01/01 01:13:49.726983 45.584457 udp 10.0.2.15 58992 <-> 172.217.23.225 443 CON 0 0 277 176645 24229 134 flow=Normal-Google-Net-9 1970/01/01 01:13:49.730434 19.304493 udp 10.0.2.15 58993 <-> 172.217.23.225 443 CON 0 0 10 12645 1509 2 flow=Normal-Google-Net-9 1970/01/01 01:13:49.768513 0.000000 udp 10.0.2.15 49380 -> 1.0.0.1 53 INT 0 1 79 79 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:13:49.951312 19.083614 icmp 10.0.2.15 0x0303 -> 172.217.23.225 0x71e6 URP 0 6 3540 3540 6 flow=Normal-Google-Net-9 1970/01/01 01:13:50.773053 0.003198 udp 10.0.2.15 49380 <-> 1.1.1.1 53 CON 0 0 2 198 79 1 flow=Normal-UDP-DNS 1970/01/01 01:13:55.692422 4.002948 tcp 10.0.2.15 49845 -> 104.244.42.193 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:13:55.944510 3.753080 tcp 10.0.2.15 49846 -> 104.244.42.193 443 FSRPA_FSRPA 0 0 62 31146 3150 22 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:13:56.321085 3.299078 tcp 10.0.2.15 49847 -> 104.244.42.193 443 FSRPA_SRPA 0 0 21 5749 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:13:57.940784 0.065469 udp 10.0.2.15 54167 <-> 1.1.1.1 53 CON 0 0 2 215 87 1 flow=Normal-UDP-DNS 1970/01/01 01:13:57.950043 0.056196 udp 10.0.2.15 57471 <-> 1.1.1.1 53 CON 0 0 2 187 75 1 flow=Normal-UDP-DNS 1970/01/01 01:13:57.951106 0.076298 udp 10.0.2.15 62946 <-> 1.1.1.1 53 CON 0 0 2 198 79 1 flow=Normal-UDP-DNS 1970/01/01 01:13:57.951512 0.054712 udp 10.0.2.15 51420 <-> 1.1.1.1 53 CON 0 0 2 215 85 1 flow=Normal-UDP-DNS 1970/01/01 01:13:57.951921 0.000000 udp 10.0.2.15 52299 -> 1.1.1.1 53 INT 0 1 74 74 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:13:57.961204 0.000000 udp 10.0.2.15 57482 -> 1.1.1.1 53 INT 0 1 74 74 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:13:58.023941 0.203249 udp 10.0.2.15 57483 <-> 216.58.201.98 443 CON 0 0 6 3090 1553 3 flow=Normal-Google-Net-8 1970/01/01 01:13:58.024566 0.016850 udp 10.0.2.15 64702 <-> 1.1.1.1 53 CON 0 0 2 162 73 1 flow=Normal-UDP-DNS 1970/01/01 01:13:58.067766 18.569736 udp 10.0.2.15 64703 <-> 172.217.19.67 443 CON 0 0 212 88822 15013 104 flow=Normal-Google-Net-9 1970/01/01 01:13:58.072526 0.046488 udp 10.0.2.15 63269 <-> 1.1.1.1 53 CON 0 0 2 166 75 1 flow=Normal-UDP-DNS 1970/01/01 01:13:58.952345 0.023677 udp 10.0.2.15 52299 <-> 1.0.0.1 53 CON 0 0 2 185 74 1 flow=Normal-UDP-DNS 1970/01/01 01:13:58.972568 0.015599 udp 10.0.2.15 57482 <-> 1.0.0.1 53 CON 0 0 2 164 74 1 flow=Normal-UDP-DNS 1970/01/01 01:13:58.994980 15.527066 udp 10.0.2.15 63271 <-> 172.217.19.68 443 CON 0 0 30 12631 5509 16 flow=Normal-Google-Net-9 1970/01/01 01:13:59.843419 9.879081 tcp 10.0.2.15 49848 -> 104.244.42.193 443 FSRPA_FSRPA 0 0 56 19606 13704 26 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:14:00.258838 0.075585 udp 10.0.2.15 52097 <-> 1.0.0.1 53 CON 0 0 2 198 83 1 flow=Normal-UDP-DNS 1970/01/01 01:14:00.263774 0.048376 udp 10.0.2.15 54699 <-> 1.0.0.1 53 CON 0 0 2 228 84 1 flow=Normal-UDP-DNS 1970/01/01 01:14:00.320603 37.212536 udp 10.0.2.15 54700 <-> 172.217.23.238 443 CON 0 0 28 7603 4900 16 flow=Normal-Google-Net-9 1970/01/01 01:14:00.335103 10.405946 tcp 10.0.2.15 49849 -> 199.16.156.21 443 FSRPA_FSRPA 0 0 39 8412 2739 17 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:14:00.344290 0.101799 udp 10.0.2.15 59729 <-> 1.0.0.1 53 CON 0 0 2 260 81 1 flow=Normal-UDP-DNS 1970/01/01 01:14:00.447113 9.932667 tcp 10.0.2.15 49850 -> 199.16.156.200 443 FSRPA_FSRPA 0 0 31 7784 2434 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:14:00.511998 9.721427 tcp 10.0.2.15 49851 -> 199.16.156.21 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:14:00.596902 9.678415 tcp 10.0.2.15 49852 -> 199.16.156.200 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:14:01.173103 0.051039 udp 10.0.2.15 51814 <-> 1.0.0.1 53 CON 0 0 2 299 73 1 flow=Normal-UDP-DNS 1970/01/01 01:14:01.225647 8.752800 tcp 10.0.2.15 49853 -> 93.184.220.70 443 FSPA_FSPA 0 0 63 28456 2396 23 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:14:01.301814 0.062014 udp 10.0.2.15 58349 <-> 1.0.0.1 53 CON 0 0 2 168 76 1 flow=Normal-UDP-DNS 1970/01/01 01:14:01.366871 8.259994 tcp 10.0.2.15 49854 -> 172.217.23.238 443 FSRPA_SRPA 0 0 21 6685 1327 10 flow=Normal-Google-Net-9 1970/01/01 01:14:01.367239 8.260205 tcp 10.0.2.15 49855 -> 172.217.23.238 443 FSRPA_SPA 0 0 19 6577 1273 9 flow=Normal-Google-Net-9 1970/01/01 01:14:01.367504 9.046736 tcp 10.0.2.15 49856 -> 172.217.23.238 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-Google-Net-9 1970/01/01 01:14:01.367835 8.260328 tcp 10.0.2.15 49857 -> 172.217.23.238 443 FSRPA_SRPA 0 0 15 1836 1225 8 flow=Normal-Google-Net-9 1970/01/01 01:14:01.479860 8.149741 tcp 10.0.2.15 49858 -> 93.184.220.70 443 FSRPA_SPA 0 0 20 5937 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:14:01.545117 8.428301 tcp 10.0.2.15 49859 -> 172.217.23.238 443 FSPA_FSPA 0 0 34 9255 2482 15 flow=Normal-Google-Net-9 1970/01/01 01:14:03.020790 0.027943 udp 10.0.2.15 55970 <-> 1.0.0.1 53 CON 0 0 2 212 80 1 flow=Normal-UDP-DNS 1970/01/01 01:14:03.055559 15.339973 udp 10.0.2.15 55971 <-> 172.217.23.234 443 CON 0 0 18 6589 3756 11 flow=Normal-Google-Net-9 1970/01/01 01:14:03.486994 0.200484 udp 10.0.2.15 50471 <-> 1.0.0.1 53 CON 0 0 2 206 77 1 flow=Normal-UDP-DNS 1970/01/01 01:14:03.689075 61.515450 udp 10.0.2.15 50472 <-> 172.217.23.227 443 CON 0 0 4806 4075125 173262 1961 flow=Normal-Google-Net-9 1970/01/01 01:14:05.975887 3.652985 tcp 10.0.2.15 49860 -> 172.217.23.229 443 FSRPA_SRPA 0 0 18 5044 1237 9 flow=Normal-Google-Net-9 1970/01/01 01:14:05.985631 0.029845 udp 10.0.2.15 52632 <-> 1.0.0.1 53 CON 0 0 2 174 79 1 flow=Normal-UDP-DNS 1970/01/01 01:14:05.986334 0.029830 udp 10.0.2.15 62883 <-> 1.0.0.1 53 CON 0 0 2 204 80 1 flow=Normal-UDP-DNS 1970/01/01 01:14:06.027279 0.383341 udp 10.0.2.15 62884 <-> 172.217.23.237 443 CON 0 0 14 5741 3219 8 flow=Normal-Google-Net-9 1970/01/01 01:14:06.041408 0.512800 udp 10.0.2.15 62885 <-> 172.217.23.238 443 CON 0 0 9 4640 3103 6 flow=Normal-Google-Net-9 1970/01/01 01:14:08.628691 0.076243 udp 10.0.2.15 64013 <-> 1.0.0.1 53 CON 0 0 2 406 75 1 flow=Normal-UDP-DNS 1970/01/01 01:14:08.708269 32.472500 udp 10.0.2.15 64014 <-> 216.58.211.131 443 CON 0 0 43 15624 9992 25 flow=Normal-Google-Net-8 1970/01/01 01:14:10.078192 0.051265 udp 10.0.2.15 64661 <-> 1.0.0.1 53 CON 0 0 2 205 84 1 flow=Normal-UDP-DNS 1970/01/01 01:14:10.911115 3.766162 tcp 10.0.2.15 49861 -> 104.244.42.193 443 FSRPA_SPA 0 0 68 37727 3148 24 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:14:11.194823 0.000000 udp 10.0.2.15 61407 -> 1.0.0.1 53 INT 0 1 74 74 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:14:11.273174 4.117642 udp 10.0.2.15 64096 <-> 1.0.0.1 53 CON 0 0 4 408 294 3 flow=Normal-UDP-DNS 1970/01/01 01:14:11.374858 8.327291 tcp 10.0.2.15 49862 -> 93.184.220.70 443 FSPA_FSPA 0 0 162 89228 5202 56 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:14:11.624952 8.612480 tcp 10.0.2.15 49863 -> 93.184.220.70 443 FSA_FSA 0 0 8 460 294 5 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:14:12.196302 0.056277 udp 10.0.2.15 61407 <-> 1.1.1.1 53 CON 0 0 2 184 74 1 flow=Normal-UDP-DNS 1970/01/01 01:14:12.253239 2.407908 tcp 10.0.2.15 49864 -> 172.217.23.238 443 FSPA_FSPA 0 0 65 28090 4464 26 flow=Normal-Google-Net-9 1970/01/01 01:14:12.254140 2.373212 tcp 10.0.2.15 49865 -> 172.217.23.238 443 FSRPA_SRPA 0 0 15 1834 1223 8 flow=Normal-Google-Net-9 1970/01/01 01:14:12.256222 2.371992 tcp 10.0.2.15 49866 -> 172.217.23.238 443 FSRPA_SRPA 0 0 14 1780 1169 7 flow=Normal-Google-Net-9 1970/01/01 01:14:12.256533 2.370663 tcp 10.0.2.15 49867 -> 172.217.23.238 443 FSRPA_SRPA 0 0 15 1834 1223 8 flow=Normal-Google-Net-9 1970/01/01 01:14:12.256936 7.376079 tcp 10.0.2.15 49868 -> 172.217.23.238 443 FSRPA_SRPA 0 0 22 6750 1393 11 flow=Normal-Google-Net-9 1970/01/01 01:14:12.257584 12.460669 tcp 10.0.2.15 49869 -> 172.217.23.238 443 FSA_FSA 0 0 8 460 294 5 flow=Normal-Google-Net-9 1970/01/01 01:14:12.276203 3.113543 udp 10.0.2.15 64096 <-> 1.1.1.1 53 CON 0 0 3 310 196 2 flow=Normal-UDP-DNS 1970/01/01 01:14:14.613959 0.057044 udp 10.0.2.15 51516 <-> 1.1.1.1 53 CON 0 0 2 299 73 1 flow=Normal-UDP-DNS 1970/01/01 01:14:14.718112 4.912138 tcp 10.0.2.15 49870 -> 172.217.23.238 443 FSRPA_SPA 0 0 19 6578 1273 9 flow=Normal-Google-Net-9 1970/01/01 01:14:15.340918 0.000000 udp 10.0.2.15 55315 -> 1.1.1.1 53 INT 0 1 75 75 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:14:15.390401 4.305171 tcp 10.0.2.15 49871 -> 216.58.201.74 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-Google-Net-8 1970/01/01 01:14:15.390816 0.000000 icmp 10.0.2.15 0x0303 -> 1.0.0.1 0x60fa URP 0 1 142 142 1 flow=Normal-ICMP 1970/01/01 01:14:15.592528 4.367230 tcp 10.0.2.15 49872 -> 216.58.201.74 443 FSPA_FSPA 0 0 31 6489 1968 14 flow=Normal-Google-Net-8 1970/01/01 01:14:16.346624 0.043926 udp 10.0.2.15 55315 <-> 1.0.0.1 53 CON 0 0 2 166 75 1 flow=Normal-UDP-DNS 1970/01/01 01:14:16.815431 7.908867 tcp 10.0.2.15 49873 -> 104.244.42.193 443 FSRPA_SPA 0 0 199 119014 18590 70 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:14:17.108376 15.252462 udp 10.0.2.15 55318 <-> 216.58.201.74 443 CON 0 0 20 10572 4420 10 flow=Normal-Google-Net-8 1970/01/01 01:14:17.113135 0.000000 udp 10.0.2.15 56544 -> 1.0.0.1 53 INT 0 1 91 91 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:14:17.117095 0.035420 udp 10.0.2.15 63592 <-> 1.0.0.1 53 CON 0 0 2 198 79 1 flow=Normal-UDP-DNS 1970/01/01 01:14:17.326511 2.306837 tcp 10.0.2.15 49874 -> 104.244.42.193 443 FSRPA_SRPA 0 0 21 5749 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:14:18.118064 0.026764 udp 10.0.2.15 56544 <-> 1.1.1.1 53 CON 0 0 2 198 91 1 flow=Normal-UDP-DNS 1970/01/01 01:14:18.146748 1.482912 tcp 10.0.2.15 49875 -> 74.125.71.189 443 FSRPA_SRPA 0 0 19 5401 1273 9 flow=Normal-Google-Net-6 1970/01/01 01:14:18.147343 1.555691 tcp 10.0.2.15 49876 -> 74.125.71.189 443 FSPA_FSPA 0 0 32 8409 2768 14 flow=Normal-Google-Net-6 1970/01/01 01:14:19.150305 223.626038 udp 10.0.2.15 63595 <-> 74.125.71.189 443 CON 0 0 210 101335 14202 98 flow=Normal-Google-Net-6 1970/01/01 01:14:21.055525 0.058008 udp 10.0.2.15 53505 <-> 1.1.1.1 53 CON 0 0 2 190 87 1 flow=Normal-UDP-DNS 1970/01/01 01:14:22.072071 2.926223 tcp 10.0.2.15 49877 -> 93.184.220.70 443 FSRPA_SPA 0 0 18 5787 1087 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:14:22.082649 2.867713 tcp 10.0.2.15 49878 -> 93.184.220.70 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:14:22.328884 0.322859 tcp 10.0.2.15 49879 -> 93.184.220.70 443 FSRPA_SPA 0 0 15 5557 1033 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:14:22.333492 47.371330 tcp 10.0.2.15 49880 -> 93.184.220.70 443 FSPA_FSPA 0 0 2169 1419411 37175 623 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:14:22.377211 0.502198 tcp 10.0.2.15 49881 -> 93.184.220.70 443 FSRPA_SPA 0 0 18 5719 1087 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:14:22.377892 0.642956 tcp 10.0.2.15 49882 -> 93.184.220.70 443 FSRPA_SPA 0 0 16 5611 1033 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:14:22.378423 0.716038 tcp 10.0.2.15 49883 -> 93.184.220.70 443 FSRPA_FSRPA 0 0 25 6207 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:14:22.381800 0.641922 tcp 10.0.2.15 49884 -> 93.184.220.70 443 FSRPA_SPA 0 0 16 5611 1033 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:14:22.422033 3.240983 tcp 10.0.2.15 49885 -> 199.16.156.21 443 FSRPA_FSRPA 0 0 33 8075 2619 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:14:22.451216 2.385605 tcp 10.0.2.15 49886 -> 199.16.156.200 443 FSRPA_SPA 0 0 29 7665 2370 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:14:27.048718 2.667323 tcp 10.0.2.15 49887 -> 104.244.42.193 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:14:27.305471 2.404261 tcp 10.0.2.15 49888 -> 104.244.42.193 443 FSRPA_SPA 0 0 42 16316 2582 17 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:14:33.236579 0.104775 udp fe80::353e:6fce:ee32:1a73 50175 -> ff02::1:3 5355 INT 0 2 168 168 2 flow=Normal-UDP-Attempt 1970/01/01 01:14:33.237024 0.104522 udp 10.0.2.15 49173 -> 224.0.0.252 5355 INT 0 2 128 128 2 flow=Normal-UDP-Attempt 1970/01/01 01:14:35.822130 0.067394 udp 10.0.2.15 51830 <-> 1.1.1.1 53 CON 0 0 2 316 80 1 flow=Normal-UDP-DNS 1970/01/01 01:14:35.893234 10.394842 tcp 10.0.2.15 49889 -> 34.195.247.186 443 SRPA_SPA 0 0 204 127751 114762 96 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:14:36.955672 2.040668 udp 10.0.2.15 50220 <-> 1.1.1.1 53 CON 0 0 3 277 174 2 flow=Normal-UDP-DNS 1970/01/01 01:14:37.183464 0.070862 udp 10.0.2.15 55894 <-> 1.1.1.1 53 CON 0 0 2 206 77 1 flow=Normal-UDP-DNS 1970/01/01 01:14:37.255708 12.768766 tcp 10.0.2.15 49890 -> 74.125.133.189 443 FSPA_FSPA 0 0 28 7540 2121 13 flow=Normal-Google-Net-6 1970/01/01 01:14:37.965305 0.000000 udp 10.0.2.15 50220 -> 1.0.0.1 53 INT 0 1 87 87 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:14:39.004867 15.313146 udp 10.0.2.15 55896 <-> 172.217.23.234 443 CON 0 0 15 4784 2649 9 flow=Normal-Google-Net-9 1970/01/01 01:14:40.462769 74.614136 udp 10.0.2.15 55899 <-> 74.125.133.189 443 CON 0 0 46 19982 11036 24 flow=Normal-Google-Net-6 1970/01/01 01:14:40.593924 0.675580 udp 10.0.2.15 55900 <-> 172.217.23.237 443 CON 0 0 23 10497 6276 13 flow=Normal-Google-Net-9 1970/01/01 01:14:40.763649 9.260715 tcp 10.0.2.15 49891 -> 74.125.133.189 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-Google-Net-6 1970/01/01 01:14:41.014647 8.642487 tcp 10.0.2.15 49892 -> 74.125.133.189 443 FSRPA_SRPA 0 0 19 5401 1273 9 flow=Normal-Google-Net-6 1970/01/01 01:14:42.474810 15.200368 udp 10.0.2.15 55903 <-> 74.125.133.189 443 CON 0 0 20 9253 3936 9 flow=Normal-Google-Net-6 1970/01/01 01:14:44.052235 7.037649 tcp 10.0.2.15 49893 -> 104.244.42.193 443 FSRPA_FSRPA 0 0 26 4549 2400 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:14:45.457992 0.079207 udp 10.0.2.15 58762 <-> 1.1.1.1 53 CON 0 0 2 206 80 1 flow=Normal-UDP-DNS 1970/01/01 01:14:45.543335 34.592159 udp 10.0.2.15 58763 <-> 216.58.201.99 443 CON 0 0 32 11450 8858 18 flow=Normal-Google-Net-8 1970/01/01 01:14:58.299184 15.190137 udp 10.0.2.15 58771 <-> 172.217.19.67 443 CON 0 0 21 11702 9507 12 flow=Normal-Google-Net-9 1970/01/01 01:15:04.410549 3.008463 udp 10.0.2.15 58772 -> 239.255.255.250 1900 INT 0 4 864 864 4 flow=Normal-UDP-Attempt 1970/01/01 01:15:08.361355 15.295830 udp 10.0.2.15 58776 <-> 172.217.23.227 443 CON 0 0 14 4330 2241 8 flow=Normal-Google-Net-9 1970/01/01 01:15:24.061776 6.211157 tcp 10.0.2.15 49894 -> 104.244.42.193 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:15:24.310653 5.478246 tcp 10.0.2.15 49895 -> 104.244.42.193 443 FSRPA_SPA 0 0 22 4339 2299 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:15:25.051053 0.452358 udp 10.0.2.15 58778 <-> 216.58.201.99 443 CON 0 0 15 5774 3864 10 flow=Normal-Google-Net-8 1970/01/01 01:15:25.054325 28.624689 udp 10.0.2.15 58779 <-> 172.217.23.238 443 CON 0 0 29 13024 6576 16 flow=Normal-Google-Net-9 1970/01/01 01:15:25.193510 4.495148 tcp 10.0.2.15 49896 -> 172.217.23.238 443 FSRPA_SPA 0 0 17 4853 1054 8 flow=Normal-Google-Net-9 1970/01/01 01:15:36.052382 4.145458 tcp 10.0.2.15 49897 -> 172.217.23.229 443 FSPA_FSPA 0 0 34 9777 3749 15 flow=Normal-Google-Net-9 1970/01/01 01:15:36.351464 0.000000 udp 10.0.2.15 52824 -> 1.1.1.1 53 INT 0 1 85 85 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:15:37.357142 0.027199 udp 10.0.2.15 52824 <-> 1.0.0.1 53 CON 0 0 2 170 85 1 flow=Normal-UDP-DNS 1970/01/01 01:15:37.575534 0.000000 udp 10.0.2.15 52723 -> 1.0.0.1 53 INT 0 1 70 70 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:15:38.574835 0.031182 udp 10.0.2.15 52723 <-> 1.1.1.1 53 CON 0 0 2 156 70 1 flow=Normal-UDP-DNS 1970/01/01 01:15:39.245682 15.430785 udp 10.0.2.15 52725 <-> 172.217.23.238 443 CON 0 0 34 25374 20055 22 flow=Normal-Google-Net-9 1970/01/01 01:15:39.393073 10.319794 tcp 10.0.2.15 49898 -> 172.217.23.238 443 FSRPA_SRPA 0 0 21 6685 1327 10 flow=Normal-Google-Net-9 1970/01/01 01:15:39.944426 15.150429 udp 10.0.2.15 52726 <-> 74.125.133.189 443 CON 0 0 18 5179 2725 10 flow=Normal-Google-Net-6 1970/01/01 01:15:40.612135 128.059677 udp 10.0.2.15 52728 <-> 74.125.133.189 443 CON 0 0 39 7854 4380 20 flow=Normal-Google-Net-6 1970/01/01 01:16:38.289645 15.129990 udp 10.0.2.15 52731 <-> 74.125.133.189 443 CON 0 0 18 5718 2626 9 flow=Normal-Google-Net-6 1970/01/01 01:16:44.049817 5.807680 tcp 10.0.2.15 49899 -> 104.244.42.193 443 FSRPA_FSRPA 0 0 26 4555 2407 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:16:50.144138 0.081607 udp 10.0.2.15 61104 <-> 1.1.1.1 53 CON 0 0 2 178 81 1 flow=Normal-UDP-DNS 1970/01/01 01:16:50.237709 0.214192 udp 10.0.2.15 61105 <-> 216.58.201.99 443 CON 0 0 15 6842 4380 8 flow=Normal-Google-Net-8 1970/01/01 01:17:04.420196 3.019171 udp 10.0.2.15 61106 -> 239.255.255.250 1900 INT 0 4 864 864 4 flow=Normal-UDP-Attempt 1970/01/01 01:17:33.587389 15.103625 udp 10.0.2.15 61109 <-> 74.125.133.189 443 CON 0 0 18 5158 2701 10 flow=Normal-Google-Net-6 1970/01/01 01:17:34.132683 263.113342 udp 10.0.2.15 61110 <-> 74.125.133.189 443 CON 0 0 62 9889 5380 30 flow=Normal-Google-Net-6 1970/01/01 01:17:40.064964 0.076667 udp 10.0.2.15 62346 <-> 1.1.1.1 53 CON 0 0 2 193 75 1 flow=Normal-UDP-DNS 1970/01/01 01:17:40.094260 0.047699 udp 10.0.2.15 62545 <-> 1.1.1.1 53 CON 0 0 2 208 84 1 flow=Normal-UDP-DNS 1970/01/01 01:17:40.142921 9.811291 tcp 10.0.2.15 49900 -> 216.58.201.101 443 FSPA_FSPA 0 0 31 7441 3757 14 flow=Normal-Google-Net-8 1970/01/01 01:17:40.143355 180.172714 tcp 10.0.2.15 49901 -> 31.13.84.8 443 FSPA_FSPA 0 0 49 9380 3528 22 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:18:03.036285 0.067828 udp 10.0.2.15 59693 <-> 1.1.1.1 53 CON 0 0 2 190 87 1 flow=Normal-UDP-DNS 1970/01/01 01:18:29.816230 15.079714 udp 10.0.2.15 59695 <-> 74.125.133.189 443 CON 0 0 17 5083 2621 9 flow=Normal-Google-Net-6 1970/01/01 01:18:30.233469 125.200653 udp 10.0.2.15 59696 <-> 74.125.133.189 443 CON 0 0 41 10702 5772 21 flow=Normal-Google-Net-6 1970/01/01 01:19:04.429697 3.019503 udp 10.0.2.15 59698 -> 239.255.255.250 1900 INT 0 4 864 864 4 flow=Normal-UDP-Attempt 1970/01/01 01:19:07.086392 0.045686 udp 10.0.2.15 63299 <-> 1.1.1.1 53 CON 0 0 2 187 75 1 flow=Normal-UDP-DNS 1970/01/01 01:19:07.143343 15.160008 udp 10.0.2.15 63300 <-> 216.58.201.110 443 CON 0 0 13 5933 3429 7 flow=Normal-Google-Net-8 1970/01/01 01:19:24.041153 5.983533 tcp 10.0.2.15 49904 -> 104.244.42.193 443 FSRPA_FSRPA 0 0 32 8718 2590 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:19:24.452970 0.047975 udp 10.0.2.15 55872 <-> 1.1.1.1 53 CON 0 0 2 206 77 1 flow=Normal-UDP-DNS 1970/01/01 01:19:24.507311 15.322735 udp 10.0.2.15 55873 <-> 74.125.133.189 443 CON 0 0 16 5057 2674 10 flow=Normal-Google-Net-6 1970/01/01 01:19:42.057529 0.051416 udp 10.0.2.15 54386 <-> 1.1.1.1 53 CON 0 0 2 193 75 1 flow=Normal-UDP-DNS 1970/01/01 01:19:42.109758 8.146583 tcp 10.0.2.15 49905 -> 216.58.201.101 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-Google-Net-8 1970/01/01 01:19:42.316698 7.734503 tcp 10.0.2.15 49906 -> 216.58.201.101 443 FSPA_FSPA 0 0 35 9944 3871 16 flow=Normal-Google-Net-8 1970/01/01 01:20:20.322020 0.278288 udp 10.0.2.15 54389 <-> 74.125.133.189 443 CON 0 0 12 6063 3717 6 flow=Normal-Google-Net-6 1970/01/01 01:20:20.587356 338.788147 udp 10.0.2.15 54390 <-> 74.125.133.189 443 CON 0 0 131 18484 10792 64 flow=Normal-Google-Net-6 1970/01/01 01:20:42.041883 0.068676 udp 10.0.2.15 63782 <-> 1.1.1.1 53 CON 0 0 2 208 84 1 flow=Normal-UDP-DNS 1970/01/01 01:20:42.111468 118.112946 tcp 10.0.2.15 49907 -> 31.13.84.8 443 FSPA_FSPA 0 0 52 10602 3709 23 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:21:04.431237 3.017129 udp 10.0.2.15 63784 -> 239.255.255.250 1900 INT 0 4 864 864 4 flow=Normal-UDP-Attempt 1970/01/01 01:21:14.743763 1.158697 udp 10.0.2.15 63786 <-> 74.125.133.189 443 CON 0 0 19 10574 5337 10 flow=Normal-Google-Net-6 1970/01/01 01:22:12.119949 15.099122 udp 10.0.2.15 63791 <-> 74.125.133.189 443 CON 0 0 15 4954 2622 9 flow=Normal-Google-Net-6 1970/01/01 01:22:43.042749 0.033759 udp 10.0.2.15 51128 <-> 1.1.1.1 53 CON 0 0 2 208 84 1 flow=Normal-UDP-DNS 1970/01/01 01:22:43.077280 1313.729492 tcp 10.0.2.15 49908 -> 31.13.84.8 443 FSPA_FSPA 0 0 246 31988 15098 107 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:22:44.052298 6.179444 tcp 10.0.2.15 49909 -> 104.244.42.193 443 FSRPA_FSRPA 0 0 43 15734 12997 20 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:22:52.051392 8.162629 tcp 10.0.2.15 49910 -> 216.58.201.101 443 FSPA_FSPA 0 0 32 7609 3878 14 flow=Normal-Google-Net-8 1970/01/01 01:23:04.438108 3.017081 udp 10.0.2.15 51131 -> 239.255.255.250 1900 INT 0 4 864 864 4 flow=Normal-UDP-Attempt 1970/01/01 01:23:07.206500 0.122196 udp 10.0.2.15 64598 <-> 1.1.1.1 53 CON 0 0 2 206 77 1 flow=Normal-UDP-DNS 1970/01/01 01:23:07.337151 0.695775 udp 10.0.2.15 64599 <-> 74.125.133.189 443 CON 0 0 19 9443 3954 9 flow=Normal-Google-Net-6 1970/01/01 01:23:25.048606 0.046026 udp 10.0.2.15 60746 <-> 1.1.1.1 53 CON 0 0 2 198 79 1 flow=Normal-UDP-DNS 1970/01/01 01:23:25.097591 0.465259 udp 10.0.2.15 60747 <-> 216.58.201.110 443 CON 0 0 19 12021 7223 11 flow=Normal-Google-Net-8 1970/01/01 01:24:03.155866 0.041121 udp 10.0.2.15 61112 <-> 1.1.1.1 53 CON 0 0 2 193 75 1 flow=Normal-UDP-DNS 1970/01/01 01:24:03.163339 0.197846 udp 10.0.2.15 61113 <-> 74.125.133.189 443 CON 0 0 13 4790 2402 6 flow=Normal-Google-Net-6 1970/01/01 01:24:03.198108 7.098720 tcp 10.0.2.15 49911 -> 216.58.201.101 443 FSPA_FSPA 0 0 34 7814 2852 15 flow=Normal-Google-Net-8 1970/01/01 01:24:03.551705 0.009521 udp 10.0.2.15 53174 <-> 1.1.1.1 53 CON 0 0 2 164 74 1 flow=Normal-UDP-DNS 1970/01/01 01:24:03.566472 0.154005 udp 10.0.2.15 53175 <-> 172.217.16.68 443 CON 0 0 12 5568 1947 6 flow=Normal-Google-Net-9 1970/01/01 01:24:08.049478 0.075417 udp 10.0.2.15 65052 <-> 1.1.1.1 53 CON 0 0 2 187 75 1 flow=Normal-UDP-DNS 1970/01/01 01:24:08.134063 15.080047 udp 10.0.2.15 65053 <-> 216.58.201.110 443 CON 0 0 13 4326 2185 7 flow=Normal-Google-Net-8 1970/01/01 01:24:08.276409 15.393205 udp 10.0.2.15 65054 <-> 216.58.201.110 443 CON 0 0 18 7544 4958 10 flow=Normal-Google-Net-8 1970/01/01 01:24:08.277037 0.085876 udp 10.0.2.15 52604 <-> 1.1.1.1 53 CON 0 0 2 206 80 1 flow=Normal-UDP-DNS 1970/01/01 01:24:08.369541 15.172013 udp 10.0.2.15 52605 <-> 216.58.201.99 443 CON 0 0 14 4349 2301 7 flow=Normal-Google-Net-8 1970/01/01 01:24:24.042173 6.278987 tcp 10.0.2.15 49912 -> 104.244.42.193 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:24:24.298516 6.021355 tcp 10.0.2.15 49913 -> 104.244.42.193 443 FSRPA_SPA 0 0 24 5127 2247 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:24:57.857339 0.187852 udp 10.0.2.15 52609 <-> 74.125.133.189 443 CON 0 0 13 4947 2402 6 flow=Normal-Google-Net-6 1970/01/01 01:24:58.027353 309.602600 udp 10.0.2.15 52610 <-> 74.125.133.189 443 CON 0 0 82 13550 8086 44 flow=Normal-Google-Net-6 1970/01/01 01:25:03.026169 0.031054 udp 10.0.2.15 50716 <-> 1.1.1.1 53 CON 0 0 2 166 75 1 flow=Normal-UDP-DNS 1970/01/01 01:25:03.067085 0.385744 udp 10.0.2.15 50717 <-> 216.58.201.110 443 CON 0 0 16 5667 3064 8 flow=Normal-Google-Net-8 1970/01/01 01:25:04.441831 3.009426 udp 10.0.2.15 50718 -> 239.255.255.250 1900 INT 0 4 864 864 4 flow=Normal-UDP-Attempt 1970/01/01 01:25:35.401071 0.209246 udp 10.0.2.15 50720 <-> 216.58.201.99 443 CON 0 0 13 4443 2329 7 flow=Normal-Google-Net-8 1970/01/01 01:25:35.522783 0.066645 udp 10.0.2.15 59512 <-> 1.1.1.1 53 CON 0 0 2 225 89 1 flow=Normal-UDP-DNS 1970/01/01 01:25:35.590418 4.857813 tcp 10.0.2.15 49914 -> 216.58.201.115 443 FSPA_FSPA 0 0 30 6082 2184 14 flow=Normal-Google-Net-8 1970/01/01 01:25:44.037720 0.030616 udp 10.0.2.15 63309 <-> 1.1.1.1 53 CON 0 0 2 190 87 1 flow=Normal-UDP-DNS 1970/01/01 01:25:51.582956 0.193614 udp 10.0.2.15 63311 <-> 74.125.133.189 443 CON 0 0 13 5026 2402 6 flow=Normal-Google-Net-6 1970/01/01 01:25:53.044854 7.404645 tcp 10.0.2.15 49915 -> 216.58.201.101 443 FSPA_FSPA 0 0 31 7637 3977 14 flow=Normal-Google-Net-8 1970/01/01 01:26:04.042301 6.433393 tcp 10.0.2.15 49916 -> 104.244.42.193 443 FSRPA_SPA 0 0 22 4338 2300 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:26:46.329465 15.120147 udp 10.0.2.15 63317 <-> 74.125.133.189 443 CON 0 0 16 5001 2544 8 flow=Normal-Google-Net-6 1970/01/01 01:26:46.813751 453.722473 udp 10.0.2.15 63318 <-> 74.125.133.189 443 CON 0 0 140 21229 11078 67 flow=Normal-Google-Net-6 1970/01/01 01:27:04.442679 3.016606 udp 10.0.2.15 63319 -> 239.255.255.250 1900 INT 0 4 864 864 4 flow=Normal-UDP-Attempt 1970/01/01 01:27:15.356982 0.032066 udp 10.0.2.15 55889 <-> 1.1.1.1 53 CON 0 0 2 166 75 1 flow=Normal-UDP-DNS 1970/01/01 01:27:15.397274 15.444378 udp 10.0.2.15 55890 <-> 216.58.201.110 443 CON 0 0 18 5782 3191 10 flow=Normal-Google-Net-8 1970/01/01 01:27:37.038389 15.074629 udp 10.0.2.15 55893 <-> 74.125.133.189 443 CON 0 0 16 5020 2563 8 flow=Normal-Google-Net-6 1970/01/01 01:28:33.366198 0.039505 udp 10.0.2.15 49289 <-> 1.1.1.1 53 CON 0 0 2 206 77 1 flow=Normal-UDP-DNS 1970/01/01 01:28:33.416645 15.116829 udp 10.0.2.15 49290 <-> 74.125.133.189 443 CON 0 0 16 5003 2547 8 flow=Normal-Google-Net-6 1970/01/01 01:28:57.060836 0.028642 udp 10.0.2.15 58849 <-> 1.1.1.1 53 CON 0 0 2 198 79 1 flow=Normal-UDP-DNS 1970/01/01 01:28:57.102555 0.203710 udp 10.0.2.15 58850 <-> 216.58.201.110 443 CON 0 0 18 5094 2630 9 flow=Normal-Google-Net-8 1970/01/01 01:28:57.280687 11.898994 udp 10.0.2.15 58851 <-> 216.58.201.110 443 CON 0 0 28 9914 5471 16 flow=Normal-Google-Net-8 1970/01/01 01:29:04.448178 3.006131 udp 10.0.2.15 58852 -> 239.255.255.250 1900 INT 0 4 864 864 4 flow=Normal-UDP-Attempt 1970/01/01 01:29:09.062351 0.035883 udp 10.0.2.15 49170 <-> 1.1.1.1 53 CON 0 0 2 187 75 1 flow=Normal-UDP-DNS 1970/01/01 01:29:24.073615 6.581027 tcp 10.0.2.15 49917 -> 104.244.42.193 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:29:24.338131 6.324152 tcp 10.0.2.15 49918 -> 104.244.42.193 443 FSRPA_FSRPA 0 0 25 4501 2354 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:29:28.618316 0.237167 udp 10.0.2.15 49174 <-> 74.125.133.189 443 CON 0 0 13 4999 2402 6 flow=Normal-Google-Net-6 1970/01/01 01:29:53.037889 0.000000 udp 10.0.2.15 56850 -> 1.1.1.1 53 INT 0 1 87 87 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:29:54.038685 0.027444 udp 10.0.2.15 56850 <-> 1.0.0.1 53 CON 0 0 2 190 87 1 flow=Normal-UDP-DNS 1970/01/01 01:30:22.529855 1.860056 udp 10.0.2.15 56854 <-> 74.125.133.189 443 CON 0 0 23 14805 6809 12 flow=Normal-Google-Net-6 1970/01/01 01:30:36.070162 0.035111 udp 10.0.2.15 62803 <-> 1.1.1.1 53 CON 0 0 2 205 84 1 flow=Normal-UDP-DNS 1970/01/01 01:30:36.106390 15.333653 udp 10.0.2.15 62804 <-> 216.58.201.110 443 CON 0 0 23 14292 6044 12 flow=Normal-Google-Net-8 1970/01/01 01:30:36.250749 4.425641 tcp 10.0.2.15 49919 -> 216.58.201.110 443 FSRPA_SRPA 0 0 22 6740 1381 11 flow=Normal-Google-Net-8 1970/01/01 01:30:57.291591 0.041565 udp 10.0.2.15 53018 <-> 1.1.1.1 53 CON 0 0 2 193 75 1 flow=Normal-UDP-DNS 1970/01/01 01:30:57.334489 3.430864 tcp 10.0.2.15 49920 -> 216.58.201.101 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-Google-Net-8 1970/01/01 01:30:57.528568 3.236693 tcp 10.0.2.15 49921 -> 216.58.201.101 443 FSPA_FSPA 0 0 32 7578 4039 14 flow=Normal-Google-Net-8 1970/01/01 01:31:04.510926 3.036216 udp 10.0.2.15 53020 -> 239.255.255.250 1900 INT 0 4 864 864 4 flow=Normal-UDP-Attempt 1970/01/01 01:31:04.712704 1.152804 udp 10.0.2.15 55172 <-> 1.1.1.1 53 CON 0 0 2 170 85 1 flow=Normal-UDP-DNS 1970/01/01 01:31:04.841289 1.054174 udp 10.0.2.15 54157 <-> 1.1.1.1 53 CON 0 0 2 194 89 1 flow=Normal-UDP-DNS 1970/01/01 01:31:05.709218 0.734218 udp 10.0.2.15 55172 <-> 1.0.0.1 53 CON 0 0 2 170 85 1 flow=Normal-UDP-DNS 1970/01/01 01:31:05.839130 0.649293 udp 10.0.2.15 54157 <-> 1.0.0.1 53 CON 0 0 2 194 89 1 flow=Normal-UDP-DNS 1970/01/01 01:31:05.912409 1.423900 udp 10.0.2.15 54158 <-> 216.58.201.99 443 CON 0 0 24 16714 6285 10 flow=Normal-Google-Net-8 1970/01/01 01:31:06.322427 4.403878 tcp 10.0.2.15 49922 -> 216.58.201.99 443 FSRPA_SRPA 0 0 18 4606 1108 9 flow=Normal-Google-Net-8 1970/01/01 01:31:06.443436 0.000000 icmp 10.0.2.15 0x0303 -> 1.0.0.1 0x84d7 URP 0 1 113 113 1 flow=Normal-ICMP 1970/01/01 01:31:06.574685 4.184520 tcp 10.0.2.15 49923 -> 216.58.201.99 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-Google-Net-8 1970/01/01 01:31:24.404289 0.327864 udp 10.0.2.15 54161 <-> 74.125.133.189 443 CON 0 0 12 6115 3737 6 flow=Normal-Google-Net-6 1970/01/01 01:31:24.722297 893.349243 udp 10.0.2.15 54162 <-> 74.125.133.189 443 CON 0 0 327 43014 23922 160 flow=Normal-Google-Net-6 1970/01/01 01:31:32.316008 0.000000 udp 10.0.2.15 54879 -> 1.1.1.1 53 INT 0 1 73 73 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:31:33.322824 0.042341 udp 10.0.2.15 54879 <-> 1.0.0.1 53 CON 0 0 2 200 73 1 flow=Normal-UDP-DNS 1970/01/01 01:31:33.366189 14.802451 tcp 10.0.2.15 49924 -> 162.125.34.137 443 SRPA_SPA 0 0 1036 699218 664614 460 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:31:49.042898 0.108853 udp fe80::353e:6fce:ee32:1a73 62417 -> ff02::1:3 5355 INT 0 2 168 168 2 flow=Normal-UDP-Attempt 1970/01/01 01:31:49.043148 0.108865 udp 10.0.2.15 55602 -> 224.0.0.252 5355 INT 0 2 128 128 2 flow=Normal-UDP-Attempt 1970/01/01 01:31:51.696505 0.060287 udp 10.0.2.15 52293 <-> 1.0.0.1 53 CON 0 0 2 205 78 1 flow=Normal-UDP-DNS 1970/01/01 01:31:51.791747 1.420845 tcp 10.0.2.15 49925 -> 162.125.66.3 443 SRPA_SPA 0 0 20 6746 2246 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:32:03.336213 1.252956 tcp 10.0.2.15 49926 -> 162.125.66.3 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:32:04.588539 77.947281 tcp 10.0.2.15 49927 -> 162.125.66.3 443 SPA_FSPA 0 0 107 54183 13322 40 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:32:05.522165 0.068917 udp 10.0.2.15 54407 <-> 1.0.0.1 53 CON 0 0 2 248 81 1 flow=Normal-UDP-DNS 1970/01/01 01:32:05.522470 0.060032 udp 10.0.2.15 53189 <-> 1.0.0.1 53 CON 0 0 2 158 71 1 flow=Normal-UDP-DNS 1970/01/01 01:32:05.526507 0.000000 udp 10.0.2.15 58454 -> 1.0.0.1 53 INT 0 1 80 80 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:32:05.529363 0.000000 udp 10.0.2.15 59817 -> 1.0.0.1 53 INT 0 1 81 81 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:32:05.532470 0.000000 udp 10.0.2.15 62616 -> 1.0.0.1 53 INT 0 1 75 75 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:32:05.535494 0.046430 udp 10.0.2.15 57356 <-> 1.0.0.1 53 CON 0 0 2 164 74 1 flow=Normal-UDP-DNS 1970/01/01 01:32:05.611593 5.269705 tcp 10.0.2.15 49928 -> 104.16.100.29 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:32:05.611846 0.000000 udp 10.0.2.15 65299 -> 1.0.0.1 53 INT 0 1 75 75 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:32:05.699148 20.051184 udp 10.0.2.15 65300 <-> 172.217.16.68 443 CON 0 0 53 17879 9782 26 flow=Normal-Google-Net-9 1970/01/01 01:32:05.700510 5.137958 tcp 10.0.2.15 49929 -> 162.125.248.1 443 FSRPA_SRPA 0 0 21 5805 1108 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:32:05.798331 5.084860 tcp 10.0.2.15 49930 -> 104.16.100.29 443 FSPA_FSPA 0 0 81 36048 3200 31 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:32:06.514679 0.038149 udp 10.0.2.15 58454 <-> 1.1.1.1 53 CON 0 0 2 212 80 1 flow=Normal-UDP-DNS 1970/01/01 01:32:06.529318 0.024083 udp 10.0.2.15 62616 <-> 1.1.1.1 53 CON 0 0 2 196 75 1 flow=Normal-UDP-DNS 1970/01/01 01:32:06.529597 0.024627 udp 10.0.2.15 59817 <-> 1.1.1.1 53 CON 0 0 2 226 81 1 flow=Normal-UDP-DNS 1970/01/01 01:32:06.569604 0.125612 udp 10.0.2.15 65301 <-> 216.58.201.106 443 CON 0 0 6 3090 1553 3 flow=Normal-Google-Net-8 1970/01/01 01:32:06.571295 14.363961 tcp 10.0.2.15 49931 -> 162.125.66.1 443 FSPA_FSPA 0 0 418 231488 171855 186 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:32:06.571959 4.334717 tcp 10.0.2.15 49932 -> 162.125.66.1 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:32:06.572464 4.307293 tcp 10.0.2.15 49933 -> 13.32.121.104 443 FSPA_FSPA 0 0 24 9304 2066 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:32:06.572827 4.266275 tcp 10.0.2.15 49934 -> 13.32.121.104 443 FSRPA_SRPA 0 0 21 6094 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:32:06.606263 0.003471 udp 10.0.2.15 65299 <-> 1.1.1.1 53 CON 0 0 2 166 75 1 flow=Normal-UDP-DNS 1970/01/01 01:32:06.623433 0.131456 udp 10.0.2.15 65303 <-> 216.58.201.99 443 CON 0 0 6 3090 1553 3 flow=Normal-Google-Net-8 1970/01/01 01:32:06.729982 0.028647 udp 10.0.2.15 63801 <-> 1.1.1.1 53 CON 0 0 2 208 78 1 flow=Normal-UDP-DNS 1970/01/01 01:32:06.759237 4.146138 tcp 10.0.2.15 49935 -> 162.125.66.2 443 FSPA_FSPA 0 0 44 18012 13226 21 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:32:07.490963 3.389106 tcp 10.0.2.15 49936 -> 104.16.100.29 443 FSPA_FSPA 0 0 31 8792 1722 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:32:07.528337 0.045874 udp 10.0.2.15 51639 <-> 1.1.1.1 53 CON 0 0 2 206 77 1 flow=Normal-UDP-DNS 1970/01/01 01:32:07.579950 17.043091 udp 10.0.2.15 51640 <-> 216.58.201.99 443 CON 0 0 31 21535 2677 13 flow=Normal-Google-Net-8 1970/01/01 01:32:08.234741 0.036349 udp 10.0.2.15 64985 <-> 1.1.1.1 53 CON 0 0 2 236 72 1 flow=Normal-UDP-DNS 1970/01/01 01:32:08.235173 0.033678 udp 10.0.2.15 52433 <-> 1.1.1.1 53 CON 0 0 2 208 80 1 flow=Normal-UDP-DNS 1970/01/01 01:32:08.235578 0.025951 udp 10.0.2.15 54586 <-> 1.1.1.1 53 CON 0 0 2 215 87 1 flow=Normal-UDP-DNS 1970/01/01 01:32:08.238839 0.046002 udp 10.0.2.15 64277 <-> 1.1.1.1 53 CON 0 0 2 227 82 1 flow=Normal-UDP-DNS 1970/01/01 01:32:08.239275 0.043270 udp 10.0.2.15 55189 <-> 1.1.1.1 53 CON 0 0 2 144 64 1 flow=Normal-UDP-DNS 1970/01/01 01:32:08.239758 0.047288 udp 10.0.2.15 62169 <-> 1.1.1.1 53 CON 0 0 2 197 76 1 flow=Normal-UDP-DNS 1970/01/01 01:32:08.262874 0.037170 udp 10.0.2.15 57422 <-> 1.1.1.1 53 CON 0 0 2 228 84 1 flow=Normal-UDP-DNS 1970/01/01 01:32:08.276103 1.614961 udp 10.0.2.15 62170 <-> 172.217.23.194 443 CON 0 0 39 19542 6774 21 flow=Normal-Google-Net-9 1970/01/01 01:32:08.287764 0.320204 udp 10.0.2.15 57423 <-> 172.217.23.194 443 CON 0 0 7 3168 1634 4 flow=Normal-Google-Net-9 1970/01/01 01:32:08.288754 12.616220 tcp 10.0.2.15 49937 -> 31.13.84.4 443 FSPA_FSPA 0 0 77 49951 2626 28 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:32:08.289168 2.597878 tcp 10.0.2.15 49938 -> 204.79.197.200 443 FSPA_FSPA 0 0 38 10628 2139 16 flow=Normal-To-Microsoft-7 1970/01/01 01:32:08.289779 13.123119 tcp 10.0.2.15 49939 -> 199.16.156.11 443 FSRPA_FSRPA 0 0 34 7739 1939 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:32:08.290281 2.635569 tcp 10.0.2.15 49940 -> 188.125.66.33 443 FSPA_FSPA 0 0 37 11513 2296 16 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:32:08.291599 12.613468 tcp 10.0.2.15 49941 -> 31.13.84.36 443 FSPA_FSPA 0 0 41 8752 3154 17 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:32:08.292101 0.002757 udp 10.0.2.15 63814 <-> 1.1.1.1 53 CON 0 0 2 162 73 1 flow=Normal-UDP-DNS 1970/01/01 01:32:08.306905 17.539309 udp 10.0.2.15 63815 <-> 172.217.16.67 443 CON 0 0 51 11955 8131 27 flow=Normal-Google-Net-9 1970/01/01 01:32:08.315640 1.074260 udp 10.0.2.15 63816 <-> 216.58.201.110 443 CON 0 0 11 4714 2712 6 flow=Normal-Google-Net-8 1970/01/01 01:32:08.412345 0.054939 udp 10.0.2.15 50056 <-> 1.1.1.1 53 CON 0 0 2 228 84 1 flow=Normal-UDP-DNS 1970/01/01 01:32:08.479562 0.194048 udp 10.0.2.15 50057 <-> 216.58.201.104 443 CON 0 0 45 38675 2879 17 flow=Normal-Google-Net-8 1970/01/01 01:32:08.804767 0.000000 udp 10.0.2.15 54059 -> 1.1.1.1 53 INT 0 1 82 82 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:32:09.041814 0.000000 udp 10.0.2.15 50652 -> 1.1.1.1 53 INT 0 1 79 79 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:32:09.083047 0.467990 udp 10.0.2.15 55870 <-> 1.1.1.1 53 CON 0 0 2 192 75 1 flow=Normal-UDP-DNS 1970/01/01 01:32:09.123964 0.000000 udp 10.0.2.15 57280 -> 1.1.1.1 53 INT 0 1 83 83 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:32:09.553082 11.594485 tcp 10.0.2.15 49942 -> 182.22.24.252 443 FSPA_FSPA 0 0 35 9191 2044 16 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:32:09.583301 2.788509 tcp 10.0.2.15 49943 -> 182.22.24.252 443 FSA_SRA 0 0 6 340 174 3 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:32:09.811316 0.039348 udp 10.0.2.15 54059 <-> 1.0.0.1 53 CON 0 0 2 212 82 1 flow=Normal-UDP-DNS 1970/01/01 01:32:09.851715 1.048007 tcp 10.0.2.15 49944 -> 104.244.43.16 443 FSRPA_FSRPA 0 0 32 7431 1828 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:32:10.047848 0.044525 udp 10.0.2.15 50652 <-> 1.0.0.1 53 CON 0 0 2 221 79 1 flow=Normal-UDP-DNS 1970/01/01 01:32:10.093985 12.062367 tcp 10.0.2.15 49945 -> 91.225.248.133 443 FSPA_FSPA 0 0 29 6358 2088 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:32:10.114166 0.055664 udp 10.0.2.15 61085 <-> 1.0.0.1 53 CON 0 0 2 212 81 1 flow=Normal-UDP-DNS 1970/01/01 01:32:10.131316 0.004581 udp 10.0.2.15 57280 <-> 1.0.0.1 53 CON 0 0 2 252 83 1 flow=Normal-UDP-DNS 1970/01/01 01:32:10.144027 0.599931 udp 10.0.2.15 61086 <-> 66.102.1.155 443 CON 0 0 16 7801 3822 8 flow=Normal-UDP-Established 1970/01/01 01:32:10.170417 10.855573 tcp 10.0.2.15 49946 -> 199.16.156.9 443 FSRPA_SPA 0 0 29 7927 2512 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:32:10.363846 0.635237 tcp 10.0.2.15 49947 -> 199.16.156.9 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:32:16.139986 15.082083 udp 10.0.2.15 61092 <-> 216.58.201.110 443 CON 0 0 12 4298 2137 6 flow=Normal-Google-Net-8 1970/01/01 01:32:16.286744 15.130519 udp 10.0.2.15 61093 <-> 216.58.201.110 443 CON 0 0 16 6135 3717 9 flow=Normal-Google-Net-8 1970/01/01 01:32:16.969656 0.056394 udp 10.0.2.15 52212 <-> 1.0.0.1 53 CON 0 0 2 200 73 1 flow=Normal-UDP-DNS 1970/01/01 01:32:17.030501 1.373604 tcp 10.0.2.15 49948 -> 162.125.32.135 443 FSPA_FSPA 0 0 24 9908 5058 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:32:17.033084 717.735718 tcp 10.0.2.15 49949 -> 162.125.32.135 443 SRPA_FSPA 0 0 21 6938 2520 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:32:19.040066 0.200628 udp 10.0.2.15 52214 <-> 74.125.133.189 443 CON 0 0 13 4972 2403 6 flow=Normal-Google-Net-6 1970/01/01 01:32:23.337602 7.604519 tcp 10.0.2.15 49950 -> 162.125.66.1 443 FSPA_FSPA 0 0 28 5851 3083 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:32:23.473139 0.057902 udp 10.0.2.15 62926 <-> 1.0.0.1 53 CON 0 0 2 208 78 1 flow=Normal-UDP-DNS 1970/01/01 01:32:23.531848 7.410973 tcp 10.0.2.15 49951 -> 162.125.66.2 443 FSPA_FSPA 0 0 40 14629 13076 19 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:32:24.348620 0.076717 udp 10.0.2.15 62790 <-> 1.0.0.1 53 CON 0 0 2 205 78 1 flow=Normal-UDP-DNS 1970/01/01 01:32:24.503329 734.942200 tcp 10.0.2.15 49952 -> 162.125.66.3 443 SRPA_FSPA 0 0 26 7420 2068 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:32:24.825165 0.056662 udp 10.0.2.15 57013 <-> 1.0.0.1 53 CON 0 0 2 213 82 1 flow=Normal-UDP-DNS 1970/01/01 01:32:24.882704 71.072876 tcp 10.0.2.15 49953 -> 162.125.66.3 443 FSPA_FSPA 0 0 36 13461 1650 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:32:25.916709 320.583649 tcp 10.0.2.15 49954 -> 104.16.100.29 443 FSPA_FSPA 0 0 279 176795 7117 89 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:32:25.917877 320.712433 tcp 10.0.2.15 49955 -> 104.16.100.29 443 FSPA_FSPA 0 0 118 73063 3698 42 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:32:25.918986 300.317230 tcp 10.0.2.15 49956 -> 104.16.100.29 443 FSPA_FSPA 0 0 37 8256 1855 17 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:32:25.920024 310.376221 tcp 10.0.2.15 49957 -> 104.16.100.29 443 FSPA_FSPA 0 0 195 121751 8201 64 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:32:25.922582 310.373291 tcp 10.0.2.15 49958 -> 104.16.100.29 443 FSPA_FSPA 0 0 194 120724 8992 64 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:32:26.636561 319.873352 tcp 10.0.2.15 49959 -> 104.16.100.29 443 FSPA_FSPA 0 0 112 63011 6223 42 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:32:26.637854 309.657684 tcp 10.0.2.15 49960 -> 104.16.100.29 443 FSPA_FSPA 0 0 105 54673 5707 40 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:32:26.639694 309.655701 tcp 10.0.2.15 49961 -> 104.16.100.29 443 FSPA_FSPA 0 0 250 139849 6111 84 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:32:26.642211 309.653900 tcp 10.0.2.15 49962 -> 104.16.100.29 443 FSPA_FSPA 0 0 78 33888 3675 30 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:32:28.250791 3.370941 tcp 10.0.2.15 49963 -> 216.58.201.101 443 FSPA_FSPA 0 0 48 15194 4677 20 flow=Normal-Google-Net-8 1970/01/01 01:32:38.335553 2.577851 tcp 10.0.2.15 49964 -> 162.125.66.1 443 FSPA_FSPA 0 0 28 5852 3083 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:32:38.765014 0.040018 udp 10.0.2.15 53304 <-> 1.0.0.1 53 CON 0 0 2 208 78 1 flow=Normal-UDP-DNS 1970/01/01 01:32:38.805953 2.104800 tcp 10.0.2.15 49965 -> 162.125.66.2 443 FSPA_FSPA 0 0 40 14630 13076 19 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:32:55.790955 0.003754 udp 10.0.2.15 64692 <-> 1.0.0.1 53 CON 0 0 2 190 87 1 flow=Normal-UDP-DNS 1970/01/01 01:32:55.808882 15.057946 udp 10.0.2.15 64693 <-> 216.58.201.106 443 CON 0 0 15 8706 2636 7 flow=Normal-Google-Net-8 1970/01/01 01:33:04.465216 3.021490 udp 10.0.2.15 64694 -> 239.255.255.250 1900 INT 0 4 864 864 4 flow=Normal-UDP-Attempt 1970/01/01 01:33:08.341946 0.029090 udp 10.0.2.15 57187 <-> 1.0.0.1 53 CON 0 0 2 196 75 1 flow=Normal-UDP-DNS 1970/01/01 01:33:08.371867 2.575090 tcp 10.0.2.15 49966 -> 162.125.66.1 443 FSPA_FSPA 0 0 32 8578 3956 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:33:08.491393 2.454245 tcp 10.0.2.15 49967 -> 162.125.66.2 443 FSPA_FSPA 0 0 40 14630 13076 19 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:33:15.042612 0.000000 udp 10.0.2.15 54019 -> 1.0.0.1 53 INT 0 1 77 77 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:33:16.044584 0.025468 udp 10.0.2.15 54019 <-> 1.1.1.1 53 CON 0 0 2 206 77 1 flow=Normal-UDP-DNS 1970/01/01 01:33:16.077268 0.187088 udp 10.0.2.15 54020 <-> 74.125.133.189 443 CON 0 0 14 4893 2476 7 flow=Normal-Google-Net-6 1970/01/01 01:33:38.104501 0.031940 udp 10.0.2.15 52564 <-> 1.1.1.1 53 CON 0 0 2 166 75 1 flow=Normal-UDP-DNS 1970/01/01 01:33:38.145238 46.308083 udp 10.0.2.15 52565 <-> 216.58.201.110 443 CON 0 0 42 16485 11567 24 flow=Normal-Google-Net-8 1970/01/01 01:34:06.048759 0.032080 udp 10.0.2.15 49736 <-> 1.1.1.1 53 CON 0 0 2 190 87 1 flow=Normal-UDP-DNS 1970/01/01 01:34:08.339402 2.673833 tcp 10.0.2.15 49968 -> 162.125.66.1 443 FSPA_FSPA 0 0 26 5726 3012 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:34:08.476576 0.042623 udp 10.0.2.15 55102 <-> 1.1.1.1 53 CON 0 0 2 208 78 1 flow=Normal-UDP-DNS 1970/01/01 01:34:08.520304 2.487501 tcp 10.0.2.15 49969 -> 162.125.66.2 443 FSPA_FSPA 0 0 40 14630 13076 19 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:34:09.060520 0.050998 udp 10.0.2.15 56968 <-> 1.1.1.1 53 CON 0 0 2 198 79 1 flow=Normal-UDP-DNS 1970/01/01 01:34:09.122802 1.022735 udp 10.0.2.15 56969 <-> 216.58.201.110 443 CON 0 0 17 6789 3826 9 flow=Normal-Google-Net-8 1970/01/01 01:34:10.040696 0.003512 udp 10.0.2.15 59483 <-> 1.1.1.1 53 CON 0 0 2 187 75 1 flow=Normal-UDP-DNS 1970/01/01 01:34:11.039532 15.073317 udp 10.0.2.15 59485 <-> 74.125.133.189 443 CON 0 0 15 5002 2618 9 flow=Normal-Google-Net-6 1970/01/01 01:34:46.045486 5.034560 tcp 10.0.2.15 49970 -> 104.244.42.193 443 FSRPA_FSRPA 0 0 26 4555 2408 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:35:04.048137 0.192291 udp 10.0.2.15 59489 <-> 74.125.133.189 443 CON 0 0 14 4859 2477 7 flow=Normal-Google-Net-6 1970/01/01 01:35:04.467395 3.010521 udp 10.0.2.15 59490 -> 239.255.255.250 1900 INT 0 4 864 864 4 flow=Normal-UDP-Attempt 1970/01/01 01:35:59.042688 0.193518 udp 10.0.2.15 59493 <-> 74.125.133.189 443 CON 0 0 12 4921 2399 6 flow=Normal-Google-Net-6 1970/01/01 01:36:08.345845 0.030860 udp 10.0.2.15 53067 <-> 1.1.1.1 53 CON 0 0 2 196 75 1 flow=Normal-UDP-DNS 1970/01/01 01:36:08.377698 2.732001 tcp 10.0.2.15 49971 -> 162.125.66.1 443 FSPA_FSPA 0 0 26 5726 3012 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:36:08.492571 0.039496 udp 10.0.2.15 55862 <-> 1.1.1.1 53 CON 0 0 2 208 78 1 flow=Normal-UDP-DNS 1970/01/01 01:36:08.533131 2.577684 tcp 10.0.2.15 49972 -> 162.125.66.2 443 FSPA_FSPA 0 0 40 14631 13076 19 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:36:53.035487 0.030518 udp 10.0.2.15 61285 <-> 1.1.1.1 53 CON 0 0 2 206 77 1 flow=Normal-UDP-DNS 1970/01/01 01:36:53.072992 15.077418 udp 10.0.2.15 61286 <-> 66.102.1.189 443 CON 0 0 15 4993 2467 7 flow=Normal-UDP-Established 1970/01/01 01:37:04.471879 3.013106 udp 10.0.2.15 61287 -> 239.255.255.250 1900 INT 0 4 864 864 4 flow=Normal-UDP-Attempt 1970/01/01 01:37:30.081799 0.049862 udp 10.0.2.15 57384 <-> 1.1.1.1 53 CON 0 0 2 193 75 1 flow=Normal-UDP-DNS 1970/01/01 01:37:30.132716 1.081746 tcp 10.0.2.15 49973 -> 216.58.201.101 443 FSPA_FSPA 0 0 32 7666 4174 14 flow=Normal-Google-Net-8 1970/01/01 01:37:45.058061 15.076391 udp 10.0.2.15 57387 <-> 66.102.1.189 443 CON 0 0 15 4925 2471 7 flow=Normal-UDP-Established 1970/01/01 01:38:06.053881 5.203815 tcp 10.0.2.15 49974 -> 104.244.42.193 443 FSRPA_SPA 0 0 22 4339 2300 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:38:43.050367 15.116311 udp 10.0.2.15 57393 <-> 66.102.1.189 443 CON 0 0 19 7887 4101 11 flow=Normal-UDP-Established 1970/01/01 01:39:04.477126 3.014185 udp 10.0.2.15 57395 -> 239.255.255.250 1900 INT 0 4 864 864 4 flow=Normal-UDP-Attempt 1970/01/01 01:39:11.059018 0.000000 udp 10.0.2.15 53261 -> 1.1.1.1 53 INT 0 1 75 75 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:39:12.063308 0.042426 udp 10.0.2.15 53261 <-> 1.0.0.1 53 CON 0 0 2 187 75 1 flow=Normal-UDP-DNS 1970/01/01 01:39:12.117248 0.529875 udp 10.0.2.15 53262 <-> 216.58.201.110 443 CON 0 0 16 8128 5733 10 flow=Normal-Google-Net-8 1970/01/01 01:39:28.092208 0.476639 udp 10.0.2.15 53265 <-> 216.58.201.110 443 CON 0 0 17 8704 4869 10 flow=Normal-Google-Net-8 1970/01/01 01:39:35.054868 0.359211 udp 10.0.2.15 53267 <-> 66.102.1.189 443 CON 0 0 14 6183 3877 8 flow=Normal-UDP-Established 1970/01/01 01:40:30.043314 15.121541 udp 10.0.2.15 53271 <-> 66.102.1.189 443 CON 0 0 15 5001 2610 9 flow=Normal-UDP-Established 1970/01/01 01:40:49.044939 0.082840 udp 10.0.2.15 57595 <-> 1.0.0.1 53 CON 0 0 2 166 75 1 flow=Normal-UDP-DNS 1970/01/01 01:40:49.136137 11.482819 udp 10.0.2.15 57596 <-> 216.58.201.110 443 CON 0 0 25 10447 7165 15 flow=Normal-Google-Net-8 1970/01/01 01:41:00.072002 0.056752 udp 10.0.2.15 57659 <-> 1.0.0.1 53 CON 0 0 2 198 79 1 flow=Normal-UDP-DNS 1970/01/01 01:41:00.137339 0.400601 udp 10.0.2.15 57660 <-> 216.58.201.110 443 CON 0 0 14 6288 4111 9 flow=Normal-Google-Net-8 1970/01/01 01:41:04.483380 968.446594 udp 10.0.2.15 57661 -> 239.255.255.250 1900 INT 0 8 1728 1728 8 flow=Normal-UDP-Attempt 1970/01/01 01:41:08.335967 0.083390 udp 10.0.2.15 51927 <-> 1.0.0.1 53 CON 0 0 2 196 75 1 flow=Normal-UDP-DNS 1970/01/01 01:41:08.420362 3.030596 tcp 10.0.2.15 49977 -> 162.125.66.1 443 FSPA_FSPA 0 0 27 5780 3012 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:41:08.976325 0.084997 udp 10.0.2.15 63438 <-> 1.0.0.1 53 CON 0 0 2 208 78 1 flow=Normal-UDP-DNS 1970/01/01 01:41:09.062322 2.673093 tcp 10.0.2.15 49978 -> 162.125.66.2 443 FSPA_FSPA 0 0 40 14630 13076 19 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:41:26.040882 0.073834 udp 10.0.2.15 59187 <-> 1.0.0.1 53 CON 0 0 2 158 71 1 flow=Normal-UDP-DNS 1970/01/01 01:41:26.115704 5.359026 tcp 10.0.2.15 49979 -> 104.244.42.193 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:41:26.298319 5.926545 tcp 10.0.2.15 49980 -> 104.244.42.193 443 FSRPA_FSRPA 0 0 25 4500 2354 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:41:27.040764 0.209685 udp 10.0.2.15 59188 <-> 66.102.1.189 443 CON 0 0 12 4932 2400 6 flow=Normal-UDP-Established 1970/01/01 01:42:18.036735 0.000000 udp 10.0.2.15 58416 -> 1.0.0.1 53 INT 0 1 77 77 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:42:19.036880 0.049798 udp 10.0.2.15 58416 <-> 1.1.1.1 53 CON 0 0 2 206 77 1 flow=Normal-UDP-DNS 1970/01/01 01:42:19.095501 0.365812 udp 10.0.2.15 58417 <-> 66.102.1.189 443 CON 0 0 14 6187 3877 8 flow=Normal-UDP-Established 1970/01/01 01:42:31.058925 0.052018 udp 10.0.2.15 60898 <-> 1.1.1.1 53 CON 0 0 2 193 75 1 flow=Normal-UDP-DNS 1970/01/01 01:42:31.112204 10.398258 tcp 10.0.2.15 49981 -> 216.58.201.101 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-Google-Net-8 1970/01/01 01:42:31.306636 10.203367 tcp 10.0.2.15 49982 -> 216.58.201.101 443 FSPA_FSPA 0 0 28 7726 4182 13 flow=Normal-Google-Net-8 1970/01/01 01:43:04.487649 3.016816 udp 10.0.2.15 60901 -> 239.255.255.250 1900 INT 0 4 864 864 4 flow=Normal-UDP-Attempt 1970/01/01 01:43:15.039112 0.220214 udp 10.0.2.15 60903 <-> 66.102.1.189 443 CON 0 0 14 4957 2477 7 flow=Normal-UDP-Established 1970/01/01 01:43:49.329747 0.068626 udp 10.0.2.15 58664 <-> 1.1.1.1 53 CON 0 0 2 193 75 1 flow=Normal-UDP-DNS 1970/01/01 01:43:49.400413 2.162435 tcp 10.0.2.15 49983 -> 216.58.201.101 443 FSPA_FSPA 0 0 32 5266 2852 14 flow=Normal-Google-Net-8 1970/01/01 01:43:49.895932 0.036424 udp 10.0.2.15 52262 <-> 1.1.1.1 53 CON 0 0 2 164 74 1 flow=Normal-UDP-DNS 1970/01/01 01:43:49.944070 0.248267 udp 10.0.2.15 52263 <-> 172.217.16.68 443 CON 0 0 13 5642 2021 7 flow=Normal-Google-Net-9 1970/01/01 01:44:01.046219 0.005986 udp 10.0.2.15 58663 <-> 1.1.1.1 53 CON 0 0 2 187 75 1 flow=Normal-UDP-DNS 1970/01/01 01:44:01.062042 39.897484 udp 10.0.2.15 58664 <-> 216.58.201.110 443 CON 0 0 21 5590 2852 12 flow=Normal-Google-Net-8 1970/01/01 01:44:01.402901 0.005039 udp 10.0.2.15 60354 <-> 1.1.1.1 53 CON 0 0 2 206 80 1 flow=Normal-UDP-DNS 1970/01/01 01:44:01.411317 63.584625 udp 10.0.2.15 60355 <-> 216.58.201.110 443 CON 0 0 62 21578 14991 35 flow=Normal-Google-Net-8 1970/01/01 01:44:01.422462 15.170270 udp 10.0.2.15 60356 <-> 216.58.201.99 443 CON 0 0 13 4290 2298 7 flow=Normal-Google-Net-8 1970/01/01 01:44:10.046311 15.121201 udp 10.0.2.15 60358 <-> 66.102.1.189 443 CON 0 0 15 5013 2619 9 flow=Normal-UDP-Established 1970/01/01 01:44:14.819992 0.065885 udp 10.0.2.15 60324 <-> 1.1.1.1 53 CON 0 0 2 200 73 1 flow=Normal-UDP-DNS 1970/01/01 01:44:14.888278 1103.628540 tcp 10.0.2.15 49984 -> 162.125.32.135 443 SRPA_FSRPA 0 0 39 17391 10831 19 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:44:17.044866 0.000000 udp 10.0.2.15 55128 -> 1.1.1.1 53 INT 0 1 79 79 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:44:18.046582 0.054546 udp 10.0.2.15 55128 <-> 1.0.0.1 53 CON 0 0 2 198 79 1 flow=Normal-UDP-DNS 1970/01/01 01:44:20.596139 0.105225 udp 10.0.2.15 58682 <-> 1.0.0.1 53 CON 0 0 2 213 82 1 flow=Normal-UDP-DNS 1970/01/01 01:44:20.702172 19.063053 tcp 10.0.2.15 49985 -> 162.125.66.3 443 FSPA_FSPA 0 0 182 122704 107878 88 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:44:22.021629 0.065300 udp 10.0.2.15 49321 <-> 1.0.0.1 53 CON 0 0 2 248 81 1 flow=Normal-UDP-DNS 1970/01/01 01:44:22.088861 17.626450 tcp 10.0.2.15 49986 -> 104.16.99.29 443 FSPA_FSPA 0 0 58 33140 2734 21 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:44:22.091417 17.621437 tcp 10.0.2.15 49987 -> 104.16.99.29 443 FSPA_FSPA 0 0 37 24476 1761 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:44:22.091951 17.622700 tcp 10.0.2.15 49988 -> 104.16.99.29 443 FSPA_FSPA 0 0 17 3211 1564 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:44:22.092588 11.168925 tcp 10.0.2.15 49989 -> 104.16.99.29 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:44:22.092960 17.276764 tcp 10.0.2.15 49990 -> 104.16.99.29 443 FSRPA_FSRPA 0 0 16 1707 1077 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:44:22.093501 17.619125 tcp 10.0.2.15 49991 -> 104.16.99.29 443 FSPA_FSPA 0 0 66 34877 2490 25 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:44:22.278222 17.535421 tcp 10.0.2.15 49992 -> 104.16.99.29 443 FSPA_FSPA 0 0 201 118454 6144 67 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:44:22.279067 17.436127 tcp 10.0.2.15 49993 -> 104.16.99.29 443 FSPA_FSPA 0 0 126 74722 4826 43 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:44:22.977418 16.737839 tcp 10.0.2.15 49994 -> 104.16.99.29 443 FSPA_FSPA 0 0 154 101900 6123 50 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:44:23.613824 16.398327 tcp 10.0.2.15 49995 -> 104.16.99.29 443 FSPA_FSPA 0 0 163 99830 4981 54 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:44:23.615387 16.099739 tcp 10.0.2.15 49996 -> 104.16.99.29 443 FSPA_FSPA 0 0 53 32569 3592 20 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:44:23.737460 15.987145 tcp 10.0.2.15 49997 -> 104.16.99.29 443 FSPA_FSPA 0 0 76 47484 3432 26 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:44:24.804905 0.000000 udp 10.0.2.15 62493 -> 1.0.0.1 53 INT 0 1 79 79 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:44:25.282156 6.376546 tcp 10.0.2.15 49998 -> 216.58.201.101 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-Google-Net-8 1970/01/01 01:44:25.539083 6.119541 tcp 10.0.2.15 49999 -> 216.58.201.101 443 FSPA_FSPA 0 0 89 20963 9102 38 flow=Normal-Google-Net-8 1970/01/01 01:44:25.810395 0.038806 udp 10.0.2.15 62493 <-> 1.1.1.1 53 CON 0 0 2 198 79 1 flow=Normal-UDP-DNS 1970/01/01 01:44:26.457672 0.054713 udp 10.0.2.15 61918 <-> 1.1.1.1 53 CON 0 0 2 213 85 1 flow=Normal-UDP-DNS 1970/01/01 01:44:26.529326 15.156785 udp 10.0.2.15 61919 <-> 216.58.201.97 443 CON 0 0 22 9003 4282 13 flow=Normal-Google-Net-8 1970/01/01 01:44:27.427041 15.912804 tcp 10.0.2.15 50000 -> 162.125.66.3 443 FSPA_FSPA 0 0 12 1457 969 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:44:27.428951 12.617978 tcp 10.0.2.15 50001 -> 162.125.66.3 443 FSPA_FSPA 0 0 12 1457 969 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:44:27.432801 12.048481 tcp 10.0.2.15 50002 -> 162.125.66.3 443 FSPA_FSPA 0 0 48 25823 22296 23 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:44:27.434968 15.904788 tcp 10.0.2.15 50003 -> 162.125.66.3 443 FSPA_FSPA 0 0 12 1457 969 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:44:27.472139 12.336014 tcp 10.0.2.15 50004 -> 162.125.66.3 443 FSPA_FSPA 0 0 57 34896 31735 28 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:44:39.582105 0.081493 udp 10.0.2.15 61540 <-> 1.1.1.1 53 CON 0 0 2 205 78 1 flow=Normal-UDP-DNS 1970/01/01 01:44:39.672630 243.521286 tcp 10.0.2.15 50005 -> 162.125.66.3 443 SRPA_FSPA 0 0 40 14268 4479 17 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:44:39.727233 243.466156 tcp 10.0.2.15 50006 -> 162.125.66.3 443 SRPA_FSPA 0 0 72 37585 4620 27 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:44:40.809720 0.067179 udp 10.0.2.15 57362 <-> 1.1.1.1 53 CON 0 0 2 189 76 1 flow=Normal-UDP-DNS 1970/01/01 01:44:40.879561 1.137279 tcp 10.0.2.15 50009 -> 162.125.18.133 443 SR_SA 0 0 3 178 120 2 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:44:40.903913 0.402028 tcp 10.0.2.15 50010 -> 162.125.18.133 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:44:41.130352 889.678284 tcp 10.0.2.15 50011 -> 162.125.18.133 443 FSRPA_FSRPA 0 0 71 28253 18313 26 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:44:43.118039 1455.426270 udp 10.0.2.15 17500 -> 255.255.255.255 17500 INT 0 48 8400 8400 48 flow=Normal-UDP-Attempt 1970/01/01 01:44:43.212499 1455.375610 udp 10.0.2.15 17500 -> 10.0.2.255 17500 INT 0 48 8400 8400 48 flow=Normal-UDP-Attempt 1970/01/01 01:44:43.346734 1413.481201 tcp 10.0.2.15 50018 -> 162.125.18.133 443 SPA_SPA 0 0 86 31128 18721 31 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:44:45.844842 0.035389 udp 10.0.2.15 64323 <-> 1.1.1.1 53 CON 0 0 2 230 84 1 flow=Normal-UDP-DNS 1970/01/01 01:44:45.886918 224.270813 tcp 10.0.2.15 50019 -> 162.125.66.4 443 SRPA_SPA 0 0 5185 3776058 78784 1409 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:44:45.967494 223.595993 tcp 10.0.2.15 50020 -> 162.125.66.4 443 SRPA_SPA 0 0 19756 18620487 238645 4342 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:44:45.986198 223.341660 tcp 10.0.2.15 50021 -> 162.125.66.4 443 SRPA_SPA 0 0 18342 16636398 230437 4190 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:44:46.234322 223.099472 tcp 10.0.2.15 50022 -> 162.125.66.4 443 SRPA_SPA 0 0 10522 8683333 142267 2600 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:44:50.517285 0.472393 udp 10.0.2.15 64325 <-> 216.58.201.99 443 CON 0 0 16 6114 4066 9 flow=Normal-Google-Net-8 1970/01/01 01:45:04.489390 3.007706 udp 10.0.2.15 64326 -> 239.255.255.250 1900 INT 0 4 864 864 4 flow=Normal-UDP-Attempt 1970/01/01 01:45:05.512563 0.059618 udp 10.0.2.15 59395 <-> 1.1.1.1 53 CON 0 0 2 197 76 1 flow=Normal-UDP-DNS 1970/01/01 01:45:05.574772 1403.338867 tcp 10.0.2.15 50023 -> 31.13.84.36 443 FSPA_SPA 0 0 427 176338 14458 165 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:45:07.854297 15.401473 udp 10.0.2.15 59398 <-> 66.102.1.189 443 CON 0 0 18 6455 4076 11 flow=Normal-UDP-Established 1970/01/01 01:45:24.047745 0.106941 udp 10.0.2.15 63350 <-> 1.1.1.1 53 CON 0 0 2 190 87 1 flow=Normal-UDP-DNS 1970/01/01 01:45:24.178959 496.368225 udp 10.0.2.15 63351 <-> 66.102.1.189 443 CON 0 0 164 22439 12123 82 flow=Normal-UDP-Established 1970/01/01 01:45:28.363685 0.000000 udp 10.0.2.15 52039 -> 1.1.1.1 53 INT 0 1 72 72 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:45:29.121124 0.000000 udp 10.0.2.15 58090 -> 1.1.1.1 53 INT 0 1 87 87 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:45:29.369756 0.059702 udp 10.0.2.15 52039 <-> 1.0.0.1 53 CON 0 0 2 160 72 1 flow=Normal-UDP-DNS 1970/01/01 01:45:30.125343 0.060972 udp 10.0.2.15 58090 <-> 1.0.0.1 53 CON 0 0 2 190 87 1 flow=Normal-UDP-DNS 1970/01/01 01:45:30.192821 0.981994 udp 10.0.2.15 58092 <-> 216.58.201.106 443 CON 0 0 21 7442 4743 12 flow=Normal-Google-Net-8 1970/01/01 01:45:30.417620 0.064952 udp 10.0.2.15 51163 <-> 1.0.0.1 53 CON 0 0 2 197 79 1 flow=Normal-UDP-DNS 1970/01/01 01:45:30.438054 0.068034 udp 10.0.2.15 58757 <-> 1.0.0.1 53 CON 0 0 2 196 90 1 flow=Normal-UDP-DNS 1970/01/01 01:45:30.484210 6.227728 tcp 10.0.2.15 50024 -> 31.13.84.4 443 FSPA_FSPA 0 0 28 6992 1663 13 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:45:30.506829 6.111598 tcp 10.0.2.15 50025 -> 90.182.114.17 443 FSRPA_SRPA 0 0 19 5004 1133 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:45:30.709565 6.279138 tcp 10.0.2.15 50026 -> 90.182.114.17 443 FSPA_FSPA 0 0 70 46600 2637 27 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:45:41.016523 0.458485 tcp 10.0.2.15 50027 -> 162.125.66.3 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:45:41.025753 0.240066 udp 10.0.2.15 50430 <-> 1.1.1.1 53 CON 0 0 2 316 80 1 flow=Normal-UDP-DNS 1970/01/01 01:45:41.257634 0.206689 udp 10.0.2.15 60953 <-> 1.1.1.1 53 CON 0 0 2 196 90 1 flow=Normal-UDP-DNS 1970/01/01 01:45:41.269431 233.144501 tcp 10.0.2.15 50028 -> 52.6.78.241 443 SPA_FSPA 0 0 530 259229 238442 265 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:45:41.467937 1.704681 tcp 10.0.2.15 50029 -> 162.125.248.4 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:46:03.326084 0.669586 udp 10.0.2.15 60955 <-> 216.58.201.99 443 CON 0 0 17 7225 3782 9 flow=Normal-Google-Net-8 1970/01/01 01:46:04.041521 2.194410 udp 10.0.2.15 60956 <-> 66.102.1.189 443 CON 0 0 20 7155 4848 14 flow=Normal-UDP-Established 1970/01/01 01:46:06.902947 0.064839 udp 10.0.2.15 61025 <-> 1.1.1.1 53 CON 0 0 2 170 85 1 flow=Normal-UDP-DNS 1970/01/01 01:46:29.048877 2.689472 tcp 10.0.2.15 50030 -> 216.58.201.101 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-Google-Net-8 1970/01/01 01:46:29.301533 12.416618 tcp 10.0.2.15 50031 -> 216.58.201.101 443 FSPA_FSPA 0 0 30 9665 3712 14 flow=Normal-Google-Net-8 1970/01/01 01:46:38.209794 0.051555 udp 10.0.2.15 63182 <-> 1.1.1.1 53 CON 0 0 2 197 76 1 flow=Normal-UDP-DNS 1970/01/01 01:46:38.210547 3.519818 tcp 10.0.2.15 50032 -> 31.13.84.36 443 FSA_FSA 0 0 8 460 294 5 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:46:38.262743 2.005965 tcp 10.0.2.15 50033 -> 31.13.84.36 443 FSRPA_SPA 0 0 15 4912 971 7 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:46:38.462374 13.579553 tcp 10.0.2.15 50034 -> 31.13.84.36 443 FSPA_FSPA 0 0 53 17932 6642 23 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:46:38.513279 3.307571 tcp 10.0.2.15 50035 -> 31.13.84.36 443 FSRPA_SPA 0 0 16 4893 1025 8 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:46:38.513756 1.433207 tcp 10.0.2.15 50036 -> 31.13.84.36 443 FSRPA_SPA 0 0 15 4839 971 7 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:46:38.514497 1.281144 tcp 10.0.2.15 50037 -> 31.13.84.36 443 FSRPA_FSRPA 0 0 18 5074 1025 8 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:46:51.042344 0.076680 udp 10.0.2.15 62683 <-> 1.1.1.1 53 CON 0 0 2 166 75 1 flow=Normal-UDP-DNS 1970/01/01 01:46:51.133952 49.049603 udp 10.0.2.15 62684 <-> 216.58.201.110 443 CON 0 0 28 12886 9732 17 flow=Normal-Google-Net-8 1970/01/01 01:47:00.045558 15.115238 udp 10.0.2.15 62686 <-> 66.102.1.189 443 CON 0 0 16 5012 2625 9 flow=Normal-UDP-Established 1970/01/01 01:47:04.494977 3.007733 udp 10.0.2.15 62688 -> 239.255.255.250 1900 INT 0 4 864 864 4 flow=Normal-UDP-Attempt 1970/01/01 01:47:55.042830 0.113410 udp 10.0.2.15 59195 <-> 1.1.1.1 53 CON 0 0 2 206 77 1 flow=Normal-UDP-DNS 1970/01/01 01:47:55.166193 15.323916 udp 10.0.2.15 59196 <-> 74.125.133.189 443 CON 0 0 15 6396 3848 8 flow=Normal-Google-Net-6 1970/01/01 01:48:17.568289 0.058030 udp 10.0.2.15 54178 <-> 1.1.1.1 53 CON 0 0 2 197 76 1 flow=Normal-UDP-DNS 1970/01/01 01:48:17.627167 4.415948 tcp 10.0.2.15 50038 -> 31.13.84.36 443 FSPA_FSPA 0 0 28 9246 2169 13 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:48:23.936834 0.078122 udp 10.0.2.15 63683 <-> 1.1.1.1 53 CON 0 0 2 196 75 1 flow=Normal-UDP-DNS 1970/01/01 01:48:24.038487 62.796452 tcp 10.0.2.15 50039 -> 162.125.66.1 443 FSPA_FSPA 0 0 34 13082 2124 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:48:24.039232 63.510303 tcp 10.0.2.15 50040 -> 162.125.66.1 443 FSPA_FSPA 0 0 33 12746 2124 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:48:29.330861 0.103524 udp 10.0.2.15 59436 <-> 1.1.1.1 53 CON 0 0 2 230 84 1 flow=Normal-UDP-DNS 1970/01/01 01:48:29.435309 0.503910 tcp 10.0.2.15 50041 -> 162.125.66.4 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:48:29.435611 1.381578 tcp 10.0.2.15 50042 -> 162.125.66.4 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:48:29.563997 0.566633 tcp 10.0.2.15 50043 -> 162.125.66.4 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:48:30.158360 0.227041 tcp 10.0.2.15 50044 -> 162.125.66.4 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:48:32.766778 0.029904 udp 10.0.2.15 56558 <-> 1.1.1.1 53 CON 0 0 2 215 87 1 flow=Normal-UDP-DNS 1970/01/01 01:48:32.770358 0.007042 udp 10.0.2.15 55891 <-> 1.1.1.1 53 CON 0 0 2 187 75 1 flow=Normal-UDP-DNS 1970/01/01 01:48:32.789749 0.031796 udp 10.0.2.15 55385 <-> 1.1.1.1 53 CON 0 0 2 198 79 1 flow=Normal-UDP-DNS 1970/01/01 01:48:32.806419 89.743019 udp 10.0.2.15 55386 <-> 216.58.201.110 443 CON 0 0 80 25509 15074 45 flow=Normal-Google-Net-8 1970/01/01 01:48:32.819590 0.032533 udp 10.0.2.15 51630 <-> 1.1.1.1 53 CON 0 0 2 215 85 1 flow=Normal-UDP-DNS 1970/01/01 01:48:32.839832 0.032505 udp 10.0.2.15 52538 <-> 1.1.1.1 53 CON 0 0 2 185 74 1 flow=Normal-UDP-DNS 1970/01/01 01:48:32.853452 0.403671 udp 10.0.2.15 51631 <-> 216.58.201.66 443 CON 0 0 8 3245 1708 5 flow=Normal-Google-Net-8 1970/01/01 01:48:32.854929 0.003008 udp 10.0.2.15 49396 <-> 1.1.1.1 53 CON 0 0 2 166 75 1 flow=Normal-UDP-DNS 1970/01/01 01:48:32.873486 0.324273 udp 10.0.2.15 49397 <-> 216.58.201.97 443 CON 0 0 8 4559 3022 5 flow=Normal-Google-Net-8 1970/01/01 01:48:32.885750 0.005977 udp 10.0.2.15 62503 <-> 1.1.1.1 53 CON 0 0 2 164 74 1 flow=Normal-UDP-DNS 1970/01/01 01:48:32.903754 0.279040 udp 10.0.2.15 62504 <-> 216.58.201.99 443 CON 0 0 8 4559 3022 5 flow=Normal-Google-Net-8 1970/01/01 01:48:32.904299 2.020229 udp 10.0.2.15 57468 <-> 1.1.1.1 53 CON 0 0 3 235 146 2 flow=Normal-UDP-DNS 1970/01/01 01:48:32.905527 0.000000 udp 10.0.2.15 63227 -> 1.1.1.1 53 INT 0 1 75 75 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:48:32.918631 0.559451 udp 10.0.2.15 63228 <-> 172.217.16.68 443 CON 0 0 8 4565 3025 5 flow=Normal-Google-Net-9 1970/01/01 01:48:33.418887 0.029786 udp 10.0.2.15 61219 <-> 1.1.1.1 53 CON 0 0 2 193 75 1 flow=Normal-UDP-DNS 1970/01/01 01:48:33.449809 8.368474 tcp 10.0.2.15 50045 -> 216.58.201.101 443 FSPA_FSPA 0 0 31 7222 3788 14 flow=Normal-Google-Net-8 1970/01/01 01:48:33.880807 7.936656 tcp 10.0.2.15 50046 -> 104.16.99.29 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:48:33.886914 0.086197 udp 10.0.2.15 59738 <-> 1.1.1.1 53 CON 0 0 2 158 71 1 flow=Normal-UDP-DNS 1970/01/01 01:48:33.909126 0.062689 udp 10.0.2.15 63227 <-> 1.0.0.1 53 CON 0 0 2 166 75 1 flow=Normal-UDP-DNS 1970/01/01 01:48:33.910006 0.000000 udp 10.0.2.15 57468 -> 1.0.0.1 53 INT 0 1 73 73 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:48:33.946234 0.044540 udp 10.0.2.15 51540 <-> 1.1.1.1 53 CON 0 0 2 212 80 1 flow=Normal-UDP-DNS 1970/01/01 01:48:33.962599 0.103359 udp 10.0.2.15 58315 <-> 1.1.1.1 53 CON 0 0 2 226 81 1 flow=Normal-UDP-DNS 1970/01/01 01:48:33.972460 0.000000 udp 10.0.2.15 58536 -> 1.0.0.1 53 INT 0 1 75 75 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:48:33.974219 7.867445 tcp 10.0.2.15 50047 -> 162.125.248.1 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:48:34.004502 0.290013 udp 10.0.2.15 58537 <-> 216.58.201.106 443 CON 0 0 8 4562 3025 5 flow=Normal-Google-Net-8 1970/01/01 01:48:34.066910 7.710039 tcp 10.0.2.15 50048 -> 13.32.121.113 443 FSRPA_SRPA 0 0 21 6094 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:48:34.067451 7.710087 tcp 10.0.2.15 50049 -> 13.32.121.113 443 FSRPA_SRPA 0 0 21 6094 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:48:34.125540 7.650048 tcp 10.0.2.15 50050 -> 104.16.99.29 443 FSRPA_SRPA 0 0 21 6112 1162 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:48:34.126040 7.650324 tcp 10.0.2.15 50051 -> 162.125.248.1 443 FSRPA_SRPA 0 0 21 5805 1162 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:48:34.126508 7.692666 tcp 10.0.2.15 50052 -> 13.32.121.113 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:48:34.934065 32.441490 udp 10.0.2.15 58538 <-> 172.217.16.67 443 CON 0 0 206 142290 11018 88 flow=Normal-Google-Net-9 1970/01/01 01:48:34.975408 0.004097 udp 10.0.2.15 58536 <-> 1.1.1.1 53 CON 0 0 2 196 75 1 flow=Normal-UDP-DNS 1970/01/01 01:48:34.980353 56.847576 tcp 10.0.2.15 50053 -> 162.125.66.1 443 FSRPA_SPA 0 0 4837 2928623 2224992 2068 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:48:35.146223 0.086473 udp 10.0.2.15 64515 <-> 1.1.1.1 53 CON 0 0 2 208 78 1 flow=Normal-UDP-DNS 1970/01/01 01:48:35.237587 6.601968 tcp 10.0.2.15 50054 -> 162.125.66.2 443 FSPA_FSPA 0 0 47 18173 13280 22 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:48:41.859111 0.000000 udp 10.0.2.15 63472 -> 1.1.1.1 53 INT 0 1 76 76 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:48:42.872144 0.045969 udp 10.0.2.15 63472 <-> 1.0.0.1 53 CON 0 0 2 189 76 1 flow=Normal-UDP-DNS 1970/01/01 01:48:42.919666 9.043765 tcp 10.0.2.15 50055 -> 162.125.18.133 443 FSPA_FSPA 0 0 25 6071 1639 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:48:43.229341 8.551528 tcp 10.0.2.15 50059 -> 104.16.99.29 443 FSRPA_SRPA 0 0 22 6166 1162 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:48:43.285899 0.078619 udp 10.0.2.15 55498 <-> 1.0.0.1 53 CON 0 0 2 205 78 1 flow=Normal-UDP-DNS 1970/01/01 01:48:43.367081 639.898682 tcp 10.0.2.15 50060 -> 162.125.66.3 443 SRPA_FSPA 0 0 63 28965 6254 25 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:48:43.535944 8.313871 tcp 10.0.2.15 50061 -> 104.16.99.29 443 FSPA_FSPA 0 0 960 386437 43153 357 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:48:43.536621 8.243582 tcp 10.0.2.15 50062 -> 104.16.99.29 443 FSRPA_SRPA 0 0 22 6166 1162 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:48:44.374564 7.990172 tcp 10.0.2.15 50063 -> 162.125.18.133 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:48:44.625959 7.772534 tcp 10.0.2.15 50064 -> 162.125.18.133 443 FSPA_FSPA 0 0 32 6844 2542 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:48:51.305753 0.547885 tcp 10.0.2.15 50065 -> 162.125.248.1 443 FSRPA_SPA 0 0 17 5520 1054 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:48:51.306685 0.475470 tcp 10.0.2.15 50066 -> 13.32.121.113 443 FSRPA_SRPA 0 0 21 6094 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:48:52.037554 0.185082 udp 10.0.2.15 55507 <-> 74.125.133.189 443 CON 0 0 14 5065 2480 7 flow=Normal-Google-Net-6 1970/01/01 01:48:54.549680 7.379606 tcp 10.0.2.15 50067 -> 162.125.18.133 443 FSPA_FSPA 0 0 19 2572 1489 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:48:56.093516 35.952305 tcp 10.0.2.15 50071 -> 162.125.18.133 443 FSPA_FSPA 0 0 58 7617 4952 28 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:49:00.730672 1.092692 tcp 10.0.2.15 50072 -> 104.16.99.29 443 FSPA_FSPA 0 0 22 3158 1579 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:49:01.937578 9.933827 tcp 10.0.2.15 50073 -> 104.16.99.29 443 FSPA_FSPA 0 0 126 59353 4927 47 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:49:04.504303 3.012227 udp 10.0.2.15 55518 -> 239.255.255.250 1900 INT 0 4 864 864 4 flow=Normal-UDP-Attempt 1970/01/01 01:49:06.264667 0.031480 udp 10.0.2.15 59859 <-> 1.0.0.1 53 CON 0 0 2 233 80 1 flow=Normal-UDP-DNS 1970/01/01 01:49:06.278024 0.048044 udp 10.0.2.15 57786 <-> 1.0.0.1 53 CON 0 0 2 233 80 1 flow=Normal-UDP-DNS 1970/01/01 01:49:06.290481 0.031501 udp 10.0.2.15 59541 <-> 1.0.0.1 53 CON 0 0 2 233 80 1 flow=Normal-UDP-DNS 1970/01/01 01:49:06.291135 0.033083 udp 10.0.2.15 49993 <-> 1.0.0.1 53 CON 0 0 2 233 80 1 flow=Normal-UDP-DNS 1970/01/01 01:49:06.291610 0.053600 udp 10.0.2.15 55880 <-> 1.0.0.1 53 CON 0 0 2 233 80 1 flow=Normal-UDP-DNS 1970/01/01 01:49:06.296792 5.596164 tcp 10.0.2.15 50074 -> 162.125.66.5 443 FSPA_FSPA 0 0 336 218271 10189 101 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:49:06.339378 0.394739 tcp 10.0.2.15 50075 -> 162.125.66.5 443 FSRPA_FSRPA 0 0 20 5035 1108 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:49:06.339694 0.395863 tcp 10.0.2.15 50076 -> 162.125.66.5 443 FSRPA_FSRPA 0 0 20 5035 1108 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:49:06.340270 0.221172 tcp 10.0.2.15 50077 -> 162.125.66.5 443 FSRPA_SPA 0 0 17 4804 1000 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:49:06.342032 0.323428 tcp 10.0.2.15 50078 -> 162.125.66.5 443 FSRPA_FSRPA 0 0 20 5035 1108 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:49:06.346313 1.137588 tcp 10.0.2.15 50079 -> 162.125.66.5 443 FSRPA_FSRPA 0 0 19 4981 1054 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:49:12.150901 611.114502 tcp 10.0.2.15 50085 -> 162.125.66.3 443 SRPA_FSPA 0 0 22 5927 1459 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:49:12.168149 0.014211 udp 10.0.2.15 49733 <-> 1.0.0.1 53 CON 0 0 2 187 75 1 flow=Normal-UDP-DNS 1970/01/01 01:49:35.038019 0.003995 udp 10.0.2.15 53251 <-> 1.0.0.1 53 CON 0 0 2 205 84 1 flow=Normal-UDP-DNS 1970/01/01 01:49:35.422321 15.151366 udp 10.0.2.15 53252 <-> 172.217.16.67 443 CON 0 0 13 5255 3263 7 flow=Normal-Google-Net-9 1970/01/01 01:49:38.646025 0.003730 udp 10.0.2.15 55903 <-> 1.0.0.1 53 CON 0 0 2 198 79 1 flow=Normal-UDP-DNS 1970/01/01 01:49:38.881413 0.211052 udp 10.0.2.15 55904 <-> 216.58.201.110 443 CON 0 0 12 5114 2249 6 flow=Normal-Google-Net-8 1970/01/01 01:49:39.544207 0.312619 udp 10.0.2.15 55905 <-> 216.58.201.99 443 CON 0 0 14 8402 3705 9 flow=Normal-Google-Net-8 1970/01/01 01:49:39.553355 0.456848 udp 10.0.2.15 55906 <-> 216.58.201.97 443 CON 0 0 19 12232 3889 10 flow=Normal-Google-Net-8 1970/01/01 01:49:43.916903 0.156264 tcp 10.0.2.15 50086 -> 162.125.66.3 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:49:43.998256 0.144805 tcp 10.0.2.15 50087 -> 162.125.248.4 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:49:47.046874 15.078004 udp 10.0.2.15 55909 <-> 74.125.133.189 443 CON 0 0 15 4967 2635 9 flow=Normal-Google-Net-6 1970/01/01 01:50:40.269137 7.066279 tcp 10.0.2.15 50088 -> 216.58.201.101 443 FSPA_FSPA 0 0 29 7297 3831 13 flow=Normal-Google-Net-8 1970/01/01 01:50:41.429407 0.220977 udp 10.0.2.15 55913 <-> 74.125.133.189 443 CON 0 0 13 4914 2403 6 flow=Normal-Google-Net-6 1970/01/01 01:51:02.428712 0.065322 udp 10.0.2.15 62016 <-> 1.0.0.1 53 CON 0 0 2 166 75 1 flow=Normal-UDP-DNS 1970/01/01 01:51:02.501915 15.128173 udp 10.0.2.15 62017 <-> 172.217.23.238 443 CON 0 0 18 10428 8179 12 flow=Normal-Google-Net-9 1970/01/01 01:51:09.897710 3.014435 udp 10.0.2.15 62018 -> 239.255.255.250 1900 INT 0 4 864 864 4 flow=Normal-UDP-Attempt 1970/01/01 01:51:38.430611 0.046165 udp 10.0.2.15 59981 <-> 1.0.0.1 53 CON 0 0 2 206 77 1 flow=Normal-UDP-DNS 1970/01/01 01:51:38.482790 0.188767 udp 10.0.2.15 59982 <-> 74.125.71.189 443 CON 0 0 13 4978 2403 6 flow=Normal-Google-Net-6 1970/01/01 01:51:38.654485 594.559570 udp 10.0.2.15 59983 <-> 74.125.71.189 443 CON 0 0 234 30659 16186 110 flow=Normal-Google-Net-6 1970/01/01 01:51:54.875930 0.005755 udp 10.0.2.15 59313 <-> 1.0.0.1 53 CON 0 0 2 214 79 1 flow=Normal-UDP-DNS 1970/01/01 01:51:54.893648 13.598361 udp 10.0.2.15 59314 <-> 216.58.201.110 443 CON 0 0 43 15632 8147 23 flow=Normal-Google-Net-8 1970/01/01 01:51:55.262122 0.068506 udp 10.0.2.15 51121 <-> 1.0.0.1 53 CON 0 0 2 187 75 1 flow=Normal-UDP-DNS 1970/01/01 01:51:55.340226 18.825726 udp 10.0.2.15 51122 <-> 172.217.23.238 443 CON 0 0 120 87675 7239 48 flow=Normal-Google-Net-9 1970/01/01 01:51:55.665022 0.424420 udp 10.0.2.15 51123 <-> 216.58.201.97 443 CON 0 0 20 11465 2589 10 flow=Normal-Google-Net-8 1970/01/01 01:51:56.245383 1.147429 tcp 10.0.2.15 50089 -> 216.58.201.101 443 FSPA_FSPA 0 0 32 9151 3778 14 flow=Normal-Google-Net-8 1970/01/01 01:51:58.827239 0.055043 udp 10.0.2.15 55025 <-> 1.0.0.1 53 CON 0 0 2 174 71 1 flow=Normal-UDP-DNS 1970/01/01 01:51:58.893410 8.535727 tcp 10.0.2.15 50090 -> 104.244.42.129 443 FSRPA_FSRPA 0 0 209 125267 5218 62 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:51:59.524755 0.060200 udp 10.0.2.15 64430 <-> 1.0.0.1 53 CON 0 0 2 300 73 1 flow=Normal-UDP-DNS 1970/01/01 01:51:59.571645 0.069546 udp 10.0.2.15 57481 <-> 1.0.0.1 53 CON 0 0 2 160 64 1 flow=Normal-UDP-DNS 1970/01/01 01:52:00.733396 0.090281 udp 10.0.2.15 52102 <-> 1.0.0.1 53 CON 0 0 2 201 73 1 flow=Normal-UDP-DNS 1970/01/01 01:52:00.810351 0.083204 udp 10.0.2.15 61761 <-> 1.0.0.1 53 CON 0 0 2 214 79 1 flow=Normal-UDP-DNS 1970/01/01 01:52:00.811125 0.000000 udp 10.0.2.15 56699 -> 1.0.0.1 53 INT 0 1 79 79 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:52:00.831931 0.036712 udp 10.0.2.15 52680 <-> 1.0.0.1 53 CON 0 0 2 166 75 1 flow=Normal-UDP-DNS 1970/01/01 01:52:00.832841 6.596129 tcp 10.0.2.15 50091 -> 104.244.46.103 443 FSRPA_FSRPA 0 0 75 31104 2574 28 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:00.883959 15.697935 udp 10.0.2.15 52681 <-> 172.217.16.67 443 CON 0 0 460 298104 25231 197 flow=Normal-Google-Net-9 1970/01/01 01:52:00.907898 0.169996 udp 10.0.2.15 52682 <-> 172.217.23.227 443 CON 0 0 10 6028 3099 6 flow=Normal-Google-Net-9 1970/01/01 01:52:00.909710 0.026260 udp 10.0.2.15 49913 <-> 1.0.0.1 53 CON 0 0 2 166 75 1 flow=Normal-UDP-DNS 1970/01/01 01:52:01.812469 0.033578 udp 10.0.2.15 56699 <-> 1.1.1.1 53 CON 0 0 2 214 79 1 flow=Normal-UDP-DNS 1970/01/01 01:52:07.245851 0.571926 udp 10.0.2.15 62623 <-> 1.1.1.1 53 CON 0 0 2 240 75 1 flow=Normal-UDP-DNS 1970/01/01 01:52:07.820904 9.983507 tcp 10.0.2.15 50092 -> 23.38.83.177 443 FSRPA_FSRPA 0 0 171 110290 4147 51 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:07.821498 0.141231 tcp 10.0.2.15 50093 -> 23.38.83.177 443 FSRPA_FSRPA 0 0 22 5849 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:08.300331 0.330878 udp 10.0.2.15 57512 <-> 1.1.1.1 53 CON 0 0 2 259 82 1 flow=Normal-UDP-DNS 1970/01/01 01:52:08.805677 0.062120 udp 10.0.2.15 59739 <-> 1.1.1.1 53 CON 0 0 2 215 87 1 flow=Normal-UDP-DNS 1970/01/01 01:52:08.885310 24.198456 udp 10.0.2.15 59740 <-> 216.58.201.66 443 CON 0 0 19 6062 2989 11 flow=Normal-Google-Net-8 1970/01/01 01:52:09.653637 0.222595 udp 10.0.2.15 49232 <-> 1.1.1.1 53 CON 0 0 2 258 80 1 flow=Normal-UDP-DNS 1970/01/01 01:52:09.877484 27.832939 tcp 10.0.2.15 50094 -> 23.38.93.5 443 FSRPA_FSRPA 0 0 2189 1357972 41906 668 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:09.909555 997.781128 tcp 10.0.2.15 50095 -> 23.38.93.5 443 FSA_SA 0 0 49 2684 1384 25 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:10.123121 0.183472 udp 10.0.2.15 60111 <-> 1.1.1.1 53 CON 0 0 2 258 80 1 flow=Normal-UDP-DNS 1970/01/01 01:52:10.588487 0.237381 udp 10.0.2.15 60112 <-> 172.217.16.68 443 CON 0 0 12 5084 2632 6 flow=Normal-Google-Net-9 1970/01/01 01:52:10.697605 0.196582 udp 10.0.2.15 63252 <-> 1.1.1.1 53 CON 0 0 2 258 80 1 flow=Normal-UDP-DNS 1970/01/01 01:52:10.731876 15.056716 udp 10.0.2.15 63253 <-> 216.58.201.66 443 CON 0 0 14 4734 2295 8 flow=Normal-Google-Net-8 1970/01/01 01:52:12.183273 0.066822 udp 10.0.2.15 63270 <-> 1.1.1.1 53 CON 0 0 2 258 80 1 flow=Normal-UDP-DNS 1970/01/01 01:52:13.166681 0.017727 udp 10.0.2.15 56741 <-> 1.1.1.1 53 CON 0 0 2 205 84 1 flow=Normal-UDP-DNS 1970/01/01 01:52:14.192024 0.162516 udp 10.0.2.15 56743 <-> 216.58.201.110 443 CON 0 0 12 6033 3544 7 flow=Normal-Google-Net-8 1970/01/01 01:52:16.525198 0.288448 udp 10.0.2.15 49597 <-> 1.1.1.1 53 CON 0 0 2 256 79 1 flow=Normal-UDP-DNS 1970/01/01 01:52:16.530069 0.224403 udp 10.0.2.15 60150 <-> 1.1.1.1 53 CON 0 0 2 258 80 1 flow=Normal-UDP-DNS 1970/01/01 01:52:16.530374 0.000000 udp 10.0.2.15 58571 -> 1.1.1.1 53 INT 0 1 79 79 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:52:16.530821 0.000000 udp 10.0.2.15 51255 -> 1.1.1.1 53 INT 0 1 77 77 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:52:16.758445 0.627746 tcp 10.0.2.15 50096 -> 104.103.95.219 443 FSRPA_SRPA 0 0 18 4736 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:16.766260 0.618933 tcp 10.0.2.15 50097 -> 104.103.95.219 443 FSRPA_SPA 0 0 16 4628 1087 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:16.766494 0.618402 tcp 10.0.2.15 50098 -> 104.103.95.219 443 FSRPA_SRPA 0 0 17 4683 1087 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:16.817400 0.565998 tcp 10.0.2.15 50099 -> 23.38.85.236 443 FSRPA_SRPA 0 0 20 6039 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:16.817865 0.896433 tcp 10.0.2.15 50100 -> 23.38.85.236 443 FSRPA_SPA 0 0 17 5877 1087 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:16.818253 0.565437 tcp 10.0.2.15 50101 -> 23.38.85.236 443 FSRPA_SRPA 0 0 20 6039 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:17.436306 0.228998 udp 10.0.2.15 61574 <-> 1.1.1.1 53 CON 0 0 2 207 75 1 flow=Normal-UDP-DNS 1970/01/01 01:52:17.532723 0.163307 udp 10.0.2.15 51255 <-> 1.0.0.1 53 CON 0 0 2 249 77 1 flow=Normal-UDP-DNS 1970/01/01 01:52:17.533661 0.174600 udp 10.0.2.15 58571 <-> 1.0.0.1 53 CON 0 0 2 253 79 1 flow=Normal-UDP-DNS 1970/01/01 01:52:17.666060 29.793482 tcp 10.0.2.15 50102 -> 151.101.14.2 443 FSRPA_SPA 0 0 659 373437 33460 222 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:17.703213 9.689147 tcp 10.0.2.15 50103 -> 23.38.83.177 443 FSRPA_SRPA 0 0 21 5740 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:17.703862 1000.122803 tcp 10.0.2.15 50104 -> 23.38.83.177 443 FSA_SA 0 0 49 2684 1384 25 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:17.704907 9.687677 tcp 10.0.2.15 50105 -> 23.38.83.177 443 FSRPA_SRPA 0 0 21 5740 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:17.709584 9.677457 tcp 10.0.2.15 50106 -> 23.38.83.177 443 FSRPA_SPA 0 0 19 5632 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:17.710495 9.678347 tcp 10.0.2.15 50107 -> 23.38.83.177 443 FSRPA_SRPA 0 0 20 5686 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:17.710921 9.677010 tcp 10.0.2.15 50108 -> 23.38.83.177 443 FSRPA_SRPA 0 0 20 5686 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:17.753364 999.969360 tcp 10.0.2.15 50109 -> 23.38.83.177 443 FSA_SA 0 0 49 2684 1384 25 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:17.755474 9.638154 tcp 10.0.2.15 50110 -> 23.38.83.177 443 FSRPA_SRPA 0 0 20 5686 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:17.923028 9.935979 tcp 10.0.2.15 50111 -> 23.38.83.177 443 FSRPA_FSRPA 0 0 314 200097 8261 96 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:17.927207 10.548631 tcp 10.0.2.15 50112 -> 104.103.95.219 443 FSRPA_FSRPA 0 0 101 71487 2579 29 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:17.931859 10.021488 tcp 10.0.2.15 50113 -> 104.103.95.219 443 FSRPA_FSRPA 0 0 187 152666 3712 50 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:17.991618 9.740817 tcp 10.0.2.15 50114 -> 23.38.83.177 443 FSRPA_SPA 0 0 12 1424 904 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:18.308232 0.113705 udp 10.0.2.15 61112 <-> 1.0.0.1 53 CON 0 0 2 190 87 1 flow=Normal-UDP-DNS 1970/01/01 01:52:18.309121 0.353435 udp 10.0.2.15 52061 <-> 1.0.0.1 53 CON 0 0 2 240 75 1 flow=Normal-UDP-DNS 1970/01/01 01:52:18.394048 9.077064 tcp 10.0.2.15 50115 -> 23.38.85.236 443 FSRPA_SPA 0 0 227 177926 5024 65 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:18.428925 29.937695 udp 10.0.2.15 52062 <-> 172.217.23.234 443 CON 0 0 19 5753 3254 10 flow=Normal-Google-Net-9 1970/01/01 01:52:20.614298 0.156400 udp 10.0.2.15 53809 <-> 1.0.0.1 53 CON 0 0 2 259 82 1 flow=Normal-UDP-DNS 1970/01/01 01:52:20.629944 0.000000 udp 10.0.2.15 58492 -> 1.0.0.1 53 INT 0 1 78 78 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:52:20.694733 0.636685 udp 10.0.2.15 52541 <-> 1.0.0.1 53 CON 0 0 2 248 76 1 flow=Normal-UDP-DNS 1970/01/01 01:52:21.332716 6.544973 tcp 10.0.2.15 50116 -> 104.103.98.13 443 FSRPA_FSRPA 0 0 119 72050 3450 37 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:21.631328 0.051337 udp 10.0.2.15 58492 <-> 1.1.1.1 53 CON 0 0 2 253 78 1 flow=Normal-UDP-DNS 1970/01/01 01:52:21.686473 6.482620 tcp 10.0.2.15 50117 -> 104.127.60.107 443 FSRPA_SPA 0 0 62 35422 2095 20 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:22.108115 0.000000 udp 10.0.2.15 60665 -> 1.1.1.1 53 INT 0 1 84 84 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:52:22.223309 0.000000 udp 10.0.2.15 64464 -> 1.1.1.1 53 INT 0 1 85 85 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:52:22.233889 0.000000 udp 10.0.2.15 50097 -> 1.1.1.1 53 INT 0 1 81 81 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:52:22.357389 0.038225 udp 10.0.2.15 51411 <-> 1.1.1.1 53 CON 0 0 2 218 83 1 flow=Normal-UDP-DNS 1970/01/01 01:52:22.367214 0.030036 udp 10.0.2.15 50216 <-> 1.1.1.1 53 CON 0 0 2 240 80 1 flow=Normal-UDP-DNS 1970/01/01 01:52:22.396338 5.909284 tcp 10.0.2.15 50118 -> 209.197.3.15 443 FSRPA_FSRPA 0 0 41 16300 1912 16 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:22.397925 5.569526 tcp 10.0.2.15 50119 -> 104.19.195.151 443 FSPA_FSPA 0 0 33 8939 1710 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:22.591768 4.881885 tcp 10.0.2.15 50120 -> 23.38.83.177 443 FSRPA_SPA 0 0 117 74769 3169 37 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:22.881524 4.857573 tcp 10.0.2.15 50121 -> 104.19.195.151 443 FSPA_FSPA 0 0 89 51742 2638 30 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:23.110050 0.032213 udp 10.0.2.15 60665 <-> 1.0.0.1 53 CON 0 0 2 268 84 1 flow=Normal-UDP-DNS 1970/01/01 01:52:23.143107 4.632172 tcp 10.0.2.15 50122 -> 104.103.89.123 443 FSRPA_SPA 0 0 33 11611 3115 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:23.226301 0.060804 udp 10.0.2.15 64464 <-> 1.0.0.1 53 CON 0 0 2 226 85 1 flow=Normal-UDP-DNS 1970/01/01 01:52:23.233800 0.053745 udp 10.0.2.15 50097 <-> 1.0.0.1 53 CON 0 0 2 262 81 1 flow=Normal-UDP-DNS 1970/01/01 01:52:23.288626 4.464054 tcp 10.0.2.15 50123 -> 216.58.201.66 443 FSPA_FSPA 0 0 36 12849 2044 16 flow=Normal-Google-Net-8 1970/01/01 01:52:23.293642 5.133737 tcp 10.0.2.15 50124 -> 54.225.246.255 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:23.366809 994.355835 tcp 10.0.2.15 50125 -> 104.103.89.123 443 FSA_SA 0 0 49 2684 1384 25 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:23.487434 4.094078 tcp 10.0.2.15 50126 -> 54.225.246.255 443 FSRPA_SPA 0 0 25 8864 1913 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:24.717934 0.052536 udp 10.0.2.15 57192 <-> 1.0.0.1 53 CON 0 0 2 252 83 1 flow=Normal-UDP-DNS 1970/01/01 01:52:24.718212 0.690519 udp 10.0.2.15 58977 <-> 1.0.0.1 53 CON 0 0 2 261 77 1 flow=Normal-UDP-DNS 1970/01/01 01:52:24.718515 0.085734 udp 10.0.2.15 61618 <-> 1.0.0.1 53 CON 0 0 2 260 82 1 flow=Normal-UDP-DNS 1970/01/01 01:52:24.781256 15.661294 udp 10.0.2.15 61619 <-> 74.125.71.155 443 CON 0 0 37 23799 3570 17 flow=Normal-Google-Net-6 1970/01/01 01:52:24.805230 5.824819 tcp 10.0.2.15 50127 -> 23.7.206.163 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:24.969683 2.768822 tcp 10.0.2.15 50128 -> 23.7.206.163 443 FSRPA_SPA 0 0 35 12915 1852 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:25.099128 0.068432 udp 10.0.2.15 58927 <-> 1.0.0.1 53 CON 0 0 2 285 79 1 flow=Normal-UDP-DNS 1970/01/01 01:52:25.166273 0.063176 udp 10.0.2.15 56578 <-> 1.0.0.1 53 CON 0 0 2 222 77 1 flow=Normal-UDP-DNS 1970/01/01 01:52:25.169568 3.348239 tcp 10.0.2.15 50129 -> 104.16.129.227 443 FSPA_FSPA 0 0 47 18799 2055 19 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:25.230941 13.025135 tcp 10.0.2.15 50130 -> 205.185.216.10 443 FSRPA_FSRPA 0 0 28 7297 1655 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:25.390722 0.067458 udp 10.0.2.15 52141 <-> 1.0.0.1 53 CON 0 0 2 379 74 1 flow=Normal-UDP-DNS 1970/01/01 01:52:25.409712 12.297776 tcp 10.0.2.15 50131 -> 13.32.121.38 443 FSPA_FSPA 0 0 91 53674 3105 30 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:25.449356 4.122703 udp 10.0.2.15 58839 <-> 1.0.0.1 53 CON 0 0 4 359 234 3 flow=Normal-UDP-DNS 1970/01/01 01:52:25.458957 3.104620 tcp 10.0.2.15 50132 -> 52.49.41.66 443 FSRPA_FSRPA 0 0 29 7402 1766 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:25.816065 0.057924 udp 10.0.2.15 52945 <-> 1.0.0.1 53 CON 0 0 2 341 79 1 flow=Normal-UDP-DNS 1970/01/01 01:52:25.875243 11.647989 tcp 10.0.2.15 50133 -> 23.23.168.232 443 FSRPA_FSRPA 0 0 32 10619 3668 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:25.895525 11.626367 tcp 10.0.2.15 50134 -> 23.23.168.232 443 FSRPA_FSRPA 0 0 31 9409 2957 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:26.000537 0.082598 udp 10.0.2.15 61823 <-> 1.0.0.1 53 CON 0 0 2 252 79 1 flow=Normal-UDP-DNS 1970/01/01 01:52:26.038756 0.180605 udp 10.0.2.15 64921 <-> 1.0.0.1 53 CON 0 0 2 242 89 1 flow=Normal-UDP-DNS 1970/01/01 01:52:26.039154 0.046543 udp 10.0.2.15 62208 <-> 1.0.0.1 53 CON 0 0 2 188 86 1 flow=Normal-UDP-DNS 1970/01/01 01:52:26.039609 0.050106 udp 10.0.2.15 64005 <-> 1.0.0.1 53 CON 0 0 2 273 83 1 flow=Normal-UDP-DNS 1970/01/01 01:52:26.064503 0.056901 udp 10.0.2.15 60034 <-> 1.0.0.1 53 CON 0 0 2 281 75 1 flow=Normal-UDP-DNS 1970/01/01 01:52:26.083622 0.007506 udp 10.0.2.15 64345 <-> 1.0.0.1 53 CON 0 0 2 208 80 1 flow=Normal-UDP-DNS 1970/01/01 01:52:26.084154 1.691053 tcp 10.0.2.15 50135 -> 92.123.15.139 443 FSRPA_SPA 0 0 26 10407 1593 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:26.086315 11.287180 tcp 10.0.2.15 50136 -> 138.108.96.100 443 FSPA_FSPA 0 0 28 7559 2540 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:26.093038 11.592805 tcp 10.0.2.15 50137 -> 13.32.121.192 443 FSPA_FSPA 0 0 124 68287 4189 42 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:26.095326 11.384806 tcp 10.0.2.15 50138 -> 31.13.84.4 443 FSPA_FSPA 0 0 30 9248 1617 13 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:52:26.123438 11.757999 tcp 10.0.2.15 50139 -> 23.4.248.232 443 FSRPA_FSRPA 0 0 116 65427 4322 39 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:26.144763 0.589545 udp 10.0.2.15 57415 <-> 1.0.0.1 53 CON 0 0 2 244 78 1 flow=Normal-UDP-DNS 1970/01/01 01:52:26.248067 31.202915 tcp 10.0.2.15 50140 -> 13.32.118.85 443 FSPA_FSPA 0 0 32 17892 2180 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:26.253591 2.044254 tcp 10.0.2.15 50141 -> 13.32.118.85 443 FSPA_FSPA 0 0 32 11440 1702 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:26.261192 2.044136 udp 10.0.2.15 50240 <-> 1.0.0.1 53 CON 0 0 3 324 152 2 flow=Normal-UDP-DNS 1970/01/01 01:52:26.273012 0.284317 udp 10.0.2.15 60856 <-> 1.0.0.1 53 CON 0 0 2 253 77 1 flow=Normal-UDP-DNS 1970/01/01 01:52:26.396907 0.104932 udp 10.0.2.15 62004 <-> 1.0.0.1 53 CON 0 0 2 200 68 1 flow=Normal-UDP-DNS 1970/01/01 01:52:26.441505 11.083914 tcp 10.0.2.15 50142 -> 23.23.168.232 443 FSRPA_FSRPA 0 0 35 11645 5088 16 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:26.452285 3.117638 udp 10.0.2.15 58839 <-> 1.1.1.1 53 CON 0 0 3 281 156 2 flow=Normal-UDP-DNS 1970/01/01 01:52:26.505251 122.401688 tcp 10.0.2.15 50143 -> 13.32.118.177 80 FSPA_FSPA 0 0 14 2682 503 7 flow=Normal-TCP-WEB-Established 1970/01/01 01:52:26.560061 10.969505 tcp 10.0.2.15 50144 -> 52.21.104.171 443 FSRPA_FSRPA 0 0 29 8391 2545 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:26.578819 0.085401 udp 10.0.2.15 54390 <-> 1.0.0.1 53 CON 0 0 2 216 80 1 flow=Normal-UDP-DNS 1970/01/01 01:52:26.645531 0.071634 udp 10.0.2.15 50534 <-> 1.0.0.1 53 CON 0 0 2 225 84 1 flow=Normal-UDP-DNS 1970/01/01 01:52:26.664872 1.057071 tcp 10.0.2.15 50145 -> 216.58.201.66 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-Google-Net-8 1970/01/01 01:52:26.710867 10.744651 tcp 10.0.2.15 50146 -> 209.197.3.15 443 FSRPA_SPA 0 0 100 89807 2482 25 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:26.719587 10.762226 tcp 10.0.2.15 50147 -> 151.101.13.181 443 FSRPA_FSRPA 0 0 133 70000 3369 43 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:26.732021 0.576927 udp 10.0.2.15 64001 <-> 1.0.0.1 53 CON 0 0 2 170 77 1 flow=Normal-UDP-DNS 1970/01/01 01:52:26.736483 10.786898 tcp 10.0.2.15 50148 -> 52.86.53.92 443 FSRPA_SPA 0 0 26 8245 2577 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:26.828598 10.880943 tcp 10.0.2.15 50149 -> 216.58.201.66 443 FSPA_FSPA 0 0 28 9169 2411 13 flow=Normal-Google-Net-8 1970/01/01 01:52:26.860320 1.136362 tcp 10.0.2.15 50150 -> 52.86.53.92 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:26.896185 10.586243 tcp 10.0.2.15 50151 -> 151.101.13.181 443 FSA_FSA 0 0 8 460 294 5 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:26.949308 10.570753 tcp 10.0.2.15 50152 -> 23.23.168.232 443 FSRPA_SPA 0 0 26 8844 2557 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:26.996092 0.137213 udp 10.0.2.15 49320 <-> 1.0.0.1 53 CON 0 0 2 381 75 1 flow=Normal-UDP-DNS 1970/01/01 01:52:27.134359 10.334421 tcp 10.0.2.15 50153 -> 52.16.195.213 443 FSRPA_SPA 0 0 30 11510 2683 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:27.263581 0.000000 udp 10.0.2.15 50240 -> 1.1.1.1 53 INT 0 1 76 76 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:52:27.310084 10.420573 tcp 10.0.2.15 50154 -> 35.186.249.84 443 FSPA_FSPA 0 0 50 30072 2015 18 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:27.400613 10.124927 tcp 10.0.2.15 50155 -> 23.23.168.232 443 FSRPA_SPA 0 0 23 6984 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:27.452146 10.072857 tcp 10.0.2.15 50156 -> 23.23.168.232 443 FSRPA_FSRPA 0 0 33 11739 4792 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:27.571056 0.035199 udp 10.0.2.15 60904 <-> 1.0.0.1 53 CON 0 0 2 197 76 1 flow=Normal-UDP-DNS 1970/01/01 01:52:27.607330 9.872594 tcp 10.0.2.15 50157 -> 31.13.84.36 443 FSPA_FSPA 0 0 29 4782 2243 13 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:52:27.820328 9.647626 tcp 10.0.2.15 50158 -> 31.13.84.36 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:52:27.878165 0.000000 udp 10.0.2.15 51521 -> 1.0.0.1 53 INT 0 1 74 74 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:52:27.937571 0.041901 udp 10.0.2.15 57834 <-> 1.0.0.1 53 CON 0 0 2 203 78 1 flow=Normal-UDP-DNS 1970/01/01 01:52:27.985222 175.626038 tcp 10.0.2.15 50159 -> 192.35.177.64 80 SRPA_SPA 0 0 8 1805 421 5 flow=Normal-TCP-WEB-Established 1970/01/01 01:52:28.306337 9.430468 tcp 10.0.2.15 50160 -> 104.103.98.13 443 FSRPA_SPA 0 0 28 8278 2179 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:28.307140 9.454144 tcp 10.0.2.15 50161 -> 104.103.98.13 443 FSRPA_SPA 0 0 24 7742 1631 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:28.629705 0.104344 udp 10.0.2.15 51128 <-> 1.0.0.1 53 CON 0 0 2 176 80 1 flow=Normal-UDP-DNS 1970/01/01 01:52:28.694386 0.064283 udp 10.0.2.15 49594 <-> 1.0.0.1 53 CON 0 0 2 193 78 1 flow=Normal-UDP-DNS 1970/01/01 01:52:28.735162 9.029066 tcp 10.0.2.15 50162 -> 66.117.29.227 443 FSRPA_FSRPA 0 0 32 8757 3237 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:28.760672 44.313595 udp 10.0.2.15 49596 <-> 172.217.23.230 443 CON 0 0 41 13749 7466 23 flow=Normal-Google-Net-9 1970/01/01 01:52:28.798236 0.000000 udp 10.0.2.15 59467 -> 1.0.0.1 53 INT 0 1 90 90 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:52:28.812122 8.576425 tcp 10.0.2.15 50163 -> 172.217.23.230 443 FSRPA_SRPA 0 0 18 5334 1273 9 flow=Normal-Google-Net-9 1970/01/01 01:52:28.879071 8.513329 tcp 10.0.2.15 50164 -> 66.117.29.227 443 FSRPA_SRPA 0 0 21 5105 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:28.882669 0.023426 udp 10.0.2.15 51521 <-> 1.1.1.1 53 CON 0 0 2 244 74 1 flow=Normal-UDP-DNS 1970/01/01 01:52:28.906997 8.620527 tcp 10.0.2.15 50165 -> 52.22.88.89 443 FSRPA_FSRPA 0 0 56 30171 22273 26 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:29.340783 0.064622 udp 10.0.2.15 64397 <-> 1.1.1.1 53 CON 0 0 2 208 96 1 flow=Normal-UDP-DNS 1970/01/01 01:52:29.341169 0.051201 udp 10.0.2.15 52647 <-> 1.1.1.1 53 CON 0 0 2 269 85 1 flow=Normal-UDP-DNS 1970/01/01 01:52:29.393662 8.577693 tcp 10.0.2.15 50166 -> 104.122.226.9 443 FSRPA_SPA 0 0 46 21592 1877 16 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:29.406551 8.149099 tcp 10.0.2.15 50167 -> 34.225.201.215 443 FSRPA_FSRPA 0 0 28 8286 1669 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:29.407425 0.006202 udp 10.0.2.15 50524 <-> 1.1.1.1 53 CON 0 0 2 178 73 1 flow=Normal-UDP-DNS 1970/01/01 01:52:29.459965 8.268746 tcp 10.0.2.15 50168 -> 35.186.235.23 443 FSPA_FSPA 0 0 92 72332 2961 33 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:29.497021 2.038168 udp 10.0.2.15 56099 <-> 1.1.1.1 53 CON 0 0 3 400 146 2 flow=Normal-UDP-DNS 1970/01/01 01:52:29.497381 2.039665 udp 10.0.2.15 61103 <-> 1.1.1.1 53 CON 0 0 3 359 162 2 flow=Normal-UDP-DNS 1970/01/01 01:52:29.570951 174.040482 tcp 10.0.2.15 50169 -> 192.35.177.64 80 SRPA_SPA 0 0 8 1805 421 5 flow=Normal-TCP-WEB-Established 1970/01/01 01:52:29.572059 0.000000 icmp 10.0.2.15 0x0303 -> 1.0.0.1 0xd7e5 URP 0 1 153 153 1 flow=Normal-ICMP 1970/01/01 01:52:29.798916 0.005548 udp 10.0.2.15 59467 <-> 1.1.1.1 53 CON 0 0 2 222 90 1 flow=Normal-UDP-DNS 1970/01/01 01:52:29.806762 7.887817 tcp 10.0.2.15 50170 -> 172.217.23.226 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-Google-Net-9 1970/01/01 01:52:30.045796 0.000000 udp 10.0.2.15 50557 -> 1.1.1.1 53 INT 0 1 85 85 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:52:30.053899 7.669279 tcp 10.0.2.15 50171 -> 172.217.23.226 443 FSPA_FSPA 0 0 86 71982 2973 29 flow=Normal-Google-Net-9 1970/01/01 01:52:30.155234 0.088751 udp 10.0.2.15 61632 <-> 1.1.1.1 53 CON 0 0 2 329 76 1 flow=Normal-UDP-DNS 1970/01/01 01:52:30.244697 7.599614 tcp 10.0.2.15 50172 -> 185.33.223.221 443 FSPA_FSPA 0 0 23 8981 3208 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:30.442765 0.294213 udp 10.0.2.15 50598 <-> 1.1.1.1 53 CON 0 0 2 262 81 1 flow=Normal-UDP-DNS 1970/01/01 01:52:30.498435 0.000000 udp 10.0.2.15 61103 -> 1.0.0.1 53 INT 0 1 81 81 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:52:30.499473 0.000000 udp 10.0.2.15 56099 -> 1.0.0.1 53 INT 0 1 73 73 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:52:30.510765 0.000000 udp 10.0.2.15 51553 -> 1.1.1.1 53 INT 0 1 76 76 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:52:30.738785 6.874225 tcp 10.0.2.15 50173 -> 52.10.155.145 443 FSRPA_FSRPA 0 0 28 9411 2979 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:30.918200 6.723326 tcp 10.0.2.15 50174 -> 52.10.155.145 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:31.123126 0.005405 udp 10.0.2.15 50557 <-> 1.0.0.1 53 CON 0 0 2 229 85 1 flow=Normal-UDP-DNS 1970/01/01 01:52:31.143147 6.531992 tcp 10.0.2.15 50175 -> 216.58.201.97 443 FSPA_FSPA 0 0 28 8153 1984 12 flow=Normal-Google-Net-8 1970/01/01 01:52:31.143403 0.130414 tcp 10.0.2.15 50176 -> 216.58.201.97 443 FSRPA_SRPA 0 0 18 5112 1219 8 flow=Normal-Google-Net-8 1970/01/01 01:52:31.530686 0.009639 udp 10.0.2.15 51553 <-> 1.0.0.1 53 CON 0 0 2 360 76 1 flow=Normal-UDP-DNS 1970/01/01 01:52:31.535941 6.009941 tcp 10.0.2.15 50177 -> 34.192.114.81 443 FSRPA_FSRPA 0 0 26 7201 2256 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:31.537795 6.008446 tcp 10.0.2.15 50178 -> 52.5.215.65 443 FSRPA_FSRPA 0 0 25 7102 2211 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:31.541613 5.847003 tcp 10.0.2.15 50179 -> 159.122.19.189 443 FSRPA_SRPA 0 0 18 4743 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:31.542041 6.145889 tcp 10.0.2.15 50180 -> 159.122.19.189 443 FSPA_FSPA 0 0 24 7928 2993 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:31.566179 0.035383 udp 10.0.2.15 55910 <-> 1.0.0.1 53 CON 0 0 2 222 77 1 flow=Normal-UDP-DNS 1970/01/01 01:52:31.608894 6.672680 tcp 10.0.2.15 50181 -> 205.185.216.10 443 FSRPA_FSRPA 0 0 123 86540 2917 35 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:31.662617 0.062368 udp 10.0.2.15 51437 <-> 1.0.0.1 53 CON 0 0 2 207 75 1 flow=Normal-UDP-DNS 1970/01/01 01:52:31.681407 6.109740 tcp 10.0.2.15 50182 -> 104.122.226.9 443 FSRPA_SPA 0 0 31 7309 1892 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:31.790212 5.874166 tcp 10.0.2.15 50183 -> 13.32.121.192 443 FSPA_FSPA 0 0 12 1388 904 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:31.900301 0.231662 udp 10.0.2.15 49786 <-> 1.0.0.1 53 CON 0 0 2 261 77 1 flow=Normal-UDP-DNS 1970/01/01 01:52:31.959351 0.067090 udp 10.0.2.15 57727 <-> 1.0.0.1 53 CON 0 0 2 214 87 1 flow=Normal-UDP-DNS 1970/01/01 01:52:32.013340 3.465548 udp 10.0.2.15 57728 <-> 172.217.23.226 443 CON 0 0 107 63230 15440 52 flow=Normal-Google-Net-9 1970/01/01 01:52:32.019045 16.889793 udp 10.0.2.15 57729 <-> 216.58.201.97 443 CON 0 0 54 41125 4927 24 flow=Normal-Google-Net-8 1970/01/01 01:52:32.027352 5.454997 tcp 10.0.2.15 50184 -> 138.108.96.100 443 FSPA_FSPA 0 0 25 6391 2023 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:32.138241 5.318398 tcp 10.0.2.15 50185 -> 13.32.121.94 443 FSPA_FSPA 0 0 68 36622 2747 23 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:32.138595 5.254444 tcp 10.0.2.15 50186 -> 13.32.121.94 443 FSRPA_SRPA 0 0 22 7721 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:32.145309 0.000000 udp 10.0.2.15 64114 -> 1.0.0.1 53 INT 0 1 75 75 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:52:32.150881 5.306930 tcp 10.0.2.15 50187 -> 13.32.121.94 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:32.467841 0.000000 udp 10.0.2.15 55648 -> 1.0.0.1 53 INT 0 1 78 78 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:52:32.553692 0.000000 udp 10.0.2.15 53080 -> 1.0.0.1 53 INT 0 1 89 89 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:52:32.918058 15.103463 udp 10.0.2.15 53082 <-> 74.125.71.189 443 CON 0 0 18 5724 2632 9 flow=Normal-Google-Net-6 1970/01/01 01:52:32.958311 6.053589 udp 10.0.2.15 53083 <-> 216.58.201.66 443 CON 0 0 26 10971 4777 15 flow=Normal-Google-Net-8 1970/01/01 01:52:32.958811 0.012060 udp 10.0.2.15 50325 <-> 1.0.0.1 53 CON 0 0 2 321 72 1 flow=Normal-UDP-DNS 1970/01/01 01:52:32.987225 4.722930 tcp 10.0.2.15 50188 -> 185.33.223.215 443 FSPA_FSPA 0 0 20 6259 1705 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:32.993057 0.038600 udp 10.0.2.15 60044 <-> 1.0.0.1 53 CON 0 0 2 338 76 1 flow=Normal-UDP-DNS 1970/01/01 01:52:33.034512 4.458740 tcp 10.0.2.15 50189 -> 54.72.99.227 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:33.097961 0.000000 udp 10.0.2.15 63152 -> 1.0.0.1 53 INT 0 1 77 77 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:52:33.150881 0.020385 udp 10.0.2.15 64114 <-> 1.1.1.1 53 CON 0 0 2 218 75 1 flow=Normal-UDP-DNS 1970/01/01 01:52:33.175695 4.572788 tcp 10.0.2.15 50190 -> 205.185.216.42 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:33.176128 5.246066 tcp 10.0.2.15 50191 -> 205.185.216.42 443 FSRPA_FSRPA 0 0 23 5074 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:33.248027 4.246120 tcp 10.0.2.15 50192 -> 54.72.99.227 443 FSPA_FSPA 0 0 35 8014 1974 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:33.410075 4.879092 tcp 10.0.2.15 50193 -> 205.185.216.42 443 FSRPA_FSRPA 0 0 27 7073 1729 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:33.470546 0.032600 udp 10.0.2.15 55648 <-> 1.1.1.1 53 CON 0 0 2 230 78 1 flow=Normal-UDP-DNS 1970/01/01 01:52:33.504684 4.203964 tcp 10.0.2.15 50194 -> 80.252.91.53 443 FSPA_FSPA 0 0 22 7702 1749 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:33.554347 0.047977 udp 10.0.2.15 53080 <-> 1.1.1.1 53 CON 0 0 2 234 89 1 flow=Normal-UDP-DNS 1970/01/01 01:52:33.603016 4.176852 tcp 10.0.2.15 50195 -> 216.58.201.66 443 FSPA_FSPA 0 0 52 33654 2319 20 flow=Normal-Google-Net-8 1970/01/01 01:52:33.740757 4.063350 tcp 10.0.2.15 50196 -> 80.252.91.53 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:33.795701 0.060646 udp 10.0.2.15 57682 <-> 1.1.1.1 53 CON 0 0 2 210 77 1 flow=Normal-UDP-DNS 1970/01/01 01:52:33.844557 0.019119 udp 10.0.2.15 61749 <-> 1.1.1.1 53 CON 0 0 2 213 78 1 flow=Normal-UDP-DNS 1970/01/01 01:52:33.857000 3.789022 tcp 10.0.2.15 50197 -> 151.101.14.49 443 FSRPA_FSRPA 0 0 37 10742 2026 16 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:34.099590 0.031581 udp 10.0.2.15 63152 <-> 1.1.1.1 53 CON 0 0 2 315 77 1 flow=Normal-UDP-DNS 1970/01/01 01:52:34.134029 3.494623 tcp 10.0.2.15 50198 -> 52.35.223.250 443 FSRPA_SPA 0 0 25 8000 1670 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:34.138199 0.000000 udp 10.0.2.15 59087 -> 1.1.1.1 53 INT 0 1 77 77 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:52:34.355139 3.278728 tcp 10.0.2.15 50199 -> 52.35.223.250 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:34.851356 0.033124 udp 10.0.2.15 55399 <-> 1.1.1.1 53 CON 0 0 2 261 82 1 flow=Normal-UDP-DNS 1970/01/01 01:52:34.852003 0.035960 udp 10.0.2.15 63656 <-> 1.1.1.1 53 CON 0 0 2 364 76 1 flow=Normal-UDP-DNS 1970/01/01 01:52:34.901527 2.799046 tcp 10.0.2.15 50200 -> 104.127.60.107 443 FSRPA_SPA 0 0 28 8900 2372 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:34.903484 2.637537 tcp 10.0.2.15 50201 -> 35.196.60.53 443 FSPA_FSPA 0 0 19 6697 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:34.918990 2.772516 tcp 10.0.2.15 50202 -> 104.127.60.107 443 FSRPA_SPA 0 0 28 8900 2372 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:34.921647 2.623249 tcp 10.0.2.15 50203 -> 35.196.60.53 443 FSPA_FSPA 0 0 28 10962 3011 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:35.070955 2.476899 tcp 10.0.2.15 50204 -> 35.196.60.53 443 FSPA_FSPA 0 0 12 1369 904 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:35.137992 0.017943 udp 10.0.2.15 59087 <-> 1.0.0.1 53 CON 0 0 2 248 77 1 flow=Normal-UDP-DNS 1970/01/01 01:52:35.158268 168.452774 tcp 10.0.2.15 50205 -> 104.127.49.228 80 SRPA_SPA 0 0 8 1964 415 5 flow=Normal-TCP-WEB-Established 1970/01/01 01:52:35.321987 0.052559 udp 10.0.2.15 49573 <-> 1.0.0.1 53 CON 0 0 2 242 73 1 flow=Normal-UDP-DNS 1970/01/01 01:52:35.374596 0.000000 udp 10.0.2.15 64296 -> 1.0.0.1 53 INT 0 1 76 76 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:52:35.375457 12.060109 tcp 10.0.2.15 50206 -> 23.38.87.106 443 FSRPA_SPA 0 0 140 95688 3336 43 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:35.386165 0.058407 udp 10.0.2.15 57949 <-> 1.0.0.1 53 CON 0 0 2 349 121 1 flow=Normal-UDP-DNS 1970/01/01 01:52:35.454037 2.000997 tcp 10.0.2.15 50207 -> 13.32.121.96 443 FSPA_FSPA 0 0 27 9102 1790 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:35.571005 3.561416 tcp 10.0.2.15 50208 -> 23.38.87.106 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:35.805799 1.648895 tcp 10.0.2.15 50209 -> 104.127.60.107 443 FSRPA_SPA 0 0 25 8241 2460 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:35.813861 1.640677 tcp 10.0.2.15 50210 -> 104.127.60.107 443 FSRPA_FSRPA 0 0 28 8412 2523 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:36.376596 0.055876 udp 10.0.2.15 64296 <-> 1.1.1.1 53 CON 0 0 2 235 76 1 flow=Normal-UDP-DNS 1970/01/01 01:52:36.433064 10.993363 tcp 10.0.2.15 50211 -> 23.38.91.117 443 FSRPA_FSRPA 0 0 50 20930 2923 19 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:37.373914 10.089364 tcp 10.0.2.15 50212 -> 35.186.249.84 443 FSRPA_SPA 0 0 32 7615 2530 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:37.407832 10.045334 tcp 10.0.2.15 50213 -> 151.101.14.49 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:37.461305 10.068657 tcp 10.0.2.15 50214 -> 23.23.168.232 443 FSRPA_FSRPA 0 0 19 3472 2308 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:37.659847 9.802924 tcp 10.0.2.15 50215 -> 151.101.14.49 443 FSRPA_FSRPA 0 0 27 3633 1946 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:37.924200 0.038696 udp 10.0.2.15 64178 <-> 1.1.1.1 53 CON 0 0 2 216 80 1 flow=Normal-UDP-DNS 1970/01/01 01:52:37.927833 0.004107 udp 10.0.2.15 61898 <-> 1.1.1.1 53 CON 0 0 2 223 79 1 flow=Normal-UDP-DNS 1970/01/01 01:52:37.932659 9.527334 tcp 10.0.2.15 50216 -> 198.47.127.27 443 FSPA_FSPA 0 0 32 12374 3375 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:38.005284 0.034955 udp 10.0.2.15 64344 <-> 1.1.1.1 53 CON 0 0 2 274 72 1 flow=Normal-UDP-DNS 1970/01/01 01:52:38.041171 9.392994 tcp 10.0.2.15 50217 -> 151.101.12.175 443 FSRPA_FSRPA 0 0 39 13941 2250 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:38.261400 0.044708 udp 10.0.2.15 56834 <-> 1.1.1.1 53 CON 0 0 2 326 75 1 flow=Normal-UDP-DNS 1970/01/01 01:52:38.307196 9.226198 tcp 10.0.2.15 50218 -> 34.194.75.158 443 FSRPA_SPA 0 0 23 6670 2726 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:38.477787 8.950800 tcp 10.0.2.15 50219 -> 23.38.91.117 443 FSRPA_FSRPA 0 0 15 1577 958 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:38.506390 0.038988 udp 10.0.2.15 56696 <-> 1.1.1.1 53 CON 0 0 2 233 81 1 flow=Normal-UDP-DNS 1970/01/01 01:52:38.546086 8.916873 tcp 10.0.2.15 50220 -> 198.47.127.32 443 FSPA_FSPA 0 0 28 12044 4172 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:38.628923 0.032001 udp 10.0.2.15 56329 <-> 1.1.1.1 53 CON 0 0 2 286 73 1 flow=Normal-UDP-DNS 1970/01/01 01:52:38.637559 0.029201 udp 10.0.2.15 59296 <-> 1.1.1.1 53 CON 0 0 2 174 79 1 flow=Normal-UDP-DNS 1970/01/01 01:52:38.662750 8.800150 tcp 10.0.2.15 50221 -> 37.157.2.238 443 FSPA_FSPA 0 0 40 9782 2634 17 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:38.663107 8.729126 tcp 10.0.2.15 50222 -> 37.157.2.238 443 FSRPA_SRPA 0 0 25 7001 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:38.667349 8.798960 tcp 10.0.2.15 50223 -> 52.17.32.174 443 FSRPA_SPA 0 0 19 4717 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:38.667702 8.797894 tcp 10.0.2.15 50224 -> 52.17.32.174 443 FSRPA_SPA 0 0 23 6103 1741 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:38.686013 0.033196 udp 10.0.2.15 49716 <-> 1.1.1.1 53 CON 0 0 2 152 76 1 flow=Normal-UDP-DNS 1970/01/01 01:52:38.686681 0.034508 udp 10.0.2.15 59667 <-> 1.1.1.1 53 CON 0 0 2 220 86 1 flow=Normal-UDP-DNS 1970/01/01 01:52:38.687014 0.051690 udp 10.0.2.15 59272 <-> 1.1.1.1 53 CON 0 0 2 234 72 1 flow=Normal-UDP-DNS 1970/01/01 01:52:38.687433 0.027211 udp 10.0.2.15 52849 <-> 1.1.1.1 53 CON 0 0 2 338 73 1 flow=Normal-UDP-DNS 1970/01/01 01:52:38.687879 0.086879 udp 10.0.2.15 64987 <-> 1.1.1.1 53 CON 0 0 2 243 76 1 flow=Normal-UDP-DNS 1970/01/01 01:52:38.716132 0.880229 tcp 10.0.2.15 50225 -> 213.155.156.164 443 FSPA_FSPA 0 0 22 5810 1723 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:38.716547 8.757760 tcp 10.0.2.15 50226 -> 213.155.156.164 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:38.726592 8.667575 tcp 10.0.2.15 50227 -> 178.62.242.42 443 FSRPA_FSRPA 0 0 27 7684 1303 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:38.726947 3.032258 tcp 10.0.2.15 50228 -> 178.62.242.42 443 FSRPA_FSRPA 0 0 29 8983 1962 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:38.739979 11.099974 tcp 10.0.2.15 50229 -> 193.0.160.129 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:38.740225 11.099455 tcp 10.0.2.15 50230 -> 193.0.160.129 443 FSPA_FSPA 0 0 17 4506 1303 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:38.740409 0.081124 udp 10.0.2.15 60146 <-> 1.1.1.1 53 CON 0 0 2 221 79 1 flow=Normal-UDP-DNS 1970/01/01 01:52:38.784861 8.688228 tcp 10.0.2.15 50231 -> 185.29.133.52 443 FSPA_FSPA 0 0 26 7724 2330 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:38.824755 8.642409 tcp 10.0.2.15 50232 -> 198.47.127.15 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:38.914161 11.076327 tcp 10.0.2.15 50233 -> 193.0.160.129 443 FSPA_FSPA 0 0 20 6038 1970 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:38.925457 8.540385 tcp 10.0.2.15 50234 -> 213.155.156.164 443 FSRPA_FSRPA 0 0 22 5188 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:38.989324 2.270689 tcp 10.0.2.15 50235 -> 198.47.127.15 443 FSRPA_FSRPA 0 0 28 8729 2158 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:39.072336 0.000000 udp 10.0.2.15 53523 -> 1.1.1.1 53 INT 0 1 79 79 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:52:39.159657 0.058211 udp 10.0.2.15 54806 <-> 1.1.1.1 53 CON 0 0 2 286 100 1 flow=Normal-UDP-DNS 1970/01/01 01:52:39.216988 0.058919 udp 10.0.2.15 60913 <-> 1.1.1.1 53 CON 0 0 2 223 80 1 flow=Normal-UDP-DNS 1970/01/01 01:52:39.218541 8.212053 tcp 10.0.2.15 50236 -> 23.38.87.106 443 FSRPA_SPA 0 0 24 7353 2661 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:39.219043 8.211252 tcp 10.0.2.15 50237 -> 23.38.87.106 443 FSRPA_FSRPA 0 0 23 6155 1900 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:39.279593 2.457951 tcp 10.0.2.15 50238 -> 198.47.127.15 443 FSRPA_FSRPA 0 0 28 8409 2182 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:39.279835 8.193159 tcp 10.0.2.15 50239 -> 198.47.127.15 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:39.285371 0.071285 udp 10.0.2.15 56757 <-> 1.1.1.1 53 CON 0 0 2 223 79 1 flow=Normal-UDP-DNS 1970/01/01 01:52:39.382105 11.569588 tcp 10.0.2.15 50240 -> 198.47.127.17 443 FSRPA_FSRPA 0 0 29 8340 2172 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:39.398807 8.033189 tcp 10.0.2.15 50241 -> 23.38.87.106 443 FSRPA_SPA 0 0 12 1440 929 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:39.434317 11.733187 tcp 10.0.2.15 50242 -> 198.47.127.15 443 FSRPA_FSRPA 0 0 28 8465 2238 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:39.468445 2.693594 tcp 10.0.2.15 50243 -> 198.47.127.15 443 FSRPA_FSRPA 0 0 28 8585 2142 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:40.073971 0.050100 udp 10.0.2.15 53523 <-> 1.0.0.1 53 CON 0 0 2 174 79 1 flow=Normal-UDP-DNS 1970/01/01 01:52:40.125459 7.269497 tcp 10.0.2.15 50244 -> 35.190.91.160 443 FSRPA_SPA 0 0 13 1731 1174 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:40.125709 7.315245 tcp 10.0.2.15 50245 -> 35.190.91.160 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:40.285780 0.067203 udp 10.0.2.15 60035 <-> 1.0.0.1 53 CON 0 0 2 192 88 1 flow=Normal-UDP-DNS 1970/01/01 01:52:40.304773 0.039742 udp 10.0.2.15 53842 <-> 1.0.0.1 53 CON 0 0 2 251 80 1 flow=Normal-UDP-DNS 1970/01/01 01:52:40.322587 7.118889 tcp 10.0.2.15 50246 -> 35.190.91.160 443 FSPA_FSPA 0 0 29 7601 2071 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:40.345241 7.083500 tcp 10.0.2.15 50247 -> 23.38.91.117 443 FSRPA_SPA 0 0 27 9625 4713 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:40.345535 7.046136 tcp 10.0.2.15 50248 -> 23.38.91.117 443 FSRPA_SRPA 0 0 20 5707 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:40.354599 1.012245 tcp 10.0.2.15 50249 -> 95.154.251.154 443 FSPA_FSPA 0 0 82 47205 3199 24 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:40.681759 0.059527 udp 10.0.2.15 53869 <-> 1.0.0.1 53 CON 0 0 2 225 80 1 flow=Normal-UDP-DNS 1970/01/01 01:52:40.742332 6.731617 tcp 10.0.2.15 50250 -> 198.47.127.17 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:40.932658 3.095229 tcp 10.0.2.15 50251 -> 198.47.127.17 443 FSRPA_FSRPA 0 0 30 8538 2316 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:41.451950 0.210435 tcp 10.0.2.15 50252 -> 95.154.251.154 443 FSPA_FSPA 0 0 15 3989 2403 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:41.452275 0.659120 tcp 10.0.2.15 50253 -> 95.154.251.154 443 FSPA_FSPA 0 0 17 5581 3859 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:44.437299 15.183758 udp 10.0.2.15 53872 <-> 216.58.201.110 443 CON 0 0 15 6286 3704 8 flow=Normal-Google-Net-8 1970/01/01 01:52:48.342982 0.035413 udp 10.0.2.15 50499 <-> 1.0.0.1 53 CON 0 0 2 318 95 1 flow=Normal-UDP-DNS 1970/01/01 01:52:48.379706 9.703299 tcp 10.0.2.15 50254 -> 52.71.118.167 443 FSRPA_FSRPA 0 0 27 8444 2201 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:48.439737 0.034786 udp 10.0.2.15 57904 <-> 1.0.0.1 53 CON 0 0 2 244 74 1 flow=Normal-UDP-DNS 1970/01/01 01:52:48.475945 9.256163 tcp 10.0.2.15 50255 -> 23.38.87.106 443 FSRPA_SPA 0 0 23 8500 4317 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:48.983255 8.577183 tcp 10.0.2.15 50256 -> 23.23.168.232 443 FSRPA_SPA 0 0 18 3674 2564 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:49.023414 9.231584 tcp 10.0.2.15 50257 -> 52.71.118.167 443 FSRPA_FSRPA 0 0 28 8412 2169 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:49.051092 8.663477 tcp 10.0.2.15 50258 -> 23.38.87.106 443 FSRPA_SPA 0 0 16 2804 1747 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:49.070073 18.379208 tcp 10.0.2.15 50259 -> 23.38.83.177 443 FSRPA_FSRPA 0 0 1260 902713 53449 368 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:51.082854 22.256775 tcp 10.0.2.15 50260 -> 23.38.93.5 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:51.101302 21.501469 tcp 10.0.2.15 50261 -> 23.38.85.236 443 FSA_FSA 0 0 8 460 294 5 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:51.333858 11.157718 tcp 10.0.2.15 50262 -> 23.38.93.5 443 FSRPA_FSRPA 0 0 996 772365 15747 263 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:51.351860 6.086187 tcp 10.0.2.15 50263 -> 23.38.85.236 443 FSRPA_SPA 0 0 255 169493 5245 77 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:53.996604 0.000000 udp 10.0.2.15 60162 -> 1.0.0.1 53 INT 0 1 72 72 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:52:54.997073 0.008106 udp 10.0.2.15 60162 <-> 1.1.1.1 53 CON 0 0 2 238 72 1 flow=Normal-UDP-DNS 1970/01/01 01:52:55.007209 2.444918 tcp 10.0.2.15 50264 -> 104.94.186.228 443 FSRPA_SPA 0 0 20 7073 1593 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:56.360653 1.089349 tcp 10.0.2.15 50265 -> 13.32.121.192 443 FSPA_FSPA 0 0 22 5007 2877 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:56.379657 1.074346 tcp 10.0.2.15 50266 -> 66.117.29.227 443 FSRPA_FSRPA 0 0 21 4885 3521 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:56.381530 6.124494 tcp 10.0.2.15 50267 -> 138.108.96.100 443 FSPA_FSPA 0 0 18 2834 1772 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:56.416558 6.064957 tcp 10.0.2.15 50268 -> 104.103.89.123 443 FSRPA_SPA 0 0 20 4080 2799 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:56.559103 0.959598 tcp 10.0.2.15 50269 -> 31.13.84.36 443 FSPA_FSPA 0 0 19 3331 2094 9 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:52:56.566075 6.022008 tcp 10.0.2.15 50270 -> 34.225.201.215 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:56.818179 5.765242 tcp 10.0.2.15 50271 -> 34.225.201.215 443 FSRPA_FSRPA 0 0 19 2907 1558 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:56.825597 5.661821 tcp 10.0.2.15 50272 -> 104.16.129.227 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:56.911538 0.542780 tcp 10.0.2.15 50273 -> 185.33.223.221 443 FSPA_FSPA 0 0 12 1388 904 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:56.912118 5.590609 tcp 10.0.2.15 50274 -> 185.33.223.221 443 FSPA_FSPA 0 0 12 1388 904 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:56.912514 5.584149 tcp 10.0.2.15 50275 -> 185.33.223.221 443 FSPA_FSPA 0 0 20 6988 2278 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:56.913521 2.726000 tcp 10.0.2.15 50276 -> 34.192.114.81 443 FSRPA_FSRPA 0 0 15 1570 958 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:56.914057 5.670893 tcp 10.0.2.15 50277 -> 34.192.114.81 443 FSRPA_FSRPA 0 0 19 3691 2286 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:56.914716 5.670731 tcp 10.0.2.15 50278 -> 34.192.114.81 443 FSRPA_FSRPA 0 0 15 1570 958 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:56.915323 5.571778 tcp 10.0.2.15 50279 -> 23.4.248.232 443 FSRPA_FSRPA 0 0 24 3737 2181 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:56.916059 5.671171 tcp 10.0.2.15 50280 -> 52.5.215.65 443 FSRPA_FSRPA 0 0 19 3646 2241 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:56.916881 5.669496 tcp 10.0.2.15 50281 -> 52.5.215.65 443 FSRPA_FSRPA 0 0 15 1570 958 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:56.917245 5.669951 tcp 10.0.2.15 50282 -> 52.5.215.65 443 FSRPA_FSRPA 0 0 15 1570 958 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:56.965277 5.561551 tcp 10.0.2.15 50283 -> 104.122.226.9 443 FSRPA_SPA 0 0 21 2579 1564 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:57.078644 5.408919 tcp 10.0.2.15 50284 -> 104.16.129.227 443 FSPA_FSPA 0 0 34 12331 1902 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:57.168872 5.340344 tcp 10.0.2.15 50285 -> 185.33.223.221 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:57.297254 5.169848 tcp 10.0.2.15 50286 -> 13.32.121.96 443 FSPA_FSPA 0 0 12 1450 966 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:57.297634 5.169861 tcp 10.0.2.15 50287 -> 13.32.121.96 443 FSPA_FSPA 0 0 12 1450 966 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:57.298131 5.187071 tcp 10.0.2.15 50288 -> 13.32.121.96 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:57.324380 5.177641 tcp 10.0.2.15 50289 -> 138.108.96.100 443 FSPA_FSPA 0 0 25 6470 2102 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:57.505569 5.007211 tcp 10.0.2.15 50290 -> 80.252.91.53 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:57.551300 4.844217 tcp 10.0.2.15 50291 -> 13.32.121.96 443 FSRPA_SRPA 0 0 24 7735 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:57.585885 5.000039 tcp 10.0.2.15 50292 -> 52.71.118.167 443 FSRPA_FSRPA 0 0 28 8992 2749 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:57.756720 4.736452 tcp 10.0.2.15 50293 -> 80.252.91.53 443 FSPA_FSPA 0 0 22 7943 1991 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:57.761369 4.732902 tcp 10.0.2.15 50294 -> 31.13.84.36 443 FSPA_FSPA 0 0 28 7406 2096 13 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:52:57.965309 4.606815 tcp 10.0.2.15 50295 -> 23.23.168.232 443 FSRPA_FSRPA 0 0 31 10288 3785 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:58.037077 4.555354 tcp 10.0.2.15 50296 -> 23.23.168.232 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:52:58.216343 4.353767 tcp 10.0.2.15 50297 -> 23.23.168.232 443 FSRPA_SPA 0 0 27 9541 3196 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:00.703238 0.031484 udp 10.0.2.15 56475 <-> 1.1.1.1 53 CON 0 0 2 202 75 1 flow=Normal-UDP-DNS 1970/01/01 01:53:00.711663 1.773181 tcp 10.0.2.15 50298 -> 13.32.121.38 443 FSPA_FSPA 0 0 76 40903 2883 26 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:00.735884 1.756381 tcp 10.0.2.15 50299 -> 205.185.208.52 443 FSRPA_FSRPA 0 0 89 44802 2592 28 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:01.051650 0.063542 udp 10.0.2.15 49557 <-> 1.1.1.1 53 CON 0 0 2 349 121 1 flow=Normal-UDP-DNS 1970/01/01 01:53:01.053879 0.029919 udp 10.0.2.15 57135 <-> 1.1.1.1 53 CON 0 0 2 162 73 1 flow=Normal-UDP-DNS 1970/01/01 01:53:01.058107 1.439843 tcp 10.0.2.15 50300 -> 205.185.216.42 443 FSRPA_FSRPA 0 0 20 4912 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:01.058638 1.444917 tcp 10.0.2.15 50301 -> 205.185.216.42 443 FSRPA_FSRPA 0 0 23 5074 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:01.100416 15.161560 udp 10.0.2.15 57136 <-> 172.217.16.67 443 CON 0 0 18 9551 7428 10 flow=Normal-Google-Net-9 1970/01/01 01:53:01.116474 1.359379 tcp 10.0.2.15 50302 -> 13.32.121.43 443 FSPA_FSPA 0 0 26 9048 1736 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:01.258357 1.314216 tcp 10.0.2.15 50303 -> 52.22.88.89 443 FSRPA_SPA 0 0 23 6817 1778 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:01.811986 5.649302 tcp 10.0.2.15 50304 -> 151.101.14.2 443 FSRPA_FSRPA 0 0 294 196691 12761 88 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:02.533962 0.209190 udp 10.0.2.15 63898 <-> 1.1.1.1 53 CON 0 0 2 232 74 1 flow=Normal-UDP-DNS 1970/01/01 01:53:02.744789 4.696953 tcp 10.0.2.15 50305 -> 104.127.52.203 443 FSRPA_FSRPA 0 0 119 73578 3927 35 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:02.794069 0.069659 udp 10.0.2.15 52135 <-> 1.1.1.1 53 CON 0 0 2 314 76 1 flow=Normal-UDP-DNS 1970/01/01 01:53:02.812068 0.061685 udp 10.0.2.15 59712 <-> 1.1.1.1 53 CON 0 0 2 202 69 1 flow=Normal-UDP-DNS 1970/01/01 01:53:02.835792 0.054477 udp 10.0.2.15 61701 <-> 1.1.1.1 53 CON 0 0 2 252 78 1 flow=Normal-UDP-DNS 1970/01/01 01:53:02.836588 0.056065 udp 10.0.2.15 60803 <-> 1.1.1.1 53 CON 0 0 2 244 76 1 flow=Normal-UDP-DNS 1970/01/01 01:53:02.836985 0.059156 udp 10.0.2.15 60756 <-> 1.1.1.1 53 CON 0 0 2 270 71 1 flow=Normal-UDP-DNS 1970/01/01 01:53:02.865761 4.680847 tcp 10.0.2.15 50306 -> 34.194.84.45 443 FSRPA_FSRPA 0 0 32 11163 2185 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:02.879915 4.586747 tcp 10.0.2.15 50307 -> 54.77.213.242 443 FSRPA_FSRPA 0 0 32 9552 2381 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:02.891441 4.575900 tcp 10.0.2.15 50308 -> 216.52.1.12 443 FSPA_FSPA 0 0 32 8709 1806 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:02.893623 4.555619 tcp 10.0.2.15 50309 -> 23.38.89.179 443 FSRPA_FSRPA 0 0 26 6318 1640 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:02.894135 0.034567 udp 10.0.2.15 60217 <-> 1.1.1.1 53 CON 0 0 2 170 77 1 flow=Normal-UDP-DNS 1970/01/01 01:53:02.896010 0.032652 udp 10.0.2.15 53051 <-> 1.1.1.1 53 CON 0 0 2 328 71 1 flow=Normal-UDP-DNS 1970/01/01 01:53:02.897280 14.937892 tcp 10.0.2.15 50310 -> 54.77.164.43 443 SPA_SRPA 0 0 20 6290 1496 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:02.929590 4.615581 tcp 10.0.2.15 50311 -> 54.210.180.148 443 FSRPA_FSRPA 0 0 29 9027 2231 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:02.931901 4.676958 tcp 10.0.2.15 50312 -> 38.106.10.132 443 FSPA_FSPA 0 0 25 8656 1669 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:03.039354 4.501759 tcp 10.0.2.15 50313 -> 52.22.88.89 443 FSRPA_FSRPA 0 0 26 7342 2005 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:03.044766 4.501575 tcp 10.0.2.15 50314 -> 34.194.84.45 443 FSRPA_FSRPA 0 0 26 5567 2591 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:03.055186 4.567712 tcp 10.0.2.15 50315 -> 38.106.10.132 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:03.060073 4.491239 tcp 10.0.2.15 50316 -> 54.210.180.148 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:03.292669 4.261675 tcp 10.0.2.15 50317 -> 52.22.88.89 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:03.602657 0.071444 udp 10.0.2.15 58106 <-> 1.1.1.1 53 CON 0 0 2 212 79 1 flow=Normal-UDP-DNS 1970/01/01 01:53:03.604769 0.075943 udp 10.0.2.15 59055 <-> 1.1.1.1 53 CON 0 0 2 246 77 1 flow=Normal-UDP-DNS 1970/01/01 01:53:03.688501 3.759867 tcp 10.0.2.15 50318 -> 185.152.65.76 443 FSPA_FSPA 0 0 30 6229 1704 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:03.711245 3.730989 tcp 10.0.2.15 50319 -> 23.38.89.179 443 FSRPA_FSRPA 0 0 25 6293 1742 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:04.439264 15.256162 udp 10.0.2.15 59056 <-> 172.217.23.238 443 CON 0 0 22 12036 9493 12 flow=Normal-Google-Net-9 1970/01/01 01:53:04.668994 2.779513 tcp 10.0.2.15 50320 -> 104.103.98.13 443 FSRPA_FSRPA 0 0 128 66338 3384 41 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:05.889569 0.292512 udp 10.0.2.15 50245 <-> 1.1.1.1 53 CON 0 0 2 251 78 1 flow=Normal-UDP-DNS 1970/01/01 01:53:05.900290 1.566330 tcp 10.0.2.15 50321 -> 52.49.41.66 443 FSRPA_FSRPA 0 0 25 6487 1822 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:06.237355 1.309297 tcp 10.0.2.15 50322 -> 54.225.246.255 443 FSRPA_FSRPA 0 0 29 9503 2075 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:06.363355 1.555125 udp 10.0.2.15 50246 <-> 216.58.201.66 443 CON 0 0 22 7466 4554 13 flow=Normal-Google-Net-8 1970/01/01 01:53:06.368486 15.201329 udp 10.0.2.15 50247 <-> 216.58.201.66 443 CON 0 0 15 9320 3934 7 flow=Normal-Google-Net-8 1970/01/01 01:53:07.191527 322.530396 udp 10.0.2.15 50249 <-> 172.217.23.226 443 CON 0 0 469 217541 97903 215 flow=Normal-Google-Net-9 1970/01/01 01:53:07.323997 10.398082 tcp 10.0.2.15 50323 -> 52.16.195.213 443 FSRPA_FSRPA 0 0 29 9766 1948 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:07.324903 10.520997 tcp 10.0.2.15 50324 -> 52.16.195.213 443 FSRPA_FSRPA 0 0 34 11050 2114 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:07.358805 0.036810 udp 10.0.2.15 61722 <-> 1.1.1.1 53 CON 0 0 2 202 80 1 flow=Normal-UDP-DNS 1970/01/01 01:53:07.419746 2.057577 tcp 10.0.2.15 50325 -> 162.208.117.11 443 FSPA_FSPA 0 0 21 7390 2018 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:07.487811 10.238827 tcp 10.0.2.15 50326 -> 151.101.14.2 443 FSRPA_FSRPA 0 0 33 12783 3993 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:08.147462 9.266261 tcp 10.0.2.15 50327 -> 23.38.91.117 443 FSRPA_SRPA 0 0 21 5761 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:08.150707 9.263358 tcp 10.0.2.15 50328 -> 23.38.91.117 443 FSRPA_SRPA 0 0 21 5761 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:08.151242 9.263180 tcp 10.0.2.15 50329 -> 23.38.91.117 443 FSRPA_SRPA 0 0 18 5599 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:08.151647 9.263297 tcp 10.0.2.15 50330 -> 23.38.91.117 443 FSRPA_SRPA 0 0 19 5653 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:08.152186 9.263769 tcp 10.0.2.15 50331 -> 23.38.91.117 443 FSRPA_SRPA 0 0 19 5653 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:08.152527 9.263761 tcp 10.0.2.15 50332 -> 23.38.91.117 443 FSRPA_SRPA 0 0 20 5707 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:08.152915 9.263497 tcp 10.0.2.15 50333 -> 23.38.91.117 443 FSRPA_SPA 0 0 19 5653 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:08.153752 9.528150 tcp 10.0.2.15 50334 -> 95.154.251.154 443 FSRPA_FSRPA 0 0 25 7192 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:08.154327 9.550054 tcp 10.0.2.15 50335 -> 95.154.251.154 443 FSRPA_FSRPA 0 0 23 7084 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:08.154828 9.548067 tcp 10.0.2.15 50336 -> 95.154.251.154 443 FSRPA_FSRPA 0 0 23 7084 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:08.155836 9.546962 tcp 10.0.2.15 50337 -> 95.154.251.154 443 FSRPA_FSRPA 0 0 23 7084 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:08.156757 18.102083 tcp 10.0.2.15 50338 -> 198.47.127.27 443 FSPA_FSPA 0 0 23 6668 1395 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:08.157306 37.874020 tcp 10.0.2.15 50339 -> 198.47.127.27 443 FSPA_FSPA 0 0 29 9882 2498 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:08.157983 919.762817 tcp 10.0.2.15 50340 -> 198.47.127.27 443 FSPA_SPA 0 0 59 8632 2441 29 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:08.159142 929.612549 tcp 10.0.2.15 50341 -> 198.47.127.32 443 FSPA_SPA 0 0 60 8686 2495 30 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:08.162512 38.205128 tcp 10.0.2.15 50342 -> 198.47.127.32 443 FSPA_FSPA 0 0 30 13112 5198 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:08.163127 930.361572 tcp 10.0.2.15 50343 -> 198.47.127.32 443 FSPA_SA 0 0 47 3091 1845 24 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:08.187616 9.412003 tcp 10.0.2.15 50344 -> 52.71.118.167 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:08.421496 9.115281 tcp 10.0.2.15 50345 -> 216.52.1.12 443 FSPA_FSPA 0 0 29 8572 1722 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:08.449797 9.138658 tcp 10.0.2.15 50346 -> 52.71.118.167 443 FSRPA_SPA 0 0 25 8424 2289 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:08.549220 0.031953 udp 10.0.2.15 57095 <-> 1.1.1.1 53 CON 0 0 2 270 74 1 flow=Normal-UDP-DNS 1970/01/01 01:53:08.582017 9.189176 tcp 10.0.2.15 50347 -> 23.4.248.121 443 FSRPA_SPA 0 0 26 7248 1775 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:08.826834 8.732487 tcp 10.0.2.15 50348 -> 34.194.75.158 443 FSRPA_FSRPA 0 0 26 6995 2946 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:08.850349 8.930398 tcp 10.0.2.15 50349 -> 23.38.87.106 443 FSRPA_SPA 0 0 66 35326 26013 32 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:08.871695 8.693738 tcp 10.0.2.15 50350 -> 34.194.84.45 443 FSRPA_SPA 0 0 16 2992 1590 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:08.917568 8.828284 tcp 10.0.2.15 50351 -> 52.49.41.66 443 FSRPA_FSRPA 0 0 38 14217 7283 16 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:09.003129 0.090920 udp 10.0.2.15 54305 <-> 1.1.1.1 53 CON 0 0 2 366 71 1 flow=Normal-UDP-DNS 1970/01/01 01:53:09.095681 8.321143 tcp 10.0.2.15 50352 -> 37.157.2.238 443 FSRPA_SPA 0 0 19 6677 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:09.097723 9.532540 tcp 10.0.2.15 50353 -> 213.155.156.164 443 FSRPA_FSRPA 0 0 22 5188 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:09.099617 9.862423 tcp 10.0.2.15 50354 -> 213.155.156.164 443 FSRPA_FSRPA 0 0 21 5134 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:09.100897 908.670959 tcp 10.0.2.15 50355 -> 213.155.156.164 443 FSPA_SPA 0 0 56 6797 2133 27 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:09.105506 8.318184 tcp 10.0.2.15 50356 -> 178.62.242.42 443 FSRPA_FSRPA 0 0 25 7576 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:09.106342 8.318216 tcp 10.0.2.15 50357 -> 178.62.242.42 443 FSRPA_FSRPA 0 0 28 7738 1357 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:09.106943 8.317200 tcp 10.0.2.15 50358 -> 178.62.242.42 443 FSRPA_FSRPA 0 0 28 7738 1357 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:09.108324 11.109286 tcp 10.0.2.15 50359 -> 193.0.160.129 443 FSPA_FSPA 0 0 16 4452 1303 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:09.109764 908.662170 tcp 10.0.2.15 50360 -> 193.0.160.129 443 FSPA_SPA 0 0 55 6578 2349 27 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:09.114548 11.150289 tcp 10.0.2.15 50361 -> 193.0.160.129 443 FSPA_FSPA 0 0 17 4506 1303 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:09.115671 25.201452 tcp 10.0.2.15 50362 -> 198.47.127.17 443 FSPA_FSPA 0 0 26 8410 2404 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:09.116356 908.655579 tcp 10.0.2.15 50363 -> 198.47.127.17 443 FSPA_SPA 0 0 52 3558 2012 26 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:09.116996 8.406999 tcp 10.0.2.15 50364 -> 198.47.127.17 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:09.118008 8.417674 tcp 10.0.2.15 50365 -> 185.29.133.52 443 FSPA_FSPA 0 0 20 4923 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:09.118786 8.414891 tcp 10.0.2.15 50366 -> 185.29.133.52 443 FSPA_FSPA 0 0 19 4869 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:09.119236 8.416066 tcp 10.0.2.15 50367 -> 185.29.133.52 443 FSPA_FSPA 0 0 19 4869 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:09.120341 8.414529 tcp 10.0.2.15 50368 -> 52.17.32.174 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:09.121346 10.516551 tcp 10.0.2.15 50369 -> 52.17.32.174 443 FSRPA_FSRPA 0 0 21 4825 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:09.121727 12.281161 tcp 10.0.2.15 50370 -> 52.17.32.174 443 FSRPA_FSRPA 0 0 23 4933 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:09.130055 8.541962 tcp 10.0.2.15 50371 -> 54.213.189.248 443 FSPA_FSPA 0 0 29 6863 1872 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:09.209052 8.459381 tcp 10.0.2.15 50372 -> 54.213.189.248 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:09.339600 8.195175 tcp 10.0.2.15 50373 -> 54.72.99.227 443 FSPA_FSPA 0 0 32 7073 1912 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:09.369633 8.148887 tcp 10.0.2.15 50374 -> 198.47.127.17 443 FSPA_FSPA 0 0 21 6560 1341 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:09.378878 8.383494 tcp 10.0.2.15 50375 -> 52.17.32.174 443 FSRPA_FSRPA 0 0 23 4933 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:09.413317 0.076480 udp 10.0.2.15 53429 <-> 1.1.1.1 53 CON 0 0 2 215 87 1 flow=Normal-UDP-DNS 1970/01/01 01:53:09.417080 0.079647 udp 10.0.2.15 51951 <-> 1.1.1.1 53 CON 0 0 2 211 77 1 flow=Normal-UDP-DNS 1970/01/01 01:53:09.523471 0.145680 udp 10.0.2.15 51952 <-> 216.58.201.98 443 CON 0 0 11 4858 2255 6 flow=Normal-Google-Net-8 1970/01/01 01:53:09.537574 8.187829 tcp 10.0.2.15 50376 -> 151.101.14.49 443 FSRPA_FSRPA 0 0 42 11987 2328 17 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:09.546336 10.634384 tcp 10.0.2.15 50377 -> 151.101.14.49 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:09.873814 7.813803 tcp 10.0.2.15 50378 -> 52.49.41.66 443 FSRPA_FSRPA 0 0 37 12948 6914 17 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:09.916378 0.066152 udp 10.0.2.15 56051 <-> 1.1.1.1 53 CON 0 0 2 383 80 1 flow=Normal-UDP-DNS 1970/01/01 01:53:09.919748 0.067731 udp 10.0.2.15 55867 <-> 1.1.1.1 53 CON 0 0 2 252 79 1 flow=Normal-UDP-DNS 1970/01/01 01:53:09.925750 3.022940 udp 10.0.2.15 55868 -> 239.255.255.250 1900 INT 0 4 864 864 4 flow=Normal-UDP-Attempt 1970/01/01 01:53:09.930688 187.999176 udp 10.0.2.15 55869 <-> 216.58.201.98 443 CON 0 0 80 22690 14389 41 flow=Normal-Google-Net-8 1970/01/01 01:53:09.950278 0.050823 udp 10.0.2.15 64220 <-> 1.1.1.1 53 CON 0 0 2 255 80 1 flow=Normal-UDP-DNS 1970/01/01 01:53:09.957107 0.045134 udp 10.0.2.15 65238 <-> 1.1.1.1 53 CON 0 0 2 168 76 1 flow=Normal-UDP-DNS 1970/01/01 01:53:09.988883 7.527253 tcp 10.0.2.15 50379 -> 18.195.118.165 443 FSRPA_SPA 0 0 23 8094 1617 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:09.998323 1.494489 tcp 10.0.2.15 50380 -> 23.38.91.117 443 FSRPA_FSRPA 0 0 28 7943 2344 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:10.000112 0.044996 udp 10.0.2.15 58652 <-> 1.1.1.1 53 CON 0 0 2 162 73 1 flow=Normal-UDP-DNS 1970/01/01 01:53:10.002186 7.760856 tcp 10.0.2.15 50381 -> 104.127.60.107 443 FSRPA_SPA 0 0 23 8261 1776 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:10.003600 7.418810 tcp 10.0.2.15 50382 -> 67.226.210.13 443 FSRPA_FSRPA 0 0 28 8863 1824 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:10.008422 7.581918 tcp 10.0.2.15 50383 -> 34.192.114.81 443 FSRPA_FSRPA 0 0 29 8217 2618 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:10.054683 7.462272 tcp 10.0.2.15 50384 -> 35.156.121.57 443 FSRPA_SPA 0 0 26 9139 2370 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:10.227167 0.052557 udp 10.0.2.15 63908 <-> 1.1.1.1 53 CON 0 0 2 249 82 1 flow=Normal-UDP-DNS 1970/01/01 01:53:10.372781 0.078410 udp 10.0.2.15 56429 <-> 1.1.1.1 53 CON 0 0 2 270 85 1 flow=Normal-UDP-DNS 1970/01/01 01:53:10.403457 0.079723 udp 10.0.2.15 54841 <-> 1.1.1.1 53 CON 0 0 2 183 75 1 flow=Normal-UDP-DNS 1970/01/01 01:53:10.453850 7.033741 tcp 10.0.2.15 50385 -> 23.6.123.119 443 FSRPA_SPA 0 0 23 8140 1837 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:10.484252 7.986578 tcp 10.0.2.15 50386 -> 154.57.158.50 443 FSPA_FSPA 0 0 25 7045 1724 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:10.672482 7.031535 tcp 10.0.2.15 50387 -> 52.49.41.66 443 FSRPA_FSRPA 0 0 15 1570 958 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:10.722309 0.046984 udp 10.0.2.15 58281 <-> 1.1.1.1 53 CON 0 0 2 242 73 1 flow=Normal-UDP-DNS 1970/01/01 01:53:10.740132 6.955153 tcp 10.0.2.15 50388 -> 52.49.41.66 443 FSRPA_FSRPA 0 0 15 1570 958 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:10.765932 6.995330 tcp 10.0.2.15 50389 -> 23.38.87.106 443 FSRPA_SPA 0 0 24 7517 2825 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:10.771030 6.796930 tcp 10.0.2.15 50390 -> 35.153.11.94 443 FSRPA_FSRPA 0 0 28 8837 1779 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:10.785885 6.976732 tcp 10.0.2.15 50391 -> 23.38.87.106 443 FSRPA_SPA 0 0 20 6073 1926 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:10.807444 6.871829 tcp 10.0.2.15 50392 -> 52.49.41.66 443 FSRPA_FSRPA 0 0 15 1570 958 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:10.839107 6.674492 tcp 10.0.2.15 50393 -> 23.38.87.106 443 FSRPA_SPA 0 0 20 6074 1928 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:10.883171 6.871790 tcp 10.0.2.15 50394 -> 23.38.87.106 443 FSRPA_SPA 0 0 16 2884 1827 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:10.916862 6.991838 tcp 10.0.2.15 50395 -> 23.38.87.106 443 FSRPA_FSRPA 0 0 15 1602 983 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:11.755408 0.045868 udp 10.0.2.15 62547 <-> 1.1.1.1 53 CON 0 0 2 379 77 1 flow=Normal-UDP-DNS 1970/01/01 01:53:11.802955 5.885845 tcp 10.0.2.15 50396 -> 35.160.207.185 443 FSPA_FSPA 0 0 30 6966 1929 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:12.009408 5.663406 tcp 10.0.2.15 50397 -> 35.160.207.185 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:14.620788 15.157587 udp 10.0.2.15 62550 <-> 172.217.23.238 443 CON 0 0 13 4332 2304 7 flow=Normal-Google-Net-9 1970/01/01 01:53:14.746561 0.045338 udp 10.0.2.15 51077 <-> 1.1.1.1 53 CON 0 0 2 170 77 1 flow=Normal-UDP-DNS 1970/01/01 01:53:14.796303 2.823683 tcp 10.0.2.15 50398 -> 104.237.191.1 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:15.004057 2.607634 tcp 10.0.2.15 50399 -> 104.237.191.1 443 FSPA_FSPA 0 0 32 6806 2099 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:19.501076 8.502010 tcp 10.0.2.15 50400 -> 23.38.87.106 443 FSRPA_SPA 0 0 28 10430 8173 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:20.651934 6.858881 tcp 10.0.2.15 50401 -> 18.195.118.165 443 FSRPA_SPA 0 0 12 1408 904 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:20.652353 6.854428 tcp 10.0.2.15 50402 -> 18.195.118.165 443 FSRPA_SPA 0 0 16 2779 1570 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:20.659462 6.864926 tcp 10.0.2.15 50403 -> 185.29.133.52 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:20.659944 6.855743 tcp 10.0.2.15 50404 -> 185.29.133.52 443 FSPA_FSPA 0 0 12 1369 904 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:20.682777 6.739493 tcp 10.0.2.15 50405 -> 151.101.14.49 443 FSRPA_SRPA 0 0 26 9200 1270 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:20.683097 6.827850 tcp 10.0.2.15 50406 -> 151.101.14.49 443 FSRPA_FSRPA 0 0 35 10678 2010 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:20.687709 6.826775 tcp 10.0.2.15 50407 -> 54.72.99.227 443 FSPA_FSPA 0 0 23 3517 1667 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:20.689691 7.742638 tcp 10.0.2.15 50408 -> 185.33.223.215 443 FSPA_FSPA 0 0 19 6345 1803 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:20.708331 0.055983 udp 10.0.2.15 61148 <-> 1.1.1.1 53 CON 0 0 2 262 75 1 flow=Normal-UDP-DNS 1970/01/01 01:53:20.767163 6.743386 tcp 10.0.2.15 50409 -> 35.156.63.173 443 FSPA_FSPA 0 0 26 8160 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:20.767578 6.742764 tcp 10.0.2.15 50410 -> 35.156.63.173 443 FSPA_FSPA 0 0 36 12171 3146 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:20.912801 6.603355 tcp 10.0.2.15 50411 -> 185.29.133.52 443 FSPA_FSPA 0 0 16 2938 1812 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:20.977472 26.528275 tcp 10.0.2.15 50412 -> 198.47.127.15 443 FSPA_FSPA 0 0 21 6560 1341 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:20.978221 36.203903 tcp 10.0.2.15 50413 -> 198.47.127.15 443 FSPA_FSPA 0 0 20 6506 1341 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:21.148616 912.701965 tcp 10.0.2.15 50414 -> 198.47.127.15 443 FSPA_SPA 0 0 63 10802 3462 29 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:21.383757 2.420473 tcp 10.0.2.15 50415 -> 198.47.127.15 443 FSRPA_FSRPA 0 0 27 9011 2496 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:21.479903 0.035449 udp 10.0.2.15 57949 <-> 1.1.1.1 53 CON 0 0 2 260 76 1 flow=Normal-UDP-DNS 1970/01/01 01:53:21.517035 6.105985 tcp 10.0.2.15 50416 -> 78.46.16.13 443 FSPA_FSPA 0 0 40 10940 2211 17 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:21.517464 5.906024 tcp 10.0.2.15 50417 -> 78.46.16.13 443 FSRPA_SRPA 0 0 28 8915 1303 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:22.237139 2.866951 tcp 10.0.2.15 50418 -> 198.47.127.15 443 FSRPA_FSRPA 0 0 20 3793 2071 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:22.455247 3.030040 tcp 10.0.2.15 50419 -> 198.47.127.15 443 FSRPA_FSRPA 0 0 20 3889 2175 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:28.419629 8.998233 tcp 10.0.2.15 50420 -> 23.38.91.117 443 FSRPA_SRPA 0 0 20 5707 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:28.420000 9.348026 tcp 10.0.2.15 50421 -> 23.38.91.117 443 FSRPA_SPA 0 0 27 10532 5566 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:28.547033 0.818307 tcp 10.0.2.15 50422 -> 95.154.251.154 443 FSPA_FSPA 0 0 19 6156 4378 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:29.377162 0.004418 udp 10.0.2.15 64587 <-> 1.1.1.1 53 CON 0 0 2 206 80 1 flow=Normal-UDP-DNS 1970/01/01 01:53:29.388536 15.113439 udp 10.0.2.15 64588 <-> 172.217.23.227 443 CON 0 0 13 4293 2300 7 flow=Normal-Google-Net-9 1970/01/01 01:53:33.433251 0.370110 udp 10.0.2.15 64590 <-> 74.125.71.189 443 CON 0 0 12 6227 3719 6 flow=Normal-Google-Net-6 1970/01/01 01:53:37.829367 9.651736 tcp 10.0.2.15 50423 -> 23.38.87.106 443 FSRPA_FSRPA 0 0 33 8709 5360 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:37.833306 9.648141 tcp 10.0.2.15 50424 -> 23.38.87.106 443 FSRPA_FSRPA 0 0 21 4623 3404 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:37.992756 0.207349 udp 10.0.2.15 55177 <-> 1.1.1.1 53 CON 0 0 2 259 82 1 flow=Normal-UDP-DNS 1970/01/01 01:53:38.201853 9.284339 tcp 10.0.2.15 50425 -> 23.38.83.177 443 FSRPA_FSRPA 0 0 34 10330 3690 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:38.245489 30.535404 udp 10.0.2.15 55178 <-> 216.58.201.98 443 CON 0 0 16 7054 4112 9 flow=Normal-Google-Net-8 1970/01/01 01:53:38.457984 9.005264 tcp 10.0.2.15 50426 -> 23.38.91.117 443 FSRPA_FSRPA 0 0 15 1577 958 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:38.458566 9.201418 tcp 10.0.2.15 50427 -> 23.38.91.117 443 FSRPA_FSRPA 0 0 15 1577 958 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:38.461071 9.044498 tcp 10.0.2.15 50428 -> 95.154.251.154 443 FSRPA_FSRPA 0 0 15 1780 960 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:38.461407 9.419307 tcp 10.0.2.15 50429 -> 95.154.251.154 443 FSRPA_FSRPA 0 0 15 1780 960 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:38.461929 9.420143 tcp 10.0.2.15 50430 -> 95.154.251.154 443 FSRPA_FSRPA 0 0 15 1780 960 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:38.463675 19.039463 tcp 10.0.2.15 50431 -> 198.47.127.32 443 FSPA_FSPA 0 0 22 8368 5099 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:38.464337 19.033253 tcp 10.0.2.15 50432 -> 198.47.127.32 443 FSPA_FSPA 0 0 14 1486 966 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:38.466746 0.058185 udp 10.0.2.15 63997 <-> 1.1.1.1 53 CON 0 0 2 235 76 1 flow=Normal-UDP-DNS 1970/01/01 01:53:38.508499 30.258400 tcp 10.0.2.15 50433 -> 198.47.127.27 443 FSRPA_SRPA 0 0 17 4413 2345 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:38.508773 9.752370 tcp 10.0.2.15 50434 -> 198.47.127.27 443 FSPA_FSPA 0 0 12 1378 912 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:38.518415 0.151990 udp 10.0.2.15 63998 <-> 216.58.201.97 443 CON 0 0 6 3090 1553 3 flow=Normal-Google-Net-8 1970/01/01 01:53:38.525651 8.897000 tcp 10.0.2.15 50435 -> 23.38.91.117 443 FSRPA_SRPA 0 0 20 5707 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:38.525906 8.896252 tcp 10.0.2.15 50436 -> 23.38.91.117 443 FSRPA_SRPA 0 0 21 5761 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:38.526304 8.894779 tcp 10.0.2.15 50437 -> 23.38.91.117 443 FSRPA_SRPA 0 0 20 5707 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:38.526892 8.896331 tcp 10.0.2.15 50438 -> 23.38.91.117 443 FSRPA_SRPA 0 0 21 5761 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:38.939329 0.134731 udp 10.0.2.15 64000 <-> 216.58.201.98 443 CON 0 0 6 3090 1553 3 flow=Normal-Google-Net-8 1970/01/01 01:53:38.941900 17.308620 tcp 10.0.2.15 50439 -> 198.47.127.17 443 FSPA_FSPA 0 0 12 1378 912 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:38.942518 17.450029 tcp 10.0.2.15 50440 -> 198.47.127.17 443 FSPA_FSPA 0 0 14 1486 966 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:39.049189 0.048814 udp 10.0.2.15 49436 <-> 1.1.1.1 53 CON 0 0 2 286 73 1 flow=Normal-UDP-DNS 1970/01/01 01:53:39.050269 8.459013 tcp 10.0.2.15 50441 -> 213.155.156.164 443 FSRPA_FSRPA 0 0 22 5188 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:39.050909 8.455125 tcp 10.0.2.15 50442 -> 213.155.156.164 443 FSRPA_FSRPA 0 0 22 5188 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:39.056943 8.372553 tcp 10.0.2.15 50443 -> 178.62.242.42 443 FSRPA_FSRPA 0 0 27 7684 1303 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:39.057369 8.372080 tcp 10.0.2.15 50444 -> 178.62.242.42 443 FSRPA_FSRPA 0 0 26 7630 1303 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:39.058517 11.073254 tcp 10.0.2.15 50445 -> 193.0.160.129 443 FSPA_FSPA 0 0 17 4506 1303 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:39.058988 11.073649 tcp 10.0.2.15 50446 -> 193.0.160.129 443 FSPA_FSPA 0 0 17 4506 1303 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:39.060521 0.042792 udp 10.0.2.15 60527 <-> 1.1.1.1 53 CON 0 0 2 243 76 1 flow=Normal-UDP-DNS 1970/01/01 01:53:39.061206 0.038289 udp 10.0.2.15 52133 <-> 1.1.1.1 53 CON 0 0 2 174 79 1 flow=Normal-UDP-DNS 1970/01/01 01:53:39.061824 0.043201 udp 10.0.2.15 63697 <-> 1.1.1.1 53 CON 0 0 2 199 80 1 flow=Normal-UDP-DNS 1970/01/01 01:53:39.110657 8.313452 tcp 10.0.2.15 50447 -> 37.157.4.24 443 FSRPA_SRPA 0 0 24 6947 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:39.111087 8.396738 tcp 10.0.2.15 50448 -> 52.211.79.86 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:39.111623 8.673614 tcp 10.0.2.15 50449 -> 52.211.79.86 443 FSRPA_FSRPA 0 0 23 4933 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:39.112747 8.656796 tcp 10.0.2.15 50450 -> 185.29.135.234 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:39.113021 8.684600 tcp 10.0.2.15 50451 -> 185.29.135.234 443 FSPA_FSPA 0 0 20 4923 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:39.183340 8.323258 tcp 10.0.2.15 50452 -> 37.157.4.24 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:39.194503 8.574597 tcp 10.0.2.15 50453 -> 185.29.135.234 443 FSPA_FSPA 0 0 20 4923 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:39.194803 8.552337 tcp 10.0.2.15 50454 -> 52.211.79.86 443 FSRPA_FSRPA 0 0 23 4933 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:39.261405 0.086525 udp 10.0.2.15 53867 <-> 1.1.1.1 53 CON 0 0 2 286 100 1 flow=Normal-UDP-DNS 1970/01/01 01:53:39.348979 8.133122 tcp 10.0.2.15 50455 -> 23.38.87.106 443 FSRPA_FSRPA 0 0 15 1602 983 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:39.349274 8.120510 tcp 10.0.2.15 50456 -> 23.38.87.106 443 FSRPA_FSRPA 0 0 19 3041 1876 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:39.350077 8.437563 tcp 10.0.2.15 50457 -> 23.38.87.106 443 FSRPA_FSRPA 0 0 15 1602 983 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:41.419066 0.000000 udp 10.0.2.15 62971 -> 1.1.1.1 53 INT 0 1 87 87 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:53:42.421683 0.005180 udp 10.0.2.15 62971 <-> 1.0.0.1 53 CON 0 0 2 190 87 1 flow=Normal-UDP-DNS 1970/01/01 01:53:49.291255 0.037184 udp 10.0.2.15 60827 <-> 1.0.0.1 53 CON 0 0 2 244 74 1 flow=Normal-UDP-DNS 1970/01/01 01:53:49.329575 8.144747 tcp 10.0.2.15 50458 -> 23.38.87.106 443 FSRPA_FSRPA 0 0 23 5976 4703 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:49.523365 0.032376 udp 10.0.2.15 62384 <-> 1.0.0.1 53 CON 0 0 2 156 70 1 flow=Normal-UDP-DNS 1970/01/01 01:53:49.557094 43.970673 udp 10.0.2.15 62385 <-> 216.58.201.110 443 CON 0 0 24 9514 4302 13 flow=Normal-Google-Net-8 1970/01/01 01:53:51.514401 0.030517 udp 10.0.2.15 62608 <-> 1.0.0.1 53 CON 0 0 2 251 80 1 flow=Normal-UDP-DNS 1970/01/01 01:53:51.545805 5.932460 tcp 10.0.2.15 50459 -> 23.38.91.117 443 FSRPA_FSRPA 0 0 23 6485 5497 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:51.546051 5.928663 tcp 10.0.2.15 50460 -> 23.38.91.117 443 FSRPA_SPA 0 0 12 1415 904 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:51.613515 5.891274 tcp 10.0.2.15 50461 -> 95.154.251.154 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:53:51.849483 0.823880 tcp 10.0.2.15 50462 -> 95.154.251.154 443 FSPA_FSPA 0 0 19 6147 4375 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:00.426437 0.003652 udp 10.0.2.15 51672 <-> 1.0.0.1 53 CON 0 0 2 193 75 1 flow=Normal-UDP-DNS 1970/01/01 01:54:00.430970 7.272439 tcp 10.0.2.15 50463 -> 216.58.201.101 443 FSPA_FSPA 0 0 33 10256 4042 15 flow=Normal-Google-Net-8 1970/01/01 01:54:08.713322 8.757615 tcp 10.0.2.15 50464 -> 23.38.87.106 443 FSRPA_FSRPA 0 0 28 7207 4404 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:09.097617 8.335048 tcp 10.0.2.15 50465 -> 23.38.91.117 443 FSRPA_SRPA 0 0 21 5761 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:09.098295 8.335574 tcp 10.0.2.15 50466 -> 23.38.91.117 443 FSRPA_SRPA 0 0 21 5761 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:09.099177 8.334085 tcp 10.0.2.15 50467 -> 23.38.91.117 443 FSRPA_SPA 0 0 17 5545 1087 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:09.099526 8.333580 tcp 10.0.2.15 50468 -> 23.38.91.117 443 FSRPA_SRPA 0 0 21 5761 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:09.099959 8.371250 tcp 10.0.2.15 50469 -> 23.38.91.117 443 FSA_FSA 0 0 8 460 294 5 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:09.100504 8.364547 tcp 10.0.2.15 50470 -> 23.38.91.117 443 FSRPA_FSRPA 0 0 16 1643 1024 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:09.101312 8.392467 tcp 10.0.2.15 50471 -> 95.154.251.154 443 FSRPA_SRPA 0 0 15 1780 960 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:09.101644 8.393404 tcp 10.0.2.15 50472 -> 95.154.251.154 443 FSRPA_FSRPA 0 0 15 1780 960 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:09.102343 36.923382 tcp 10.0.2.15 50473 -> 198.47.127.27 443 FSPA_FSPA 0 0 22 5400 2507 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:09.102941 8.388408 tcp 10.0.2.15 50474 -> 198.47.127.27 443 FSPA_FSPA 0 0 14 1486 966 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:09.110046 0.269490 udp 10.0.2.15 51674 <-> 216.58.201.97 443 CON 0 0 8 4559 3022 5 flow=Normal-Google-Net-8 1970/01/01 01:54:09.277189 873.598450 tcp 10.0.2.15 50475 -> 198.47.127.32 443 FSPA_SPA 0 0 50 3449 1957 25 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:09.278170 36.748474 tcp 10.0.2.15 50476 -> 198.47.127.32 443 FSPA_FSPA 0 0 24 8468 5153 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:09.351338 8.112804 tcp 10.0.2.15 50477 -> 23.38.91.117 443 FSRPA_FSRPA 0 0 15 1577 958 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:09.353815 8.144530 tcp 10.0.2.15 50478 -> 198.47.127.32 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:09.558263 0.067486 udp 10.0.2.15 54856 <-> 1.0.0.1 53 CON 0 0 2 225 80 1 flow=Normal-UDP-DNS 1970/01/01 01:54:09.811480 7.659894 tcp 10.0.2.15 50479 -> 23.38.87.106 443 FSRPA_FSRPA 0 0 23 4487 2776 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:09.813630 7.651145 tcp 10.0.2.15 50480 -> 23.38.87.106 443 FSRPA_SPA 0 0 12 1440 929 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:09.844819 7.626143 tcp 10.0.2.15 50481 -> 23.38.87.106 443 FSRPA_FSRPA 0 0 15 1602 983 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:18.436346 0.031395 udp 10.0.2.15 57918 <-> 1.0.0.1 53 CON 0 0 2 187 75 1 flow=Normal-UDP-DNS 1970/01/01 01:54:18.528776 15.378855 udp 10.0.2.15 57919 <-> 216.58.201.110 443 CON 0 0 16 7320 4975 10 flow=Normal-Google-Net-8 1970/01/01 01:54:19.438412 8.313679 tcp 10.0.2.15 50482 -> 23.38.87.106 443 FSRPA_SPA 0 0 20 5807 4642 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:20.548654 0.047499 udp 10.0.2.15 64707 <-> 1.0.0.1 53 CON 0 0 2 158 71 1 flow=Normal-UDP-DNS 1970/01/01 01:54:20.549254 0.051889 udp 10.0.2.15 63958 <-> 1.0.0.1 53 CON 0 0 2 285 85 1 flow=Normal-UDP-DNS 1970/01/01 01:54:20.549785 0.068880 udp 10.0.2.15 49302 <-> 1.0.0.1 53 CON 0 0 2 261 89 1 flow=Normal-UDP-DNS 1970/01/01 01:54:20.550205 0.064511 udp 10.0.2.15 50501 <-> 1.0.0.1 53 CON 0 0 2 272 83 1 flow=Normal-UDP-DNS 1970/01/01 01:54:20.550966 0.060451 udp 10.0.2.15 65461 <-> 1.0.0.1 53 CON 0 0 2 178 81 1 flow=Normal-UDP-DNS 1970/01/01 01:54:20.551604 0.057288 udp 10.0.2.15 49163 <-> 1.0.0.1 53 CON 0 0 2 244 74 1 flow=Normal-UDP-DNS 1970/01/01 01:54:20.597343 7.335000 tcp 10.0.2.15 50483 -> 8.41.222.241 443 FSPA_FSPA 0 0 26 9217 2595 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:20.597782 7.011274 tcp 10.0.2.15 50484 -> 8.41.222.241 443 FSPA_FSPA 0 0 19 6344 1333 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:20.602118 6.958196 tcp 10.0.2.15 50485 -> 89.207.16.140 443 FSPA_FSPA 0 0 29 9426 2452 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:20.602406 7.150847 tcp 10.0.2.15 50486 -> 89.207.16.140 443 FSPA_FSPA 0 0 22 7256 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:20.610161 7.171562 tcp 10.0.2.15 50487 -> 52.208.201.11 443 FSPA_FSPA 0 0 32 8609 1946 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:20.610398 0.261756 tcp 10.0.2.15 50488 -> 52.208.201.11 443 FSRPA_SPA 0 0 21 7034 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:20.612196 6.829439 tcp 10.0.2.15 50489 -> 66.155.71.150 443 FSRPA_FSRPA 0 0 25 5739 1327 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:20.612481 6.829316 tcp 10.0.2.15 50490 -> 66.155.71.150 443 FSRPA_FSRPA 0 0 26 6726 1828 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:20.615642 6.827805 tcp 10.0.2.15 50491 -> 151.101.14.49 443 FSRPA_SPA 0 0 24 9294 1162 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:20.617044 7.062271 tcp 10.0.2.15 50492 -> 151.101.14.49 443 FSRPA_FSRPA 0 0 34 10838 1977 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:20.619393 6.985082 tcp 10.0.2.15 50493 -> 104.193.83.157 443 FSPA_FSPA 0 0 23 7354 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:20.619634 6.976406 tcp 10.0.2.15 50494 -> 104.193.83.157 443 FSPA_FSPA 0 0 26 8331 1727 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:20.763135 7.364581 tcp 10.0.2.15 50495 -> 8.41.222.241 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:20.782254 6.820861 tcp 10.0.2.15 50496 -> 104.193.83.157 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:20.826217 6.964419 tcp 10.0.2.15 50497 -> 23.38.91.117 443 FSRPA_SPA 0 0 20 6354 5474 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:20.826549 6.806052 tcp 10.0.2.15 50498 -> 23.38.91.117 443 FSRPA_FSRPA 0 0 15 1577 958 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:20.981160 0.089637 udp 10.0.2.15 55443 <-> 1.0.0.1 53 CON 0 0 2 223 80 1 flow=Normal-UDP-DNS 1970/01/01 01:54:21.016976 1.036272 tcp 10.0.2.15 50499 -> 95.154.251.154 443 FSRPA_FSRPA 0 0 22 6308 4428 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:21.071635 13.347355 tcp 10.0.2.15 50500 -> 198.47.127.15 443 FSRPA_FSRPA 0 0 22 4381 2613 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:21.072325 3.392081 tcp 10.0.2.15 50501 -> 198.47.127.15 443 FSRPA_FSRPA 0 0 22 4349 2597 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:21.267609 0.086396 udp 10.0.2.15 50497 <-> 1.0.0.1 53 CON 0 0 2 221 79 1 flow=Normal-UDP-DNS 1970/01/01 01:54:21.354958 15.014799 tcp 10.0.2.15 50502 -> 198.47.127.15 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:21.355287 14.999588 tcp 10.0.2.15 50503 -> 198.47.127.15 443 FSPA_FSPA 0 0 14 1486 966 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:21.381180 0.000000 udp 10.0.2.15 51883 -> 1.0.0.1 53 INT 0 1 76 76 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:54:21.516134 4.401766 tcp 10.0.2.15 50504 -> 198.47.127.15 443 FSRPA_FSRPA 0 0 22 4381 2613 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:22.382877 0.004601 udp 10.0.2.15 51883 <-> 1.1.1.1 53 CON 0 0 2 338 76 1 flow=Normal-UDP-DNS 1970/01/01 01:54:22.388648 5.380741 tcp 10.0.2.15 50505 -> 176.34.134.245 443 FSPA_FSPA 0 0 25 6826 1851 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:22.541463 5.017596 tcp 10.0.2.15 50506 -> 198.47.127.17 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:22.798873 13.650654 tcp 10.0.2.15 50507 -> 198.47.127.17 443 FSPA_FSPA 0 0 17 3612 2305 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:23.087510 5.846546 tcp 10.0.2.15 50508 -> 198.47.127.15 443 FSRPA_FSRPA 0 0 22 4381 2613 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:31.424054 0.242253 udp 10.0.2.15 51890 <-> 74.125.71.189 443 CON 0 0 13 4861 2403 6 flow=Normal-Google-Net-6 1970/01/01 01:54:39.267732 8.222302 tcp 10.0.2.15 50509 -> 23.38.87.106 443 FSRPA_SPA 0 0 33 9932 6145 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:39.277781 0.005699 udp 10.0.2.15 49664 <-> 1.1.1.1 53 CON 0 0 2 215 87 1 flow=Normal-UDP-DNS 1970/01/01 01:54:39.289845 15.152223 udp 10.0.2.15 49665 <-> 216.58.201.98 443 CON 0 0 12 4905 2499 6 flow=Normal-Google-Net-8 1970/01/01 01:54:39.401784 8.115239 tcp 10.0.2.15 50510 -> 95.154.251.154 443 FSRPA_FSRPA 0 0 15 1780 960 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:39.402768 18.556639 tcp 10.0.2.15 50511 -> 198.47.127.32 443 FSPA_FSPA 0 0 24 8828 5513 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:39.403238 18.542355 tcp 10.0.2.15 50512 -> 198.47.127.32 443 FSPA_FSPA 0 0 12 1378 912 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:39.418718 0.033013 udp 10.0.2.15 51779 <-> 1.1.1.1 53 CON 0 0 2 235 76 1 flow=Normal-UDP-DNS 1970/01/01 01:54:39.419620 28.814919 tcp 10.0.2.15 50513 -> 198.47.127.27 443 FSPA_FSPA 0 0 20 5828 2813 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:39.420022 0.035253 udp 10.0.2.15 61192 <-> 1.1.1.1 53 CON 0 0 2 229 85 1 flow=Normal-UDP-DNS 1970/01/01 01:54:39.452478 7.999649 tcp 10.0.2.15 50514 -> 23.38.91.117 443 FSRPA_SRPA 0 0 21 5761 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:39.452725 7.999988 tcp 10.0.2.15 50515 -> 23.38.91.117 443 FSRPA_SRPA 0 0 21 5761 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:39.452975 8.000319 tcp 10.0.2.15 50516 -> 23.38.91.117 443 FSRPA_SRPA 0 0 20 5707 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:39.453436 8.000439 tcp 10.0.2.15 50517 -> 23.38.91.117 443 FSRPA_SRPA 0 0 18 5599 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:39.464180 0.255901 udp 10.0.2.15 61193 <-> 216.58.201.97 443 CON 0 0 8 4562 3022 5 flow=Normal-Google-Net-8 1970/01/01 01:54:39.564270 7.930125 tcp 10.0.2.15 50518 -> 23.38.87.106 443 FSRPA_FSRPA 0 0 63 32245 25950 31 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:39.990573 0.044331 udp 10.0.2.15 60516 <-> 1.1.1.1 53 CON 0 0 2 234 72 1 flow=Normal-UDP-DNS 1970/01/01 01:54:39.991469 0.047082 udp 10.0.2.15 51822 <-> 1.1.1.1 53 CON 0 0 2 243 76 1 flow=Normal-UDP-DNS 1970/01/01 01:54:39.991923 0.049566 udp 10.0.2.15 62035 <-> 1.1.1.1 53 CON 0 0 2 174 79 1 flow=Normal-UDP-DNS 1970/01/01 01:54:40.207931 0.000000 udp 10.0.2.15 55831 -> 1.1.1.1 53 INT 0 1 100 100 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:54:41.208583 0.044630 udp 10.0.2.15 55831 <-> 1.0.0.1 53 CON 0 0 2 286 100 1 flow=Normal-UDP-DNS 1970/01/01 01:54:41.254777 6.239214 tcp 10.0.2.15 50519 -> 23.38.87.106 443 FSRPA_FSRPA 0 0 15 1602 983 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:41.255567 6.238186 tcp 10.0.2.15 50520 -> 23.38.87.106 443 FSRPA_FSRPA 0 0 15 1602 983 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:41.256134 6.237595 tcp 10.0.2.15 50521 -> 23.38.87.106 443 FSRPA_FSRPA 0 0 15 1602 983 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:50.064783 0.000000 udp 10.0.2.15 56601 -> 1.0.0.1 53 INT 0 1 74 74 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:54:51.066950 0.018422 udp 10.0.2.15 56601 <-> 1.1.1.1 53 CON 0 0 2 244 74 1 flow=Normal-UDP-DNS 1970/01/01 01:54:51.087275 6.817584 tcp 10.0.2.15 50522 -> 23.38.87.106 443 FSRPA_FSRPA 0 0 27 7648 5829 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:52.271431 0.033889 udp 10.0.2.15 53342 <-> 1.1.1.1 53 CON 0 0 2 251 80 1 flow=Normal-UDP-DNS 1970/01/01 01:54:52.306199 5.599331 tcp 10.0.2.15 50523 -> 23.38.91.117 443 FSRPA_FSRPA 0 0 15 1577 958 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:52.307037 5.599021 tcp 10.0.2.15 50524 -> 23.38.91.117 443 FSRPA_FSRPA 0 0 25 6950 5908 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:52.383077 0.641749 tcp 10.0.2.15 50525 -> 95.154.251.154 443 FSRPA_SPA 0 0 19 6157 4379 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:59.838623 0.138985 udp 10.0.2.15 56949 <-> 1.1.1.1 53 CON 0 0 2 287 78 1 flow=Normal-UDP-DNS 1970/01/01 01:54:59.844946 3.734112 tcp 10.0.2.15 50526 -> 198.47.127.15 443 FSRPA_FSRPA 0 0 22 4893 3005 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:59.846431 3.865780 tcp 10.0.2.15 50527 -> 198.47.127.15 443 FSRPA_FSRPA 0 0 22 4605 2885 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:59.865209 0.175514 udp 10.0.2.15 51668 <-> 1.1.1.1 53 CON 0 0 2 390 73 1 flow=Normal-UDP-DNS 1970/01/01 01:54:59.866654 0.224208 udp 10.0.2.15 63313 <-> 1.1.1.1 53 CON 0 0 2 224 80 1 flow=Normal-UDP-DNS 1970/01/01 01:54:59.867957 0.222832 udp 10.0.2.15 53203 <-> 1.1.1.1 53 CON 0 0 2 176 72 1 flow=Normal-UDP-DNS 1970/01/01 01:54:59.868977 0.222768 udp 10.0.2.15 59004 <-> 1.1.1.1 53 CON 0 0 2 339 71 1 flow=Normal-UDP-DNS 1970/01/01 01:54:59.978785 8.639331 tcp 10.0.2.15 50528 -> 204.11.109.66 443 FSPA_FSPA 0 0 28 10128 2837 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:54:59.979240 8.638263 tcp 10.0.2.15 50529 -> 204.11.109.66 443 FSPA_FSPA 0 0 21 7069 1333 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:00.041814 8.276351 tcp 10.0.2.15 50530 -> 136.243.75.7 443 FSPA_FSPA 0 0 34 9056 1993 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:00.042148 7.423790 tcp 10.0.2.15 50531 -> 136.243.75.7 443 FSRPA_SRPA 0 0 24 7032 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:00.044464 8.607672 tcp 10.0.2.15 50532 -> 204.11.109.66 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:00.061909 8.256188 tcp 10.0.2.15 50533 -> 136.243.75.7 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:00.092054 8.397673 tcp 10.0.2.15 50534 -> 159.253.128.183 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:00.092455 8.224536 tcp 10.0.2.15 50535 -> 13.32.121.33 443 FSPA_FSPA 0 0 33 9113 2053 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:00.092868 7.371773 tcp 10.0.2.15 50536 -> 13.32.121.33 443 FSRPA_SRPA 0 0 25 7514 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:00.093821 8.140554 tcp 10.0.2.15 50537 -> 52.29.129.211 443 FSRPA_FSRPA 0 0 28 8580 1837 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:00.109809 8.379294 tcp 10.0.2.15 50538 -> 159.253.128.183 443 FSPA_FSPA 0 0 21 6880 1685 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:00.113705 8.204042 tcp 10.0.2.15 50539 -> 52.29.129.211 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:00.329737 7.906092 tcp 10.0.2.15 50540 -> 13.32.121.33 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:00.860074 0.320031 udp 10.0.2.15 57772 <-> 1.1.1.1 53 CON 0 0 2 318 90 1 flow=Normal-UDP-DNS 1970/01/01 01:55:01.060218 0.133658 udp 10.0.2.15 56186 <-> 1.1.1.1 53 CON 0 0 2 318 90 1 flow=Normal-UDP-DNS 1970/01/01 01:55:01.214657 68.898468 tcp 10.0.2.15 50541 -> 13.107.4.50 80 SPA_SRPA 0 0 8 2057 442 4 flow=Normal-TCP-WEB-Established 1970/01/01 01:55:01.216340 62.130791 tcp 10.0.2.15 50542 -> 13.107.4.50 80 SPA_SRPA 0 0 8 2057 442 4 flow=Normal-TCP-WEB-Established 1970/01/01 01:55:01.325759 3.569269 tcp 10.0.2.15 50543 -> 198.47.127.15 443 FSRPA_FSRPA 0 0 22 4605 2861 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:01.771125 3.772975 tcp 10.0.2.15 50544 -> 198.47.127.15 443 FSRPA_FSRPA 0 0 22 4661 2925 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:01.854661 3.752442 tcp 10.0.2.15 50545 -> 198.47.127.17 443 FSRPA_FSRPA 0 0 24 4334 2811 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:02.096523 3.118920 tcp 10.0.2.15 50546 -> 198.47.127.15 443 FSRPA_FSRPA 0 0 22 4677 2957 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:02.478443 3.044954 tcp 10.0.2.15 50547 -> 198.47.127.15 443 FSRPA_FSRPA 0 0 22 4677 2933 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:02.788574 0.051032 udp 10.0.2.15 58764 <-> 1.1.1.1 53 CON 0 0 2 166 75 1 flow=Normal-UDP-DNS 1970/01/01 01:55:02.840671 5.408293 tcp 10.0.2.15 50548 -> 35.186.234.100 443 FSPA_FSPA 0 0 37 7973 2353 16 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:02.840949 4.623716 tcp 10.0.2.15 50549 -> 35.186.234.100 443 FSRPA_SRPA 0 0 19 5485 1273 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:09.908976 3.009686 udp 10.0.2.15 58768 -> 239.255.255.250 1900 INT 0 4 864 864 4 flow=Normal-UDP-Attempt 1970/01/01 01:55:10.214185 17.900661 tcp 10.0.2.15 50550 -> 23.38.87.106 443 FSRPA_SPA 0 0 22 7394 5737 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:10.465856 8.954393 tcp 10.0.2.15 50551 -> 23.38.87.106 443 FSRPA_FSRPA 0 0 15 1577 958 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:10.859766 8.561148 tcp 10.0.2.15 50552 -> 23.38.87.106 443 FSRPA_FSRPA 0 0 19 3051 1886 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:10.861941 8.555757 tcp 10.0.2.15 50553 -> 23.38.87.106 443 FSRPA_SPA 0 0 18 4459 3348 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:11.060392 1.206778 udp 10.0.2.15 57017 <-> 1.1.1.1 53 CON 0 0 2 233 81 1 flow=Normal-UDP-DNS 1970/01/01 01:55:11.091997 17.036840 tcp 10.0.2.15 50554 -> 198.47.127.27 443 FSPA_FSPA 0 0 22 6128 3123 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:11.110628 8.309621 tcp 10.0.2.15 50555 -> 23.38.87.106 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:11.347045 8.104221 tcp 10.0.2.15 50556 -> 198.47.127.27 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:12.062134 1.471350 udp 10.0.2.15 57017 <-> 1.0.0.1 53 CON 0 0 2 233 81 1 flow=Normal-UDP-DNS 1970/01/01 01:55:12.269264 15.860895 tcp 10.0.2.15 50557 -> 198.47.127.32 443 FSPA_FSPA 0 0 22 6280 3651 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:12.285471 7.187218 tcp 10.0.2.15 50558 -> 198.47.127.32 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:13.533484 0.000000 icmp 10.0.2.15 0x0303 -> 1.0.0.1 0xb9de URP 0 1 180 180 1 flow=Normal-ICMP 1970/01/01 01:55:17.761523 1.898966 udp 10.0.2.15 59628 <-> 1.1.1.1 53 CON 0 0 2 421 87 1 flow=Normal-UDP-DNS 1970/01/01 01:55:17.777595 1.887429 udp 10.0.2.15 49931 <-> 1.1.1.1 53 CON 0 0 2 306 87 1 flow=Normal-UDP-DNS 1970/01/01 01:55:17.777885 1.891126 udp 10.0.2.15 64547 <-> 1.1.1.1 53 CON 0 0 2 334 76 1 flow=Normal-UDP-DNS 1970/01/01 01:55:17.778145 1.890806 udp 10.0.2.15 59005 <-> 1.1.1.1 53 CON 0 0 2 164 74 1 flow=Normal-UDP-DNS 1970/01/01 01:55:17.778550 1.988998 udp 10.0.2.15 65321 <-> 1.1.1.1 53 CON 0 0 2 288 80 1 flow=Normal-UDP-DNS 1970/01/01 01:55:17.779222 1.986081 udp 10.0.2.15 64298 <-> 1.1.1.1 53 CON 0 0 2 162 73 1 flow=Normal-UDP-DNS 1970/01/01 01:55:18.762872 1.282731 udp 10.0.2.15 59628 <-> 1.0.0.1 53 CON 0 0 2 421 87 1 flow=Normal-UDP-DNS 1970/01/01 01:55:18.778893 1.266892 udp 10.0.2.15 65321 <-> 1.0.0.1 53 CON 0 0 2 288 80 1 flow=Normal-UDP-DNS 1970/01/01 01:55:18.779206 1.266368 udp 10.0.2.15 59005 <-> 1.0.0.1 53 CON 0 0 2 164 74 1 flow=Normal-UDP-DNS 1970/01/01 01:55:18.779456 1.266534 udp 10.0.2.15 64547 <-> 1.0.0.1 53 CON 0 0 2 334 76 1 flow=Normal-UDP-DNS 1970/01/01 01:55:18.779827 1.267872 udp 10.0.2.15 49931 <-> 1.0.0.1 53 CON 0 0 2 306 87 1 flow=Normal-UDP-DNS 1970/01/01 01:55:18.782521 1.265156 udp 10.0.2.15 64298 <-> 1.0.0.1 53 CON 0 0 2 162 73 1 flow=Normal-UDP-DNS 1970/01/01 01:55:19.661435 8.578407 tcp 10.0.2.15 50559 -> 34.236.16.188 443 FSRPA_FSRPA 0 0 25 6638 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:19.661680 8.578645 tcp 10.0.2.15 50560 -> 34.236.16.188 443 FSRPA_FSRPA 0 0 28 7863 1846 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:19.666074 8.571130 tcp 10.0.2.15 50561 -> 152.163.50.3 443 FSPA_FSPA 0 0 22 6324 1944 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:19.666352 8.570169 tcp 10.0.2.15 50562 -> 152.163.50.3 443 FSPA_FSPA 0 0 20 5230 1357 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:19.670115 2.686351 tcp 10.0.2.15 50563 -> 141.170.25.54 443 FSPA_FSPA 0 0 22 6655 1970 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:19.670513 8.462084 tcp 10.0.2.15 50564 -> 141.170.25.54 443 FSPA_FSPA 0 0 20 5300 1357 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:19.674059 8.545072 tcp 10.0.2.15 50565 -> 152.195.39.112 443 FSPA_FSPA 0 0 32 7947 2013 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:19.674317 7.807596 tcp 10.0.2.15 50566 -> 152.195.39.112 443 FSRPA_SRPA 0 0 21 6172 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:19.738980 8.542776 tcp 10.0.2.15 50567 -> 34.236.16.188 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:19.746993 8.529003 tcp 10.0.2.15 50568 -> 152.163.50.3 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:19.749918 8.471381 tcp 10.0.2.15 50569 -> 152.195.39.112 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:19.755971 8.471009 tcp 10.0.2.15 50570 -> 141.170.25.54 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:19.765837 8.341047 tcp 10.0.2.15 50571 -> 23.38.91.117 443 FSRPA_FSRPA 0 0 21 4904 3970 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:19.766433 8.337373 tcp 10.0.2.15 50572 -> 23.38.91.117 443 FSRPA_FSRPA 0 0 15 1577 958 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:19.768410 8.828128 tcp 10.0.2.15 50573 -> 63.251.210.233 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:19.769195 8.514420 tcp 10.0.2.15 50574 -> 63.251.210.233 443 FSPA_FSPA 0 0 23 7351 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:19.769598 8.507949 tcp 10.0.2.15 50575 -> 63.251.210.233 443 FSPA_FSPA 0 0 32 12641 1894 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:19.770236 7.709884 tcp 10.0.2.15 50576 -> 52.206.38.25 443 FSRPA_SPA 0 0 23 6072 1866 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:19.770721 7.708912 tcp 10.0.2.15 50577 -> 52.206.38.25 443 FSRPA_SRPA 0 0 22 4894 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:19.798296 0.693515 udp 10.0.2.15 53926 <-> 1.1.1.1 53 CON 0 0 2 225 80 1 flow=Normal-UDP-DNS 1970/01/01 01:55:19.845686 2.730244 tcp 10.0.2.15 50578 -> 95.154.251.154 443 FSPA_FSPA 0 0 15 3112 1677 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:19.846203 3.696170 tcp 10.0.2.15 50579 -> 95.154.251.154 443 FSPA_FSPA 0 0 15 3714 2054 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:19.846759 8.336452 tcp 10.0.2.15 50580 -> 95.154.251.154 443 FSRPA_SPA 0 0 12 1587 906 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:19.847039 8.335423 tcp 10.0.2.15 50581 -> 95.154.251.154 443 FSRPA_SRPA 0 0 15 1780 960 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:20.019084 7.464641 tcp 10.0.2.15 50582 -> 52.206.38.25 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:20.019582 8.178994 tcp 10.0.2.15 50583 -> 23.38.91.117 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:20.045785 0.000000 icmp 10.0.2.15 0x0303 -> 1.0.0.1 0x29ff URP 0 1 236 236 1 flow=Normal-ICMP 1970/01/01 01:55:20.098270 8.130690 tcp 10.0.2.15 50584 -> 95.154.251.154 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:20.492708 6.274306 tcp 10.0.2.15 50585 -> 198.47.127.17 443 FSRPA_FSRPA 0 0 22 4498 3029 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:20.549753 7.680596 tcp 10.0.2.15 50586 -> 198.47.127.17 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:22.695077 6.281159 tcp 10.0.2.15 50587 -> 198.47.127.15 443 FSRPA_FSRPA 0 0 22 4957 3237 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:22.695594 5.434460 tcp 10.0.2.15 50588 -> 198.47.127.15 443 FSPA_FSPA 0 0 12 1378 912 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:22.911716 5.316652 tcp 10.0.2.15 50589 -> 198.47.127.15 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:22.958518 6.113773 tcp 10.0.2.15 50590 -> 198.47.127.15 443 FSRPA_FSRPA 0 0 20 4561 3087 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:23.206251 5.018062 tcp 10.0.2.15 50591 -> 198.47.127.15 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:23.422160 0.903495 udp 10.0.2.15 50209 <-> 1.1.1.1 53 CON 0 0 2 206 77 1 flow=Normal-UDP-DNS 1970/01/01 01:55:24.331416 2.267780 udp 10.0.2.15 50210 <-> 66.102.1.189 443 CON 0 0 23 14903 6810 12 flow=Normal-UDP-Established 1970/01/01 01:55:41.368763 6.323140 tcp 10.0.2.15 50592 -> 141.170.25.54 443 FSPA_FSPA 0 0 20 5300 1357 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:41.369163 6.325543 tcp 10.0.2.15 50593 -> 141.170.25.54 443 FSPA_FSPA 0 0 20 5300 1357 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:41.369669 6.325631 tcp 10.0.2.15 50594 -> 141.170.25.54 443 FSPA_FSPA 0 0 20 5300 1357 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:41.370564 6.485456 tcp 10.0.2.15 50595 -> 63.251.210.233 443 FSPA_FSPA 0 0 23 7351 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:41.370875 6.486473 tcp 10.0.2.15 50596 -> 63.251.210.233 443 FSPA_FSPA 0 0 23 7351 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:41.371244 6.490100 tcp 10.0.2.15 50597 -> 63.251.210.233 443 FSPA_FSPA 0 0 23 7351 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:41.372673 6.453306 tcp 10.0.2.15 50598 -> 152.163.50.3 443 FSPA_FSPA 0 0 14 1518 982 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:41.373155 6.454001 tcp 10.0.2.15 50599 -> 152.163.50.3 443 FSPA_FSPA 0 0 14 1518 982 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:41.373709 6.453021 tcp 10.0.2.15 50600 -> 152.163.50.3 443 FSPA_FSPA 0 0 14 1518 982 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:41.374454 6.457029 tcp 10.0.2.15 50601 -> 34.236.16.188 443 FSRPA_SPA 0 0 12 1408 904 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:41.374750 7.450631 tcp 10.0.2.15 50602 -> 34.236.16.188 443 FSRPA_FSRPA 0 0 15 1570 958 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:41.375176 7.356553 tcp 10.0.2.15 50603 -> 34.236.16.188 443 FSRPA_FSRPA 0 0 15 1570 958 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:41.375869 6.112106 tcp 10.0.2.15 50604 -> 52.206.38.25 443 FSRPA_SPA 0 0 13 1462 958 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:41.376167 6.113777 tcp 10.0.2.15 50605 -> 52.206.38.25 443 FSRPA_SRPA 0 0 15 1570 1012 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:41.376632 6.113338 tcp 10.0.2.15 50606 -> 52.206.38.25 443 FSRPA_SRPA 0 0 15 1570 1012 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:41.377503 6.113650 tcp 10.0.2.15 50607 -> 152.195.39.112 443 FSRPA_SRPA 0 0 24 6334 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:41.393962 6.301872 tcp 10.0.2.15 50608 -> 198.47.127.32 443 FSPA_FSPA 0 0 22 6368 3747 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:41.397529 0.073001 udp 10.0.2.15 60390 <-> 1.1.1.1 53 CON 0 0 2 223 79 1 flow=Normal-UDP-DNS 1970/01/01 01:55:41.472424 6.217985 tcp 10.0.2.15 50609 -> 198.47.127.27 443 FSPA_FSPA 0 0 22 6384 3219 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:41.621705 6.242064 tcp 10.0.2.15 50610 -> 63.251.210.233 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:44.334382 0.446430 udp 10.0.2.15 63679 <-> 1.1.1.1 53 CON 0 0 2 212 77 1 flow=Normal-UDP-DNS 1970/01/01 01:55:44.334739 0.418635 udp 10.0.2.15 53747 <-> 1.1.1.1 53 CON 0 0 2 164 74 1 flow=Normal-UDP-DNS 1970/01/01 01:55:44.335049 0.462331 udp 10.0.2.15 56627 <-> 1.1.1.1 53 CON 0 0 2 215 79 1 flow=Normal-UDP-DNS 1970/01/01 01:55:44.335560 0.461169 udp 10.0.2.15 60141 <-> 1.1.1.1 53 CON 0 0 2 283 81 1 flow=Normal-UDP-DNS 1970/01/01 01:55:44.335854 0.458879 udp 10.0.2.15 53986 <-> 1.1.1.1 53 CON 0 0 2 166 75 1 flow=Normal-UDP-DNS 1970/01/01 01:55:44.337719 0.464218 udp 10.0.2.15 62788 <-> 1.1.1.1 53 CON 0 0 2 349 76 1 flow=Normal-UDP-DNS 1970/01/01 01:55:44.617060 2.993896 tcp 10.0.2.15 50611 -> 23.38.91.117 443 FSRPA_FSRPA 0 0 23 5090 4102 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:44.617400 2.992864 tcp 10.0.2.15 50612 -> 23.38.91.117 443 FSRPA_FSRPA 0 0 15 1577 958 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:44.689507 1.608213 tcp 10.0.2.15 50613 -> 95.154.251.154 443 FSPA_FSPA 0 0 17 3825 2109 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:44.754012 2.949092 tcp 10.0.2.15 50614 -> 208.146.36.220 443 FSPA_FSPA 0 0 23 6206 1664 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:44.754402 2.940810 tcp 10.0.2.15 50615 -> 208.146.36.220 443 FSPA_FSPA 0 0 18 4900 1087 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:44.781559 1.310993 tcp 10.0.2.15 50616 -> 94.31.6.187 443 FSRPA_FSRPA 0 0 27 8190 2197 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:44.781817 1.537672 tcp 10.0.2.15 50617 -> 94.31.6.187 443 FSPA_FSPA 0 0 22 8168 2129 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:44.795009 2.465548 tcp 10.0.2.15 50618 -> 94.31.6.187 443 FSPA_FSPA 0 0 15 3389 2060 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:44.795564 2.896901 tcp 10.0.2.15 50619 -> 35.190.74.53 443 FSPA_FSPA 0 0 34 8746 2418 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:44.795931 1.040131 tcp 10.0.2.15 50620 -> 35.190.74.53 443 FSRPA_SPA 0 0 15 5986 1165 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:44.797224 2.916794 tcp 10.0.2.15 50621 -> 208.146.36.220 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:44.798064 2.464470 tcp 10.0.2.15 50622 -> 52.215.80.162 443 FSRPA_FSRPA 0 0 27 7139 1897 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:44.798364 2.687453 tcp 10.0.2.15 50623 -> 52.215.80.162 443 FSRPA_SRPA 0 0 21 6051 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:44.800214 2.969330 tcp 10.0.2.15 50624 -> 77.238.185.35 443 FSPA_FSPA 0 0 32 8562 1901 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:44.800803 2.685054 tcp 10.0.2.15 50625 -> 77.238.185.35 443 FSRPA_SRPA 0 0 24 6104 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:44.802969 2.921130 tcp 10.0.2.15 50626 -> 52.212.169.136 443 FSPA_FSPA 0 0 33 8845 1799 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:44.806730 2.961193 tcp 10.0.2.15 50627 -> 77.238.185.35 443 FSA_SRA 0 0 6 340 174 3 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:44.815768 2.953009 tcp 10.0.2.15 50628 -> 52.215.80.162 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:44.823684 2.798950 tcp 10.0.2.15 50629 -> 35.190.74.53 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:44.831054 2.884528 tcp 10.0.2.15 50630 -> 52.212.169.136 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:44.871587 2.750651 tcp 10.0.2.15 50631 -> 23.38.91.117 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:44.943734 2.770789 tcp 10.0.2.15 50632 -> 95.154.251.154 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:46.219068 4.412384 tcp 10.0.2.15 50633 -> 198.47.127.15 443 FSRPA_FSRPA 0 0 20 4713 3239 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:46.329805 4.195871 tcp 10.0.2.15 50634 -> 198.47.127.17 443 FSRPA_FSRPA 0 0 24 4686 3163 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:46.470995 1.255868 tcp 10.0.2.15 50635 -> 198.47.127.15 443 FSRPA_FSRPA 0 0 22 4965 3213 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:46.520119 1.195938 tcp 10.0.2.15 50636 -> 198.47.127.15 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:47.264308 0.198046 udp 10.0.2.15 57760 <-> 1.1.1.1 53 CON 0 0 2 338 76 1 flow=Normal-UDP-DNS 1970/01/01 01:55:47.463172 10.484007 tcp 10.0.2.15 50637 -> 52.30.234.242 443 FSPA_FSPA 0 0 37 10047 2556 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:47.517491 10.831977 tcp 10.0.2.15 50638 -> 52.30.234.242 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:48.545050 1.147046 tcp 10.0.2.15 50639 -> 94.31.6.187 443 FSPA_FSPA 0 0 15 3055 1898 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:49.693723 7.893360 tcp 10.0.2.15 50640 -> 198.47.127.15 443 FSPA_FSPA 0 0 14 1486 966 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:49.694064 4.232927 tcp 10.0.2.15 50641 -> 198.47.127.15 443 FSRPA_FSRPA 0 0 20 5545 3431 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:53.015785 0.866956 tcp 10.0.2.15 50642 -> 94.31.6.187 443 FSPA_FSPA 0 0 17 2772 1618 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:53.887537 0.389269 tcp 10.0.2.15 50643 -> 94.31.6.187 443 FSRPA_FSRPA 0 0 20 2847 1785 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:54.352198 3.471609 tcp 10.0.2.15 50644 -> 94.31.6.187 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:55:54.607382 2.976488 tcp 10.0.2.15 50645 -> 94.31.6.187 443 FSRPA_FSRPA 0 0 19 2744 1699 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:01.427585 6.121191 tcp 10.0.2.15 50646 -> 216.58.201.101 443 FSPA_FSPA 0 0 31 7450 3995 14 flow=Normal-Google-Net-8 1970/01/01 01:56:11.767026 6.116118 tcp 10.0.2.15 50647 -> 141.170.25.54 443 FSPA_FSPA 0 0 18 5192 1303 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:11.767549 6.114362 tcp 10.0.2.15 50648 -> 141.170.25.54 443 FSPA_FSPA 0 0 18 5192 1303 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:11.768405 6.312009 tcp 10.0.2.15 50649 -> 63.251.210.233 443 FSPA_FSPA 0 0 23 7351 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:11.768845 6.295376 tcp 10.0.2.15 50650 -> 63.251.210.233 443 FSPA_FSPA 0 0 23 7351 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:11.769743 5.754496 tcp 10.0.2.15 50651 -> 52.215.80.162 443 FSRPA_SPA 0 0 19 5943 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:11.770406 5.735832 tcp 10.0.2.15 50652 -> 52.215.80.162 443 FSRPA_SRPA 0 0 19 5943 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:11.771529 5.733689 tcp 10.0.2.15 50653 -> 52.215.80.162 443 FSRPA_SRPA 0 0 21 6051 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:11.773666 5.733799 tcp 10.0.2.15 50654 -> 52.212.169.136 443 FSRPA_SRPA 0 0 15 1609 1012 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:11.774688 6.158247 tcp 10.0.2.15 50655 -> 94.31.6.187 443 FSRPA_SPA 0 0 12 1616 904 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:11.775149 6.122519 tcp 10.0.2.15 50656 -> 94.31.6.187 443 FSRPA_SPA 0 0 12 1616 904 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:11.775734 6.093523 tcp 10.0.2.15 50657 -> 94.31.6.187 443 FSRPA_FSRPA 0 0 15 1803 958 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:11.777168 5.731686 tcp 10.0.2.15 50658 -> 35.190.74.53 443 FSRPA_SRPA 0 0 15 1835 1224 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:11.778206 5.731181 tcp 10.0.2.15 50659 -> 77.238.185.35 443 FSRPA_SRPA 0 0 25 6162 1307 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:11.779425 6.121786 tcp 10.0.2.15 50660 -> 208.146.36.220 443 FSPA_FSPA 0 0 20 5008 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:11.779901 6.120668 tcp 10.0.2.15 50661 -> 208.146.36.220 443 FSPA_FSPA 0 0 20 5008 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:11.780770 6.120848 tcp 10.0.2.15 50662 -> 208.146.36.220 443 FSPA_FSPA 0 0 18 4900 1087 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:11.781854 6.119267 tcp 10.0.2.15 50663 -> 198.47.127.17 443 FSPA_FSPA 0 0 14 1486 966 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:11.782456 15.765941 tcp 10.0.2.15 50664 -> 198.47.127.17 443 FSRPA_FSRPA 0 0 22 4738 3269 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:11.782953 6.134840 tcp 10.0.2.15 50665 -> 198.47.127.17 443 FSPA_FSPA 0 0 14 1486 966 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:11.783837 6.027272 tcp 10.0.2.15 50666 -> 52.206.38.25 443 FSRPA_SPA 0 0 12 1408 904 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:11.784416 6.026620 tcp 10.0.2.15 50667 -> 52.206.38.25 443 FSRPA_SPA 0 0 12 1408 904 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:11.810106 6.109712 tcp 10.0.2.15 50668 -> 198.47.127.32 443 FSPA_FSPA 0 0 22 6536 3915 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:11.900234 5.996836 tcp 10.0.2.15 50669 -> 198.47.127.27 443 FSPA_FSPA 0 0 22 5848 3387 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:12.022064 6.120890 tcp 10.0.2.15 50670 -> 63.251.210.233 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:12.022426 5.992769 tcp 10.0.2.15 50671 -> 52.215.80.162 443 FSA_FSA 0 0 8 460 294 5 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:12.032569 5.982566 tcp 10.0.2.15 50672 -> 208.146.36.220 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:12.032869 5.982181 tcp 10.0.2.15 50673 -> 198.47.127.17 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:12.035057 5.775887 tcp 10.0.2.15 50674 -> 52.206.38.25 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:16.290379 0.498017 udp 10.0.2.15 55996 <-> 1.1.1.1 53 CON 0 0 2 251 80 1 flow=Normal-UDP-DNS 1970/01/01 01:56:16.290686 0.497678 udp 10.0.2.15 55243 <-> 1.1.1.1 53 CON 0 0 2 216 77 1 flow=Normal-UDP-DNS 1970/01/01 01:56:16.290943 0.500199 udp 10.0.2.15 54867 <-> 1.1.1.1 53 CON 0 0 2 245 80 1 flow=Normal-UDP-DNS 1970/01/01 01:56:16.291477 0.499616 udp 10.0.2.15 56071 <-> 1.1.1.1 53 CON 0 0 2 318 79 1 flow=Normal-UDP-DNS 1970/01/01 01:56:16.291779 0.500275 udp 10.0.2.15 51726 <-> 1.1.1.1 53 CON 0 0 2 172 78 1 flow=Normal-UDP-DNS 1970/01/01 01:56:16.365533 2.278918 tcp 10.0.2.15 50675 -> 95.154.251.154 443 FSPA_FSPA 0 0 15 3725 2057 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:16.618195 1.318659 tcp 10.0.2.15 50676 -> 95.154.251.154 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:16.789952 10.721284 tcp 10.0.2.15 50677 -> 151.101.12.166 443 FSRPA_SRPA 0 0 21 5856 1162 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:16.790219 10.827123 tcp 10.0.2.15 50678 -> 151.101.12.166 443 FSRPA_FSRPA 0 0 27 7936 1890 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:16.790738 10.821450 tcp 10.0.2.15 50679 -> 23.38.91.117 443 FSRPA_FSRPA 0 0 23 5251 4263 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:16.791122 10.821031 tcp 10.0.2.15 50680 -> 23.38.91.117 443 FSRPA_FSRPA 0 0 15 1577 958 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:16.792954 10.943523 tcp 10.0.2.15 50681 -> 52.207.128.83 443 FSRPA_FSRPA 0 0 29 8550 2780 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:16.793232 10.941542 tcp 10.0.2.15 50682 -> 52.207.128.83 443 FSRPA_FSRPA 0 0 22 5154 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:16.793557 10.818312 tcp 10.0.2.15 50683 -> 104.24.246.16 443 FSPA_FSPA 0 0 30 10108 1906 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:16.793783 10.718082 tcp 10.0.2.15 50684 -> 104.24.246.16 443 FSRPA_SRPA 0 0 27 8765 1270 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:16.794358 7.228016 tcp 10.0.2.15 50685 -> 104.225.134.94 443 FSRPA_FSRPA 0 0 34 9825 2008 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:17.000338 10.706417 tcp 10.0.2.15 50686 -> 23.38.91.117 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:17.017973 10.700410 tcp 10.0.2.15 50687 -> 151.101.12.166 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:17.021344 10.685122 tcp 10.0.2.15 50688 -> 104.24.246.16 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:17.030140 10.727532 tcp 10.0.2.15 50689 -> 52.207.128.83 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:17.033886 10.761015 tcp 10.0.2.15 50690 -> 104.225.134.94 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:18.425051 1.275620 udp 10.0.2.15 51728 <-> 66.102.1.189 443 CON 0 0 13 4845 2400 6 flow=Normal-UDP-Established 1970/01/01 01:56:19.156125 6.402947 tcp 10.0.2.15 50691 -> 198.47.127.15 443 FSRPA_FSRPA 0 0 20 4841 3415 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:19.158227 6.339418 tcp 10.0.2.15 50692 -> 198.47.127.15 443 FSRPA_FSRPA 0 0 20 4993 3335 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:19.197325 1.045070 udp 10.0.2.15 52912 <-> 1.1.1.1 53 CON 0 0 2 329 76 1 flow=Normal-UDP-DNS 1970/01/01 01:56:19.409448 9.491791 tcp 10.0.2.15 50693 -> 198.47.127.15 443 FSRPA_FSRPA 0 0 20 5081 3391 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:19.482717 1.430378 udp 10.0.2.15 61760 <-> 1.1.1.1 53 CON 0 0 2 262 75 1 flow=Normal-UDP-DNS 1970/01/01 01:56:20.201906 0.958747 udp 10.0.2.15 52912 <-> 1.0.0.1 53 CON 0 0 2 329 76 1 flow=Normal-UDP-DNS 1970/01/01 01:56:20.243386 7.448592 tcp 10.0.2.15 50694 -> 185.33.223.83 443 FSPA_FSPA 0 0 21 6532 1937 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:20.243749 7.268588 tcp 10.0.2.15 50695 -> 185.33.223.83 443 FSRPA_SPA 0 0 16 4522 1087 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:20.457944 7.269529 tcp 10.0.2.15 50696 -> 185.33.223.83 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:20.486708 0.800379 udp 10.0.2.15 61760 <-> 1.0.0.1 53 CON 0 0 2 262 75 1 flow=Normal-UDP-DNS 1970/01/01 01:56:20.914066 6.777347 tcp 10.0.2.15 50697 -> 18.195.254.186 443 FSPA_FSPA 0 0 25 8106 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:20.914437 6.777853 tcp 10.0.2.15 50698 -> 18.195.254.186 443 FSPA_FSPA 0 0 33 10691 2668 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:20.995676 6.724444 tcp 10.0.2.15 50699 -> 18.195.254.186 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:21.160653 0.000000 icmp 10.0.2.15 0x0303 -> 1.0.0.1 0xb0ce URP 0 1 281 281 1 flow=Normal-ICMP 1970/01/01 01:56:24.536163 0.368438 udp 10.0.2.15 53402 <-> 1.1.1.1 53 CON 0 0 2 184 84 1 flow=Normal-UDP-DNS 1970/01/01 01:56:24.905456 2.785526 tcp 10.0.2.15 50700 -> 104.155.76.175 443 FSPA_FSPA 0 0 25 10301 2463 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:24.905933 2.731221 tcp 10.0.2.15 50701 -> 104.155.76.175 443 FSPA_FSPA 0 0 19 6734 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:25.040116 2.677839 tcp 10.0.2.15 50702 -> 104.155.76.175 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:25.860829 0.106745 udp 10.0.2.15 64544 <-> 1.1.1.1 53 CON 0 0 2 223 80 1 flow=Normal-UDP-DNS 1970/01/01 01:56:25.968973 3.912292 tcp 10.0.2.15 50703 -> 198.47.127.15 443 FSRPA_FSRPA 0 0 20 5297 3463 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:41.926984 5.706394 tcp 10.0.2.15 50704 -> 151.101.12.166 443 FSRPA_SPA 0 0 12 1423 904 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:41.927410 5.706538 tcp 10.0.2.15 50705 -> 151.101.12.166 443 FSRPA_SPA 0 0 12 1423 904 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:41.928280 5.871953 tcp 10.0.2.15 50706 -> 151.101.12.166 443 FSRPA_FSRPA 0 0 15 1585 958 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:41.929157 5.878025 tcp 10.0.2.15 50707 -> 104.24.246.16 443 FSPA_FSPA 0 0 12 1394 904 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:41.929661 5.893648 tcp 10.0.2.15 50708 -> 104.24.246.16 443 FSPA_FSPA 0 0 12 1394 904 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:41.930444 5.892744 tcp 10.0.2.15 50709 -> 104.24.246.16 443 FSPA_FSPA 0 0 12 1394 904 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:41.931921 5.636295 tcp 10.0.2.15 50710 -> 52.215.80.162 443 FSRPA_SRPA 0 0 21 6051 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:41.932254 5.635904 tcp 10.0.2.15 50711 -> 52.215.80.162 443 FSRPA_SRPA 0 0 21 6051 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:41.933026 5.635208 tcp 10.0.2.15 50712 -> 52.212.169.136 443 FSRPA_SRPA 0 0 15 1609 1012 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:41.933607 5.634642 tcp 10.0.2.15 50713 -> 35.190.74.53 443 FSRPA_SRPA 0 0 15 1835 1224 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:41.934267 5.821091 tcp 10.0.2.15 50714 -> 104.225.134.94 443 FSPA_FSPA 0 0 12 1384 904 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:41.934558 5.627460 tcp 10.0.2.15 50715 -> 104.225.134.94 443 FSRPA_SPA 0 0 25 8127 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:41.934964 5.713781 tcp 10.0.2.15 50716 -> 104.225.134.94 443 FSRPA_SPA 0 0 21 7911 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:41.937249 5.632919 tcp 10.0.2.15 50717 -> 77.238.185.35 443 FSRPA_SRPA 0 0 23 6054 1199 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:41.938257 5.797695 tcp 10.0.2.15 50718 -> 52.207.128.83 443 FSRPA_FSRPA 0 0 15 1570 958 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:41.938556 5.795676 tcp 10.0.2.15 50719 -> 52.207.128.83 443 FSRPA_FSRPA 0 0 15 1570 958 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:41.939278 5.796729 tcp 10.0.2.15 50720 -> 52.207.128.83 443 FSRPA_FSRPA 0 0 15 1570 958 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:42.063331 0.033386 udp 10.0.2.15 55865 <-> 1.1.1.1 53 CON 0 0 2 222 80 1 flow=Normal-UDP-DNS 1970/01/01 01:56:42.073647 16.461130 tcp 10.0.2.15 50721 -> 198.47.127.27 443 FSPA_FSPA 0 0 27 9582 3876 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:42.073937 16.460726 tcp 10.0.2.15 50722 -> 198.47.127.27 443 FSPA_FSPA 0 0 22 6614 1395 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:42.074394 16.436419 tcp 10.0.2.15 50723 -> 198.47.127.27 443 FSPA_FSPA 0 0 23 6668 1395 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:42.074988 0.040788 udp 10.0.2.15 55033 <-> 1.1.1.1 53 CON 0 0 2 225 80 1 flow=Normal-UDP-DNS 1970/01/01 01:56:42.075482 0.042087 udp 10.0.2.15 57652 <-> 1.1.1.1 53 CON 0 0 2 233 81 1 flow=Normal-UDP-DNS 1970/01/01 01:56:42.103497 0.338606 udp 10.0.2.15 57653 <-> 172.217.23.227 443 CON 0 0 14 4660 2678 8 flow=Normal-Google-Net-9 1970/01/01 01:56:42.122551 16.412752 tcp 10.0.2.15 50724 -> 198.47.127.17 443 FSPA_FSPA 0 0 12 1378 912 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:42.122927 16.423639 tcp 10.0.2.15 50725 -> 198.47.127.17 443 FSPA_FSPA 0 0 12 1378 912 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:42.123426 16.423952 tcp 10.0.2.15 50726 -> 198.47.127.32 443 FSPA_FSPA 0 0 20 6596 4029 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:54.678642 3.824299 tcp 10.0.2.15 50727 -> 23.38.91.117 443 FSRPA_FSRPA 0 0 15 1577 958 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:54.679553 14.080417 tcp 10.0.2.15 50728 -> 23.38.91.117 443 FSRPA_FSRPA 0 0 23 5410 4422 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:54.763800 3.670738 tcp 10.0.2.15 50729 -> 95.154.251.154 443 FSPA_FSPA 0 0 15 3717 2055 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:54.932810 3.611338 tcp 10.0.2.15 50730 -> 23.38.91.117 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:55.016570 3.533519 tcp 10.0.2.15 50731 -> 95.154.251.154 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:56:55.304313 111.976524 udp 10.0.2.15 57658 <-> 216.58.201.98 443 CON 0 0 47 15044 8412 25 flow=Normal-Google-Net-8 1970/01/01 01:57:11.424944 3.216856 udp 10.0.2.15 57663 <-> 66.102.1.189 443 CON 0 0 17 7960 3872 8 flow=Normal-UDP-Established 1970/01/01 01:57:13.647130 1.535887 udp 10.0.2.15 56008 <-> 1.1.1.1 53 CON 0 0 2 272 72 1 flow=Normal-UDP-DNS 1970/01/01 01:57:13.647423 1.196629 udp 10.0.2.15 56495 <-> 1.1.1.1 53 CON 0 0 2 164 74 1 flow=Normal-UDP-DNS 1970/01/01 01:57:13.662434 31.353106 udp 10.0.2.15 56496 <-> 216.58.201.97 443 CON 0 0 94 73319 11906 43 flow=Normal-Google-Net-8 1970/01/01 01:57:13.664677 3.360240 udp 10.0.2.15 57665 <-> 216.58.201.98 443 CON 0 0 20 14560 6680 12 flow=Normal-Google-Net-8 1970/01/01 01:57:14.654070 1.740813 udp 10.0.2.15 56495 <-> 1.0.0.1 53 CON 0 0 2 164 74 1 flow=Normal-UDP-DNS 1970/01/01 01:57:14.654300 1.749543 udp 10.0.2.15 56008 <-> 1.0.0.1 53 CON 0 0 2 272 72 1 flow=Normal-UDP-DNS 1970/01/01 01:57:14.851166 20.753275 udp 10.0.2.15 56498 <-> 172.217.16.68 443 CON 0 0 25 17784 8675 14 flow=Normal-Google-Net-9 1970/01/01 01:57:15.190756 23.578320 tcp 10.0.2.15 50732 -> 52.20.170.219 443 FSRPA_FSRPA 0 0 31 10350 2128 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:57:15.412772 13.846784 tcp 10.0.2.15 50733 -> 52.20.170.219 443 FSA_FSA 0 0 8 460 294 5 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:57:16.394883 0.000000 icmp 10.0.2.15 0x0303 -> 1.0.0.1 0xafdc URP 0 1 118 118 1 flow=Normal-ICMP 1970/01/01 01:57:19.936224 5.000368 udp 10.0.2.15 54302 <-> 1.1.1.1 53 CON 0 0 4 572 200 2 flow=Normal-UDP-DNS 1970/01/01 01:57:20.942470 2.902266 udp 10.0.2.15 54302 <-> 1.0.0.1 53 CON 0 0 2 286 100 1 flow=Normal-UDP-DNS 1970/01/01 01:57:22.823475 15.862710 tcp 10.0.2.15 50734 -> 23.38.87.106 443 FSRPA_FSRPA 0 0 19 3038 1873 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:57:22.823795 15.862849 tcp 10.0.2.15 50735 -> 23.38.87.106 443 FSRPA_FSRPA 0 0 19 3037 1872 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:57:22.824184 15.861711 tcp 10.0.2.15 50736 -> 23.38.87.106 443 FSRPA_SPA 0 0 16 2874 1817 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:57:22.824469 15.861880 tcp 10.0.2.15 50737 -> 23.38.87.106 443 FSRPA_SPA 0 0 16 2880 1823 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:57:22.824864 15.861220 tcp 10.0.2.15 50738 -> 23.38.87.106 443 FSRPA_SPA 0 0 16 2877 1820 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:57:22.951894 6.125512 tcp 10.0.2.15 50739 -> 23.38.87.106 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:57:23.844736 0.000000 icmp 10.0.2.15 0x0303 -> 1.0.0.1 0x1ed4 URP 0 1 214 214 1 flow=Normal-ICMP 1970/01/01 01:57:24.936592 0.000000 icmp 10.0.2.15 0x0303 -> 1.1.1.1 0x1ed4 URP 0 1 214 214 1 flow=Normal-ICMP 1970/01/01 01:57:29.822449 3.889861 udp 10.0.2.15 52985 <-> 1.1.1.1 53 CON 0 0 4 488 148 2 flow=Normal-UDP-DNS 1970/01/01 01:57:30.823943 2.174785 udp 10.0.2.15 52985 <-> 1.0.0.1 53 CON 0 0 2 244 74 1 flow=Normal-UDP-DNS 1970/01/01 01:57:32.213966 6.480419 tcp 10.0.2.15 50740 -> 23.38.87.106 443 FSRPA_SPA 0 0 18 4518 3407 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:57:32.356638 6.339857 tcp 10.0.2.15 50741 -> 23.38.87.106 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:57:32.998728 0.000000 icmp 10.0.2.15 0x0303 -> 1.0.0.1 0xf9ce URP 0 1 198 198 1 flow=Normal-ICMP 1970/01/01 01:57:33.712310 0.000000 icmp 10.0.2.15 0x0303 -> 1.1.1.1 0xf9ce URP 0 1 198 198 1 flow=Normal-ICMP 1970/01/01 01:57:42.871840 0.570381 udp 10.0.2.15 52591 <-> 1.1.1.1 53 CON 0 0 2 206 80 1 flow=Normal-UDP-DNS 1970/01/01 01:57:43.450803 15.533384 udp 10.0.2.15 52592 <-> 216.58.201.99 443 CON 0 0 21 10440 5536 11 flow=Normal-Google-Net-8 1970/01/01 01:57:44.121669 3.777111 tcp 10.0.2.15 50742 -> 23.38.87.106 443 FSRPA_SPA 0 0 16 2886 1829 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:57:44.375834 3.527870 tcp 10.0.2.15 50743 -> 23.38.87.106 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:57:44.721357 0.266389 udp 10.0.2.15 63692 <-> 1.1.1.1 53 CON 0 0 2 196 71 1 flow=Normal-UDP-DNS 1970/01/01 01:57:44.988731 3.241237 tcp 10.0.2.15 50744 -> 216.58.201.102 443 FSPA_FSPA 0 0 65 46187 2392 24 flow=Normal-Google-Net-8 1970/01/01 01:57:46.086924 4.289561 udp 10.0.2.15 63694 <-> 216.58.201.102 443 CON 0 0 170 143303 9105 68 flow=Normal-Google-Net-8 1970/01/01 01:57:46.095615 11.644602 tcp 10.0.2.15 50745 -> 52.20.170.219 443 FSRPA_FSRPA 0 0 19 3019 1717 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:57:46.638969 0.131788 udp 10.0.2.15 64344 <-> 1.1.1.1 53 CON 0 0 2 251 77 1 flow=Normal-UDP-DNS 1970/01/01 01:57:46.771634 10.878471 tcp 10.0.2.15 50746 -> 104.127.48.94 443 FSRPA_FSRPA 0 0 129 65692 3420 43 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:57:46.878130 1.025510 tcp 10.0.2.15 50747 -> 104.127.48.94 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:03.434543 0.053279 udp 10.0.2.15 61909 <-> 1.1.1.1 53 CON 0 0 2 193 75 1 flow=Normal-UDP-DNS 1970/01/01 01:58:03.490106 4.173484 tcp 10.0.2.15 50748 -> 216.58.201.101 443 FSPA_FSPA 0 0 31 7474 4022 14 flow=Normal-Google-Net-8 1970/01/01 01:58:09.428330 0.197532 udp 10.0.2.15 61912 <-> 66.102.1.189 443 CON 0 0 13 5001 2403 6 flow=Normal-UDP-Established 1970/01/01 01:58:16.210491 0.065745 udp 10.0.2.15 50952 <-> 1.1.1.1 53 CON 0 0 2 215 87 1 flow=Normal-UDP-DNS 1970/01/01 01:58:16.284343 40.407063 udp 10.0.2.15 50953 <-> 216.58.201.66 443 CON 0 0 28 8640 4052 15 flow=Normal-Google-Net-8 1970/01/01 01:58:16.501330 0.115915 udp 10.0.2.15 53862 <-> 1.1.1.1 53 CON 0 0 2 235 76 1 flow=Normal-UDP-DNS 1970/01/01 01:58:16.527931 0.093259 udp 10.0.2.15 53390 <-> 1.1.1.1 53 CON 0 0 2 251 80 1 flow=Normal-UDP-DNS 1970/01/01 01:58:16.550033 0.113543 udp 10.0.2.15 56876 <-> 1.1.1.1 53 CON 0 0 2 233 81 1 flow=Normal-UDP-DNS 1970/01/01 01:58:16.562631 0.305483 udp 10.0.2.15 56877 <-> 216.58.201.97 443 CON 0 0 6 3090 1553 3 flow=Normal-Google-Net-8 1970/01/01 01:58:16.618341 0.973743 tcp 10.0.2.15 50749 -> 23.38.91.117 443 FSRPA_SRPA 0 0 21 5761 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:16.618734 0.973548 tcp 10.0.2.15 50750 -> 23.38.91.117 443 FSRPA_SPA 0 0 19 5653 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:16.619215 0.973525 tcp 10.0.2.15 50751 -> 23.38.91.117 443 FSRPA_SRPA 0 0 20 5707 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:16.619720 0.973484 tcp 10.0.2.15 50752 -> 23.38.91.117 443 FSRPA_SRPA 0 0 21 5761 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:16.664378 21.131989 tcp 10.0.2.15 50753 -> 198.47.127.32 443 FSPA_FSPA 0 0 21 6560 1395 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:16.664634 615.336182 tcp 10.0.2.15 50754 -> 198.47.127.32 443 FSPA_SA 0 0 33 2328 1460 17 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:16.744800 0.955777 tcp 10.0.2.15 50755 -> 23.38.91.117 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:16.745388 5.922583 tcp 10.0.2.15 50756 -> 198.47.127.32 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:16.939928 5.727762 tcp 10.0.2.15 50757 -> 198.47.127.27 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:16.940798 1.618690 tcp 10.0.2.15 50758 -> 198.47.127.27 443 FSPA_FSPA 0 0 14 1486 966 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:16.953647 0.195499 udp 10.0.2.15 50514 <-> 1.1.1.1 53 CON 0 0 2 216 77 1 flow=Normal-UDP-DNS 1970/01/01 01:58:16.954322 0.197345 udp 10.0.2.15 65274 <-> 1.1.1.1 53 CON 0 0 2 245 80 1 flow=Normal-UDP-DNS 1970/01/01 01:58:16.954572 0.197638 udp 10.0.2.15 65009 <-> 1.1.1.1 53 CON 0 0 2 283 81 1 flow=Normal-UDP-DNS 1970/01/01 01:58:17.008694 0.308185 udp 10.0.2.15 64241 <-> 1.1.1.1 53 CON 0 0 2 349 76 1 flow=Normal-UDP-DNS 1970/01/01 01:58:17.024007 5.570299 tcp 10.0.2.15 50759 -> 104.225.134.94 443 FSRPA_SRPA 0 0 27 8235 1303 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:17.024371 5.570725 tcp 10.0.2.15 50760 -> 104.225.134.94 443 FSRPA_SRPA 0 0 26 8181 1303 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:17.024986 0.291874 udp 10.0.2.15 53839 <-> 1.1.1.1 53 CON 0 0 2 318 79 1 flow=Normal-UDP-DNS 1970/01/01 01:58:17.025651 0.291149 udp 10.0.2.15 63996 <-> 1.1.1.1 53 CON 0 0 2 215 79 1 flow=Normal-UDP-DNS 1970/01/01 01:58:17.150057 0.542029 tcp 10.0.2.15 50761 -> 151.101.12.166 443 FSRPA_SPA 0 0 12 1423 904 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:17.151580 0.549521 tcp 10.0.2.15 50762 -> 151.101.12.166 443 FSRPA_FSRPA 0 0 15 1585 958 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:17.152896 0.539951 tcp 10.0.2.15 50763 -> 104.24.247.16 443 FSPA_FSPA 0 0 12 1394 904 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:17.153181 0.539592 tcp 10.0.2.15 50764 -> 104.24.247.16 443 FSPA_FSPA 0 0 12 1394 904 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:17.190165 0.514203 tcp 10.0.2.15 50765 -> 151.101.12.166 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:17.190799 0.510026 tcp 10.0.2.15 50766 -> 104.24.247.16 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:17.191196 5.449860 tcp 10.0.2.15 50767 -> 198.47.127.27 443 FSPA_FSPA 0 0 14 1486 966 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:17.191906 0.736251 tcp 10.0.2.15 50768 -> 104.225.134.94 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:17.294840 5.332096 tcp 10.0.2.15 50769 -> 23.38.87.106 443 FSRPA_SPA 0 0 16 2882 1825 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:17.298153 5.329473 tcp 10.0.2.15 50770 -> 23.38.87.106 443 FSRPA_SPA 0 0 16 2880 1823 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:17.300607 5.332592 tcp 10.0.2.15 50771 -> 23.38.87.106 443 FSRPA_FSRPA 0 0 19 3043 1878 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:17.317908 5.431389 tcp 10.0.2.15 50772 -> 35.169.19.104 443 FSRPA_FSRPA 0 0 22 5154 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:17.318179 5.431329 tcp 10.0.2.15 50773 -> 35.169.19.104 443 FSRPA_FSRPA 0 0 23 5208 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:17.369996 5.263028 tcp 10.0.2.15 50774 -> 23.38.87.106 443 FSRPA_FSRPA 0 0 22 4436 2725 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:17.442055 5.307357 tcp 10.0.2.15 50775 -> 35.169.19.104 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:19.325278 0.060227 udp 10.0.2.15 51573 <-> 1.1.1.1 53 CON 0 0 2 197 76 1 flow=Normal-UDP-DNS 1970/01/01 01:58:19.388895 3.277627 tcp 10.0.2.15 50776 -> 31.13.84.36 443 FSPA_FSPA 0 0 27 6773 2192 12 flow=Normal-TCP-Facebook-Net-1 1970/01/01 01:58:23.078933 0.034180 udp 10.0.2.15 61059 <-> 1.1.1.1 53 CON 0 0 2 318 95 1 flow=Normal-UDP-DNS 1970/01/01 01:58:23.114031 5.291063 tcp 10.0.2.15 50777 -> 52.204.137.72 443 FSRPA_FSRPA 0 0 28 8586 2343 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:23.590146 4.003787 tcp 10.0.2.15 50778 -> 23.38.91.117 443 FSRPA_SRPA 0 0 21 5761 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:23.590652 4.003486 tcp 10.0.2.15 50779 -> 23.38.91.117 443 FSRPA_SRPA 0 0 21 5761 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:23.591112 4.003617 tcp 10.0.2.15 50780 -> 23.38.91.117 443 FSRPA_SRPA 0 0 21 5761 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:23.591618 4.003690 tcp 10.0.2.15 50781 -> 23.38.91.117 443 FSRPA_SRPA 0 0 21 5761 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:24.142210 0.071390 udp 10.0.2.15 57319 <-> 1.1.1.1 53 CON 0 0 2 286 100 1 flow=Normal-UDP-DNS 1970/01/01 01:58:24.219382 3.530053 tcp 10.0.2.15 50782 -> 23.38.87.106 443 FSRPA_SPA 0 0 21 6130 1983 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:24.219662 3.546870 tcp 10.0.2.15 50783 -> 23.38.87.106 443 FSRPA_SPA 0 0 28 8962 3723 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:24.220080 3.856019 tcp 10.0.2.15 50784 -> 23.38.87.106 443 FSRPA_SPA 0 0 20 6073 1928 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:24.220579 3.382051 tcp 10.0.2.15 50785 -> 23.38.87.106 443 FSRPA_SRPA 0 0 18 4710 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:26.254903 0.197756 udp 10.0.2.15 52698 <-> 1.1.1.1 53 CON 0 0 2 261 77 1 flow=Normal-UDP-DNS 1970/01/01 01:58:26.454530 1.585795 tcp 10.0.2.15 50786 -> 13.32.121.179 443 FSPA_FSPA 0 0 120 64633 3369 41 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:27.077930 5.855744 tcp 10.0.2.15 50787 -> 23.38.87.106 443 FSRPA_SPA 0 0 61 32681 23967 30 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:27.879816 0.108496 udp 10.0.2.15 54930 <-> 1.1.1.1 53 CON 0 0 2 207 75 1 flow=Normal-UDP-DNS 1970/01/01 01:58:27.989440 4.698305 tcp 10.0.2.15 50788 -> 151.101.14.2 443 FSRPA_FSRPA 0 0 42 12797 3711 18 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:29.390240 3.216519 tcp 10.0.2.15 50789 -> 23.38.91.117 443 FSRPA_SRPA 0 0 19 5653 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:29.390945 3.214807 tcp 10.0.2.15 50790 -> 23.38.91.117 443 FSRPA_SPA 0 0 18 5599 1087 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:29.391225 3.214953 tcp 10.0.2.15 50791 -> 23.38.91.117 443 FSRPA_SPA 0 0 17 5545 1087 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:29.391720 9.942147 tcp 10.0.2.15 50792 -> 23.38.91.117 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:29.641468 2.963866 tcp 10.0.2.15 50793 -> 23.38.91.117 443 FSRPA_SRPA 0 0 21 5761 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:29.690945 8.101417 tcp 10.0.2.15 50794 -> 198.47.127.32 443 FSPA_FSPA 0 0 54 30844 17062 24 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:30.185191 2.735179 tcp 10.0.2.15 50795 -> 23.38.87.106 443 FSRPA_SPA 0 0 20 6077 1930 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:30.191494 2.493617 tcp 10.0.2.15 50796 -> 23.38.87.106 443 FSRPA_SPA 0 0 20 6075 1928 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:30.192301 2.741436 tcp 10.0.2.15 50797 -> 23.38.87.106 443 FSRPA_SPA 0 0 20 6075 1929 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:30.211275 2.751172 tcp 10.0.2.15 50798 -> 23.38.87.106 443 FSRPA_FSRPA 0 0 27 7684 2884 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:32.073912 5.695196 tcp 10.0.2.15 50799 -> 23.38.91.117 443 FSRPA_FSRPA 0 0 53 24073 18099 25 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:32.074588 0.532389 tcp 10.0.2.15 50800 -> 23.38.91.117 443 FSRPA_SPA 0 0 18 5599 1087 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:32.206029 4.147857 tcp 10.0.2.15 50801 -> 95.154.251.154 443 FSRPA_FSRPA 0 0 22 6321 4439 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:32.457181 0.631182 tcp 10.0.2.15 50802 -> 95.154.251.154 443 FSRPA_SPA 0 0 28 11512 4613 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:33.583056 4.301159 tcp 10.0.2.15 50805 -> 52.204.137.72 443 FSRPA_FSRPA 0 0 28 8587 2344 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:33.807087 0.022570 udp 10.0.2.15 57123 <-> 1.1.1.1 53 CON 0 0 2 214 79 1 flow=Normal-UDP-DNS 1970/01/01 01:58:33.807894 0.022667 udp 10.0.2.15 55112 <-> 1.1.1.1 53 CON 0 0 2 187 75 1 flow=Normal-UDP-DNS 1970/01/01 01:58:33.808272 0.022275 udp 10.0.2.15 65123 <-> 1.1.1.1 53 CON 0 0 2 198 79 1 flow=Normal-UDP-DNS 1970/01/01 01:58:33.808590 0.041637 udp 10.0.2.15 62720 <-> 1.1.1.1 53 CON 0 0 2 215 85 1 flow=Normal-UDP-DNS 1970/01/01 01:58:33.809210 0.021321 udp 10.0.2.15 54255 <-> 1.1.1.1 53 CON 0 0 2 205 84 1 flow=Normal-UDP-DNS 1970/01/01 01:58:33.809600 0.020862 udp 10.0.2.15 52548 <-> 1.1.1.1 53 CON 0 0 2 185 74 1 flow=Normal-UDP-DNS 1970/01/01 01:58:33.846956 29.270273 udp 10.0.2.15 52549 <-> 216.58.201.110 443 CON 0 0 17 19770 2993 4 flow=Normal-Google-Net-8 1970/01/01 01:58:33.874546 7.600988 udp 10.0.2.15 52550 <-> 216.58.201.110 443 CON 0 0 29 10836 5745 16 flow=Normal-Google-Net-8 1970/01/01 01:58:33.904727 0.321890 udp 10.0.2.15 52551 <-> 216.58.201.97 443 CON 0 0 8 4559 3022 5 flow=Normal-Google-Net-8 1970/01/01 01:58:33.908856 0.091760 udp 10.0.2.15 53874 <-> 1.1.1.1 53 CON 0 0 2 166 75 1 flow=Normal-UDP-DNS 1970/01/01 01:58:33.910015 0.000000 udp 10.0.2.15 58819 -> 1.1.1.1 53 INT 0 1 74 74 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:58:33.910545 0.000000 udp 10.0.2.15 62989 -> 1.1.1.1 53 INT 0 1 73 73 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:58:33.911745 0.000000 udp 10.0.2.15 63496 -> 1.1.1.1 53 INT 0 1 75 75 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:58:34.011450 34.788334 udp 10.0.2.15 63497 <-> 216.58.201.99 443 CON 0 0 356 317833 15547 132 flow=Normal-Google-Net-8 1970/01/01 01:58:34.055290 29.061939 icmp 10.0.2.15 0x0303 -> 216.58.201.110 0x45cd URP 0 7 4130 4130 7 flow=Normal-Google-Net-8 1970/01/01 01:58:34.909551 0.003107 udp 10.0.2.15 58819 <-> 1.0.0.1 53 CON 0 0 2 164 74 1 flow=Normal-UDP-DNS 1970/01/01 01:58:34.919568 57.205215 udp 10.0.2.15 63499 <-> 172.217.16.68 443 CON 0 0 45 14905 6218 21 flow=Normal-Google-Net-9 1970/01/01 01:58:34.922270 0.003845 udp 10.0.2.15 62989 <-> 1.0.0.1 53 CON 0 0 2 162 73 1 flow=Normal-UDP-DNS 1970/01/01 01:58:34.922532 0.004055 udp 10.0.2.15 63496 <-> 1.0.0.1 53 CON 0 0 2 166 75 1 flow=Normal-UDP-DNS 1970/01/01 01:58:34.946638 57.208286 udp 10.0.2.15 63500 <-> 172.217.16.67 443 CON 0 0 459 279990 26093 195 flow=Normal-Google-Net-9 1970/01/01 01:58:35.035116 2.573164 tcp 10.0.2.15 50806 -> 23.38.91.117 443 FSRPA_SRPA 0 0 20 5707 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:35.432841 0.040982 udp 10.0.2.15 62045 <-> 1.0.0.1 53 CON 0 0 2 244 74 1 flow=Normal-UDP-DNS 1970/01/01 01:58:35.474492 2.294395 tcp 10.0.2.15 50807 -> 23.38.87.106 443 FSRPA_FSRPA 0 0 32 12218 7271 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:35.946568 0.000000 udp 10.0.2.15 52019 -> 1.0.0.1 53 INT 0 1 75 75 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 01:58:36.676997 1.095366 tcp 10.0.2.15 50808 -> 95.154.251.154 443 FSPA_FSPA 0 0 19 6154 4384 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:36.932037 0.904193 tcp 10.0.2.15 50809 -> 95.154.251.154 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:36.951021 0.223900 udp 10.0.2.15 52019 <-> 1.1.1.1 53 CON 0 0 2 406 75 1 flow=Normal-UDP-DNS 1970/01/01 01:58:37.189006 15.101142 udp 10.0.2.15 52021 <-> 216.58.209.131 443 CON 0 0 13 5578 3584 7 flow=Normal-Google-Net-8 1970/01/01 01:58:41.703871 1.017117 tcp 10.0.2.15 50810 -> 23.38.87.106 443 FSRPA_FSRPA 0 0 27 9223 4876 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:58:42.719682 0.015070 udp 10.0.2.15 53935 <-> 1.1.1.1 53 CON 0 0 2 248 75 1 flow=Normal-UDP-DNS 1970/01/01 01:58:42.736568 4.884315 tcp 10.0.2.15 50811 -> 216.58.201.78 443 FSRPA_SPA 0 0 20 6631 1327 10 flow=Normal-Google-Net-8 1970/01/01 01:58:42.736931 6.547668 tcp 10.0.2.15 50812 -> 216.58.201.78 443 FSPA_FSPA 0 0 93 70468 3370 34 flow=Normal-Google-Net-8 1970/01/01 01:58:43.368960 0.287122 udp 10.0.2.15 53936 <-> 216.58.201.66 443 CON 0 0 14 5410 2235 7 flow=Normal-Google-Net-8 1970/01/01 01:58:45.755821 0.034102 udp 10.0.2.15 53387 <-> 1.1.1.1 53 CON 0 0 2 190 71 1 flow=Normal-UDP-DNS 1970/01/01 01:58:45.780266 425.414124 udp 10.0.2.15 53388 <-> 216.58.201.78 443 CON 0 0 1258 914302 126064 478 flow=Normal-Google-Net-8 1970/01/01 01:58:45.790789 0.212608 tcp 10.0.2.15 50813 -> 216.58.201.110 443 FSRPA_SPA 0 0 17 6469 1219 8 flow=Normal-Google-Net-8 1970/01/01 01:58:45.791203 18.303371 tcp 10.0.2.15 50814 -> 216.58.201.110 443 FSPA_FSPA 0 0 424 417543 8371 134 flow=Normal-Google-Net-8 1970/01/01 01:58:45.791493 1.826630 tcp 10.0.2.15 50815 -> 216.58.201.110 443 FSRPA_SRPA 0 0 21 6685 1327 10 flow=Normal-Google-Net-8 1970/01/01 01:58:45.791826 0.209443 tcp 10.0.2.15 50816 -> 216.58.201.110 443 FSRPA_SPA 0 0 17 6468 1219 8 flow=Normal-Google-Net-8 1970/01/01 01:58:45.792151 7.432777 tcp 10.0.2.15 50817 -> 216.58.201.110 443 FSPA_FSPA 0 0 542 549320 10390 157 flow=Normal-Google-Net-8 1970/01/01 01:58:45.792453 1.827104 tcp 10.0.2.15 50818 -> 216.58.201.110 443 FSRPA_SRPA 0 0 21 6686 1327 10 flow=Normal-Google-Net-8 1970/01/01 01:58:45.792746 1.826013 tcp 10.0.2.15 50819 -> 216.58.201.110 443 FSRPA_SRPA 0 0 21 6685 1327 10 flow=Normal-Google-Net-8 1970/01/01 01:58:50.845309 0.177918 udp 10.0.2.15 56283 <-> 1.1.1.1 53 CON 0 0 2 207 73 1 flow=Normal-UDP-DNS 1970/01/01 01:58:51.024369 2.057753 tcp 10.0.2.15 50820 -> 216.58.201.97 443 FSPA_FSPA 0 0 140 128051 3756 44 flow=Normal-Google-Net-8 1970/01/01 01:58:51.103962 1.637613 tcp 10.0.2.15 50821 -> 216.58.201.97 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-Google-Net-8 1970/01/01 01:58:52.197300 34.458633 udp 10.0.2.15 56285 <-> 216.58.201.97 443 CON 0 0 859 670015 46360 397 flow=Normal-Google-Net-8 1970/01/01 01:58:55.212825 0.021665 udp 10.0.2.15 52222 <-> 1.1.1.1 53 CON 0 0 2 247 71 1 flow=Normal-UDP-DNS 1970/01/01 01:58:55.241196 2.463984 tcp 10.0.2.15 50822 -> 172.217.23.214 443 FSPA_FSPA 0 0 41 20479 2227 16 flow=Normal-Google-Net-9 1970/01/01 01:58:55.479629 31.280077 udp 10.0.2.15 52223 <-> 172.217.23.214 443 CON 0 0 538 418604 32241 233 flow=Normal-Google-Net-9 1970/01/01 01:58:59.316356 28.482140 udp 10.0.2.15 52225 <-> 216.58.201.66 443 CON 0 0 44 13431 7577 20 flow=Normal-Google-Net-8 1970/01/01 01:58:59.982466 0.099526 udp 10.0.2.15 55491 <-> 1.1.1.1 53 CON 0 0 2 206 77 1 flow=Normal-UDP-DNS 1970/01/01 01:59:00.115800 0.650191 udp 10.0.2.15 55492 <-> 216.58.201.99 443 CON 0 0 26 18293 4078 14 flow=Normal-Google-Net-8 1970/01/01 01:59:01.468704 38.163383 udp 10.0.2.15 55494 <-> 216.58.201.110 443 CON 0 0 106 75387 9506 45 flow=Normal-Google-Net-8 1970/01/01 01:59:06.531157 2.036153 udp 10.0.2.15 55499 <-> 66.102.1.189 443 CON 0 0 22 13412 5428 11 flow=Normal-UDP-Established 1970/01/01 01:59:09.462297 0.389631 udp 10.0.2.15 53820 <-> 1.1.1.1 53 CON 0 0 2 238 95 1 flow=Normal-UDP-DNS 1970/01/01 01:59:09.853229 14.653040 tcp 10.0.2.15 50823 -> 90.182.119.211 443 FSPA_FSPA 0 0 127 81196 4573 40 flow=Normal-Google-Net-10 1970/01/01 01:59:09.853861 14.655405 tcp 10.0.2.15 50824 -> 90.182.119.211 443 FSPA_FSPA 0 0 138 93275 4749 42 flow=Normal-Google-Net-10 1970/01/01 01:59:09.908125 3.003208 udp 10.0.2.15 53821 -> 239.255.255.250 1900 INT 0 4 864 864 4 flow=Normal-UDP-Attempt 1970/01/01 01:59:09.947603 8.943889 tcp 10.0.2.15 50825 -> 90.182.119.211 443 FSPA_FSPA 0 0 12 1572 1093 6 flow=Normal-Google-Net-10 1970/01/01 01:59:12.143046 1.369217 udp 10.0.2.15 54334 <-> 1.1.1.1 53 CON 0 0 2 222 90 1 flow=Normal-UDP-DNS 1970/01/01 01:59:12.248505 12.235905 tcp 10.0.2.15 50826 -> 90.182.119.211 443 FSPA_FSPA 0 0 18 5997 1273 9 flow=Normal-Google-Net-10 1970/01/01 01:59:12.528351 1.230142 udp 10.0.2.15 57045 <-> 1.1.1.1 53 CON 0 0 2 237 72 1 flow=Normal-UDP-DNS 1970/01/01 01:59:12.548953 5.357481 udp 10.0.2.15 50104 <-> 1.1.1.1 53 CON 0 0 3 316 156 2 flow=Normal-UDP-DNS 1970/01/01 01:59:12.741465 7.416713 udp 10.0.2.15 50106 <-> 216.58.201.78 443 CON 0 0 44 25806 10118 21 flow=Normal-Google-Net-8 1970/01/01 01:59:12.860162 5.646018 udp 10.0.2.15 59799 <-> 1.1.1.1 53 CON 0 0 5 540 246 3 flow=Normal-UDP-DNS 1970/01/01 01:59:13.045061 9.611378 tcp 10.0.2.15 50827 -> 216.58.201.78 443 FSRPA_SRPA 0 0 20 6425 1162 10 flow=Normal-Google-Net-8 1970/01/01 01:59:13.143787 1.107092 udp 10.0.2.15 54334 <-> 1.0.0.1 53 CON 0 0 2 222 90 1 flow=Normal-UDP-DNS 1970/01/01 01:59:13.300062 5.591344 tcp 10.0.2.15 50828 -> 216.58.201.78 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-Google-Net-8 1970/01/01 01:59:13.521915 28.058220 udp 10.0.2.15 59800 <-> 216.58.201.98 443 CON 0 0 40 23105 10849 21 flow=Normal-Google-Net-8 1970/01/01 01:59:13.531223 1.463197 udp 10.0.2.15 57045 <-> 1.0.0.1 53 CON 0 0 2 237 72 1 flow=Normal-UDP-DNS 1970/01/01 01:59:13.551629 1.875757 udp 10.0.2.15 50104 <-> 1.0.0.1 53 CON 0 0 2 238 78 1 flow=Normal-UDP-DNS 1970/01/01 01:59:13.760630 10.779502 tcp 10.0.2.15 50829 -> 172.217.23.238 443 FSPA_FSPA 0 0 43 18678 2239 18 flow=Normal-Google-Net-9 1970/01/01 01:59:13.862980 4.643545 udp 10.0.2.15 59799 <-> 1.0.0.1 53 CON 0 0 4 458 164 2 flow=Normal-UDP-DNS 1970/01/01 01:59:14.006780 4.884966 tcp 10.0.2.15 50830 -> 172.217.23.238 443 FSA_FSA 0 0 8 460 294 5 flow=Normal-Google-Net-9 1970/01/01 01:59:14.250879 0.000000 icmp 10.0.2.15 0x0303 -> 1.0.0.1 0x3ed4 URP 0 1 160 160 1 flow=Normal-ICMP 1970/01/01 01:59:14.994420 0.000000 icmp 10.0.2.15 0x0303 -> 1.0.0.1 0xd5de URP 0 1 193 193 1 flow=Normal-ICMP 1970/01/01 01:59:15.428618 4.703917 udp 10.0.2.15 59802 <-> 172.217.23.202 443 CON 0 0 31 26100 10317 14 flow=Normal-Google-Net-9 1970/01/01 01:59:15.548992 3.222038 udp 10.0.2.15 65377 <-> 1.0.0.1 53 CON 0 0 4 458 184 2 flow=Normal-UDP-DNS 1970/01/01 01:59:16.553161 1.815333 udp 10.0.2.15 65377 <-> 1.1.1.1 53 CON 0 0 2 229 92 1 flow=Normal-UDP-DNS 1970/01/01 01:59:16.964259 7.576007 tcp 10.0.2.15 50831 -> 216.58.201.102 443 FSPA_FSPA 0 0 30 7070 2102 13 flow=Normal-Google-Net-8 1970/01/01 01:59:17.070554 7.438541 tcp 10.0.2.15 50832 -> 216.58.201.102 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-Google-Net-8 1970/01/01 01:59:17.727822 1.192229 udp 10.0.2.15 50583 <-> 1.0.0.1 53 CON 0 0 2 260 86 1 flow=Normal-UDP-DNS 1970/01/01 01:59:17.906434 0.000000 icmp 10.0.2.15 0x0303 -> 1.1.1.1 0xb8c3 URP 0 1 188 188 1 flow=Normal-ICMP 1970/01/01 01:59:18.061900 67.570686 udp 10.0.2.15 50585 <-> 173.194.150.234 443 CON 0 0 56 37897 11723 27 flow=Normal-UDP-Established 1970/01/01 01:59:18.171009 0.846437 udp 10.0.2.15 50494 <-> 1.0.0.1 53 CON 0 0 2 238 95 1 flow=Normal-UDP-DNS 1970/01/01 01:59:18.363323 6.120827 tcp 10.0.2.15 50833 -> 173.194.150.234 443 FSPA_FSPA 0 0 19 7301 1273 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:59:18.506525 0.000000 icmp 10.0.2.15 0x0303 -> 1.0.0.1 0x97e9 URP 0 1 175 175 1 flow=Normal-ICMP 1970/01/01 01:59:18.614406 5.892728 tcp 10.0.2.15 50834 -> 173.194.150.234 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:59:18.729700 1.231507 udp 10.0.2.15 50583 <-> 1.1.1.1 53 CON 0 0 2 260 86 1 flow=Normal-UDP-DNS 1970/01/01 01:59:19.044121 5.898279 udp 10.0.2.15 50495 <-> 90.182.119.209 443 CON 0 0 168 150331 14479 61 flow=Normal-Google-Net-10 1970/01/01 01:59:19.474906 0.947499 udp 10.0.2.15 51565 <-> 1.0.0.1 53 CON 0 0 2 187 75 1 flow=Normal-UDP-DNS 1970/01/01 01:59:19.961207 0.000000 icmp 10.0.2.15 0x0303 -> 1.1.1.1 0x97c5 URP 0 1 202 202 1 flow=Normal-ICMP 1970/01/01 01:59:20.166365 1.437530 udp 10.0.2.15 61409 <-> 1.0.0.1 53 CON 0 0 2 229 92 1 flow=Normal-UDP-DNS 1970/01/01 01:59:20.429279 20.253374 udp 10.0.2.15 61410 <-> 216.58.201.110 443 CON 0 0 29 16621 8162 15 flow=Normal-Google-Net-8 1970/01/01 01:59:21.168314 1.193543 udp 10.0.2.15 61409 <-> 1.1.1.1 53 CON 0 0 2 229 92 1 flow=Normal-UDP-DNS 1970/01/01 01:59:21.618933 65.344627 udp 10.0.2.15 61413 <-> 173.194.150.231 443 CON 0 0 209 180879 19819 77 flow=Normal-UDP-Established 1970/01/01 01:59:22.274632 239.947128 udp 10.0.2.15 61414 <-> 90.182.119.211 443 CON 0 0 9785 8129498 383309 4109 flow=Normal-Google-Net-10 1970/01/01 01:59:22.361857 0.000000 icmp 10.0.2.15 0x0303 -> 1.1.1.1 0xe1ef URP 0 1 165 165 1 flow=Normal-ICMP 1970/01/01 01:59:23.289512 1.652021 udp 10.0.2.15 61950 <-> 1.0.0.1 53 CON 0 0 2 205 78 1 flow=Normal-UDP-DNS 1970/01/01 01:59:24.327709 1.659822 udp 10.0.2.15 58428 <-> 1.0.0.1 53 CON 0 0 2 215 87 1 flow=Normal-UDP-DNS 1970/01/01 01:59:24.393101 1.623683 udp 10.0.2.15 61950 <-> 1.1.1.1 53 CON 0 0 2 205 78 1 flow=Normal-UDP-DNS 1970/01/01 01:59:24.945719 66.576782 tcp 10.0.2.15 50835 -> 162.125.66.3 443 SPA_FSPA 0 0 22 6124 1411 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:59:25.337039 1.234050 udp 10.0.2.15 58428 <-> 1.1.1.1 53 CON 0 0 2 215 87 1 flow=Normal-UDP-DNS 1970/01/01 01:59:25.997692 1.368597 udp 10.0.2.15 58430 <-> 216.58.201.66 443 CON 0 0 22 14903 6682 12 flow=Normal-Google-Net-8 1970/01/01 01:59:26.016784 0.000000 icmp 10.0.2.15 0x0303 -> 1.1.1.1 0xfef1 URP 0 1 155 155 1 flow=Normal-ICMP 1970/01/01 01:59:28.371094 0.953420 udp 10.0.2.15 63527 <-> 1.0.0.1 53 CON 0 0 2 189 76 1 flow=Normal-UDP-DNS 1970/01/01 01:59:29.326649 1.017807 tcp 10.0.2.15 50836 -> 162.125.18.133 443 SR_SA 0 0 3 178 120 2 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:59:29.337372 1.480356 tcp 10.0.2.15 50837 -> 162.125.18.133 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:59:30.365505 522.159546 tcp 10.0.2.15 50838 -> 162.125.18.133 443 SPA_SPA 0 0 43 18132 11093 16 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:59:33.762612 6.719545 udp 10.0.2.15 58909 <-> 1.0.0.1 53 CON 0 0 5 507 237 3 flow=Normal-UDP-DNS 1970/01/01 01:59:34.397744 27.911592 tcp 10.0.2.15 50839 -> 23.38.87.106 443 FSRPA_FSRPA 0 0 29 10847 6063 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:59:34.654314 27.653046 tcp 10.0.2.15 50840 -> 23.38.87.106 443 FSRPA_FSRPA 0 0 31 10964 6127 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:59:34.770305 5.710104 udp 10.0.2.15 58909 <-> 1.1.1.1 53 CON 0 0 4 428 158 2 flow=Normal-UDP-DNS 1970/01/01 01:59:35.419704 49.769978 udp 10.0.2.15 58911 <-> 216.58.201.66 443 CON 0 0 43 15796 9475 22 flow=Normal-Google-Net-8 1970/01/01 01:59:36.581963 4.101627 udp 10.0.2.15 59455 <-> 1.0.0.1 53 CON 0 0 4 488 148 2 flow=Normal-UDP-DNS 1970/01/01 01:59:36.641581 27.761618 udp 10.0.2.15 59456 <-> 172.217.16.67 443 CON 0 0 38 25074 15703 21 flow=Normal-Google-Net-9 1970/01/01 01:59:36.699172 3.990023 udp 10.0.2.15 61136 <-> 1.0.0.1 53 CON 0 0 4 636 190 2 flow=Normal-UDP-DNS 1970/01/01 01:59:36.718855 3.970231 udp 10.0.2.15 60853 <-> 1.0.0.1 53 CON 0 0 4 332 150 2 flow=Normal-UDP-DNS 1970/01/01 01:59:37.591686 2.838628 udp 10.0.2.15 59455 <-> 1.1.1.1 53 CON 0 0 2 244 74 1 flow=Normal-UDP-DNS 1970/01/01 01:59:37.702210 2.767918 udp 10.0.2.15 61136 <-> 1.1.1.1 53 CON 0 0 2 318 95 1 flow=Normal-UDP-DNS 1970/01/01 01:59:37.722451 2.756317 udp 10.0.2.15 60853 <-> 1.1.1.1 53 CON 0 0 2 166 75 1 flow=Normal-UDP-DNS 1970/01/01 01:59:39.147548 1.718710 udp 10.0.2.15 55696 <-> 1.0.0.1 53 CON 0 0 2 176 80 1 flow=Normal-UDP-DNS 1970/01/01 01:59:39.147860 1.718356 udp 10.0.2.15 64733 <-> 1.0.0.1 53 CON 0 0 2 381 75 1 flow=Normal-UDP-DNS 1970/01/01 01:59:39.535804 8.127034 tcp 10.0.2.15 50841 -> 23.38.87.106 443 FSRPA_SRPA 0 0 17 4640 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:59:39.587843 22.807568 tcp 10.0.2.15 50842 -> 34.200.114.220 443 FSRPA_SPA 0 0 23 9583 3275 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:59:39.598001 19.778519 udp 10.0.2.15 64735 <-> 172.217.23.238 443 CON 0 0 33 17401 9019 17 flow=Normal-Google-Net-9 1970/01/01 01:59:39.617891 1.910272 udp 10.0.2.15 57852 <-> 1.0.0.1 53 CON 0 0 2 274 72 1 flow=Normal-UDP-DNS 1970/01/01 01:59:39.631193 27.773035 udp 10.0.2.15 57853 <-> 216.58.201.66 443 CON 0 0 24 15127 6974 13 flow=Normal-Google-Net-8 1970/01/01 01:59:39.722645 543.153076 tcp 10.0.2.15 50843 -> 34.200.114.220 443 FSA_SA 0 0 29 1594 834 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:59:40.149509 1.442391 udp 10.0.2.15 55696 <-> 1.1.1.1 53 CON 0 0 2 176 80 1 flow=Normal-UDP-DNS 1970/01/01 01:59:40.150569 1.441524 udp 10.0.2.15 64733 <-> 1.1.1.1 53 CON 0 0 2 381 75 1 flow=Normal-UDP-DNS 1970/01/01 01:59:40.176083 4.662281 tcp 10.0.2.15 50844 -> 23.38.87.106 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:59:40.430314 0.000000 icmp 10.0.2.15 0x0303 -> 1.1.1.1 0x3fe8 URP 0 1 198 198 1 flow=Normal-ICMP 1970/01/01 01:59:40.482157 0.000000 icmp 10.0.2.15 0x0303 -> 1.0.0.1 0x1de6 URP 0 1 163 163 1 flow=Normal-ICMP 1970/01/01 01:59:40.619825 1.751342 udp 10.0.2.15 57852 <-> 1.1.1.1 53 CON 0 0 2 274 72 1 flow=Normal-UDP-DNS 1970/01/01 01:59:40.867697 14.950015 tcp 10.0.2.15 50845 -> 52.48.40.39 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:59:40.869726 14.947869 tcp 10.0.2.15 50846 -> 66.117.29.227 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:59:40.886621 25.493023 tcp 10.0.2.15 50847 -> 66.117.29.227 443 FSRPA_FSRPA 0 0 30 8991 4197 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:59:40.894992 28.051912 tcp 10.0.2.15 50848 -> 52.48.40.39 443 FSRPA_FSRPA 0 0 28 8611 4560 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:59:41.530733 23.068680 tcp 10.0.2.15 50849 -> 151.101.12.175 443 FSRPA_SPA 0 0 27 8524 1753 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:59:41.592093 0.000000 icmp 10.0.2.15 0x0303 -> 1.1.1.1 0xddfc URP 0 1 334 334 1 flow=Normal-ICMP 1970/01/01 01:59:41.627199 14.190332 tcp 10.0.2.15 50850 -> 151.101.12.175 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:59:44.365081 19.618116 tcp 10.0.2.15 50851 -> 34.200.114.220 443 FSPA_FSPA 0 0 22 6894 1261 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:59:44.418766 12.242868 udp 10.0.2.15 56108 <-> 1.0.0.1 53 CON 0 0 6 750 243 3 flow=Normal-UDP-DNS 1970/01/01 01:59:44.505302 12.159303 udp 10.0.2.15 53758 <-> 1.0.0.1 53 CON 0 0 6 858 300 3 flow=Normal-UDP-DNS 1970/01/01 01:59:45.425632 11.235782 udp 10.0.2.15 56108 <-> 1.1.1.1 53 CON 0 0 4 500 162 2 flow=Normal-UDP-DNS 1970/01/01 01:59:45.512932 11.150001 udp 10.0.2.15 53758 <-> 1.1.1.1 53 CON 0 0 4 572 200 2 flow=Normal-UDP-DNS 1970/01/01 01:59:46.863503 11.093770 udp 10.0.2.15 53761 <-> 216.58.201.99 443 CON 0 0 11 12703 5670 5 flow=Normal-Google-Net-8 1970/01/01 01:59:48.612916 43.129868 tcp 10.0.2.15 50852 -> 151.101.12.204 80 FSPA_FSPA 0 0 82 42061 2103 30 flow=Normal-TCP-WEB-Established 1970/01/01 01:59:48.613387 13.695844 tcp 10.0.2.15 50853 -> 151.101.12.204 80 FSA_FSA 0 0 8 460 294 5 flow=Normal-TCP-WEB-Established 1970/01/01 01:59:48.652210 13.655194 tcp 10.0.2.15 50854 -> 151.101.12.204 80 FSA_FSA 0 0 8 460 294 5 flow=Normal-TCP-WEB-Established 1970/01/01 01:59:50.372100 9.610022 udp 10.0.2.15 52416 <-> 1.0.0.1 53 CON 0 0 6 858 300 3 flow=Normal-UDP-DNS 1970/01/01 01:59:50.876464 8.489382 udp 10.0.2.15 52418 <-> 216.58.201.99 443 CON 0 0 13 15487 7062 6 flow=Normal-Google-Net-8 1970/01/01 01:59:51.180888 40.582150 tcp 10.0.2.15 50855 -> 216.58.201.99 443 FSPA_FSPA 0 0 58 13769 6586 27 flow=Normal-Google-Net-8 1970/01/01 01:59:51.376895 8.605141 udp 10.0.2.15 52416 <-> 1.1.1.1 53 CON 0 0 4 572 200 2 flow=Normal-UDP-DNS 1970/01/01 01:59:51.433353 16.959982 tcp 10.0.2.15 50856 -> 216.58.201.99 443 FSRPA_SRPA 0 0 22 6545 1228 11 flow=Normal-Google-Net-8 1970/01/01 01:59:51.445989 16.640755 tcp 10.0.2.15 50857 -> 23.38.87.106 443 FSRPA_SPA 0 0 15 4559 1099 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:59:51.446378 16.666388 tcp 10.0.2.15 50858 -> 23.38.87.106 443 FSRPA_SPA 0 0 15 4561 1099 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:59:51.447080 16.665564 tcp 10.0.2.15 50859 -> 23.38.87.106 443 FSRPA_SPA 0 0 15 4560 1099 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:59:51.688570 14.690133 tcp 10.0.2.15 50860 -> 23.38.87.106 443 FSA_FSA 0 0 8 460 294 5 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 01:59:54.266638 0.000000 icmp 10.0.2.15 0x0303 -> 1.1.1.1 0xfed1 URP 0 1 214 214 1 flow=Normal-ICMP 1970/01/01 01:59:54.662872 11.714912 tcp 10.0.2.15 50861 -> 216.58.201.99 443 FSA_FSA 0 0 8 460 294 5 flow=Normal-Google-Net-8 1970/01/01 01:59:54.694452 1.967182 icmp 10.0.2.15 0x0303 -> 1.0.0.1 0x2cdb URP 0 2 394 394 2 flow=Normal-ICMP 1970/01/01 01:59:55.066896 2.890377 icmp 10.0.2.15 0x0303 -> 216.58.201.99 0x01d2 URP 0 3 1770 1770 3 flow=Normal-Google-Net-8 1970/01/01 01:59:56.661414 0.000000 icmp 10.0.2.15 0x0303 -> 1.1.1.1 0x2cdb URP 0 1 197 197 1 flow=Normal-ICMP 1970/01/01 01:59:58.285933 1.696103 icmp 10.0.2.15 0x0303 -> 1.1.1.1 0xc0cc URP 0 2 428 428 2 flow=Normal-ICMP 1970/01/01 01:59:58.525698 0.000000 icmp 10.0.2.15 0x0303 -> 216.58.201.99 0xc2cc URP 0 1 590 590 1 flow=Normal-Google-Net-8 1970/01/01 01:59:58.952187 1.029935 icmp 10.0.2.15 0x0303 -> 1.0.0.1 0xc0cc URP 0 2 428 428 2 flow=Normal-ICMP 1970/01/01 02:00:03.983630 15.567715 tcp 10.0.2.15 50862 -> 34.200.114.220 443 SPA_SRA 0 0 7 629 463 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:00:04.235628 15.126830 tcp 10.0.2.15 50863 -> 34.200.114.220 443 FSA_FSA 0 0 8 460 294 5 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:00:06.247581 7.804679 udp 10.0.2.15 61686 <-> 1.0.0.1 53 CON 0 0 6 639 240 3 flow=Normal-UDP-DNS 1970/01/01 02:00:06.247928 7.802984 udp 10.0.2.15 64628 <-> 1.0.0.1 53 CON 0 0 6 675 252 3 flow=Normal-UDP-DNS 1970/01/01 02:00:07.250453 6.761814 udp 10.0.2.15 64628 <-> 1.1.1.1 53 CON 0 0 4 450 168 2 flow=Normal-UDP-DNS 1970/01/01 02:00:07.250664 6.800330 udp 10.0.2.15 61686 <-> 1.1.1.1 53 CON 0 0 4 426 160 2 flow=Normal-UDP-DNS 1970/01/01 02:00:08.433147 10.402130 udp 10.0.2.15 64631 <-> 66.102.1.189 443 CON 0 0 14 11685 4964 5 flow=Normal-UDP-Established 1970/01/01 02:00:11.266518 9.475545 udp 10.0.2.15 52364 <-> 1.0.0.1 53 CON 0 0 6 636 240 3 flow=Normal-UDP-DNS 1970/01/01 02:00:11.267247 9.475198 udp 10.0.2.15 62883 <-> 1.0.0.1 53 CON 0 0 6 654 249 3 flow=Normal-UDP-DNS 1970/01/01 02:00:11.267594 9.475027 udp 10.0.2.15 58837 <-> 1.0.0.1 53 CON 0 0 6 660 252 3 flow=Normal-UDP-DNS 1970/01/01 02:00:11.418594 23.382200 tcp 10.0.2.15 50864 -> 151.101.13.208 80 FSPA_FSPA 0 0 21 6129 1090 11 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:11.418952 39.293598 tcp 10.0.2.15 50865 -> 151.101.13.208 80 FSPA_FSPA 0 0 102 57435 2321 34 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:11.529672 10.949450 tcp 10.0.2.15 50866 -> 151.101.13.208 80 FSA_FSA 0 0 8 460 294 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:11.659109 41.150097 tcp 10.0.2.15 50867 -> 151.101.13.128 80 FSPA_FSPA 0 0 1057 749956 16113 282 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:11.659510 34.964172 tcp 10.0.2.15 50868 -> 151.101.13.128 80 FSPA_FSPA 0 0 230 120865 4635 77 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:11.660050 23.135796 tcp 10.0.2.15 50869 -> 151.101.13.128 80 FSPA_FSPA 0 0 25 7534 1161 13 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:11.781502 13.825343 tcp 10.0.2.15 50870 -> 151.101.13.128 80 FSA_FSA 0 0 8 460 294 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:12.268453 8.473346 udp 10.0.2.15 52364 <-> 1.1.1.1 53 CON 0 0 4 424 160 2 flow=Normal-UDP-DNS 1970/01/01 02:00:12.268773 8.473545 udp 10.0.2.15 62883 <-> 1.1.1.1 53 CON 0 0 4 436 166 2 flow=Normal-UDP-DNS 1970/01/01 02:00:12.271997 8.470027 udp 10.0.2.15 58837 <-> 1.1.1.1 53 CON 0 0 4 440 168 2 flow=Normal-UDP-DNS 1970/01/01 02:00:12.446278 8.133957 udp 10.0.2.15 58839 <-> 66.102.1.189 443 CON 0 0 14 15556 7062 6 flow=Normal-UDP-Established 1970/01/01 02:00:12.749269 22.051462 tcp 10.0.2.15 50871 -> 66.102.1.189 443 FSPA_FSPA 0 0 34 7885 2320 16 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:00:12.776427 1.235840 icmp 10.0.2.15 0x0303 -> 1.1.1.1 0x74fc URP 0 2 338 338 2 flow=Normal-ICMP 1970/01/01 02:00:12.892501 523.501221 udp fe80::353e:6fce:ee32:1a73 61861 -> ff02::c 1900 REQ 0 157 32656 32656 157 flow=Normal-UDP-Attempt 1970/01/01 02:00:13.000976 12.606031 tcp 10.0.2.15 50872 -> 66.102.1.189 443 FSA_FSA 0 0 8 460 294 5 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:00:13.551115 0.000000 icmp 10.0.2.15 0x0303 -> 1.0.0.1 0xf6f0 URP 0 1 161 161 1 flow=Normal-ICMP 1970/01/01 02:00:13.656118 5.179159 icmp 10.0.2.15 0x0303 -> 66.102.1.189 0x77fc URP 0 2 1180 1180 2 flow=Normal-ICMP 1970/01/01 02:00:16.721401 14.800540 tcp 10.0.2.15 50873 -> 172.217.23.234 80 FSPA_FSPA 0 0 13 2615 869 7 flow=Normal-Google-Net-9 1970/01/01 02:00:16.732774 21.831230 tcp 10.0.2.15 50874 -> 151.101.13.128 80 FSPA_FSPA 0 0 27 10455 1174 13 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:16.733028 15.008095 tcp 10.0.2.15 50875 -> 151.101.13.128 80 FSPA_FSPA 0 0 12 1906 831 7 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:16.733286 18.067394 tcp 10.0.2.15 50876 -> 151.101.13.128 80 FSPA_FSPA 0 0 22 5993 1513 11 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:16.733674 14.788599 tcp 10.0.2.15 50877 -> 151.101.13.128 80 FSPA_FSPA 0 0 12 2379 823 7 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:16.733920 21.830570 tcp 10.0.2.15 50878 -> 151.101.13.128 80 FSPA_FSPA 0 0 27 10305 1158 13 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:16.734237 18.066326 tcp 10.0.2.15 50879 -> 151.101.13.128 80 FSPA_FSPA 0 0 22 6206 1058 11 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:16.734683 21.829746 tcp 10.0.2.15 50880 -> 151.101.13.128 80 FSPA_FSPA 0 0 30 11723 1229 14 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:16.734902 18.065725 tcp 10.0.2.15 50881 -> 151.101.13.128 80 FSPA_FSPA 0 0 22 6705 1042 11 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:16.735337 34.502552 tcp 10.0.2.15 50882 -> 151.101.13.128 80 FSPA_FSPA 0 0 55 26592 1591 21 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:16.801283 8.802029 tcp 10.0.2.15 50883 -> 172.217.23.234 80 FSA_FSA 0 0 8 460 294 5 flow=Normal-Google-Net-9 1970/01/01 02:00:16.801742 8.804920 tcp 10.0.2.15 50884 -> 151.101.13.128 80 FSA_FSA 0 0 8 460 294 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:16.802266 8.807766 tcp 10.0.2.15 50885 -> 151.101.13.128 80 FSA_FSA 0 0 8 460 294 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:19.024897 0.000000 icmp 10.0.2.15 0x0303 -> 1.1.1.1 0x8ccc URP 0 1 160 160 1 flow=Normal-ICMP 1970/01/01 02:00:19.484479 1.257966 icmp 10.0.2.15 0x0303 -> 1.0.0.1 0xa3f5 URP 0 2 326 326 2 flow=Normal-ICMP 1970/01/01 02:00:19.552671 1.027564 icmp 10.0.2.15 0x0303 -> 66.102.1.189 0xd7e5 URP 0 2 1180 1180 2 flow=Normal-ICMP 1970/01/01 02:00:20.742318 0.000000 icmp 10.0.2.15 0x0303 -> 1.1.1.1 0xa3f5 URP 0 1 163 163 1 flow=Normal-ICMP 1970/01/01 02:00:23.399388 8.341523 tcp 10.0.2.15 50886 -> 151.101.13.128 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:25.505203 9.295182 tcp 10.0.2.15 50887 -> 216.58.201.99 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-Google-Net-8 1970/01/01 02:00:31.987573 60.827339 tcp 10.0.2.15 50888 -> 66.102.1.189 443 FSPA_FSPA 0 0 37 8687 3059 17 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:00:32.238743 6.325549 tcp 10.0.2.15 50889 -> 66.102.1.189 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:00:39.282386 1.136228 udp 10.0.2.15 53391 <-> 1.0.0.1 53 CON 0 0 2 314 79 1 flow=Normal-UDP-DNS 1970/01/01 02:00:40.291456 0.411391 udp 10.0.2.15 53391 <-> 1.1.1.1 53 CON 0 0 2 314 79 1 flow=Normal-UDP-DNS 1970/01/01 02:00:40.420602 2.437315 tcp 10.0.2.15 50890 -> 2.21.74.16 80 FSPA_FSPA 0 0 21 7414 898 8 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:40.520241 9.382715 tcp 10.0.2.15 50891 -> 2.21.74.16 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:40.702847 0.000000 icmp 10.0.2.15 0x0303 -> 1.1.1.1 0x8fd0 URP 0 1 263 263 1 flow=Normal-ICMP 1970/01/01 02:00:41.288267 17.854889 tcp 10.0.2.15 50892 -> 151.101.13.128 80 FSPA_FSPA 0 0 63 31131 2675 24 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:41.539890 2.413829 tcp 10.0.2.15 50893 -> 151.101.13.128 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:45.001699 1.528058 udp 10.0.2.15 57506 <-> 1.0.0.1 53 CON 0 0 2 211 79 1 flow=Normal-UDP-DNS 1970/01/01 02:00:45.097687 467.907532 tcp 10.0.2.15 50894 -> 151.101.13.128 80 FSPA_SPA 0 0 111 46914 5512 41 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:46.009493 0.730462 udp 10.0.2.15 57506 <-> 1.1.1.1 53 CON 0 0 2 211 79 1 flow=Normal-UDP-DNS 1970/01/01 02:00:46.531502 1.317958 tcp 10.0.2.15 50895 -> 151.101.13.128 80 FSPA_FSPA 0 0 18 6051 1379 8 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:46.739955 0.000000 icmp 10.0.2.15 0x0303 -> 1.1.1.1 0xa2e0 URP 0 1 160 160 1 flow=Normal-ICMP 1970/01/01 02:00:46.774105 1.056049 tcp 10.0.2.15 50896 -> 151.101.13.128 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:46.962347 0.882912 tcp 10.0.2.15 50897 -> 151.101.13.208 80 FSPA_FSPA 0 0 28 11752 1066 11 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:47.032483 101.147606 tcp 10.0.2.15 50898 -> 151.101.13.208 80 FSPA_FSPA 0 0 2844 1848512 56675 841 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:47.033482 101.113609 tcp 10.0.2.15 50899 -> 151.101.13.208 80 FSPA_FSPA 0 0 3199 2011035 74796 960 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:47.034428 100.833542 tcp 10.0.2.15 50900 -> 151.101.13.208 80 FSPA_FSPA 0 0 3086 1952898 74327 924 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:47.035012 60.815552 tcp 10.0.2.15 50901 -> 151.101.13.208 80 FSPA_FSPA 0 0 1545 1005328 30960 456 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:47.035532 100.832642 tcp 10.0.2.15 50902 -> 151.101.13.208 80 FSPA_FSPA 0 0 3496 2215137 68454 1051 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:47.049759 0.298406 udp 10.0.2.15 55940 <-> 1.0.0.1 53 CON 0 0 2 256 74 1 flow=Normal-UDP-DNS 1970/01/01 02:00:47.062755 0.296768 udp 10.0.2.15 53556 <-> 1.0.0.1 53 CON 0 0 2 210 73 1 flow=Normal-UDP-DNS 1970/01/01 02:00:47.063506 0.289331 udp 10.0.2.15 55144 <-> 1.0.0.1 53 CON 0 0 2 202 80 1 flow=Normal-UDP-DNS 1970/01/01 02:00:47.116260 6.626348 tcp 10.0.2.15 50903 -> 151.101.13.128 80 FSPA_FSPA 0 0 13 3246 828 7 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:47.167885 18.505041 tcp 10.0.2.15 50904 -> 151.101.13.128 80 FSPA_FSPA 0 0 28 9855 2146 13 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:47.176036 19.193163 tcp 10.0.2.15 50905 -> 151.101.12.204 80 FSPA_FSPA 0 0 34 15021 1792 13 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:47.178829 6.913759 tcp 10.0.2.15 50906 -> 151.101.12.204 80 FSPA_FSPA 0 0 39 16384 1890 16 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:47.181611 11.249085 tcp 10.0.2.15 50907 -> 151.101.12.204 80 FSPA_FSPA 0 0 63 32561 2865 23 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:47.184355 460.832458 tcp 10.0.2.15 50908 -> 151.101.12.204 80 FSPA_SPA 0 0 36 5650 1946 18 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:47.186544 26.848598 tcp 10.0.2.15 50909 -> 151.101.12.204 80 FSPA_FSPA 0 0 43 19524 1941 17 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:47.193106 12.772102 tcp 10.0.2.15 50910 -> 151.101.12.204 80 FSPA_FSPA 0 0 43 19184 1944 17 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:47.267708 15.953140 tcp 10.0.2.15 50911 -> 151.101.13.128 80 FSPA_FSPA 0 0 204 134695 3714 60 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:47.269144 17.881346 tcp 10.0.2.15 50912 -> 151.101.13.128 80 FSPA_FSPA 0 0 55 28420 2038 20 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:47.333242 10.891704 tcp 10.0.2.15 50913 -> 151.101.13.128 80 FSPA_FSPA 0 0 104 64033 3201 35 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:47.351991 5.455648 tcp 10.0.2.15 50914 -> 23.4.248.121 80 FSPA_FSPA 0 0 11 1783 864 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:47.354086 75.927940 tcp 10.0.2.15 50915 -> 199.96.57.6 443 FSRPA_FSRPA 0 0 485 99645 11502 169 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:00:47.361562 5.969742 tcp 10.0.2.15 50916 -> 13.32.121.37 80 FSPA_FSPA 0 0 21 7750 885 9 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:47.372787 7.392096 tcp 10.0.2.15 50917 -> 151.101.13.128 80 FSPA_FSPA 0 0 44 20170 1332 16 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:47.395532 0.338441 udp 10.0.2.15 49615 <-> 1.0.0.1 53 CON 0 0 2 250 73 1 flow=Normal-UDP-DNS 1970/01/01 02:00:47.538459 10.384355 tcp 10.0.2.15 50918 -> 13.32.121.37 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:47.735544 5.066852 tcp 10.0.2.15 50919 -> 13.32.121.157 80 FSPA_FSPA 0 0 35 15592 1162 14 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:47.888310 16.867872 tcp 10.0.2.15 50920 -> 13.32.121.157 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:47.889993 0.309276 udp 10.0.2.15 50873 <-> 1.1.1.1 53 CON 0 0 2 202 86 1 flow=Normal-UDP-DNS 1970/01/01 02:00:47.890671 1.701701 udp 10.0.2.15 59861 <-> 1.1.1.1 53 CON 0 0 2 174 79 1 flow=Normal-UDP-DNS 1970/01/01 02:00:47.891257 0.415259 udp 10.0.2.15 57543 <-> 1.1.1.1 53 CON 0 0 2 184 77 1 flow=Normal-UDP-DNS 1970/01/01 02:00:47.931697 59.913803 tcp 10.0.2.15 50921 -> 151.101.13.208 80 FSPA_FSPA 0 0 1401 891443 31473 425 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:47.974702 19.906483 tcp 10.0.2.15 50922 -> 151.101.13.128 80 FSPA_FSPA 0 0 47 21361 2403 19 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:48.202602 1.760386 udp 10.0.2.15 59350 <-> 1.1.1.1 53 CON 0 0 2 218 88 1 flow=Normal-UDP-DNS 1970/01/01 02:00:48.302560 6.459375 tcp 10.0.2.15 50923 -> 151.101.13.128 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:48.310930 1.981411 udp 10.0.2.15 57699 <-> 1.1.1.1 53 CON 0 0 2 195 78 1 flow=Normal-UDP-DNS 1970/01/01 02:00:48.460649 1.303607 udp 10.0.2.15 53581 <-> 1.1.1.1 53 CON 0 0 2 242 85 1 flow=Normal-UDP-DNS 1970/01/01 02:00:48.581562 1.182619 udp 10.0.2.15 64818 <-> 1.1.1.1 53 CON 0 0 2 228 84 1 flow=Normal-UDP-DNS 1970/01/01 02:00:48.895046 0.981747 udp 10.0.2.15 59861 <-> 1.0.0.1 53 CON 0 0 2 174 79 1 flow=Normal-UDP-DNS 1970/01/01 02:00:49.210912 0.752328 udp 10.0.2.15 59350 <-> 1.0.0.1 53 CON 0 0 2 218 88 1 flow=Normal-UDP-DNS 1970/01/01 02:00:49.318159 0.974622 udp 10.0.2.15 57699 <-> 1.0.0.1 53 CON 0 0 2 195 78 1 flow=Normal-UDP-DNS 1970/01/01 02:00:49.466860 0.842204 udp 10.0.2.15 53581 <-> 1.0.0.1 53 CON 0 0 2 242 85 1 flow=Normal-UDP-DNS 1970/01/01 02:00:49.586276 0.837052 udp 10.0.2.15 64818 <-> 1.0.0.1 53 CON 0 0 2 228 84 1 flow=Normal-UDP-DNS 1970/01/01 02:00:49.617865 0.822766 udp 10.0.2.15 53182 <-> 1.1.1.1 53 CON 0 0 2 280 83 1 flow=Normal-UDP-DNS 1970/01/01 02:00:49.653725 0.795412 udp 10.0.2.15 64862 <-> 1.1.1.1 53 CON 0 0 2 228 84 1 flow=Normal-UDP-DNS 1970/01/01 02:00:49.779910 18.231564 udp 10.0.2.15 64863 <-> 172.217.23.238 443 CON 0 0 46 33248 7550 24 flow=Normal-Google-Net-9 1970/01/01 02:00:49.782019 5.940032 tcp 10.0.2.15 50924 -> 216.58.201.66 80 FSPA_FSPA 0 0 17 7325 848 8 flow=Normal-Google-Net-8 1970/01/01 02:00:49.876793 0.000000 icmp 10.0.2.15 0x0303 -> 1.0.0.1 0xd5e9 URP 0 1 123 123 1 flow=Normal-ICMP 1970/01/01 02:00:49.946638 6.264685 tcp 10.0.2.15 50925 -> 216.58.201.66 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-Google-Net-8 1970/01/01 02:00:50.442694 3.944883 tcp 10.0.2.15 50926 -> 2.21.74.65 80 FSPA_FSPA 0 0 11 2254 798 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:50.452823 4.480874 tcp 10.0.2.15 50927 -> 172.217.23.232 80 FSPA_FSPA 0 0 30 20735 1070 12 flow=Normal-Google-Net-9 1970/01/01 02:00:50.624169 2.178301 tcp 10.0.2.15 50928 -> 2.21.74.65 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:50.648106 3.718212 tcp 10.0.2.15 50929 -> 172.217.23.232 80 FSPA_FSPA 0 0 35 28156 1089 12 flow=Normal-Google-Net-9 1970/01/01 02:00:51.566273 6.694633 tcp 10.0.2.15 50930 -> 151.101.13.128 80 FSPA_FSPA 0 0 53 37429 1342 16 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:51.681360 34.469215 udp 10.0.2.15 64866 <-> 216.58.201.66 443 CON 0 0 31 12323 8661 18 flow=Normal-Google-Net-8 1970/01/01 02:00:51.688365 33.390011 udp 10.0.2.15 64867 <-> 216.58.201.66 443 CON 0 0 34 16943 10277 20 flow=Normal-Google-Net-8 1970/01/01 02:00:51.697559 38.335884 udp 10.0.2.15 64868 <-> 216.58.201.98 443 CON 0 0 91 34298 14083 49 flow=Normal-Google-Net-8 1970/01/01 02:00:52.355430 0.107400 udp 10.0.2.15 51333 <-> 1.1.1.1 53 CON 0 0 2 230 81 1 flow=Normal-UDP-DNS 1970/01/01 02:00:52.365324 0.201563 udp 10.0.2.15 51370 <-> 1.1.1.1 53 CON 0 0 2 170 77 1 flow=Normal-UDP-DNS 1970/01/01 02:00:52.365658 0.201173 udp 10.0.2.15 53629 <-> 1.1.1.1 53 CON 0 0 2 206 78 1 flow=Normal-UDP-DNS 1970/01/01 02:00:52.366236 0.201392 udp 10.0.2.15 50614 <-> 1.1.1.1 53 CON 0 0 2 168 76 1 flow=Normal-UDP-DNS 1970/01/01 02:00:52.467153 6.985970 tcp 10.0.2.15 50931 -> 172.217.23.234 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-Google-Net-9 1970/01/01 02:00:52.569994 0.000000 udp 10.0.2.15 55874 -> 1.1.1.1 53 INT 0 1 81 81 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:00:52.593830 11.199482 tcp 10.0.2.15 50932 -> 172.217.23.234 80 FSPA_FSPA 0 0 246 265522 4349 63 flow=Normal-Google-Net-9 1970/01/01 02:00:53.373394 0.066370 udp 10.0.2.15 52017 <-> 1.1.1.1 53 CON 0 0 2 229 85 1 flow=Normal-UDP-DNS 1970/01/01 02:00:53.405050 0.027947 udp 10.0.2.15 65265 <-> 1.1.1.1 53 CON 0 0 2 321 72 1 flow=Normal-UDP-DNS 1970/01/01 02:00:53.434147 4.723239 tcp 10.0.2.15 50933 -> 185.33.223.216 80 FSPA_FSPA 0 0 23 10627 2961 10 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:53.449694 25.826687 udp 10.0.2.15 65266 <-> 216.58.201.97 443 CON 0 0 625 475690 33295 297 flow=Normal-Google-Net-8 1970/01/01 02:00:53.571177 0.046282 udp 10.0.2.15 55874 <-> 1.0.0.1 53 CON 0 0 2 250 81 1 flow=Normal-UDP-DNS 1970/01/01 02:00:53.619519 4.685480 tcp 10.0.2.15 50934 -> 151.101.12.204 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:53.655058 4.200027 tcp 10.0.2.15 50935 -> 185.33.223.216 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:54.105191 0.431402 udp 10.0.2.15 50100 <-> 1.0.0.1 53 CON 0 0 2 182 76 1 flow=Normal-UDP-DNS 1970/01/01 02:00:54.105479 2.053525 udp 10.0.2.15 55666 <-> 1.0.0.1 53 CON 0 0 3 252 148 2 flow=Normal-UDP-DNS 1970/01/01 02:00:54.352614 0.057318 udp 10.0.2.15 58410 <-> 1.0.0.1 53 CON 0 0 2 257 80 1 flow=Normal-UDP-DNS 1970/01/01 02:00:54.411568 3.685254 tcp 10.0.2.15 50936 -> 23.38.93.202 80 FSPA_FSPA 0 0 55 27671 1343 17 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:54.858973 0.067450 udp 10.0.2.15 52778 <-> 1.0.0.1 53 CON 0 0 2 267 80 1 flow=Normal-UDP-DNS 1970/01/01 02:00:54.928116 2.908941 tcp 10.0.2.15 50937 -> 13.32.121.191 80 FSPA_FSPA 0 0 11 1504 746 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:55.051403 0.037648 udp 10.0.2.15 55717 <-> 1.0.0.1 53 CON 0 0 2 282 77 1 flow=Normal-UDP-DNS 1970/01/01 02:00:55.078006 0.093701 udp 10.0.2.15 58959 <-> 1.0.0.1 53 CON 0 0 2 206 74 1 flow=Normal-UDP-DNS 1970/01/01 02:00:55.092225 8.088588 tcp 10.0.2.15 50938 -> 185.33.223.210 80 FSPA_FSPA 0 0 26 11117 4873 13 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:55.093892 2.760145 tcp 10.0.2.15 50939 -> 185.33.223.210 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:55.102190 0.000000 udp 10.0.2.15 55666 -> 1.1.1.1 53 INT 0 1 74 74 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:00:55.172765 3.647221 tcp 10.0.2.15 50940 -> 151.101.13.108 80 FSPA_FSPA 0 0 12 2571 1087 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:55.173540 4.840931 tcp 10.0.2.15 50941 -> 151.101.13.108 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:55.827466 0.117786 udp 10.0.2.15 57989 <-> 1.0.0.1 53 CON 0 0 2 174 71 1 flow=Normal-UDP-DNS 1970/01/01 02:00:55.946795 2.797569 tcp 10.0.2.15 50942 -> 5.153.20.138 80 FSPA_FSPA 0 0 17 5306 894 8 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:56.048853 4.489703 tcp 10.0.2.15 50943 -> 5.153.20.138 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:56.583558 0.194620 udp 10.0.2.15 64986 <-> 1.0.0.1 53 CON 0 0 2 228 86 1 flow=Normal-UDP-DNS 1970/01/01 02:00:56.749183 0.052819 udp 10.0.2.15 54299 <-> 1.0.0.1 53 CON 0 0 2 196 71 1 flow=Normal-UDP-DNS 1970/01/01 02:00:56.780014 6.077135 tcp 10.0.2.15 50944 -> 151.101.13.208 80 FSPA_FSPA 0 0 14 2680 856 7 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:56.812460 18.477560 udp 10.0.2.15 54300 <-> 172.217.23.230 443 CON 0 0 155 106960 9317 77 flow=Normal-Google-Net-9 1970/01/01 02:00:56.828732 6.337575 tcp 10.0.2.15 50945 -> 151.101.13.208 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:57.369672 2.048877 udp 10.0.2.15 64601 <-> 1.0.0.1 53 CON 0 0 3 318 142 2 flow=Normal-UDP-DNS 1970/01/01 02:00:57.857996 0.072088 udp 10.0.2.15 56932 <-> 1.0.0.1 53 CON 0 0 2 360 91 1 flow=Normal-UDP-DNS 1970/01/01 02:00:57.932110 5.250350 tcp 10.0.2.15 50946 -> 152.195.15.114 443 FSPA_FSPA 0 0 35 13337 2962 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:00:58.186529 0.000000 udp 10.0.2.15 64697 -> 1.0.0.1 53 INT 0 1 89 89 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:00:58.203412 30.366232 udp 10.0.2.15 64698 <-> 172.217.16.68 443 CON 0 0 41 14338 9884 24 flow=Normal-Google-Net-9 1970/01/01 02:00:58.319420 4.796881 tcp 10.0.2.15 50947 -> 151.101.13.128 80 FSPA_FSPA 0 0 18 6796 920 8 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:58.336035 5.433135 tcp 10.0.2.15 50948 -> 151.101.13.128 80 FSPA_FSPA 0 0 18 6679 918 8 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:58.372404 0.000000 udp 10.0.2.15 64601 -> 1.1.1.1 53 INT 0 1 71 71 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:00:58.725206 4.132425 tcp 10.0.2.15 50949 -> 151.101.12.204 80 FSPA_FSPA 0 0 51 23672 1649 19 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:58.812769 4.044797 tcp 10.0.2.15 50950 -> 151.101.12.204 80 FSPA_FSPA 0 0 46 21889 1658 17 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:58.845902 5.096365 tcp 10.0.2.15 50951 -> 13.32.121.37 80 FSPA_FSPA 0 0 15 3312 845 7 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:58.978447 0.115439 udp 10.0.2.15 56752 <-> 1.0.0.1 53 CON 0 0 2 164 74 1 flow=Normal-UDP-DNS 1970/01/01 02:00:59.097207 4.774592 tcp 10.0.2.15 50952 -> 178.250.2.67 443 FSA_FSA 0 0 8 460 294 5 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:00:59.196053 0.043641 udp 10.0.2.15 64697 <-> 1.1.1.1 53 CON 0 0 2 250 89 1 flow=Normal-UDP-DNS 1970/01/01 02:00:59.218087 18.597179 tcp 10.0.2.15 50953 -> 178.250.2.67 443 FSPA_FSPA 0 0 19 5415 1772 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:00:59.243451 3.852808 tcp 10.0.2.15 50954 -> 216.58.201.66 80 FSPA_FSPA 0 0 32 24654 2296 12 flow=Normal-Google-Net-8 1970/01/01 02:00:59.267558 3.924530 tcp 10.0.2.15 50955 -> 185.33.223.216 80 FSPA_FSPA 0 0 29 13527 3758 12 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:59.428100 0.733330 udp 10.0.2.15 56754 <-> 172.217.23.214 443 CON 0 0 39 21523 3592 22 flow=Normal-Google-Net-9 1970/01/01 02:00:59.428957 3.699792 tcp 10.0.2.15 50956 -> 216.58.201.66 80 FSPA_FSPA 0 0 33 27932 960 10 flow=Normal-Google-Net-8 1970/01/01 02:00:59.480112 3.340493 tcp 10.0.2.15 50957 -> 185.33.223.216 80 FSPA_FSPA 0 0 30 11876 3628 13 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:59.481403 0.086586 udp 10.0.2.15 59961 <-> 1.0.0.1 53 CON 0 0 2 445 80 1 flow=Normal-UDP-DNS 1970/01/01 02:00:59.569126 3.252131 tcp 10.0.2.15 50958 -> 35.156.135.172 80 FSPA_FSPA 0 0 11 2151 1585 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:00:59.698142 65.429565 udp 10.0.2.15 59962 <-> 216.58.201.66 443 CON 0 0 211 97388 24194 107 flow=Normal-Google-Net-8 1970/01/01 02:00:59.721829 0.000000 udp 10.0.2.15 56919 -> 1.0.0.1 53 INT 0 1 80 80 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:00:59.722359 0.133666 udp 10.0.2.15 50180 <-> 1.0.0.1 53 CON 0 0 2 338 76 1 flow=Normal-UDP-DNS 1970/01/01 02:00:59.723007 0.000000 udp 10.0.2.15 52486 -> 1.0.0.1 53 INT 0 1 73 73 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:00:59.857559 3.590804 tcp 10.0.2.15 50959 -> 54.72.23.60 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:00:59.910162 2.947651 tcp 10.0.2.15 50960 -> 54.72.23.60 443 FSPA_FSPA 0 0 30 8193 2947 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:00.005736 0.077334 udp 10.0.2.15 59525 <-> 1.0.0.1 53 CON 0 0 2 212 76 1 flow=Normal-UDP-DNS 1970/01/01 02:01:00.084250 3.711346 tcp 10.0.2.15 50961 -> 151.101.14.2 80 FSPA_FSPA 0 0 26 14630 1232 10 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:00.152403 3.009218 tcp 10.0.2.15 50962 -> 185.33.223.216 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:00.364759 2.070460 udp 10.0.2.15 62760 <-> 1.0.0.1 53 CON 0 0 3 281 152 2 flow=Normal-UDP-DNS 1970/01/01 02:01:00.656154 7.127964 tcp 10.0.2.15 50963 -> 185.33.223.216 443 FSRPA_SRPA 0 0 19 4683 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:00.657045 3.970096 tcp 10.0.2.15 50964 -> 185.33.223.216 443 FSPA_FSPA 0 0 20 6774 1949 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:00.658058 2.136243 tcp 10.0.2.15 50965 -> 185.33.223.216 443 FSRPA_SPA 0 0 14 4414 1033 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:00.689159 2.826509 tcp 10.0.2.15 50966 -> 35.156.135.172 443 FSRPA_FSRPA 0 0 25 7133 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:00.689639 7.892204 tcp 10.0.2.15 50967 -> 35.156.135.172 443 FSRPA_FSRPA 0 0 25 7133 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:00.690291 2.566175 tcp 10.0.2.15 50968 -> 35.156.135.172 443 FSRPA_FSRPA 0 0 24 7079 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:00.737467 0.015031 udp 10.0.2.15 56919 <-> 1.1.1.1 53 CON 0 0 2 212 80 1 flow=Normal-UDP-DNS 1970/01/01 02:01:00.738001 0.015331 udp 10.0.2.15 52486 <-> 1.1.1.1 53 CON 0 0 2 286 73 1 flow=Normal-UDP-DNS 1970/01/01 02:01:00.765670 2.092028 tcp 10.0.2.15 50969 -> 192.229.233.248 443 FSPA_FSPA 0 0 33 8696 2831 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:00.766210 2.363427 tcp 10.0.2.15 50970 -> 37.157.4.39 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:00.854249 0.090320 udp 10.0.2.15 56979 <-> 1.1.1.1 53 CON 0 0 2 216 77 1 flow=Normal-UDP-DNS 1970/01/01 02:01:00.854919 0.000000 udp 10.0.2.15 59438 -> 1.1.1.1 53 INT 0 1 80 80 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:01:00.855393 0.170953 udp 10.0.2.15 53484 <-> 1.1.1.1 53 CON 0 0 2 334 81 1 flow=Normal-UDP-DNS 1970/01/01 02:01:00.855862 0.000000 udp 10.0.2.15 60329 -> 1.1.1.1 53 INT 0 1 76 76 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:01:00.856618 0.170596 udp 10.0.2.15 63341 <-> 1.1.1.1 53 CON 0 0 2 262 75 1 flow=Normal-UDP-DNS 1970/01/01 02:01:01.025777 1.838056 tcp 10.0.2.15 50971 -> 37.157.4.39 443 FSPA_FSPA 0 0 30 8944 2856 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:01.086312 1.637181 tcp 10.0.2.15 50972 -> 151.101.12.166 443 FSRPA_SRPA 0 0 19 5748 1108 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:01.086776 26.731833 tcp 10.0.2.15 50973 -> 151.101.12.166 443 FSRPA_FSRPA 0 0 38 14722 7130 18 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:01.087085 6.686038 tcp 10.0.2.15 50974 -> 151.101.12.166 443 FSRPA_SRPA 0 0 20 5802 1162 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:01.103141 8.057208 tcp 10.0.2.15 50975 -> 52.58.8.97 443 FSPA_FSPA 0 0 42 10724 3487 19 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:01.103541 1.753942 tcp 10.0.2.15 50976 -> 52.58.8.97 443 FSPA_FSPA 0 0 37 10258 3258 16 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:01.103965 1.728735 tcp 10.0.2.15 50977 -> 52.58.8.97 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:01.107484 7.866689 tcp 10.0.2.15 50978 -> 52.59.95.8 443 FSPA_FSPA 0 0 22 7956 1153 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:01.108004 7.057860 tcp 10.0.2.15 50979 -> 52.59.95.8 443 FSA_FSA 0 0 8 460 294 5 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:01.110161 1.983856 tcp 10.0.2.15 50980 -> 52.59.95.8 443 FSPA_FSPA 0 0 25 8106 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:01.190927 1.640766 tcp 10.0.2.15 50981 -> 151.101.12.166 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:01.222025 1.505383 tcp 10.0.2.15 50982 -> 52.58.8.97 443 FSRPA_SRPA 0 0 23 6731 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:01.231835 2.365441 tcp 10.0.2.15 50983 -> 52.59.95.8 443 FSPA_FSPA 0 0 25 8106 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:01.365704 0.073479 udp 10.0.2.15 60919 <-> 1.1.1.1 53 CON 0 0 2 230 70 1 flow=Normal-UDP-DNS 1970/01/01 02:01:01.376737 0.000000 udp 10.0.2.15 62760 -> 1.1.1.1 53 INT 0 1 76 76 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:01:01.434103 0.087863 udp 10.0.2.15 49748 <-> 1.1.1.1 53 CON 0 0 2 178 81 1 flow=Normal-UDP-DNS 1970/01/01 02:01:01.445203 1.410954 tcp 10.0.2.15 50984 -> 204.79.197.200 443 FSPA_FSPA 0 0 34 10515 1944 14 flow=Normal-To-Microsoft-7 1970/01/01 02:01:01.523936 2.429259 tcp 10.0.2.15 50985 -> 52.94.232.32 80 FSPA_FSPA 0 0 14 3238 1385 7 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:01.524493 1.397561 tcp 10.0.2.15 50986 -> 52.94.232.32 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:01.688018 1.233877 tcp 10.0.2.15 50987 -> 52.94.232.32 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:01.883478 0.030047 udp 10.0.2.15 59438 <-> 1.0.0.1 53 CON 0 0 2 245 80 1 flow=Normal-UDP-DNS 1970/01/01 02:01:01.884242 0.030593 udp 10.0.2.15 60329 <-> 1.0.0.1 53 CON 0 0 2 243 76 1 flow=Normal-UDP-DNS 1970/01/01 02:01:01.887308 0.064668 udp 10.0.2.15 56975 <-> 1.1.1.1 53 CON 0 0 2 242 71 1 flow=Normal-UDP-DNS 1970/01/01 02:01:01.915534 1.550367 tcp 10.0.2.15 50988 -> 104.24.247.16 443 FSRPA_FSRPA 0 0 26 8711 1216 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:01.915748 10.817257 tcp 10.0.2.15 50989 -> 104.24.247.16 443 FSRPA_SRPA 0 0 27 8765 1270 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:01.916060 5.857131 tcp 10.0.2.15 50990 -> 104.24.247.16 443 FSRPA_SRPA 0 0 27 8765 1270 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:01.916957 6.402029 tcp 10.0.2.15 50991 -> 185.29.132.30 443 FSPA_FSPA 0 0 19 4869 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:01.917218 6.314422 tcp 10.0.2.15 50992 -> 185.29.132.30 443 FSPA_FSPA 0 0 20 4923 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:01.917447 5.999923 tcp 10.0.2.15 50993 -> 185.29.132.30 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:01.951008 1.143183 tcp 10.0.2.15 50994 -> 104.24.247.16 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:01.954015 0.852022 tcp 10.0.2.15 50995 -> 37.252.172.100 443 FSPA_FSPA 0 0 26 11843 4122 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:01.954281 5.830067 tcp 10.0.2.15 50996 -> 37.252.172.100 443 FSRPA_SRPA 0 0 18 4626 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:01.984048 6.261743 tcp 10.0.2.15 50997 -> 185.29.132.30 443 FSPA_FSPA 0 0 19 4869 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:02.104402 6.061400 tcp 10.0.2.15 50998 -> 37.252.172.100 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:02.124051 8.073079 udp 10.0.2.15 60209 <-> 1.0.0.1 53 CON 0 0 5 449 308 4 flow=Normal-UDP-DNS 1970/01/01 02:01:02.124484 0.079948 udp 10.0.2.15 53461 <-> 1.0.0.1 53 CON 0 0 2 239 81 1 flow=Normal-UDP-DNS 1970/01/01 02:01:02.126504 0.000000 udp 10.0.2.15 52544 -> 1.0.0.1 53 INT 0 1 77 77 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:01:02.206675 2.044075 udp 10.0.2.15 53489 <-> 1.0.0.1 53 CON 0 0 3 245 142 2 flow=Normal-UDP-DNS 1970/01/01 02:01:02.229453 0.187732 udp 10.0.2.15 64028 <-> 1.0.0.1 53 CON 0 0 2 230 87 1 flow=Normal-UDP-DNS 1970/01/01 02:01:02.433683 5.899153 tcp 10.0.2.15 50999 -> 151.101.13.208 80 FSPA_FSPA 0 0 14 2879 804 7 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:02.434095 5.821144 tcp 10.0.2.15 51000 -> 151.101.13.208 80 FSPA_FSPA 0 0 14 2877 804 7 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:02.439005 5.763055 tcp 10.0.2.15 51001 -> 151.101.13.128 80 FSPA_FSPA 0 0 24 8475 1564 10 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:02.439268 5.714851 tcp 10.0.2.15 51002 -> 151.101.13.128 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:02.478400 0.674146 tcp 10.0.2.15 51003 -> 151.101.13.208 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:02.536287 18.181213 tcp 10.0.2.15 51004 -> 23.38.93.202 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:02.536583 5.356154 tcp 10.0.2.15 51005 -> 23.38.93.202 80 FSPA_FSPA 0 0 14 4054 1223 7 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:02.683773 5.481683 tcp 10.0.2.15 51006 -> 151.101.13.128 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:02.952426 4.940989 tcp 10.0.2.15 51007 -> 151.101.12.204 80 FSPA_FSPA 0 0 12 3267 1176 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:03.039198 5.737880 tcp 10.0.2.15 51008 -> 37.157.4.39 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:03.040273 4.743803 tcp 10.0.2.15 51009 -> 185.33.223.216 443 FSRPA_SRPA 0 0 18 4629 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:03.041576 5.190485 tcp 10.0.2.15 51010 -> 54.72.23.60 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:03.043112 6.968803 tcp 10.0.2.15 51011 -> 35.156.135.172 443 FSRPA_FSRPA 0 0 15 1570 958 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:03.043964 5.095137 tcp 10.0.2.15 51012 -> 52.59.95.8 443 FSPA_FSPA 0 0 25 8106 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:03.052565 5.113350 tcp 10.0.2.15 51013 -> 185.33.223.210 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:03.061016 5.170828 tcp 10.0.2.15 51014 -> 185.33.223.216 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:03.061372 5.096087 tcp 10.0.2.15 51015 -> 185.33.223.216 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:03.062548 5.826249 tcp 10.0.2.15 51016 -> 185.33.223.216 80 FSPA_FSPA 0 0 11 2292 1101 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:03.064871 5.909173 tcp 10.0.2.15 51017 -> 52.94.232.32 80 FSPA_FSPA 0 0 15 2832 1457 8 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:03.065602 4.913563 tcp 10.0.2.15 51018 -> 52.94.232.32 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:03.066132 4.911392 tcp 10.0.2.15 51019 -> 52.94.232.32 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:03.066942 4.853441 tcp 10.0.2.15 51020 -> 185.29.132.30 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:03.067297 5.176740 tcp 10.0.2.15 51021 -> 185.29.132.30 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:03.067719 4.852553 tcp 10.0.2.15 51022 -> 185.29.132.30 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:03.085673 0.066764 udp 10.0.2.15 62785 <-> 1.0.0.1 53 CON 0 0 2 219 78 1 flow=Normal-UDP-DNS 1970/01/01 02:01:03.086212 0.066180 udp 10.0.2.15 54239 <-> 1.0.0.1 53 CON 0 0 2 164 74 1 flow=Normal-UDP-DNS 1970/01/01 02:01:03.087271 0.077294 udp 10.0.2.15 50790 <-> 1.0.0.1 53 CON 0 0 2 334 75 1 flow=Normal-UDP-DNS 1970/01/01 02:01:03.126475 7.064224 udp 10.0.2.15 60209 <-> 1.1.1.1 53 CON 0 0 4 372 231 3 flow=Normal-UDP-DNS 1970/01/01 02:01:03.129040 0.036827 udp 10.0.2.15 52544 <-> 1.1.1.1 53 CON 0 0 2 186 77 1 flow=Normal-UDP-DNS 1970/01/01 02:01:03.154810 7.729028 tcp 10.0.2.15 51023 -> 178.250.2.76 80 FSA_FSA 0 0 8 460 294 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:03.155153 7.728437 tcp 10.0.2.15 51024 -> 178.250.2.76 80 FSA_FSA 0 0 8 460 294 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:03.155697 5.733378 tcp 10.0.2.15 51025 -> 178.250.2.76 80 FSA_FSA 0 0 8 460 294 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:03.156634 4.840055 tcp 10.0.2.15 51026 -> 161.170.232.53 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:03.156875 5.850308 tcp 10.0.2.15 51027 -> 161.170.232.53 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:03.157395 5.844343 tcp 10.0.2.15 51028 -> 161.170.232.53 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:03.158116 0.082372 udp 10.0.2.15 51096 <-> 1.0.0.1 53 CON 0 0 2 249 84 1 flow=Normal-UDP-DNS 1970/01/01 02:01:03.160766 9.802049 tcp 10.0.2.15 51029 -> 77.238.185.35 443 FSPA_FSPA 0 0 59 20001 6268 24 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:03.161370 0.079523 udp 10.0.2.15 64745 <-> 1.0.0.1 53 CON 0 0 2 240 80 1 flow=Normal-UDP-DNS 1970/01/01 02:01:03.166685 6.047984 tcp 10.0.2.15 51030 -> 18.196.160.167 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:03.167064 9.271579 tcp 10.0.2.15 51031 -> 18.196.160.167 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:03.167796 5.256409 tcp 10.0.2.15 51032 -> 18.196.160.167 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:03.170963 0.031232 udp 10.0.2.15 59005 <-> 1.1.1.1 53 CON 0 0 2 197 76 1 flow=Normal-UDP-DNS 1970/01/01 02:01:03.185519 4.705500 tcp 10.0.2.15 51033 -> 185.33.223.210 80 FSPA_FSPA 0 0 19 6322 2815 9 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:03.204077 0.000000 udp 10.0.2.15 57690 -> 1.1.1.1 53 INT 0 1 81 81 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:01:03.210086 0.000000 udp 10.0.2.15 53489 -> 1.1.1.1 53 INT 0 1 71 71 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:01:03.212808 9.728502 tcp 10.0.2.15 51034 -> 152.195.15.114 443 FSPA_FSPA 0 0 42 17500 4588 18 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:03.241551 454.830109 tcp 10.0.2.15 51035 -> 62.67.193.75 80 FSA_SA 0 0 25 1376 724 13 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:03.243037 454.828644 tcp 10.0.2.15 51036 -> 62.67.193.75 80 FSA_SA 0 0 25 1376 724 13 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:03.243446 454.828278 tcp 10.0.2.15 51037 -> 62.67.193.75 80 FSA_SA 0 0 25 1376 724 13 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:03.244505 5.653953 tcp 10.0.2.15 51038 -> 104.16.230.152 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:03.245252 5.681410 tcp 10.0.2.15 51039 -> 104.16.230.152 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:03.245531 8.662020 tcp 10.0.2.15 51040 -> 104.16.230.152 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:03.290791 4.910244 tcp 10.0.2.15 51041 -> 37.157.4.39 443 FSPA_FSPA 0 0 29 8884 2850 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:03.294192 4.623030 tcp 10.0.2.15 51042 -> 54.72.23.60 443 FSPA_FSPA 0 0 29 8159 2967 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:03.303073 14.544124 tcp 10.0.2.15 51043 -> 185.33.223.210 80 FSPA_FSPA 0 0 15 5013 3728 8 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:03.436864 22.289331 udp 10.0.2.15 57691 <-> 216.58.201.66 443 CON 0 0 62 43536 8123 31 flow=Normal-Google-Net-8 1970/01/01 02:01:03.456097 4.690353 tcp 10.0.2.15 51044 -> 216.58.201.66 80 FSPA_FSPA 0 0 74 73598 2810 21 flow=Normal-Google-Net-8 1970/01/01 02:01:04.066705 0.000000 udp 10.0.2.15 58579 -> 1.1.1.1 53 INT 0 1 84 84 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:01:04.206101 0.038866 udp 10.0.2.15 57690 <-> 1.0.0.1 53 CON 0 0 2 269 81 1 flow=Normal-UDP-DNS 1970/01/01 02:01:04.363265 8.535382 tcp 10.0.2.15 51045 -> 23.4.248.121 80 FSPA_FSPA 0 0 184 150882 3819 50 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:05.070416 0.056851 udp 10.0.2.15 58579 <-> 1.0.0.1 53 CON 0 0 2 267 84 1 flow=Normal-UDP-DNS 1970/01/01 02:01:05.099151 3.820507 tcp 10.0.2.15 51046 -> 151.101.13.208 80 FSPA_FSPA 0 0 14 2720 840 7 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:05.128876 7.612107 tcp 10.0.2.15 51047 -> 104.127.60.107 443 FSRPA_SRPA 0 0 23 6523 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:05.129124 8.785224 tcp 10.0.2.15 51048 -> 104.127.60.107 443 FSRPA_SPA 0 0 44 22013 8074 20 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:05.376815 0.070369 udp 10.0.2.15 57268 <-> 1.0.0.1 53 CON 0 0 2 208 80 1 flow=Normal-UDP-DNS 1970/01/01 02:01:05.448361 8.002810 tcp 10.0.2.15 51049 -> 31.13.84.4 443 FSPA_FSPA 0 0 92 75228 2595 30 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:01:05.547753 0.000000 udp 10.0.2.15 55439 -> 1.0.0.1 53 INT 0 1 84 84 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:01:05.800572 3.173383 tcp 10.0.2.15 51050 -> 52.94.232.32 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:05.945582 0.048644 udp 10.0.2.15 59825 <-> 1.0.0.1 53 CON 0 0 2 252 83 1 flow=Normal-UDP-DNS 1970/01/01 02:01:06.001988 51.003468 udp 10.0.2.15 59826 <-> 66.102.1.156 443 CON 0 0 21 6672 4217 11 flow=Normal-UDP-Established 1970/01/01 02:01:06.549012 0.044372 udp 10.0.2.15 55439 <-> 1.1.1.1 53 CON 0 0 2 210 84 1 flow=Normal-UDP-DNS 1970/01/01 02:01:06.560917 0.123454 udp 10.0.2.15 59175 <-> 1.0.0.1 53 CON 0 0 2 266 125 1 flow=Normal-UDP-DNS 1970/01/01 02:01:06.595128 6.285178 tcp 10.0.2.15 51051 -> 216.58.201.98 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-Google-Net-8 1970/01/01 02:01:06.686220 6.052744 tcp 10.0.2.15 51052 -> 216.58.201.99 443 FSRPA_SRPA 0 0 21 6685 1327 10 flow=Normal-Google-Net-8 1970/01/01 02:01:06.686510 6.194805 tcp 10.0.2.15 51053 -> 216.58.201.99 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-Google-Net-8 1970/01/01 02:01:06.777211 6.163235 tcp 10.0.2.15 51054 -> 216.58.201.99 443 FSPA_FSPA 0 0 34 9281 2815 15 flow=Normal-Google-Net-8 1970/01/01 02:01:06.819617 6.111343 tcp 10.0.2.15 51055 -> 216.58.201.98 443 FSPA_FSPA 0 0 29 8388 2948 13 flow=Normal-Google-Net-8 1970/01/01 02:01:07.817292 4.922734 tcp 10.0.2.15 51056 -> 52.58.8.97 443 FSRPA_SRPA 0 0 24 6785 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:07.843518 5.111806 tcp 10.0.2.15 51057 -> 54.72.23.60 443 FSPA_FSPA 0 0 33 9761 3479 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:07.918769 0.059889 udp 10.0.2.15 54298 <-> 1.1.1.1 53 CON 0 0 2 272 83 1 flow=Normal-UDP-DNS 1970/01/01 02:01:08.013964 4.729845 tcp 10.0.2.15 51058 -> 151.101.14.49 443 FSRPA_SRPA 0 0 27 9456 1270 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:08.038693 0.076585 udp 10.0.2.15 55550 <-> 1.1.1.1 53 CON 0 0 2 223 79 1 flow=Normal-UDP-DNS 1970/01/01 02:01:08.068322 4.830200 tcp 10.0.2.15 51059 -> 52.58.8.97 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:08.094760 5.164664 tcp 10.0.2.15 51060 -> 54.72.23.60 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:08.101766 0.051252 udp 10.0.2.15 54204 <-> 1.1.1.1 53 CON 0 0 2 162 73 1 flow=Normal-UDP-DNS 1970/01/01 02:01:08.102116 0.041686 udp 10.0.2.15 49399 <-> 1.1.1.1 53 CON 0 0 2 267 84 1 flow=Normal-UDP-DNS 1970/01/01 02:01:08.116930 4.619530 tcp 10.0.2.15 51061 -> 185.64.189.236 443 FSRPA_SRPA 0 0 22 6963 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:08.117420 4.617294 tcp 10.0.2.15 51062 -> 185.64.189.236 443 FSRPA_SRPA 0 0 24 7071 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:08.117920 4.616778 tcp 10.0.2.15 51063 -> 185.64.189.236 443 FSRPA_SRPA 0 0 23 7017 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:08.123986 0.027880 udp 10.0.2.15 49669 <-> 1.1.1.1 53 CON 0 0 2 218 77 1 flow=Normal-UDP-DNS 1970/01/01 02:01:08.145949 5.025283 tcp 10.0.2.15 51064 -> 104.127.60.107 443 FSRPA_SPA 0 0 36 15691 5249 16 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:08.159844 10.181649 tcp 10.0.2.15 51065 -> 52.58.8.97 443 FSPA_FSPA 0 0 66 19317 7593 29 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:08.168292 4.776343 tcp 10.0.2.15 51066 -> 63.251.210.233 443 FSPA_FSPA 0 0 31 12628 1982 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:08.205639 4.738875 tcp 10.0.2.15 51067 -> 151.101.14.49 443 FSRPA_SPA 0 0 36 11433 2358 16 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:08.289260 4.916421 tcp 10.0.2.15 51068 -> 185.64.189.236 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:08.290060 9.689459 tcp 10.0.2.15 51069 -> 63.251.210.233 443 FSPA_FSPA 0 0 23 7351 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:08.436498 4.486851 tcp 10.0.2.15 51070 -> 199.96.57.6 80 FSPA_FSPA 0 0 66 41129 1883 22 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:08.578351 4.678688 tcp 10.0.2.15 51071 -> 37.157.4.39 443 FSPA_FSPA 0 0 34 9651 3289 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:08.829991 3.902120 tcp 10.0.2.15 51072 -> 37.157.4.39 443 FSRPA_SRPA 0 0 26 7055 1303 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:08.909423 3.830603 tcp 10.0.2.15 51073 -> 52.58.8.97 443 FSRPA_SRPA 0 0 24 6785 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:08.935913 3.801070 tcp 10.0.2.15 51074 -> 54.72.23.60 443 FSRPA_SPA 0 0 19 5099 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:09.206975 3.661194 tcp 10.0.2.15 51075 -> 23.4.248.121 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:09.237461 0.098458 udp 10.0.2.15 49927 <-> 1.1.1.1 53 CON 0 0 2 406 75 1 flow=Normal-UDP-DNS 1970/01/01 02:01:09.332568 3.607795 tcp 10.0.2.15 51076 -> 216.58.201.101 443 FSPA_FSPA 0 0 35 10278 4104 16 flow=Normal-Google-Net-8 1970/01/01 02:01:09.346781 0.662849 udp 10.0.2.15 49928 <-> 216.58.211.131 443 CON 0 0 15 4436 2448 9 flow=Normal-Google-Net-8 1970/01/01 02:01:09.615041 0.897858 udp 10.0.2.15 49930 <-> 216.58.201.99 443 CON 0 0 18 12278 5057 9 flow=Normal-Google-Net-8 1970/01/01 02:01:09.636213 8.343479 tcp 10.0.2.15 51077 -> 63.251.210.233 443 FSPA_FSPA 0 0 22 7297 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:09.760091 0.000000 udp 10.0.2.15 52861 -> 1.1.1.1 53 INT 0 1 71 71 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:01:09.864484 0.095659 udp 10.0.2.15 63609 <-> 1.1.1.1 53 CON 0 0 2 216 76 1 flow=Normal-UDP-DNS 1970/01/01 02:01:09.865046 0.000000 udp 10.0.2.15 49468 -> 1.1.1.1 53 INT 0 1 72 72 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:01:09.881509 3.323837 tcp 10.0.2.15 51078 -> 151.101.13.128 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:09.924317 3.038920 udp 10.0.2.15 49469 -> 239.255.255.250 1900 INT 0 4 864 864 4 flow=Normal-UDP-Attempt 1970/01/01 02:01:09.961316 3.035556 tcp 10.0.2.15 51079 -> 65.39.202.99 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:09.961569 7.952857 tcp 10.0.2.15 51080 -> 65.39.202.99 443 FSPA_FSPA 0 0 22 7268 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:09.961915 3.470936 tcp 10.0.2.15 51081 -> 65.39.202.99 443 FSPA_FSPA 0 0 23 7322 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:10.086673 2.725364 tcp 10.0.2.15 51082 -> 104.127.60.107 443 FSRPA_SPA 0 0 12 1415 904 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:10.132477 2.683769 tcp 10.0.2.15 51083 -> 151.101.13.128 80 FSPA_FSPA 0 0 14 3598 841 7 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:10.135901 8.422982 tcp 10.0.2.15 51084 -> 65.39.202.99 443 FSPA_FSPA 0 0 22 7268 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:10.159795 2.030198 udp 10.0.2.15 62106 <-> 1.1.1.1 53 CON 0 0 3 283 178 2 flow=Normal-UDP-DNS 1970/01/01 02:01:10.197130 0.000000 icmp 10.0.2.15 0x0303 -> 1.0.0.1 0x31eb URP 0 1 169 169 1 flow=Normal-ICMP 1970/01/01 02:01:10.490206 2.325791 tcp 10.0.2.15 51085 -> 2.21.74.65 80 FSPA_FSPA 0 0 11 2309 1787 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:10.718959 7.585018 tcp 10.0.2.15 51086 -> 5.153.20.138 443 FSPA_FSPA 0 0 27 7985 1811 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:10.766226 0.032686 udp 10.0.2.15 52861 <-> 1.0.0.1 53 CON 0 0 2 194 71 1 flow=Normal-UDP-DNS 1970/01/01 02:01:10.844180 2.871075 tcp 10.0.2.15 51087 -> 46.228.164.11 443 FSRPA_FSRPA 0 0 20 5074 1357 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:10.844637 452.123016 tcp 10.0.2.15 51088 -> 46.228.164.11 443 FSPA_SPA 0 0 35 5612 1799 17 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:10.851318 452.116211 tcp 10.0.2.15 51089 -> 46.228.164.11 443 FSPA_SPA 0 0 35 5612 1799 17 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:10.872922 0.054489 udp 10.0.2.15 49468 <-> 1.0.0.1 53 CON 0 0 2 234 72 1 flow=Normal-UDP-DNS 1970/01/01 02:01:10.895099 2.326375 tcp 10.0.2.15 51090 -> 46.228.164.11 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:10.918414 2.853445 tcp 10.0.2.15 51091 -> 35.156.135.172 443 FSRPA_FSRPA 0 0 27 9571 3077 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:10.955374 11.130752 tcp 10.0.2.15 51092 -> 185.31.128.128 443 FSPA_FSPA 0 0 17 4506 1303 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:10.955679 107.489319 tcp 10.0.2.15 51093 -> 185.31.128.128 443 FSPA_SRPA 0 0 16 4378 1250 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:10.959261 11.099307 tcp 10.0.2.15 51094 -> 185.31.128.128 443 FSPA_FSPA 0 0 17 4506 1303 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:11.165541 0.000000 udp 10.0.2.15 62106 -> 1.0.0.1 53 INT 0 1 89 89 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:01:11.463838 1.433561 tcp 10.0.2.15 51095 -> 31.13.84.36 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:01:11.714662 11.264903 tcp 10.0.2.15 51096 -> 31.13.84.36 443 FSPA_FSPA 0 0 133 113253 4803 45 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:01:11.769830 0.975055 tcp 10.0.2.15 51097 -> 31.13.84.36 443 FSRPA_SRPA 0 0 20 5182 1133 10 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:01:11.921890 0.020909 udp 10.0.2.15 61701 <-> 1.0.0.1 53 CON 0 0 2 213 81 1 flow=Normal-UDP-DNS 1970/01/01 02:01:11.965255 5.771757 tcp 10.0.2.15 51098 -> 31.13.84.4 443 FSRPA_SRPA 0 0 21 5236 1187 11 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:01:11.965680 6.173170 tcp 10.0.2.15 51099 -> 31.13.84.4 443 FSPA_FSPA 0 0 51 24044 2843 21 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:01:12.431812 4.834126 udp 10.0.2.15 61702 <-> 216.58.201.99 443 CON 0 0 22 5858 3981 17 flow=Normal-Google-Net-8 1970/01/01 02:01:12.478513 0.037235 udp 10.0.2.15 54694 <-> 1.1.1.1 53 CON 0 0 2 190 75 1 flow=Normal-UDP-DNS 1970/01/01 02:01:12.500764 0.000000 udp 10.0.2.15 50850 -> 1.1.1.1 53 INT 0 1 72 72 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:01:12.501152 0.049899 udp 10.0.2.15 50466 <-> 1.1.1.1 53 CON 0 0 2 196 90 1 flow=Normal-UDP-DNS 1970/01/01 02:01:12.518473 6.451129 tcp 10.0.2.15 51100 -> 31.13.84.8 443 FSPA_FSPA 0 0 41 20617 2374 17 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:01:12.540068 0.000000 udp 10.0.2.15 65468 -> 1.1.1.1 53 INT 0 1 79 79 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:01:12.553008 15.275830 tcp 10.0.2.15 51101 -> 90.182.114.17 443 FSPA_FSPA 0 0 137 118305 3611 45 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:12.566914 0.083509 udp 10.0.2.15 54305 <-> 1.1.1.1 53 CON 0 0 2 272 72 1 flow=Normal-UDP-DNS 1970/01/01 02:01:12.653297 20.253036 tcp 10.0.2.15 51102 -> 34.204.246.70 443 FSRPA_FSRPA 0 0 29 8848 1369 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:12.653559 5.257396 tcp 10.0.2.15 51103 -> 34.204.246.70 443 FSRPA_FSRPA 0 0 26 8674 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:12.653760 5.256423 tcp 10.0.2.15 51104 -> 34.204.246.70 443 FSRPA_SPA 0 0 22 8458 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:12.861325 5.536802 tcp 10.0.2.15 51105 -> 34.204.246.70 443 FSA_FSA 0 0 8 460 294 5 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:13.506953 0.043349 udp 10.0.2.15 50850 <-> 1.0.0.1 53 CON 0 0 2 160 72 1 flow=Normal-UDP-DNS 1970/01/01 02:01:13.544303 0.052605 udp 10.0.2.15 65468 <-> 1.0.0.1 53 CON 0 0 2 197 79 1 flow=Normal-UDP-DNS 1970/01/01 02:01:13.551683 4.181102 tcp 10.0.2.15 51106 -> 31.13.84.36 443 FSRPA_SRPA 0 0 19 5128 1079 9 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:01:13.598285 4.138684 tcp 10.0.2.15 51107 -> 31.13.84.4 443 FSRPA_SRPA 0 0 19 5128 1079 9 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:01:13.601823 4.215417 tcp 10.0.2.15 51108 -> 31.13.84.36 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:01:13.602094 4.440915 tcp 10.0.2.15 51109 -> 31.13.84.4 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:01:13.779298 4.057666 tcp 10.0.2.15 51110 -> 52.59.95.8 443 FSPA_FSPA 0 0 29 10542 3129 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:13.933787 10.504342 tcp 10.0.2.15 51111 -> 185.33.223.216 443 FSPA_FSPA 0 0 22 7870 3268 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:14.312351 15.366303 udp 10.0.2.15 54308 <-> 172.217.23.234 443 CON 0 0 15 4966 2459 9 flow=Normal-Google-Net-9 1970/01/01 02:01:14.394961 48.443577 tcp 10.0.2.15 51112 -> 31.13.84.4 443 FSPA_FSPA 0 0 657 396218 13335 217 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:01:14.645896 8.086485 tcp 10.0.2.15 51113 -> 31.13.84.4 443 FSRPA_SRPA 0 0 21 5248 1199 11 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:01:14.698027 3.034743 tcp 10.0.2.15 51114 -> 31.13.84.4 443 FSRPA_SRPA 0 0 18 5075 1079 9 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:01:14.705650 8.026689 tcp 10.0.2.15 51115 -> 31.13.84.4 443 FSRPA_SRPA 0 0 20 5181 1133 10 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:01:14.707271 3.025483 tcp 10.0.2.15 51116 -> 31.13.84.4 443 FSRPA_SRPA 0 0 20 5181 1133 10 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:01:14.708566 8.023832 tcp 10.0.2.15 51117 -> 31.13.84.4 443 FSRPA_SRPA 0 0 20 5182 1133 10 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:01:14.734201 3.410389 tcp 10.0.2.15 51118 -> 151.101.12.204 80 FSPA_FSPA 0 0 25 15737 1434 9 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:15.137925 0.375028 udp 10.0.2.15 54310 <-> 216.58.201.99 443 CON 0 0 7 3167 1630 4 flow=Normal-Google-Net-8 1970/01/01 02:01:17.326897 2.031075 udp 10.0.2.15 64053 <-> 1.0.0.1 53 CON 0 0 3 282 150 2 flow=Normal-UDP-DNS 1970/01/01 02:01:17.927786 4.887137 tcp 10.0.2.15 51119 -> 52.58.8.97 443 FSPA_FSPA 0 0 31 9715 3155 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:18.331618 0.000000 udp 10.0.2.15 64053 -> 1.1.1.1 53 INT 0 1 75 75 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:01:19.361248 5.470569 tcp 10.0.2.15 51120 -> 35.186.231.222 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:19.579112 3.495802 tcp 10.0.2.15 51121 -> 35.186.231.222 443 FSPA_FSPA 0 0 29 10444 3009 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:20.042339 0.084147 udp 10.0.2.15 59883 <-> 1.0.0.1 53 CON 0 0 2 207 75 1 flow=Normal-UDP-DNS 1970/01/01 02:01:20.127788 2.946955 tcp 10.0.2.15 51122 -> 35.186.231.222 443 FSPA_FSPA 0 0 36 11624 3350 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:20.961820 2.357325 tcp 10.0.2.15 51123 -> 104.24.247.16 443 FSPA_FSPA 0 0 29 11174 3018 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:20.969373 3.200193 tcp 10.0.2.15 51124 -> 52.59.95.8 443 FSPA_FSPA 0 0 29 10642 3255 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:21.402075 0.094549 udp 10.0.2.15 57360 <-> 1.0.0.1 53 CON 0 0 2 329 76 1 flow=Normal-UDP-DNS 1970/01/01 02:01:21.497664 1.668536 tcp 10.0.2.15 51125 -> 37.252.172.80 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:21.647335 6.175902 tcp 10.0.2.15 51126 -> 37.252.172.80 443 FSPA_FSPA 0 0 20 7767 3272 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:22.054362 6.204454 tcp 10.0.2.15 51127 -> 185.29.132.30 443 FSPA_FSPA 0 0 24 7566 3184 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:22.973673 6.789786 tcp 10.0.2.15 51128 -> 52.58.8.97 443 FSPA_FSPA 0 0 39 10686 3427 17 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:24.081246 3.773936 tcp 10.0.2.15 51129 -> 185.29.132.30 80 FSPA_FSPA 0 0 11 1725 995 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:24.142479 3.686990 tcp 10.0.2.15 51130 -> 18.196.160.167 80 FSPA_FSPA 0 0 15 3503 1482 8 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:24.343655 3.502172 tcp 10.0.2.15 51131 -> 54.72.23.60 80 FSPA_FSPA 0 0 11 2364 1009 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:24.595462 3.258664 tcp 10.0.2.15 51132 -> 54.72.23.60 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:24.853196 3.786763 tcp 10.0.2.15 51133 -> 185.33.223.216 80 FSPA_FSPA 0 0 11 2621 1092 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:25.032635 2.946297 tcp 10.0.2.15 51134 -> 161.170.232.53 80 FSPA_FSPA 0 0 11 1653 766 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:25.283291 7.662110 tcp 10.0.2.15 51135 -> 161.170.232.53 80 FSA_FSA 0 0 8 460 294 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:25.540001 0.499371 tcp 10.0.2.15 51136 -> 104.16.230.152 80 FSRPA_FSRPA 0 0 15 2888 807 7 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:25.660025 2.057881 udp 10.0.2.15 56846 <-> 1.0.0.1 53 CON 0 0 3 295 160 2 flow=Normal-UDP-DNS 1970/01/01 02:01:25.746169 7.094577 tcp 10.0.2.15 51137 -> 77.238.185.35 443 FSPA_FSPA 0 0 30 8393 1840 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:26.580596 6.233184 tcp 10.0.2.15 51138 -> 62.67.193.75 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:26.663477 0.000000 udp 10.0.2.15 56846 -> 1.1.1.1 53 INT 0 1 80 80 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:01:26.831559 1.913705 tcp 10.0.2.15 51139 -> 62.67.193.75 80 FSPA_FSPA 0 0 11 2021 882 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:26.951049 0.837053 udp 10.0.2.15 56848 <-> 216.58.201.66 443 CON 0 0 15 5026 2489 9 flow=Normal-Google-Net-8 1970/01/01 02:01:26.998476 1.841812 tcp 10.0.2.15 51140 -> 178.250.2.76 80 FSPA_FSPA 0 0 11 1458 855 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:27.246399 5.567334 tcp 10.0.2.15 51141 -> 23.38.93.202 80 FSPA_FSPA 0 0 20 7190 1998 9 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:27.719475 5.094211 tcp 10.0.2.15 51142 -> 216.58.201.66 80 FSPA_FSPA 0 0 11 2132 988 6 flow=Normal-Google-Net-8 1970/01/01 02:01:27.943980 4.869657 tcp 10.0.2.15 51143 -> 18.196.160.167 80 FSPA_FSPA 0 0 11 1918 892 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:28.146754 4.666828 tcp 10.0.2.15 51144 -> 23.38.93.202 80 FSPA_FSPA 0 0 11 2102 1052 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:28.323157 4.490255 tcp 10.0.2.15 51145 -> 151.101.14.2 80 FSPA_FSPA 0 0 34 16350 1780 13 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:28.546799 0.095588 udp 10.0.2.15 52749 <-> 1.0.0.1 53 CON 0 0 2 288 79 1 flow=Normal-UDP-DNS 1970/01/01 02:01:28.585564 3.994543 udp 10.0.2.15 52750 -> 172.217.16.67 443 INT 0 3 2655 2655 3 flow=Normal-Google-Net-9 1970/01/01 02:01:28.644760 9.171661 tcp 10.0.2.15 51146 -> 23.38.93.202 80 FSPA_FSPA 0 0 234 164746 7715 66 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:28.751936 9.072294 tcp 10.0.2.15 51147 -> 23.38.93.202 80 FSPA_FSPA 0 0 214 174065 6186 54 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:29.538982 2.059561 udp 10.0.2.15 54734 <-> 1.0.0.1 53 CON 0 0 3 255 170 2 flow=Normal-UDP-DNS 1970/01/01 02:01:29.978107 7.838022 tcp 10.0.2.15 51148 -> 23.38.93.202 80 FSPA_FSPA 0 0 145 83342 3636 47 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:30.061689 0.176151 udp 10.0.2.15 52768 <-> 1.0.0.1 53 CON 0 0 2 180 82 1 flow=Normal-UDP-DNS 1970/01/01 02:01:30.095570 0.130730 udp 10.0.2.15 60856 <-> 1.0.0.1 53 CON 0 0 2 249 76 1 flow=Normal-UDP-DNS 1970/01/01 02:01:30.540098 0.000000 udp 10.0.2.15 54734 -> 1.1.1.1 53 INT 0 1 85 85 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:01:31.470008 0.101306 udp 10.0.2.15 56193 <-> 1.0.0.1 53 CON 0 0 2 206 77 1 flow=Normal-UDP-DNS 1970/01/01 02:01:31.572204 6.599271 tcp 10.0.2.15 51149 -> 66.102.1.189 443 FSPA_FSPA 0 0 28 7649 2145 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:31.670446 1.149117 tcp 10.0.2.15 51150 -> 66.102.1.189 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:32.586798 15.331412 udp 10.0.2.15 56195 <-> 172.217.16.67 443 CON 0 0 15 6471 4329 8 flow=Normal-Google-Net-9 1970/01/01 02:01:33.872554 63.986198 tcp 10.0.2.15 51151 -> 66.102.1.189 443 FSPA_FSPA 0 0 37 8688 3005 16 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:34.004793 0.172593 udp 10.0.2.15 64927 <-> 1.0.0.1 53 CON 0 0 2 218 83 1 flow=Normal-UDP-DNS 1970/01/01 02:01:34.179096 3.647246 tcp 10.0.2.15 51152 -> 151.101.13.128 80 FSPA_FSPA 0 0 12 2710 806 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:34.219639 3.998299 tcp 10.0.2.15 51153 -> 151.101.13.128 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:34.349610 0.078955 udp 10.0.2.15 54404 <-> 1.0.0.1 53 CON 0 0 2 218 76 1 flow=Normal-UDP-DNS 1970/01/01 02:01:34.427490 0.054899 udp 10.0.2.15 63226 <-> 1.0.0.1 53 CON 0 0 2 176 72 1 flow=Normal-UDP-DNS 1970/01/01 02:01:34.429926 0.348289 tcp 10.0.2.15 51154 -> 64.202.112.28 80 FSPA_FSPA 0 0 10 1902 1366 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:34.484093 3.683807 tcp 10.0.2.15 51155 -> 159.253.128.188 443 FSPA_FSPA 0 0 31 9612 3134 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:34.602752 4.274382 tcp 10.0.2.15 51156 -> 64.202.112.28 80 FSRA_FSRPA 0 0 10 743 282 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:34.647919 3.178483 tcp 10.0.2.15 51157 -> 185.33.223.216 80 FSPA_FSPA 0 0 17 6452 2016 8 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:34.785074 3.040984 tcp 10.0.2.15 51158 -> 185.33.223.210 80 FSPA_FSPA 0 0 15 5068 3783 8 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:34.886366 0.094010 udp 10.0.2.15 55765 <-> 1.0.0.1 53 CON 0 0 2 244 76 1 flow=Normal-UDP-DNS 1970/01/01 02:01:34.987157 3.351946 tcp 10.0.2.15 51159 -> 23.38.89.179 80 FSPA_FSPA 0 0 11 1630 829 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:35.482253 2.675762 tcp 10.0.2.15 51160 -> 35.156.135.172 443 FSRPA_FSRPA 0 0 28 9447 3081 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:35.880430 6.970934 tcp 10.0.2.15 51161 -> 52.59.95.8 443 FSPA_FSPA 0 0 32 12868 5049 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:36.333834 3.017597 tcp 10.0.2.15 51162 -> 185.33.223.216 443 FSPA_FSPA 0 0 23 8113 3512 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:36.844669 1.240450 tcp 10.0.2.15 51163 -> 52.58.8.97 443 FSPA_FSPA 0 0 32 9776 3122 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:37.366414 5.782661 tcp 10.0.2.15 51164 -> 151.101.12.166 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:37.367315 5.483808 tcp 10.0.2.15 51165 -> 104.24.247.16 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:37.617038 5.228636 tcp 10.0.2.15 51166 -> 151.101.12.166 443 FSRPA_SPA 0 0 37 14826 7189 17 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:37.621034 5.218761 tcp 10.0.2.15 51167 -> 104.24.247.16 443 FSPA_FSPA 0 0 30 11228 3072 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:38.011495 0.064746 udp 10.0.2.15 52389 <-> 1.0.0.1 53 CON 0 0 2 390 73 1 flow=Normal-UDP-DNS 1970/01/01 02:01:38.077643 5.367966 tcp 10.0.2.15 51168 -> 136.243.75.29 443 FSPA_FSPA 0 0 30 9293 2805 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:38.436285 4.446515 tcp 10.0.2.15 51169 -> 54.72.23.60 443 FSPA_FSPA 0 0 28 8142 2984 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:38.799547 4.611247 tcp 10.0.2.15 51170 -> 37.252.172.80 443 FSPA_FSPA 0 0 21 8011 3462 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:39.099053 4.041827 tcp 10.0.2.15 51171 -> 52.58.8.97 443 FSPA_FSPA 0 0 47 11691 3779 21 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:39.428476 3.447827 tcp 10.0.2.15 51172 -> 185.29.132.30 443 FSPA_FSPA 0 0 23 7513 3184 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:39.473203 0.185599 udp 10.0.2.15 51513 <-> 1.0.0.1 53 CON 0 0 2 213 80 1 flow=Normal-UDP-DNS 1970/01/01 02:01:39.661183 4.123171 tcp 10.0.2.15 51173 -> 151.101.13.128 80 FSPA_FSPA 0 0 70 39738 1771 24 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:39.686633 3.454463 tcp 10.0.2.15 51174 -> 151.101.13.128 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:39.706203 3.134513 tcp 10.0.2.15 51175 -> 216.58.201.66 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-Google-Net-8 1970/01/01 02:01:39.957912 2.883149 tcp 10.0.2.15 51176 -> 216.58.201.66 80 FSPA_FSPA 0 0 14 2659 1393 7 flow=Normal-Google-Net-8 1970/01/01 02:01:39.989806 3.159155 tcp 10.0.2.15 51177 -> 185.33.223.210 80 FSPA_FSPA 0 0 15 5563 4278 8 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:40.006978 0.000000 udp 10.0.2.15 62493 -> 1.0.0.1 53 INT 0 1 83 83 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:01:40.229961 19.038807 udp 10.0.2.15 62495 <-> 172.217.23.238 443 CON 0 0 28 9823 6256 13 flow=Normal-Google-Net-9 1970/01/01 02:01:41.012524 0.027444 udp 10.0.2.15 62493 <-> 1.1.1.1 53 CON 0 0 2 198 83 1 flow=Normal-UDP-DNS 1970/01/01 02:01:41.042866 6.885786 tcp 10.0.2.15 51178 -> 199.16.156.201 443 FSRPA_FSRPA 0 0 41 12063 6041 19 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:41.216776 1.757375 tcp 10.0.2.15 51179 -> 199.16.156.201 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:41.906399 11.108058 tcp 10.0.2.15 51180 -> 185.31.128.128 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:41.907520 6.011438 tcp 10.0.2.15 51181 -> 65.39.202.99 443 FSPA_FSPA 0 0 26 8926 1841 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:41.910782 5.941061 tcp 10.0.2.15 51182 -> 46.228.164.11 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:42.005341 11.081505 tcp 10.0.2.15 51183 -> 35.156.135.172 443 FSRPA_FSRPA 0 0 33 11041 4001 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:42.157900 405.858887 tcp 10.0.2.15 51184 -> 185.31.128.128 443 FSPA_SPA 0 0 35 7001 2501 16 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:42.162779 0.721425 tcp 10.0.2.15 51185 -> 46.228.164.11 443 FSRPA_FSRPA 0 0 22 6003 1858 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:42.533711 5.269192 tcp 10.0.2.15 51186 -> 104.127.60.107 443 FSRPA_SPA 0 0 24 9038 2293 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:42.539362 5.263678 tcp 10.0.2.15 51187 -> 104.127.60.107 443 FSRPA_FSRPA 0 0 32 11950 3684 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:42.787358 6.412906 tcp 10.0.2.15 51188 -> 52.59.95.8 443 FSPA_FSPA 0 0 36 13622 5525 16 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:42.800233 5.050976 tcp 10.0.2.15 51189 -> 185.33.223.216 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:42.972339 4.785849 tcp 10.0.2.15 51190 -> 52.58.8.97 443 FSRPA_SRPA 0 0 15 1615 1018 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:43.055620 4.789770 tcp 10.0.2.15 51191 -> 185.33.223.216 443 FSPA_FSPA 0 0 21 8185 3638 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:43.220923 0.086187 udp 10.0.2.15 64841 <-> 1.1.1.1 53 CON 0 0 2 236 73 1 flow=Normal-UDP-DNS 1970/01/01 02:01:43.224545 4.885187 tcp 10.0.2.15 51192 -> 52.58.8.97 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:43.311663 4.824014 tcp 10.0.2.15 51193 -> 52.49.183.232 443 FSRPA_FSRPA 0 0 33 12871 5520 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:43.892620 4.211902 tcp 10.0.2.15 51194 -> 52.58.8.97 443 FSPA_FSPA 0 0 45 12204 3917 20 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:44.429678 3.662421 tcp 10.0.2.15 51195 -> 151.101.12.166 443 FSRPA_FSRPA 0 0 32 12292 5609 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:44.489935 3.308143 tcp 10.0.2.15 51196 -> 104.24.247.16 443 FSPA_FSPA 0 0 29 11354 3198 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:44.494347 3.747666 tcp 10.0.2.15 51197 -> 185.29.132.30 443 FSPA_FSPA 0 0 28 9235 4235 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:44.790408 0.075974 udp 10.0.2.15 51948 <-> 1.1.1.1 53 CON 0 0 2 248 77 1 flow=Normal-UDP-DNS 1970/01/01 02:01:44.870192 2.974429 tcp 10.0.2.15 51198 -> 23.4.248.121 80 FSPA_FSPA 0 0 11 1585 772 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:45.026410 0.000000 udp 10.0.2.15 59558 -> 1.1.1.1 53 INT 0 1 73 73 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:01:45.076913 0.098761 udp 10.0.2.15 59602 <-> 1.1.1.1 53 CON 0 0 2 158 71 1 flow=Normal-UDP-DNS 1970/01/01 02:01:45.177233 7.774469 tcp 10.0.2.15 51199 -> 8.41.222.241 443 FSPA_FSPA 0 0 29 12236 5592 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:45.295149 3.272984 tcp 10.0.2.15 51200 -> 37.252.172.80 443 FSPA_FSPA 0 0 22 8245 3642 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:45.304556 2.617644 tcp 10.0.2.15 51201 -> 8.41.222.241 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:46.029380 0.041955 udp 10.0.2.15 59558 <-> 1.0.0.1 53 CON 0 0 2 268 73 1 flow=Normal-UDP-DNS 1970/01/01 02:01:46.074820 1.759636 tcp 10.0.2.15 51202 -> 23.4.248.121 80 FSPA_FSPA 0 0 11 2556 1478 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:46.647178 0.072841 udp 10.0.2.15 49172 <-> 1.0.0.1 53 CON 0 0 2 339 71 1 flow=Normal-UDP-DNS 1970/01/01 02:01:46.722053 6.316501 tcp 10.0.2.15 51203 -> 52.29.129.211 443 FSRPA_FSRPA 0 0 28 8635 1935 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:47.974774 0.177881 udp 10.0.2.15 56294 <-> 1.0.0.1 53 CON 0 0 2 225 84 1 flow=Normal-UDP-DNS 1970/01/01 02:01:48.154853 39.713238 tcp 10.0.2.15 51204 -> 151.101.13.208 80 FSPA_FSPA 0 0 1176 730370 29913 359 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:48.155241 39.991646 tcp 10.0.2.15 51205 -> 151.101.13.208 80 FSPA_FSPA 0 0 1157 736896 35880 345 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:48.309286 4.541220 tcp 10.0.2.15 51206 -> 52.59.95.8 443 FSPA_FSPA 0 0 34 13412 5461 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:48.317379 4.521846 tcp 10.0.2.15 51207 -> 104.127.60.107 443 FSRPA_SPA 0 0 37 15319 5220 16 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:48.319550 4.519231 tcp 10.0.2.15 51208 -> 104.127.60.107 443 FSRPA_SPA 0 0 32 12568 3928 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:48.583054 0.092560 udp 10.0.2.15 52447 <-> 1.0.0.1 53 CON 0 0 2 282 83 1 flow=Normal-UDP-DNS 1970/01/01 02:01:48.711111 0.818997 tcp 10.0.2.15 51209 -> 89.207.16.137 443 FSPA_FSPA 0 0 25 8545 1799 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:48.741669 4.123499 tcp 10.0.2.15 51210 -> 66.155.71.150 443 FSRPA_FSRPA 0 0 25 6928 1854 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:48.838770 2.457571 tcp 10.0.2.15 51211 -> 89.207.16.137 443 FSRPA_FSRPA 0 0 18 2924 1683 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:48.919598 2.043682 udp 10.0.2.15 57090 <-> 1.0.0.1 53 CON 0 0 3 365 156 2 flow=Normal-UDP-DNS 1970/01/01 02:01:48.983133 4.111798 tcp 10.0.2.15 51212 -> 199.16.156.201 443 FSRPA_SPA 0 0 29 8684 3154 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:49.920413 0.000000 udp 10.0.2.15 57090 -> 1.1.1.1 53 INT 0 1 78 78 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:01:49.962443 3.009817 tcp 10.0.2.15 51213 -> 31.13.84.4 443 FSPA_FSPA 0 0 34 15756 1745 14 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:01:50.044792 0.058077 udp 10.0.2.15 58397 <-> 1.0.0.1 53 CON 0 0 2 379 74 1 flow=Normal-UDP-DNS 1970/01/01 02:01:50.104047 5.265681 tcp 10.0.2.15 51214 -> 54.246.133.167 443 FSRPA_FSRPA 0 0 25 7410 2564 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:50.112129 2.854895 tcp 10.0.2.15 51215 -> 90.182.114.17 443 FSPA_FSPA 0 0 142 127004 4509 43 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:50.395309 0.084492 udp 10.0.2.15 58849 <-> 1.0.0.1 53 CON 0 0 2 190 87 1 flow=Normal-UDP-DNS 1970/01/01 02:01:50.482775 2.278591 tcp 10.0.2.15 51216 -> 90.182.114.18 443 FSRPA_SRPA 0 0 21 5112 1187 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:50.483101 0.646410 tcp 10.0.2.15 51217 -> 90.182.114.18 443 FSRPA_SRPA 0 0 18 4949 1025 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:50.483482 7.403365 tcp 10.0.2.15 51218 -> 90.182.114.18 443 FSPA_FSPA 0 0 181 161424 5170 56 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:50.483755 2.279803 tcp 10.0.2.15 51219 -> 90.182.114.18 443 FSRPA_SRPA 0 0 15 1840 1025 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:50.484134 2.492132 tcp 10.0.2.15 51220 -> 90.182.114.18 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:50.484928 2.281599 tcp 10.0.2.15 51221 -> 90.182.114.18 443 FSRPA_SRPA 0 0 18 4950 1079 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:50.825308 0.025898 udp 10.0.2.15 64313 <-> 1.0.0.1 53 CON 0 0 2 166 75 1 flow=Normal-UDP-DNS 1970/01/01 02:01:50.853227 2.114006 tcp 10.0.2.15 51222 -> 35.186.234.100 443 FSPA_FSPA 0 0 34 7662 2350 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:50.966499 6.987514 tcp 10.0.2.15 51223 -> 204.11.109.68 443 FSPA_FSPA 0 0 25 8761 2264 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:51.132919 1.875207 tcp 10.0.2.15 51224 -> 204.11.109.68 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:51.562864 1.281866 tcp 10.0.2.15 51225 -> 216.58.201.66 80 FSPA_FSPA 0 0 11 1553 837 6 flow=Normal-Google-Net-8 1970/01/01 02:01:51.575226 1.804867 tcp 10.0.2.15 51226 -> 151.101.12.166 443 FSRPA_FSRPA 0 0 28 9276 3357 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:51.583549 0.057904 udp 10.0.2.15 56366 <-> 1.0.0.1 53 CON 0 0 2 238 83 1 flow=Normal-UDP-DNS 1970/01/01 02:01:51.642903 2.855228 tcp 10.0.2.15 51227 -> 204.2.197.204 443 FSPA_FSPA 0 0 24 7903 1707 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:51.743244 0.066869 udp 10.0.2.15 64503 <-> 1.0.0.1 53 CON 0 0 2 246 77 1 flow=Normal-UDP-DNS 1970/01/01 02:01:51.794287 1.156964 tcp 10.0.2.15 51228 -> 204.2.197.204 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:51.812831 5.981955 tcp 10.0.2.15 51229 -> 104.127.60.107 443 FSRPA_FSRPA 0 0 32 10025 2694 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:52.171872 0.068058 udp 10.0.2.15 51550 <-> 1.0.0.1 53 CON 0 0 2 154 69 1 flow=Normal-UDP-DNS 1970/01/01 02:01:52.244094 5.643011 tcp 10.0.2.15 51230 -> 216.58.201.99 443 FSPA_FSPA 0 0 32 6752 2134 15 flow=Normal-Google-Net-8 1970/01/01 02:01:52.306645 5.580392 tcp 10.0.2.15 51231 -> 52.58.8.97 443 FSPA_FSPA 0 0 34 9518 3207 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:53.266565 0.046477 udp 10.0.2.15 57715 <-> 1.0.0.1 53 CON 0 0 2 306 87 1 flow=Normal-UDP-DNS 1970/01/01 02:01:53.314815 4.604408 tcp 10.0.2.15 51232 -> 152.163.64.2 443 FSPA_FSPA 0 0 23 6650 2168 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:53.549638 9.566529 tcp 10.0.2.15 51233 -> 104.127.60.107 443 FSRPA_SPA 0 0 62 28236 11036 27 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:53.652618 4.189926 tcp 10.0.2.15 51234 -> 159.253.128.188 443 FSPA_FSPA 0 0 23 6850 1886 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:54.502766 3.294897 tcp 10.0.2.15 51235 -> 37.252.172.80 443 FSPA_FSPA 0 0 20 6774 2217 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:54.615219 0.093738 udp 10.0.2.15 50895 <-> 1.0.0.1 53 CON 0 0 2 251 84 1 flow=Normal-UDP-DNS 1970/01/01 02:01:54.709932 3.209099 tcp 10.0.2.15 51236 -> 104.193.83.156 443 FSPA_FSPA 0 0 25 8196 1764 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:54.839853 3.080399 tcp 10.0.2.15 51237 -> 104.193.83.156 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:54.863841 0.028829 udp 10.0.2.15 60416 <-> 1.0.0.1 53 CON 0 0 2 231 87 1 flow=Normal-UDP-DNS 1970/01/01 02:01:54.902213 0.326694 udp 10.0.2.15 60417 <-> 216.58.201.66 443 CON 0 0 16 7272 4243 8 flow=Normal-Google-Net-8 1970/01/01 02:01:54.918751 0.048458 udp 10.0.2.15 57264 <-> 1.0.0.1 53 CON 0 0 2 282 77 1 flow=Normal-UDP-DNS 1970/01/01 02:01:54.968517 2.872808 tcp 10.0.2.15 51238 -> 52.17.55.131 443 FSRPA_FSRPA 0 0 28 8348 1910 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:55.005824 0.070412 udp 10.0.2.15 59245 <-> 1.0.0.1 53 CON 0 0 2 221 72 1 flow=Normal-UDP-DNS 1970/01/01 02:01:55.078426 2.727952 tcp 10.0.2.15 51239 -> 72.251.245.181 443 FSPA_FSPA 0 0 29 10493 2362 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:55.854695 0.098984 udp 10.0.2.15 60134 <-> 1.0.0.1 53 CON 0 0 2 342 74 1 flow=Normal-UDP-DNS 1970/01/01 02:01:55.959097 1.961089 tcp 10.0.2.15 51240 -> 54.172.67.64 443 FSRPA_FSRPA 0 0 28 8657 1795 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:56.037013 0.050364 udp 10.0.2.15 64425 <-> 1.0.0.1 53 CON 0 0 2 203 83 1 flow=Normal-UDP-DNS 1970/01/01 02:01:56.074050 1.845872 tcp 10.0.2.15 51241 -> 54.172.67.64 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:56.089297 9.766420 tcp 10.0.2.15 51242 -> 138.201.8.30 443 FSRPA_SPA 0 0 20 6198 1918 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:56.288996 9.146612 tcp 10.0.2.15 51243 -> 138.201.8.30 443 S_ 0 3 194 194 3 flow=Normal-TCP-Attempt 1970/01/01 02:01:56.770988 1.023769 tcp 10.0.2.15 51244 -> 104.127.60.107 443 FSRPA_FSRPA 0 0 15 1577 958 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:56.825487 6.289673 tcp 10.0.2.15 51245 -> 5.153.20.138 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:56.883308 0.912262 tcp 10.0.2.15 51246 -> 216.58.201.66 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-Google-Net-8 1970/01/01 02:01:56.987206 0.816480 tcp 10.0.2.15 51247 -> 5.153.20.138 443 FSPA_FSPA 0 0 22 6696 1787 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:57.134136 5.961848 tcp 10.0.2.15 51248 -> 216.58.201.66 80 FSPA_FSPA 0 0 11 1558 842 6 flow=Normal-Google-Net-8 1970/01/01 02:01:57.587842 0.000000 udp 10.0.2.15 64433 -> 1.0.0.1 53 INT 0 1 83 83 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:01:58.592935 0.054844 udp 10.0.2.15 64433 <-> 1.1.1.1 53 CON 0 0 2 280 83 1 flow=Normal-UDP-DNS 1970/01/01 02:01:58.649308 4.460043 tcp 10.0.2.15 51249 -> 2.21.74.57 80 FSPA_FSPA 0 0 13 2746 2109 7 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:59.131095 4.586104 tcp 10.0.2.15 51250 -> 151.101.13.128 80 FSPA_FSPA 0 0 11 1890 796 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:59.276490 0.162040 udp 10.0.2.15 56817 <-> 1.1.1.1 53 CON 0 0 2 238 91 1 flow=Normal-UDP-DNS 1970/01/01 02:01:59.441345 108.720604 tcp 10.0.2.15 51251 -> 151.101.13.209 80 FSPA_FSPA 0 0 10529 6502442 166457 3074 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:59.444586 3.409219 tcp 10.0.2.15 51252 -> 159.253.128.188 443 FSPA_FSPA 0 0 23 6743 1788 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:59.508078 3.614869 tcp 10.0.2.15 51253 -> 151.101.13.209 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:01:59.526603 28.356426 tcp 10.0.2.15 51254 -> 90.182.114.18 443 FSPA_FSPA 0 0 488 461805 11970 150 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:59.605557 0.081987 udp 10.0.2.15 62488 <-> 1.1.1.1 53 CON 0 0 2 206 80 1 flow=Normal-UDP-DNS 1970/01/01 02:01:59.619927 18.436090 tcp 10.0.2.15 51255 -> 90.182.114.17 443 FSPA_FSPA 0 0 298 276779 8247 88 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:01:59.690622 3.147210 tcp 10.0.2.15 51256 -> 216.58.201.99 443 FSPA_FSPA 0 0 30 8093 2099 14 flow=Normal-Google-Net-8 1970/01/01 02:01:59.835165 4.491911 tcp 10.0.2.15 51257 -> 159.253.128.188 443 FSPA_FSPA 0 0 22 6671 1735 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:01.484268 0.084825 udp 10.0.2.15 63184 <-> 1.1.1.1 53 CON 0 0 2 246 77 1 flow=Normal-UDP-DNS 1970/01/01 02:02:01.571040 8.719537 tcp 10.0.2.15 51258 -> 23.38.89.179 443 FSRPA_SPA 0 0 23 6229 1787 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:01.671267 0.086720 udp 10.0.2.15 52268 <-> 1.1.1.1 53 CON 0 0 2 334 81 1 flow=Normal-UDP-DNS 1970/01/01 02:02:01.761339 6.366118 tcp 10.0.2.15 51259 -> 52.29.202.249 443 FSPA_FSPA 0 0 32 8308 2042 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:02.821849 5.331046 tcp 10.0.2.15 51260 -> 159.253.128.188 443 FSPA_FSPA 0 0 37 12614 4149 17 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:03.184642 4.587479 tcp 10.0.2.15 51261 -> 159.253.128.188 443 FSRPA_SRPA 0 0 21 5361 1227 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:03.289333 0.016253 udp 10.0.2.15 59291 <-> 1.1.1.1 53 CON 0 0 2 197 76 1 flow=Normal-UDP-DNS 1970/01/01 02:02:03.307587 4.541870 tcp 10.0.2.15 51262 -> 31.13.84.36 443 FSPA_FSPA 0 0 26 7992 2491 12 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:02:03.497784 0.038466 udp 10.0.2.15 62091 <-> 1.1.1.1 53 CON 0 0 2 156 70 1 flow=Normal-UDP-DNS 1970/01/01 02:02:03.545233 15.203233 udp 10.0.2.15 62092 <-> 216.58.201.110 443 CON 0 0 17 6101 4050 10 flow=Normal-Google-Net-8 1970/01/01 02:02:03.735600 0.073803 udp 10.0.2.15 55203 <-> 1.1.1.1 53 CON 0 0 2 367 77 1 flow=Normal-UDP-DNS 1970/01/01 02:02:03.814087 4.537199 tcp 10.0.2.15 51263 -> 52.208.104.218 443 FSRPA_FSRPA 0 0 28 9860 2345 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:03.957341 0.000000 udp 10.0.2.15 63749 -> 1.1.1.1 53 INT 0 1 77 77 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:02:04.435189 3.413031 tcp 10.0.2.15 51264 -> 216.58.201.99 443 FSPA_FSPA 0 0 46 10036 3345 20 flow=Normal-Google-Net-8 1970/01/01 02:02:04.961248 0.053589 udp 10.0.2.15 63749 <-> 1.0.0.1 53 CON 0 0 2 306 77 1 flow=Normal-UDP-DNS 1970/01/01 02:02:05.026064 2.916921 tcp 10.0.2.15 51265 -> 52.202.130.59 443 FSRPA_FSRPA 0 0 28 8325 1851 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:05.069861 0.072892 udp 10.0.2.15 62708 <-> 1.0.0.1 53 CON 0 0 2 421 87 1 flow=Normal-UDP-DNS 1970/01/01 02:02:05.144696 12.818484 tcp 10.0.2.15 51266 -> 34.236.16.188 443 FSRPA_SPA 0 0 25 8075 2093 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:05.184372 2.761798 tcp 10.0.2.15 51267 -> 52.202.130.59 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:05.319983 3.103093 tcp 10.0.2.15 51268 -> 34.236.16.188 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:06.336863 0.079017 udp 10.0.2.15 54220 <-> 1.0.0.1 53 CON 0 0 2 172 78 1 flow=Normal-UDP-DNS 1970/01/01 02:02:06.420885 1.427883 tcp 10.0.2.15 51269 -> 107.178.240.89 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:06.582575 11.571468 tcp 10.0.2.15 51270 -> 107.178.240.89 443 FSPA_FSPA 0 0 34 7887 2318 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:06.612809 0.088518 udp 10.0.2.15 62121 <-> 1.0.0.1 53 CON 0 0 2 226 72 1 flow=Normal-UDP-DNS 1970/01/01 02:02:06.704738 11.173578 tcp 10.0.2.15 51271 -> 5.153.15.173 443 FSRPA_SPA 0 0 28 9866 2346 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:08.268271 9.894551 tcp 10.0.2.15 51272 -> 159.253.128.188 443 FSPA_FSPA 0 0 20 4032 2172 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:08.703906 0.066543 udp 10.0.2.15 58744 <-> 1.0.0.1 53 CON 0 0 2 314 76 1 flow=Normal-UDP-DNS 1970/01/01 02:02:08.704274 0.084200 udp 10.0.2.15 60561 <-> 1.0.0.1 53 CON 0 0 2 286 135 1 flow=Normal-UDP-DNS 1970/01/01 02:02:08.772052 9.781357 tcp 10.0.2.15 51273 -> 52.45.69.8 443 FSRPA_FSRPA 0 0 34 11864 2750 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:08.792839 19.104717 tcp 10.0.2.15 51274 -> 216.239.32.64 443 FSPA_FSPA 0 0 95 11830 3672 43 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:08.932596 9.040246 tcp 10.0.2.15 51275 -> 52.45.69.8 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:10.295045 0.085218 udp 10.0.2.15 57135 <-> 1.0.0.1 53 CON 0 0 2 286 135 1 flow=Normal-UDP-DNS 1970/01/01 02:02:10.381772 17.497339 tcp 10.0.2.15 51276 -> 216.239.32.62 443 FSPA_FSPA 0 0 90 11559 3510 40 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:10.527590 8.117774 tcp 10.0.2.15 51277 -> 216.239.32.62 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:10.917155 8.576458 tcp 10.0.2.15 51278 -> 31.13.84.36 443 FSPA_FSPA 0 0 23 4771 2450 11 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:02:12.211310 0.081313 udp 10.0.2.15 58159 <-> 1.0.0.1 53 CON 0 0 2 338 76 1 flow=Normal-UDP-DNS 1970/01/01 02:02:12.293816 5.902428 tcp 10.0.2.15 51279 -> 54.72.231.120 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:12.439387 6.051088 tcp 10.0.2.15 51280 -> 54.72.231.120 443 FSPA_FSPA 0 0 32 7409 2111 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:13.493618 0.081980 udp 10.0.2.15 55635 <-> 1.0.0.1 53 CON 0 0 2 229 73 1 flow=Normal-UDP-DNS 1970/01/01 02:02:13.576366 4.336811 tcp 10.0.2.15 51281 -> 217.12.15.54 443 FSPA_FSPA 0 0 25 8548 1809 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:13.730048 4.156267 tcp 10.0.2.15 51282 -> 217.12.15.54 443 FSA_SRA 0 0 6 340 174 3 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:15.323577 2.541473 tcp 10.0.2.15 51283 -> 216.58.201.99 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-Google-Net-8 1970/01/01 02:02:15.574737 3.116658 tcp 10.0.2.15 51284 -> 216.58.201.99 443 FSPA_FSPA 0 0 27 3426 1980 12 flow=Normal-Google-Net-8 1970/01/01 02:02:17.453275 0.092276 udp 10.0.2.15 49630 <-> 1.0.0.1 53 CON 0 0 2 270 71 1 flow=Normal-UDP-DNS 1970/01/01 02:02:17.547207 2.770223 tcp 10.0.2.15 51285 -> 52.49.24.175 443 FSPA_FSPA 0 0 22 6975 1672 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:19.239505 0.000000 udp 10.0.2.15 53298 -> 1.0.0.1 53 INT 0 1 70 70 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:02:19.901136 7.996350 tcp 10.0.2.15 51286 -> 31.13.84.36 443 FSPA_FSPA 0 0 29 5750 2927 13 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:02:20.108963 0.082993 udp 10.0.2.15 59140 <-> 1.0.0.1 53 CON 0 0 2 252 78 1 flow=Normal-UDP-DNS 1970/01/01 02:02:20.193693 7.714550 tcp 10.0.2.15 51287 -> 216.52.1.12 443 FSPA_FSPA 0 0 30 8642 1793 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:20.235304 0.027487 udp 10.0.2.15 53298 <-> 1.1.1.1 53 CON 0 0 2 357 70 1 flow=Normal-UDP-DNS 1970/01/01 02:02:20.264419 7.587983 tcp 10.0.2.15 51288 -> 52.59.85.68 443 FSRPA_FSRPA 0 0 25 6525 1825 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:21.239781 6.896987 tcp 10.0.2.15 51289 -> 159.253.128.188 443 FSPA_FSPA 0 0 20 4538 2254 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:21.292680 6.560455 tcp 10.0.2.15 51290 -> 159.253.128.188 443 FSPA_FSPA 0 0 29 8324 3843 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:21.488670 0.088291 udp 10.0.2.15 52637 <-> 1.1.1.1 53 CON 0 0 2 251 77 1 flow=Normal-UDP-DNS 1970/01/01 02:02:21.581325 6.286338 tcp 10.0.2.15 51291 -> 23.38.93.202 80 FSPA_FSPA 0 0 40 19255 1721 15 flow=Normal-TCP-WEB-Established 1970/01/01 02:02:21.692896 0.085976 udp 10.0.2.15 58816 <-> 1.1.1.1 53 CON 0 0 2 282 87 1 flow=Normal-UDP-DNS 1970/01/01 02:02:21.782766 7.081788 tcp 10.0.2.15 51292 -> 185.94.180.125 443 FSPA_FSPA 0 0 28 7714 2648 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:21.852291 0.067015 udp 10.0.2.15 53059 <-> 1.1.1.1 53 CON 0 0 2 321 72 1 flow=Normal-UDP-DNS 1970/01/01 02:02:21.922612 5.930154 tcp 10.0.2.15 51293 -> 37.252.172.42 443 FSPA_FSPA 0 0 30 10431 3462 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:22.419451 0.074492 udp 10.0.2.15 61103 <-> 1.1.1.1 53 CON 0 0 2 216 77 1 flow=Normal-UDP-DNS 1970/01/01 02:02:22.433958 0.383412 tcp 10.0.2.15 51294 -> 64.202.112.28 80 FSPA_FSPA 0 0 10 1903 1367 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:02:22.495480 5.354816 tcp 10.0.2.15 51295 -> 151.101.12.166 443 FSRPA_FSRPA 0 0 25 7812 1939 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:22.655613 0.083395 udp 10.0.2.15 60331 <-> 1.1.1.1 53 CON 0 0 2 249 84 1 flow=Normal-UDP-DNS 1970/01/01 02:02:22.743139 5.109468 tcp 10.0.2.15 51296 -> 62.67.193.75 443 FSPA_FSPA 0 0 19 6241 2055 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:23.015306 4.861305 tcp 10.0.2.15 51297 -> 54.72.231.120 80 FSPA_FSPA 0 0 11 2141 1054 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:02:23.053564 0.048879 udp 10.0.2.15 54037 <-> 1.1.1.1 53 CON 0 0 2 234 72 1 flow=Normal-UDP-DNS 1970/01/01 02:02:23.105714 11.128139 tcp 10.0.2.15 51298 -> 193.0.160.128 80 FSPA_FSPA 0 0 11 2236 1003 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:02:23.114181 0.035322 udp 10.0.2.15 55283 <-> 1.1.1.1 53 CON 0 0 2 164 74 1 flow=Normal-UDP-DNS 1970/01/01 02:02:23.115055 0.057769 udp 10.0.2.15 59997 <-> 1.1.1.1 53 CON 0 0 2 212 77 1 flow=Normal-UDP-DNS 1970/01/01 02:02:23.116024 4.996252 tcp 10.0.2.15 51299 -> 185.64.189.236 443 FSRPA_FSRPA 0 0 32 10955 3818 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:23.118505 4.779528 tcp 10.0.2.15 51300 -> 185.94.180.125 80 FSPA_FSPA 0 0 14 2932 1355 7 flow=Normal-TCP-WEB-Established 1970/01/01 02:02:23.151526 4.897239 tcp 10.0.2.15 51301 -> 173.241.240.143 443 FSRPA_FSRPA 0 0 29 7070 2381 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:23.158914 0.064186 udp 10.0.2.15 53308 <-> 1.1.1.1 53 CON 0 0 2 236 73 1 flow=Normal-UDP-DNS 1970/01/01 02:02:23.175639 0.160108 tcp 10.0.2.15 51302 -> 94.31.6.187 80 FSPA_FSPA 0 0 10 1461 862 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:02:23.208199 0.050536 udp 10.0.2.15 53636 <-> 1.1.1.1 53 CON 0 0 2 365 78 1 flow=Normal-UDP-DNS 1970/01/01 02:02:23.225076 4.665163 tcp 10.0.2.15 51303 -> 23.38.86.174 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:02:23.261023 0.234961 tcp 10.0.2.15 51304 -> 95.172.94.54 80 FSPA_FSPA 0 0 10 1556 772 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:02:23.294852 4.579778 tcp 10.0.2.15 51305 -> 37.252.172.42 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:02:23.341814 4.526220 tcp 10.0.2.15 51306 -> 37.252.172.42 80 FSPA_FSPA 0 0 34 14012 6065 15 flow=Normal-TCP-WEB-Established 1970/01/01 02:02:23.362301 0.050714 udp 10.0.2.15 50924 <-> 1.1.1.1 53 CON 0 0 2 327 73 1 flow=Normal-UDP-DNS 1970/01/01 02:02:23.373788 4.504753 tcp 10.0.2.15 51307 -> 23.38.86.174 80 FSPA_FSPA 0 0 11 1486 761 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:02:23.415107 4.564227 tcp 10.0.2.15 51308 -> 34.192.114.81 80 FSPA_FSPA 0 0 11 1527 900 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:02:23.449677 0.033225 udp 10.0.2.15 61689 <-> 1.1.1.1 53 CON 0 0 2 162 73 1 flow=Normal-UDP-DNS 1970/01/01 02:02:23.484815 4.605436 tcp 10.0.2.15 51309 -> 18.195.155.181 80 FSPA_FSPA 0 0 15 2628 1286 8 flow=Normal-TCP-WEB-Established 1970/01/01 02:02:23.509191 0.059163 udp 10.0.2.15 57395 <-> 1.1.1.1 53 CON 0 0 2 298 75 1 flow=Normal-UDP-DNS 1970/01/01 02:02:23.510403 0.050813 udp 10.0.2.15 55095 <-> 1.1.1.1 53 CON 0 0 2 266 73 1 flow=Normal-UDP-DNS 1970/01/01 02:02:23.562208 4.546637 tcp 10.0.2.15 51310 -> 37.157.6.251 80 FSPA_FSPA 0 0 11 1355 785 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:02:23.576749 4.494934 tcp 10.0.2.15 51311 -> 18.184.58.214 80 FSPA_FSPA 0 0 15 3155 1424 8 flow=Normal-TCP-WEB-Established 1970/01/01 02:02:23.581117 4.267134 tcp 10.0.2.15 51312 -> 2.21.74.57 80 FSPA_FSPA 0 0 11 1738 1216 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:02:23.666079 0.037192 udp 10.0.2.15 53011 <-> 1.1.1.1 53 CON 0 0 2 272 83 1 flow=Normal-UDP-DNS 1970/01/01 02:02:23.710698 0.238831 tcp 10.0.2.15 51313 -> 151.101.14.49 80 FSPA_FSPA 0 0 10 1471 811 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:02:23.856604 0.038049 udp 10.0.2.15 60418 <-> 1.1.1.1 53 CON 0 0 2 191 70 1 flow=Normal-UDP-DNS 1970/01/01 02:02:23.865192 0.067628 udp 10.0.2.15 64118 <-> 1.1.1.1 53 CON 0 0 2 255 80 1 flow=Normal-UDP-DNS 1970/01/01 02:02:23.873753 0.059051 udp 10.0.2.15 54222 <-> 1.1.1.1 53 CON 0 0 2 366 71 1 flow=Normal-UDP-DNS 1970/01/01 02:02:23.897418 4.001236 tcp 10.0.2.15 51314 -> 46.228.164.11 80 FSPA_FSPA 0 0 11 1522 781 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:02:23.937685 3.999247 tcp 10.0.2.15 51315 -> 34.193.126.205 80 FSPA_FSPA 0 0 11 1437 753 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:02:23.940253 4.135801 tcp 10.0.2.15 51316 -> 104.127.60.107 80 FSPA_FSPA 0 0 16 4206 1920 8 flow=Normal-TCP-WEB-Established 1970/01/01 02:02:23.961884 0.046822 udp 10.0.2.15 61923 <-> 1.1.1.1 53 CON 0 0 2 215 79 1 flow=Normal-UDP-DNS 1970/01/01 02:02:24.012331 3.913523 tcp 10.0.2.15 51317 -> 77.238.185.35 443 FSPA_FSPA 0 0 33 8555 1840 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:24.036236 4.070903 tcp 10.0.2.15 51318 -> 37.157.4.39 80 FSPA_FSPA 0 0 11 1266 793 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:02:24.286203 3.804227 tcp 10.0.2.15 51319 -> 37.157.4.39 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:02:24.293808 0.080281 udp 10.0.2.15 53855 <-> 1.1.1.1 53 CON 0 0 2 322 87 1 flow=Normal-UDP-DNS 1970/01/01 02:02:24.332311 0.087878 udp 10.0.2.15 58069 <-> 1.1.1.1 53 CON 0 0 2 274 73 1 flow=Normal-UDP-DNS 1970/01/01 02:02:24.332988 0.128238 udp 10.0.2.15 51341 <-> 1.1.1.1 53 CON 0 0 2 242 86 1 flow=Normal-UDP-DNS 1970/01/01 02:02:24.333540 0.000000 udp 10.0.2.15 51784 -> 1.1.1.1 53 INT 0 1 86 86 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:02:24.375825 3.522281 tcp 10.0.2.15 51320 -> 185.86.139.19 80 FSPA_FSPA 0 0 11 1637 770 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:02:24.423086 3.430521 tcp 10.0.2.15 51321 -> 52.51.137.92 443 FSRPA_FSRPA 0 0 26 7843 1682 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:24.449768 0.098938 udp 10.0.2.15 58963 <-> 1.1.1.1 53 CON 0 0 2 379 77 1 flow=Normal-UDP-DNS 1970/01/01 02:02:24.463376 1.462200 tcp 10.0.2.15 51322 -> 64.74.232.52 443 FSRPA_FSRPA 0 0 23 6754 1631 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:24.484163 3.424018 tcp 10.0.2.15 51323 -> 52.51.137.92 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:24.553761 1.814661 tcp 10.0.2.15 51324 -> 54.200.70.253 80 FSPA_FSPA 0 0 10 2028 820 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:02:24.559796 3.432546 tcp 10.0.2.15 51325 -> 64.74.232.52 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:24.699598 3.377430 tcp 10.0.2.15 51326 -> 54.200.70.253 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:02:24.932394 0.030209 udp 10.0.2.15 61319 <-> 1.1.1.1 53 CON 0 0 2 295 73 1 flow=Normal-UDP-DNS 1970/01/01 02:02:24.968091 3.857645 tcp 10.0.2.15 51327 -> 54.93.41.37 80 FSPA_FSPA 0 0 14 2583 1265 7 flow=Normal-TCP-WEB-Established 1970/01/01 02:02:25.019448 0.054724 udp 10.0.2.15 60624 <-> 1.1.1.1 53 CON 0 0 2 237 78 1 flow=Normal-UDP-DNS 1970/01/01 02:02:25.090152 0.459801 tcp 10.0.2.15 51328 -> 34.248.208.147 80 FSPA_FSPA 0 0 10 1562 687 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:02:25.093411 0.066550 udp 10.0.2.15 52327 <-> 1.1.1.1 53 CON 0 0 2 219 85 1 flow=Normal-UDP-DNS 1970/01/01 02:02:25.165922 2.731479 tcp 10.0.2.15 51329 -> 104.244.43.177 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:25.342417 0.042994 udp 10.0.2.15 51784 <-> 1.0.0.1 53 CON 0 0 2 188 86 1 flow=Normal-UDP-DNS 1970/01/01 02:02:25.349139 7.529050 tcp 10.0.2.15 51330 -> 104.244.43.177 443 FSRPA_FSRPA 0 0 34 9666 1946 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:25.387663 3.483389 tcp 10.0.2.15 51331 -> 52.94.216.48 443 FSPA_FSPA 0 0 25 8542 1732 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:25.471507 2.623113 tcp 10.0.2.15 51332 -> 151.101.13.128 80 FSPA_FSPA 0 0 11 2378 788 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:02:25.474366 0.066980 udp 10.0.2.15 55753 <-> 1.0.0.1 53 CON 0 0 2 280 132 1 flow=Normal-UDP-DNS 1970/01/01 02:02:25.546663 2.350637 tcp 10.0.2.15 51333 -> 216.58.201.99 443 FSPA_FSPA 0 0 32 9047 2145 14 flow=Normal-Google-Net-8 1970/01/01 02:02:25.548215 0.039144 udp 10.0.2.15 59965 <-> 1.0.0.1 53 CON 0 0 2 206 77 1 flow=Normal-UDP-DNS 1970/01/01 02:02:25.592698 2.281869 tcp 10.0.2.15 51334 -> 216.58.201.99 80 FSPA_FSPA 0 0 27 18245 1082 11 flow=Normal-Google-Net-8 1970/01/01 02:02:25.593120 2.281380 tcp 10.0.2.15 51335 -> 216.58.201.99 80 FSPA_FSPA 0 0 40 32024 1673 14 flow=Normal-Google-Net-8 1970/01/01 02:02:25.661390 1.265498 tcp 10.0.2.15 51336 -> 34.248.208.147 80 FSPA_FSPA 0 0 10 1756 812 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:02:25.812859 2.061436 tcp 10.0.2.15 51337 -> 216.58.201.99 80 FSPA_FSPA 0 0 43 32638 1801 16 flow=Normal-Google-Net-8 1970/01/01 02:02:25.934539 1.973745 tcp 10.0.2.15 51338 -> 34.248.208.147 80 FSRA_FSRPA 0 0 10 743 282 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:02:26.041339 1.836728 tcp 10.0.2.15 51339 -> 216.58.201.97 80 FSPA_FSPA 0 0 12 3016 782 6 flow=Normal-Google-Net-8 1970/01/01 02:02:29.116121 3.729979 tcp 10.0.2.15 51340 -> 31.13.84.36 443 FSPA_FSPA 0 0 24 4524 2265 11 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:02:29.123935 0.038249 udp 10.0.2.15 51260 <-> 1.0.0.1 53 CON 0 0 2 218 80 1 flow=Normal-UDP-DNS 1970/01/01 02:02:29.124483 3.652414 tcp 10.0.2.15 51341 -> 31.13.84.36 443 FSRPA_SRPA 0 0 19 5128 1079 9 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:02:29.125067 0.006875 udp 10.0.2.15 54737 <-> 1.0.0.1 53 CON 0 0 2 196 90 1 flow=Normal-UDP-DNS 1970/01/01 02:02:29.125520 0.011028 udp 10.0.2.15 64768 <-> 1.0.0.1 53 CON 0 0 2 197 79 1 flow=Normal-UDP-DNS 1970/01/01 02:02:29.132966 3.643970 tcp 10.0.2.15 51342 -> 90.182.114.17 443 FSRPA_SRPA 0 0 18 4950 1079 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:29.137752 3.643269 tcp 10.0.2.15 51343 -> 31.13.84.4 443 FSRPA_SRPA 0 0 18 5074 1079 9 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:02:29.165041 3.895385 tcp 10.0.2.15 51344 -> 13.32.121.49 80 FSPA_FSPA 0 0 26 16099 953 10 flow=Normal-TCP-WEB-Established 1970/01/01 02:02:29.350307 0.035173 udp 10.0.2.15 63009 <-> 1.0.0.1 53 CON 0 0 2 174 79 1 flow=Normal-UDP-DNS 1970/01/01 02:02:29.350562 0.032810 udp 10.0.2.15 55381 <-> 1.0.0.1 53 CON 0 0 2 144 64 1 flow=Normal-UDP-DNS 1970/01/01 02:02:29.470106 0.071663 udp 10.0.2.15 60505 <-> 1.0.0.1 53 CON 0 0 2 284 78 1 flow=Normal-UDP-DNS 1970/01/01 02:02:29.548533 3.381041 tcp 10.0.2.15 51345 -> 23.21.113.119 80 FSPA_FSPA 0 0 11 1756 1269 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:02:29.552370 0.080226 udp 10.0.2.15 58919 <-> 1.0.0.1 53 CON 0 0 2 202 80 1 flow=Normal-UDP-DNS 1970/01/01 02:02:29.634573 3.610043 tcp 10.0.2.15 51346 -> 199.96.57.6 443 FSRPA_FSRPA 0 0 48 21547 2582 16 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:29.690317 3.252234 tcp 10.0.2.15 51347 -> 199.16.156.201 443 FSRPA_SPA 0 0 31 9102 3519 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:29.708043 0.356777 udp 10.0.2.15 50165 <-> 1.0.0.1 53 CON 0 0 2 250 81 1 flow=Normal-UDP-DNS 1970/01/01 02:02:29.946257 0.039910 udp 10.0.2.15 59366 <-> 1.0.0.1 53 CON 0 0 2 300 73 1 flow=Normal-UDP-DNS 1970/01/01 02:02:29.991142 3.087373 tcp 10.0.2.15 51348 -> 192.229.233.50 443 FSPA_FSPA 0 0 28 9638 1758 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:30.578978 0.044058 udp 10.0.2.15 63029 <-> 1.0.0.1 53 CON 0 0 2 254 84 1 flow=Normal-UDP-DNS 1970/01/01 02:02:30.588070 0.034904 udp 10.0.2.15 62651 <-> 1.0.0.1 53 CON 0 0 2 255 78 1 flow=Normal-UDP-DNS 1970/01/01 02:02:30.593076 0.046807 udp 10.0.2.15 57073 <-> 1.0.0.1 53 CON 0 0 2 340 77 1 flow=Normal-UDP-DNS 1970/01/01 02:02:30.625168 2.213768 tcp 10.0.2.15 51349 -> 23.38.83.178 443 FSRPA_SPA 0 0 130 96562 3137 37 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:30.625688 1.932769 tcp 10.0.2.15 51350 -> 64.74.232.52 443 FSPA_FSPA 0 0 22 7626 2748 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:30.641882 2.099451 tcp 10.0.2.15 51351 -> 52.202.83.164 443 FSRPA_SRPA 0 0 23 7244 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:30.828708 2.123401 tcp 10.0.2.15 51352 -> 64.74.232.52 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:31.438043 0.079721 udp 10.0.2.15 52211 <-> 1.0.0.1 53 CON 0 0 2 342 78 1 flow=Normal-UDP-DNS 1970/01/01 02:02:31.523008 6.860617 tcp 10.0.2.15 51353 -> 35.171.65.3 443 FSPA_FSPA 0 0 33 8838 2081 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:31.681956 1.254332 tcp 10.0.2.15 51354 -> 35.171.65.3 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:32.152539 0.779086 tcp 10.0.2.15 51355 -> 35.171.65.3 80 FSPA_FSPA 0 0 11 1444 956 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:02:32.153428 5.784297 tcp 10.0.2.15 51356 -> 35.171.65.3 80 FSPA_FSPA 0 0 14 2651 1841 7 flow=Normal-TCP-WEB-Established 1970/01/01 02:02:32.191978 0.074442 udp 10.0.2.15 53220 <-> 1.0.0.1 53 CON 0 0 2 238 75 1 flow=Normal-UDP-DNS 1970/01/01 02:02:32.270911 0.659151 tcp 10.0.2.15 51357 -> 34.192.77.81 80 FSPA_FSPA 0 0 11 2872 1205 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:02:32.401566 0.907398 tcp 10.0.2.15 51358 -> 34.192.77.81 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:02:32.601107 0.063518 udp 10.0.2.15 52889 <-> 1.0.0.1 53 CON 0 0 2 352 89 1 flow=Normal-UDP-DNS 1970/01/01 02:02:32.604003 0.062039 udp 10.0.2.15 63258 <-> 1.0.0.1 53 CON 0 0 2 352 89 1 flow=Normal-UDP-DNS 1970/01/01 02:02:32.667226 5.801396 tcp 10.0.2.15 51359 -> 52.22.34.244 443 FSRPA_FSRPA 0 0 33 11302 2819 13 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:32.669765 5.739884 tcp 10.0.2.15 51360 -> 52.203.186.137 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:32.951514 5.388784 tcp 10.0.2.15 51361 -> 52.22.34.244 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:32.953349 4.981972 tcp 10.0.2.15 51362 -> 52.203.186.137 443 FSRPA_SPA 0 0 29 11165 2799 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:33.547119 4.305058 tcp 10.0.2.15 51363 -> 151.101.12.204 80 FSPA_FSPA 0 0 11 3035 1342 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:02:33.861986 0.055838 udp 10.0.2.15 54056 <-> 1.0.0.1 53 CON 0 0 2 350 82 1 flow=Normal-UDP-DNS 1970/01/01 02:02:33.925080 13.990092 tcp 10.0.2.15 51364 -> 52.200.242.164 443 FSRPA_SPA 0 0 42 23158 9595 17 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:34.288755 3.646816 tcp 10.0.2.15 51365 -> 52.200.242.164 443 FSRPA_FSRPA 0 0 34 13966 4711 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:36.637490 1.297519 tcp 10.0.2.15 51366 -> 52.200.242.164 443 FSRPA_FSRPA 0 0 15 1570 958 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:36.827554 11.095571 tcp 10.0.2.15 51367 -> 52.200.242.164 443 FSRPA_FSRPA 0 0 15 1570 958 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:38.585072 3.502555 tcp 10.0.2.15 51368 -> 64.74.232.52 443 FSPA_FSPA 0 0 23 6757 1688 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:38.684373 0.092383 udp 10.0.2.15 60665 <-> 1.0.0.1 53 CON 0 0 2 200 73 1 flow=Normal-UDP-DNS 1970/01/01 02:02:38.782601 64.973305 tcp 10.0.2.15 51369 -> 162.125.34.137 443 SPA_FSPA 0 0 63 38625 26362 29 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:02:44.484981 3.432221 tcp 10.0.2.15 51370 -> 23.21.113.119 80 FSPA_FSPA 0 0 11 1640 1153 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:02:44.739612 3.182762 tcp 10.0.2.15 51371 -> 23.21.113.119 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:02:59.443154 8.346216 tcp 10.0.2.15 51372 -> 31.13.84.36 443 FSRPA_SRPA 0 0 19 5128 1079 9 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:02:59.496449 8.432962 tcp 10.0.2.15 51373 -> 23.21.113.119 80 FSPA_FSPA 0 0 11 1640 1153 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:02:59.765590 8.246169 tcp 10.0.2.15 51374 -> 31.13.84.36 443 FSPA_FSPA 0 0 40 16127 9655 18 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:03:00.335685 0.007621 udp 10.0.2.15 64497 <-> 1.0.0.1 53 CON 0 0 2 190 87 1 flow=Normal-UDP-DNS 1970/01/01 02:03:00.423456 0.335244 udp 10.0.2.15 64498 <-> 216.58.201.106 443 CON 0 0 14 9673 4107 9 flow=Normal-Google-Net-8 1970/01/01 02:03:09.918775 3.001352 udp 10.0.2.15 64502 -> 239.255.255.250 1900 INT 0 4 864 864 4 flow=Normal-UDP-Attempt 1970/01/01 02:03:17.371517 253.551132 udp 10.0.2.15 138 -> 10.0.2.255 138 INT 0 2 495 495 2 flow=Normal-UDP-Attempt 1970/01/01 02:03:29.469960 8.501153 tcp 10.0.2.15 51375 -> 23.21.113.119 80 FSPA_FSPA 0 0 11 1640 1153 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:03:47.288333 0.057886 udp 10.0.2.15 61324 <-> 1.0.0.1 53 CON 0 0 2 210 84 1 flow=Normal-UDP-DNS 1970/01/01 02:03:47.290947 0.005752 udp 10.0.2.15 51630 <-> 1.0.0.1 53 CON 0 0 2 234 89 1 flow=Normal-UDP-DNS 1970/01/01 02:03:47.298155 0.045622 udp 10.0.2.15 56480 <-> 1.0.0.1 53 CON 0 0 2 280 83 1 flow=Normal-UDP-DNS 1970/01/01 02:03:47.298475 0.569407 tcp 10.0.2.15 51376 -> 172.217.23.226 80 FSPA_FSPA 0 0 11 1545 829 6 flow=Normal-Google-Net-9 1970/01/01 02:03:47.344873 10.483985 tcp 10.0.2.15 51377 -> 2.21.74.57 80 FSPA_FSPA 0 0 13 2750 2113 7 flow=Normal-TCP-WEB-Established 1970/01/01 02:03:47.345382 10.488828 tcp 10.0.2.15 51378 -> 2.21.74.57 80 FSPA_FSPA 0 0 13 2749 2112 7 flow=Normal-TCP-WEB-Established 1970/01/01 02:03:47.347366 287.149353 udp 10.0.2.15 56481 <-> 216.58.201.98 443 CON 0 0 757 287686 120895 358 flow=Normal-Google-Net-8 1970/01/01 02:03:47.971745 9.862663 tcp 10.0.2.15 51379 -> 172.217.23.226 80 FSPA_FSPA 0 0 15 2739 1473 8 flow=Normal-Google-Net-9 1970/01/01 02:03:47.975791 0.100185 udp 10.0.2.15 63063 <-> 1.0.0.1 53 CON 0 0 2 190 75 1 flow=Normal-UDP-DNS 1970/01/01 02:03:48.076855 9.761586 tcp 10.0.2.15 51380 -> 31.13.84.8 443 FSPA_FSPA 0 0 41 20787 2338 17 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:03:48.659738 0.004508 udp 10.0.2.15 63180 <-> 1.0.0.1 53 CON 0 0 2 214 81 1 flow=Normal-UDP-DNS 1970/01/01 02:03:48.665778 9.168579 tcp 10.0.2.15 51381 -> 216.58.201.106 80 FSPA_FSPA 0 0 26 16208 1015 11 flow=Normal-Google-Net-8 1970/01/01 02:03:49.019594 0.032946 udp 10.0.2.15 55203 <-> 1.0.0.1 53 CON 0 0 2 208 80 1 flow=Normal-UDP-DNS 1970/01/01 02:03:49.054106 8.788312 tcp 10.0.2.15 51382 -> 31.13.84.4 443 FSPA_FSPA 0 0 89 58138 3050 33 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:03:50.006816 0.033339 udp 10.0.2.15 49788 <-> 1.0.0.1 53 CON 0 0 2 197 76 1 flow=Normal-UDP-DNS 1970/01/01 02:03:50.032925 0.061375 udp 10.0.2.15 57225 <-> 1.0.0.1 53 CON 0 0 2 193 74 1 flow=Normal-UDP-DNS 1970/01/01 02:03:50.042229 7.804341 tcp 10.0.2.15 51383 -> 31.13.84.36 443 FSPA_FSPA 0 0 35 6125 3179 16 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:03:50.062265 0.037736 udp 10.0.2.15 59697 <-> 1.0.0.1 53 CON 0 0 2 182 83 1 flow=Normal-UDP-DNS 1970/01/01 02:03:50.062762 0.004974 udp 10.0.2.15 62894 <-> 1.0.0.1 53 CON 0 0 2 197 79 1 flow=Normal-UDP-DNS 1970/01/01 02:03:50.069696 0.034776 udp 10.0.2.15 57170 <-> 1.0.0.1 53 CON 0 0 2 196 90 1 flow=Normal-UDP-DNS 1970/01/01 02:03:50.106521 127.817604 tcp 10.0.2.15 51384 -> 90.182.114.17 443 FSPA_FSPA 0 0 7587 7835006 119736 2192 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:03:51.316032 0.055930 udp 10.0.2.15 53928 <-> 1.0.0.1 53 CON 0 0 2 406 75 1 flow=Normal-UDP-DNS 1970/01/01 02:03:51.316443 0.032219 udp 10.0.2.15 52181 <-> 1.0.0.1 53 CON 0 0 2 222 90 1 flow=Normal-UDP-DNS 1970/01/01 02:03:51.379806 15.271921 udp 10.0.2.15 52182 <-> 216.58.207.227 443 CON 0 0 13 4601 2597 7 flow=Normal-Google-Net-8 1970/01/01 02:03:51.635854 0.029610 udp 10.0.2.15 63631 <-> 1.0.0.1 53 CON 0 0 2 215 87 1 flow=Normal-UDP-DNS 1970/01/01 02:03:51.680823 15.088616 udp 10.0.2.15 63632 <-> 172.217.23.226 443 CON 0 0 12 4968 2652 6 flow=Normal-Google-Net-9 1970/01/01 02:04:01.828495 1.010446 tcp 10.0.2.15 51385 -> 31.13.84.36 443 FSPA_FSPA 0 0 24 4427 2354 11 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:04:05.181158 2.690786 tcp 10.0.2.15 51386 -> 31.13.84.36 443 FSPA_FSPA 0 0 27 7664 2408 12 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:04:10.574988 7.306054 tcp 10.0.2.15 51387 -> 31.13.84.36 443 FSPA_FSPA 0 0 29 5363 2927 13 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:04:12.113951 270.261719 tcp 10.0.2.15 49436 -> 74.125.133.188 5228 PA_PA 0 0 16 936 471 8 flow=Normal-Google-Net-6 1970/01/01 02:04:14.479807 0.031774 udp 10.0.2.15 53519 <-> 1.0.0.1 53 CON 0 0 2 284 78 1 flow=Normal-UDP-DNS 1970/01/01 02:04:14.515667 3.463718 tcp 10.0.2.15 51388 -> 23.21.182.79 80 FSPA_FSPA 0 0 11 1640 1153 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:04:20.819821 7.073767 tcp 10.0.2.15 51389 -> 31.13.84.36 443 FSPA_FSPA 0 0 29 5367 2932 13 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:04:30.330175 63.137241 udp fe80::353e:6fce:ee32:1a73 546 -> ff02::1:2 547 INT 0 7 1057 1057 7 flow=Normal-UDP-Attempt 1970/01/01 02:04:31.072433 6.988281 tcp 10.0.2.15 51390 -> 31.13.84.36 443 FSPA_FSPA 0 0 30 5418 2986 14 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:04:41.088023 6.773527 tcp 10.0.2.15 51391 -> 31.13.84.36 443 FSPA_FSPA 0 0 29 5363 2932 13 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:04:50.478669 7.430878 tcp 10.0.2.15 51392 -> 216.58.201.99 443 FSPA_FSPA 0 0 46 9555 2864 20 flow=Normal-Google-Net-8 1970/01/01 02:04:51.167022 0.064769 udp 10.0.2.15 54862 <-> 1.0.0.1 53 CON 0 0 2 205 78 1 flow=Normal-UDP-DNS 1970/01/01 02:04:51.236279 0.509913 tcp 10.0.2.15 51393 -> 162.125.66.3 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:04:51.328878 0.213501 tcp 10.0.2.15 51394 -> 162.125.248.4 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:04:51.574204 0.087516 udp 10.0.2.15 60436 <-> 1.0.0.1 53 CON 0 0 2 197 76 1 flow=Normal-UDP-DNS 1970/01/01 02:04:51.662891 6.246716 tcp 10.0.2.15 51395 -> 31.13.84.36 443 FSPA_FSPA 0 0 29 5366 2932 13 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:05:01.820442 6.271420 tcp 10.0.2.15 51396 -> 31.13.84.36 443 FSPA_FSPA 0 0 27 5255 2878 12 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:05:09.920556 3.003211 udp 10.0.2.15 60440 -> 239.255.255.250 1900 INT 0 4 864 864 4 flow=Normal-UDP-Attempt 1970/01/01 02:05:12.068289 5.820297 tcp 10.0.2.15 51397 -> 31.13.84.36 443 FSPA_FSPA 0 0 23 4378 2357 11 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:05:20.983289 6.949961 tcp 10.0.2.15 51398 -> 31.13.84.36 443 FSPA_FSPA 0 0 29 5365 2932 13 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:05:21.439599 0.035884 udp 10.0.2.15 50541 <-> 1.0.0.1 53 CON 0 0 2 231 71 1 flow=Normal-UDP-DNS 1970/01/01 02:05:21.462735 0.036536 udp 10.0.2.15 55761 <-> 1.0.0.1 53 CON 0 0 2 206 77 1 flow=Normal-UDP-DNS 1970/01/01 02:05:21.483456 19.371157 udp 10.0.2.15 55762 <-> 172.217.23.214 443 CON 0 0 68 48743 4361 31 flow=Normal-Google-Net-9 1970/01/01 02:05:21.507530 0.527468 udp 10.0.2.15 55763 <-> 216.58.201.99 443 CON 0 0 29 22271 2740 14 flow=Normal-Google-Net-8 1970/01/01 02:05:22.150613 0.087989 udp 10.0.2.15 56276 <-> 1.0.0.1 53 CON 0 0 2 238 95 1 flow=Normal-UDP-DNS 1970/01/01 02:05:22.252264 174.605392 udp 10.0.2.15 56277 <-> 90.182.119.208 443 CON 0 0 19139 16240974 711307 7881 flow=Normal-Google-Net-10 1970/01/01 02:05:23.726168 26.822573 udp 10.0.2.15 56279 <-> 172.217.23.226 443 CON 0 0 160 111341 8793 79 flow=Normal-Google-Net-9 1970/01/01 02:05:24.006960 28.277260 udp 10.0.2.15 56280 <-> 172.217.23.226 443 CON 0 0 94 39270 14871 51 flow=Normal-Google-Net-9 1970/01/01 02:05:24.668726 0.047073 udp 10.0.2.15 56797 <-> 1.0.0.1 53 CON 0 0 2 229 92 1 flow=Normal-UDP-DNS 1970/01/01 02:05:24.717695 16.900045 udp 10.0.2.15 56798 <-> 209.85.164.183 443 CON 0 0 29 19385 6265 16 flow=Normal-UDP-Established 1970/01/01 02:05:29.153169 0.412426 udp 10.0.2.15 56802 <-> 172.217.23.226 443 CON 0 0 12 4913 2331 7 flow=Normal-Google-Net-9 1970/01/01 02:05:29.472427 0.064426 udp 10.0.2.15 54157 <-> 1.0.0.1 53 CON 0 0 2 284 78 1 flow=Normal-UDP-DNS 1970/01/01 02:05:29.537846 8.440462 tcp 10.0.2.15 51399 -> 23.23.255.94 80 FSPA_FSPA 0 0 11 1641 1154 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:05:29.686716 0.053681 udp 10.0.2.15 54229 <-> 1.0.0.1 53 CON 0 0 2 164 74 1 flow=Normal-UDP-DNS 1970/01/01 02:05:29.724059 8.255411 tcp 10.0.2.15 51400 -> 23.23.255.94 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:05:29.750245 20.631668 udp 10.0.2.15 54230 <-> 172.217.16.68 443 CON 0 0 28 9067 5309 17 flow=Normal-Google-Net-9 1970/01/01 02:05:30.193000 0.054067 udp 10.0.2.15 55225 <-> 1.0.0.1 53 CON 0 0 2 162 73 1 flow=Normal-UDP-DNS 1970/01/01 02:05:30.264732 15.077119 udp 10.0.2.15 55226 <-> 172.217.16.67 443 CON 0 0 16 7916 4434 9 flow=Normal-Google-Net-9 1970/01/01 02:05:31.370477 16.394363 udp 10.0.2.15 55228 <-> 172.217.23.226 443 CON 0 0 12 5066 2519 7 flow=Normal-Google-Net-9 1970/01/01 02:05:31.380357 18.892086 udp 10.0.2.15 55229 <-> 172.217.23.226 443 CON 0 0 15 5094 2714 9 flow=Normal-Google-Net-9 1970/01/01 02:05:34.098969 0.649593 udp 10.0.2.15 55232 <-> 216.58.201.99 443 CON 0 0 10 6034 3105 6 flow=Normal-Google-Net-8 1970/01/01 02:05:34.100250 0.044285 udp 10.0.2.15 52334 <-> 1.0.0.1 53 CON 0 0 2 229 85 1 flow=Normal-UDP-DNS 1970/01/01 02:05:34.155470 0.826591 udp 10.0.2.15 52335 <-> 216.58.201.97 443 CON 0 0 27 18920 5394 15 flow=Normal-Google-Net-8 1970/01/01 02:05:34.828421 8.105284 tcp 10.0.2.15 51401 -> 138.201.8.30 443 FSPA_FSPA 0 0 13 1491 1002 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:05:34.828830 3.050507 tcp 10.0.2.15 51402 -> 138.201.8.30 443 FSPA_FSPA 0 0 17 4857 1303 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:05:34.829300 8.504646 tcp 10.0.2.15 51403 -> 138.201.8.30 443 FSPA_FSPA 0 0 13 1491 1002 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:05:34.830659 3.015024 tcp 10.0.2.15 51404 -> 77.238.185.35 443 FSRPA_SRPA 0 0 23 5562 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:05:34.831286 0.065667 udp 10.0.2.15 61019 <-> 1.0.0.1 53 CON 0 0 2 272 83 1 flow=Normal-UDP-DNS 1970/01/01 02:05:34.899396 2.946333 tcp 10.0.2.15 51405 -> 151.101.14.49 443 FSRPA_SRPA 0 0 24 9294 1162 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:05:35.074411 7.860294 tcp 10.0.2.15 51406 -> 138.201.8.30 443 FSA_FSA 0 0 8 460 294 5 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:05:35.316260 0.085804 udp 10.0.2.15 53529 <-> 1.0.0.1 53 CON 0 0 2 334 75 1 flow=Normal-UDP-DNS 1970/01/01 02:05:35.403581 2.476480 tcp 10.0.2.15 51407 -> 52.58.122.7 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:05:35.504789 2.374952 tcp 10.0.2.15 51408 -> 52.58.122.7 443 FSRPA_FSRPA 0 0 26 6995 1917 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:05:40.497223 3.235574 tcp 10.0.2.15 51409 -> 31.13.84.36 443 FSPA_FSPA 0 0 25 4485 2411 12 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:05:45.659906 2.595276 tcp 10.0.2.15 51410 -> 31.13.84.36 443 FSPA_FSPA 0 0 23 7451 2357 11 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:05:50.748725 7.176393 tcp 10.0.2.15 51411 -> 31.13.84.36 443 FSPA_FSPA 0 0 29 5364 2932 13 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:06:00.785990 0.082067 udp 10.0.2.15 55567 <-> 1.0.0.1 53 CON 0 0 2 197 76 1 flow=Normal-UDP-DNS 1970/01/01 02:06:00.869988 2.075262 tcp 10.0.2.15 51412 -> 31.13.84.36 443 FSPA_FSPA 0 0 30 8470 2930 13 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:06:01.121431 1.738474 tcp 10.0.2.15 51413 -> 31.13.84.36 443 FSRPA_SRPA 0 0 19 5129 1079 9 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:06:01.470186 0.084803 udp 10.0.2.15 53825 <-> 1.0.0.1 53 CON 0 0 2 280 83 1 flow=Normal-UDP-DNS 1970/01/01 02:06:01.557062 11.335452 tcp 10.0.2.15 51414 -> 2.21.74.65 80 FSPA_FSPA 0 0 13 2750 2113 7 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:01.557486 1.381407 tcp 10.0.2.15 51415 -> 2.21.74.65 80 FSPA_FSPA 0 0 13 2749 2112 7 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:01.667692 2.659599 tcp 10.0.2.15 51416 -> 2.21.74.65 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:02.191134 0.951997 udp 10.0.2.15 51426 <-> 1.0.0.1 53 CON 0 0 2 250 81 1 flow=Normal-UDP-DNS 1970/01/01 02:06:05.394512 135.105560 tcp 10.0.2.15 49502 -> 23.4.248.228 443 A_A 0 0 8 436 220 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:14.469667 8.553696 tcp 10.0.2.15 51417 -> 23.23.255.94 80 FSPA_FSPA 0 0 11 1645 1158 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:14.720399 8.304876 tcp 10.0.2.15 51418 -> 23.23.255.94 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:21.410232 1.551226 tcp 10.0.2.15 51419 -> 2.21.74.65 80 FSPA_FSPA 0 0 11 2282 1699 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:21.425435 0.060418 udp 10.0.2.15 62625 <-> 1.0.0.1 53 CON 0 0 2 252 83 1 flow=Normal-UDP-DNS 1970/01/01 02:06:21.493851 16.237759 udp 10.0.2.15 62626 <-> 66.102.1.157 443 CON 0 0 19 6525 4207 11 flow=Normal-UDP-Established 1970/01/01 02:06:21.530289 0.058258 udp 10.0.2.15 58372 <-> 1.0.0.1 53 CON 0 0 2 228 84 1 flow=Normal-UDP-DNS 1970/01/01 02:06:21.596513 132.405441 udp 10.0.2.15 58373 <-> 216.58.201.110 443 CON 0 0 560 198011 168328 332 flow=Normal-Google-Net-8 1970/01/01 02:06:22.054027 0.040394 udp 10.0.2.15 63275 <-> 1.0.0.1 53 CON 0 0 2 321 72 1 flow=Normal-UDP-DNS 1970/01/01 02:06:22.096546 11.185591 tcp 10.0.2.15 51420 -> 185.33.223.218 80 FSPA_FSPA 0 0 105 53746 18409 42 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:22.374541 4.014795 udp 10.0.2.15 57116 -> 1.0.0.1 53 INT 0 3 225 225 3 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:06:22.628499 0.045226 udp 10.0.2.15 58004 <-> 1.0.0.1 53 CON 0 0 2 206 80 1 flow=Normal-UDP-DNS 1970/01/01 02:06:22.675229 10.598880 tcp 10.0.2.15 51421 -> 216.58.201.99 443 FSPA_FSPA 0 0 31 8602 2554 14 flow=Normal-Google-Net-8 1970/01/01 02:06:23.100305 26.004244 udp 10.0.2.15 58005 <-> 172.217.23.226 443 CON 0 0 28 12521 8658 16 flow=Normal-Google-Net-9 1970/01/01 02:06:23.108428 132.759262 udp 10.0.2.15 58006 <-> 172.217.23.226 443 CON 0 0 83 33118 26066 48 flow=Normal-Google-Net-9 1970/01/01 02:06:23.118215 56.070881 udp 10.0.2.15 58007 <-> 172.217.23.226 443 CON 0 0 174 102494 20373 84 flow=Normal-Google-Net-9 1970/01/01 02:06:23.119608 9.768574 tcp 10.0.2.15 51422 -> 185.33.223.218 443 FSRPA_SRPA 0 0 18 4629 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:23.119946 9.768275 tcp 10.0.2.15 51423 -> 185.33.223.218 443 FSRPA_SRPA 0 0 18 4629 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:23.120406 5.512024 tcp 10.0.2.15 51424 -> 185.33.223.218 443 FSRPA_SPA 0 0 27 11357 3935 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:23.128392 150.904648 udp 10.0.2.15 58008 <-> 172.217.23.226 443 CON 0 0 134 36213 27764 79 flow=Normal-Google-Net-9 1970/01/01 02:06:23.139939 9.838468 tcp 10.0.2.15 51425 -> 185.33.223.218 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:23.140720 10.133340 tcp 10.0.2.15 51426 -> 52.58.122.7 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:23.141003 10.133001 tcp 10.0.2.15 51427 -> 52.58.122.7 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:23.142044 9.754433 tcp 10.0.2.15 51428 -> 77.238.185.35 443 FSRPA_SRPA 0 0 23 6050 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:23.158125 0.036289 udp 10.0.2.15 52919 <-> 1.0.0.1 53 CON 0 0 2 216 77 1 flow=Normal-UDP-DNS 1970/01/01 02:06:23.184553 0.034138 udp 10.0.2.15 64836 <-> 1.0.0.1 53 CON 0 0 2 245 80 1 flow=Normal-UDP-DNS 1970/01/01 02:06:23.195944 0.037968 udp 10.0.2.15 49250 <-> 1.0.0.1 53 CON 0 0 2 267 84 1 flow=Normal-UDP-DNS 1970/01/01 02:06:23.196850 9.683826 tcp 10.0.2.15 51429 -> 151.101.12.166 443 FSRPA_SRPA 0 0 21 5856 1162 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:23.198193 9.682529 tcp 10.0.2.15 51430 -> 151.101.12.166 443 FSRPA_SRPA 0 0 21 5856 1162 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:23.198477 9.682486 tcp 10.0.2.15 51431 -> 151.101.12.166 443 FSRPA_SRPA 0 0 21 5856 1162 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:23.220531 0.033663 udp 10.0.2.15 61313 <-> 1.0.0.1 53 CON 0 0 2 243 76 1 flow=Normal-UDP-DNS 1970/01/01 02:06:23.221486 9.663622 tcp 10.0.2.15 51432 -> 104.24.246.16 443 FSRPA_SRPA 0 0 26 8711 1216 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:23.221846 9.663562 tcp 10.0.2.15 51433 -> 104.24.246.16 443 FSRPA_SRPA 0 0 27 8765 1270 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:23.222507 9.662948 tcp 10.0.2.15 51434 -> 104.24.246.16 443 FSRPA_SRPA 0 0 26 8711 1270 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:23.237206 0.038324 udp 10.0.2.15 50870 <-> 1.0.0.1 53 CON 0 0 2 282 77 1 flow=Normal-UDP-DNS 1970/01/01 02:06:23.248589 0.041501 udp 10.0.2.15 57309 <-> 1.0.0.1 53 CON 0 0 2 219 78 1 flow=Normal-UDP-DNS 1970/01/01 02:06:23.255957 0.035470 udp 10.0.2.15 62245 <-> 1.0.0.1 53 CON 0 0 2 164 74 1 flow=Normal-UDP-DNS 1970/01/01 02:06:23.258835 9.641844 tcp 10.0.2.15 51435 -> 104.127.60.107 443 FSRPA_SRPA 0 0 21 6415 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:23.259253 9.641440 tcp 10.0.2.15 51436 -> 104.127.60.107 443 FSRPA_SRPA 0 0 23 6523 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:23.260058 9.640648 tcp 10.0.2.15 51437 -> 104.127.60.107 443 FSRPA_SRPA 0 0 21 6415 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:23.269358 9.731353 tcp 10.0.2.15 51438 -> 185.29.132.30 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:23.269611 10.013413 tcp 10.0.2.15 51439 -> 185.29.132.30 443 FSPA_FSPA 0 0 12 1369 904 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:23.269992 10.012943 tcp 10.0.2.15 51440 -> 185.29.132.30 443 FSPA_FSPA 0 0 12 1369 904 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:23.270408 9.730484 tcp 10.0.2.15 51441 -> 185.29.132.30 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:23.271202 9.729643 tcp 10.0.2.15 51442 -> 185.29.132.30 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:23.277012 0.029519 udp 10.0.2.15 63974 <-> 1.0.0.1 53 CON 0 0 2 249 84 1 flow=Normal-UDP-DNS 1970/01/01 02:06:23.289224 1.984412 tcp 10.0.2.15 51443 -> 185.33.223.197 80 FSPA_FSA 0 0 11 3267 2993 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:23.291878 9.793731 tcp 10.0.2.15 51444 -> 161.170.232.53 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:23.292170 9.795472 tcp 10.0.2.15 51445 -> 161.170.232.53 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:23.294379 9.683577 tcp 10.0.2.15 51446 -> 178.250.0.76 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:23.294788 10.705631 tcp 10.0.2.15 51447 -> 178.250.0.76 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:23.295253 0.000000 udp 10.0.2.15 52045 -> 1.0.0.1 53 INT 0 1 80 80 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:06:23.306505 0.000000 udp 10.0.2.15 56036 -> 1.0.0.1 53 INT 0 1 81 81 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:06:23.307618 9.672049 tcp 10.0.2.15 51448 -> 62.67.193.75 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:23.307877 144.698608 tcp 10.0.2.15 51449 -> 62.67.193.75 80 FSA_SA 0 0 11 613 339 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:23.375242 3.061640 udp 10.0.2.15 57116 <-> 1.1.1.1 53 CON 0 0 3 307 150 2 flow=Normal-UDP-DNS 1970/01/01 02:06:23.386516 9.968653 tcp 10.0.2.15 51450 -> 185.29.132.30 443 FSPA_FSPA 0 0 20 4923 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:23.387493 9.894564 tcp 10.0.2.15 51451 -> 185.33.223.197 80 FSPA_FSPA 0 0 44 24410 14529 20 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:23.701559 40.409569 udp 10.0.2.15 56038 <-> 216.58.201.106 443 CON 0 0 21 5923 3307 11 flow=Normal-Google-Net-8 1970/01/01 02:06:24.238650 0.038123 udp 10.0.2.15 54596 <-> 1.0.0.1 53 CON 0 0 2 339 71 1 flow=Normal-UDP-DNS 1970/01/01 02:06:24.239151 0.043169 udp 10.0.2.15 53611 <-> 1.0.0.1 53 CON 0 0 2 378 78 1 flow=Normal-UDP-DNS 1970/01/01 02:06:24.277464 0.035862 udp 10.0.2.15 60775 <-> 1.0.0.1 53 CON 0 0 2 176 80 1 flow=Normal-UDP-DNS 1970/01/01 02:06:24.281515 0.606505 tcp 10.0.2.15 51452 -> 52.58.45.42 80 FSRPA_SPA 0 0 9 1721 795 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:24.283141 0.034032 udp 10.0.2.15 63009 <-> 1.0.0.1 53 CON 0 0 2 281 84 1 flow=Normal-UDP-DNS 1970/01/01 02:06:24.284052 9.403268 tcp 10.0.2.15 51453 -> 52.29.89.114 80 FSPA_FSPA 0 0 11 1564 827 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:24.284905 0.040870 udp 10.0.2.15 50488 <-> 1.0.0.1 53 CON 0 0 2 368 91 1 flow=Normal-UDP-DNS 1970/01/01 02:06:24.298403 0.007534 udp 10.0.2.15 52045 <-> 1.1.1.1 53 CON 0 0 2 240 80 1 flow=Normal-UDP-DNS 1970/01/01 02:06:24.307429 8.661556 tcp 10.0.2.15 51454 -> 104.16.232.152 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:24.307683 8.962124 tcp 10.0.2.15 51455 -> 104.16.232.152 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:24.308147 0.011969 udp 10.0.2.15 56036 <-> 1.1.1.1 53 CON 0 0 2 178 81 1 flow=Normal-UDP-DNS 1970/01/01 02:06:24.308554 0.075903 udp 10.0.2.15 56364 <-> 1.1.1.1 53 CON 0 0 2 207 75 1 flow=Normal-UDP-DNS 1970/01/01 02:06:24.314698 8.581791 tcp 10.0.2.15 51456 -> 35.186.202.217 443 FSRPA_SRPA 0 0 21 7054 1327 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:24.315464 0.075121 udp 10.0.2.15 50266 <-> 1.1.1.1 53 CON 0 0 2 293 82 1 flow=Normal-UDP-DNS 1970/01/01 02:06:24.319241 10.687446 tcp 10.0.2.15 51457 -> 54.156.163.90 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:24.320551 0.083980 udp 10.0.2.15 62147 <-> 1.1.1.1 53 CON 0 0 2 251 80 1 flow=Normal-UDP-DNS 1970/01/01 02:06:24.322097 8.745150 tcp 10.0.2.15 51458 -> 72.21.206.140 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:24.322717 8.744301 tcp 10.0.2.15 51459 -> 72.21.206.140 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:24.323428 0.068985 udp 10.0.2.15 60395 <-> 1.1.1.1 53 CON 0 0 2 154 69 1 flow=Normal-UDP-DNS 1970/01/01 02:06:24.327017 8.728387 tcp 10.0.2.15 51460 -> 52.22.240.46 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:24.327436 0.000000 udp 10.0.2.15 62447 -> 1.1.1.1 53 INT 0 1 74 74 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:06:24.387295 8.610522 tcp 10.0.2.15 51461 -> 151.101.14.2 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:24.393065 8.888781 tcp 10.0.2.15 51462 -> 35.157.79.6 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:24.394814 0.520522 tcp 10.0.2.15 51463 -> 70.42.132.21 80 FSRPA_SPA 0 0 9 1437 700 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:24.406112 8.478899 tcp 10.0.2.15 51464 -> 23.56.3.183 443 FSRPA_SRPA 0 0 20 5684 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:24.466386 0.803693 tcp 10.0.2.15 51465 -> 54.156.163.90 80 FSRPA_FSRPA 0 0 12 1862 746 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:24.468558 0.800981 tcp 10.0.2.15 51466 -> 52.22.240.46 80 FSRPA_FSRPA 0 0 12 1520 804 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:24.471187 0.612126 tcp 10.0.2.15 51467 -> 151.101.14.2 80 FSRPA_FSRPA 0 0 12 2291 1267 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:24.472730 0.723039 tcp 10.0.2.15 51468 -> 35.157.79.6 80 FSRPA_FSRPA 0 0 12 1408 789 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:24.475310 8.409771 tcp 10.0.2.15 51469 -> 23.56.3.183 443 FSRPA_SRPA 0 0 19 5630 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:24.476994 8.786120 tcp 10.0.2.15 51470 -> 70.42.132.21 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:24.660144 8.299714 tcp 10.0.2.15 51471 -> 2.21.74.65 80 FSPA_FSPA 0 0 19 6012 4595 10 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:25.333745 0.066636 udp 10.0.2.15 62447 <-> 1.0.0.1 53 CON 0 0 2 241 74 1 flow=Normal-UDP-DNS 1970/01/01 02:06:25.401916 7.569165 tcp 10.0.2.15 51472 -> 23.7.207.240 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:26.446288 144.732758 udp 10.0.2.15 62450 <-> 172.217.23.206 443 CON 0 0 122 30815 24389 68 flow=Normal-Google-Net-9 1970/01/01 02:06:26.601167 6.454319 tcp 10.0.2.15 51473 -> 52.22.240.46 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:26.601673 6.453871 tcp 10.0.2.15 51474 -> 52.22.240.46 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:26.602492 6.668066 tcp 10.0.2.15 51475 -> 52.29.89.114 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:26.603169 6.667593 tcp 10.0.2.15 51476 -> 52.29.89.114 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:26.603995 6.505527 tcp 10.0.2.15 51477 -> 70.42.132.21 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:26.604533 6.509248 tcp 10.0.2.15 51478 -> 70.42.132.21 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:26.605364 7.379479 tcp 10.0.2.15 51479 -> 54.156.163.90 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:26.607519 7.387347 tcp 10.0.2.15 51480 -> 54.156.163.90 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:26.608673 6.670456 tcp 10.0.2.15 51481 -> 35.157.79.6 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:26.609073 6.669602 tcp 10.0.2.15 51482 -> 35.157.79.6 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:26.609896 6.660866 tcp 10.0.2.15 51483 -> 52.58.45.42 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:26.610454 6.359100 tcp 10.0.2.15 51484 -> 52.58.45.42 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:26.610835 6.358611 tcp 10.0.2.15 51485 -> 52.58.45.42 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:26.611731 6.360454 tcp 10.0.2.15 51486 -> 23.7.207.240 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:26.612058 6.360588 tcp 10.0.2.15 51487 -> 23.7.207.240 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:26.613469 6.376196 tcp 10.0.2.15 51488 -> 151.101.14.2 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:26.616061 6.374321 tcp 10.0.2.15 51489 -> 151.101.14.2 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:26.618731 6.266366 tcp 10.0.2.15 51490 -> 23.56.3.183 443 FSRPA_SRPA 0 0 20 5684 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:26.619581 6.276919 tcp 10.0.2.15 51491 -> 35.186.202.217 443 FSRPA_SRPA 0 0 21 7054 1327 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:26.620307 6.280351 tcp 10.0.2.15 51492 -> 35.186.202.217 443 FSRPA_SRPA 0 0 21 7054 1327 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:26.969018 0.036544 udp 10.0.2.15 51649 <-> 1.1.1.1 53 CON 0 0 2 338 91 1 flow=Normal-UDP-DNS 1970/01/01 02:06:27.008149 6.032004 tcp 10.0.2.15 51493 -> 152.195.39.114 443 FSPA_FSPA 0 0 48 14020 4697 20 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:27.011091 0.029119 udp 10.0.2.15 55490 <-> 1.1.1.1 53 CON 0 0 2 202 73 1 flow=Normal-UDP-DNS 1970/01/01 02:06:27.011525 0.036475 udp 10.0.2.15 59267 <-> 1.1.1.1 53 CON 0 0 2 280 76 1 flow=Normal-UDP-DNS 1970/01/01 02:06:27.017522 0.037121 udp 10.0.2.15 52700 <-> 1.1.1.1 53 CON 0 0 2 334 81 1 flow=Normal-UDP-DNS 1970/01/01 02:06:27.018880 0.031427 udp 10.0.2.15 49711 <-> 1.1.1.1 53 CON 0 0 2 240 72 1 flow=Normal-UDP-DNS 1970/01/01 02:06:27.024783 0.040044 udp 10.0.2.15 56806 <-> 1.1.1.1 53 CON 0 0 2 246 99 1 flow=Normal-UDP-DNS 1970/01/01 02:06:27.026841 0.360444 tcp 10.0.2.15 51494 -> 213.155.156.164 443 FSPA_FSPA 0 0 20 5569 1536 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:27.027319 0.037437 udp 10.0.2.15 58604 <-> 1.1.1.1 53 CON 0 0 2 284 78 1 flow=Normal-UDP-DNS 1970/01/01 02:06:27.041210 6.638174 tcp 10.0.2.15 51495 -> 13.32.120.7 80 FSPA_FSPA 0 0 11 2202 787 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:27.041466 8.393775 tcp 10.0.2.15 51496 -> 13.32.120.7 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:27.041897 0.080922 udp 10.0.2.15 51510 <-> 1.1.1.1 53 CON 0 0 2 307 72 1 flow=Normal-UDP-DNS 1970/01/01 02:06:27.050362 5.942690 tcp 10.0.2.15 51497 -> 54.154.27.0 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:27.051203 0.043669 udp 10.0.2.15 56357 <-> 1.1.1.1 53 CON 0 0 2 314 79 1 flow=Normal-UDP-DNS 1970/01/01 02:06:27.053508 6.224412 tcp 10.0.2.15 51498 -> 13.114.241.178 80 FSPA_FSPA 0 0 11 1562 744 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:27.057674 0.000000 udp 10.0.2.15 56315 -> 1.1.1.1 53 INT 0 1 71 71 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:06:27.058903 0.177317 tcp 10.0.2.15 51499 -> 151.101.14.49 80 FSPA_FSPA 0 0 10 1471 811 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:27.059959 6.219326 tcp 10.0.2.15 51500 -> 52.58.163.163 80 FSPA_FSPA 0 0 11 1784 942 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:27.067494 6.267152 tcp 10.0.2.15 51501 -> 52.48.207.156 443 FSRPA_FSRPA 0 0 15 1570 958 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:27.067794 5.922325 tcp 10.0.2.15 51502 -> 54.77.97.30 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:27.098435 5.957257 tcp 10.0.2.15 51503 -> 52.54.21.235 80 FSPA_FSPA 0 0 11 1453 744 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:27.149840 5.917344 tcp 10.0.2.15 51504 -> 35.170.15.242 80 FSPA_FSPA 0 0 11 1366 783 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:27.189638 5.803187 tcp 10.0.2.15 51505 -> 54.154.27.0 80 FSPA_FSPA 0 0 11 1584 721 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:27.204117 6.075111 tcp 10.0.2.15 51506 -> 13.114.241.178 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:27.204866 5.773721 tcp 10.0.2.15 51507 -> 54.77.97.30 80 FSPA_FSPA 0 0 11 1506 771 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:27.206363 6.186193 tcp 10.0.2.15 51508 -> 52.48.207.156 443 FSRPA_FSRPA 0 0 34 10379 2851 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:27.209095 5.857707 tcp 10.0.2.15 51509 -> 35.170.15.242 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:27.209425 5.846218 tcp 10.0.2.15 51510 -> 52.54.21.235 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:27.232868 0.033575 udp 10.0.2.15 52792 <-> 1.1.1.1 53 CON 0 0 2 158 71 1 flow=Normal-UDP-DNS 1970/01/01 02:06:27.267570 5.766115 tcp 10.0.2.15 51511 -> 192.132.33.27 443 FSPA_FSPA 0 0 22 8919 1845 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:27.307490 0.036834 udp 10.0.2.15 65414 <-> 1.1.1.1 53 CON 0 0 2 214 77 1 flow=Normal-UDP-DNS 1970/01/01 02:06:27.349732 5.623987 tcp 10.0.2.15 51512 -> 151.101.14.2 80 FSPA_FSPA 0 0 14 2142 1057 7 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:27.368595 0.057245 udp 10.0.2.15 51310 <-> 1.1.1.1 53 CON 0 0 2 194 81 1 flow=Normal-UDP-DNS 1970/01/01 02:06:27.385277 0.051301 udp 10.0.2.15 52653 <-> 1.1.1.1 53 CON 0 0 2 390 73 1 flow=Normal-UDP-DNS 1970/01/01 02:06:27.444297 5.548683 tcp 10.0.2.15 51513 -> 54.36.212.192 80 FSPA_FSPA 0 0 11 1540 802 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:27.445632 5.828536 tcp 10.0.2.15 51514 -> 136.243.75.8 80 FSPA_FSPA 0 0 11 1637 775 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:27.632823 0.300268 udp 10.0.2.15 52654 <-> 216.58.201.99 443 CON 0 0 7 3168 1634 4 flow=Normal-Google-Net-8 1970/01/01 02:06:27.641788 21.952934 udp 10.0.2.15 52655 <-> 216.58.201.97 443 CON 0 0 320 277416 16048 125 flow=Normal-Google-Net-8 1970/01/01 02:06:27.649635 144.974670 udp 10.0.2.15 52656 <-> 172.217.16.68 443 CON 0 0 86 23570 17558 49 flow=Normal-Google-Net-9 1970/01/01 02:06:27.670267 0.007013 udp 10.0.2.15 62718 <-> 1.1.1.1 53 CON 0 0 2 329 76 1 flow=Normal-UDP-DNS 1970/01/01 02:06:27.678117 5.312213 tcp 10.0.2.15 51515 -> 185.33.223.202 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:27.920780 5.072130 tcp 10.0.2.15 51516 -> 185.33.223.202 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:27.961870 0.095240 udp 10.0.2.15 59188 <-> 1.1.1.1 53 CON 0 0 2 223 79 1 flow=Normal-UDP-DNS 1970/01/01 02:06:28.053941 0.026843 udp 10.0.2.15 56315 <-> 1.0.0.1 53 CON 0 0 2 158 71 1 flow=Normal-UDP-DNS 1970/01/01 02:06:28.058552 4.834269 tcp 10.0.2.15 51517 -> 185.64.189.236 443 FSRPA_SRPA 0 0 23 7017 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:28.081596 10.438555 tcp 10.0.2.15 51518 -> 8.41.222.241 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:28.091712 5.234749 tcp 10.0.2.15 51519 -> 138.201.8.30 443 FSA_FSA 0 0 8 460 294 5 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:28.092400 4.867307 tcp 10.0.2.15 51520 -> 138.201.8.30 443 FSPA_FSPA 0 0 12 1425 936 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:28.093535 5.172761 tcp 10.0.2.15 51521 -> 52.58.122.7 443 FSRPA_FSRPA 0 0 22 5293 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:28.094295 5.171716 tcp 10.0.2.15 51522 -> 52.58.122.7 443 FSRPA_FSRPA 0 0 23 5347 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:28.095376 5.018440 tcp 10.0.2.15 51523 -> 52.58.122.7 443 FSRPA_FSRPA 0 0 21 5239 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:28.096777 4.803929 tcp 10.0.2.15 51524 -> 151.101.14.49 443 FSRPA_SRPA 0 0 26 9402 1270 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:28.190135 0.000000 udp 10.0.2.15 53349 -> 1.0.0.1 53 INT 0 1 72 72 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:06:28.211847 10.341351 tcp 10.0.2.15 51525 -> 8.41.222.241 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:28.343192 4.939792 tcp 10.0.2.15 51526 -> 138.201.8.30 443 FSPA_FSPA 0 0 17 4857 1303 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:28.698460 4.579599 tcp 10.0.2.15 51527 -> 185.33.223.197 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:28.698909 4.571853 tcp 10.0.2.15 51528 -> 185.33.223.197 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:28.699916 4.577872 tcp 10.0.2.15 51529 -> 185.33.223.197 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:28.711686 4.343907 tcp 10.0.2.15 51530 -> 52.54.21.235 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:28.712340 4.258946 tcp 10.0.2.15 51531 -> 136.243.75.8 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:28.713103 4.258982 tcp 10.0.2.15 51532 -> 136.243.75.8 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:28.715664 4.351448 tcp 10.0.2.15 51533 -> 35.170.15.242 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:28.717019 4.264496 tcp 10.0.2.15 51534 -> 151.101.14.49 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:28.717652 4.255945 tcp 10.0.2.15 51535 -> 151.101.14.49 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:28.718102 4.254380 tcp 10.0.2.15 51536 -> 151.101.14.49 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:28.719117 139.287415 tcp 10.0.2.15 51537 -> 8.41.222.241 80 FSA_SA 0 0 11 613 339 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:28.720364 4.261316 tcp 10.0.2.15 51538 -> 151.101.14.2 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:28.720640 4.269552 tcp 10.0.2.15 51539 -> 151.101.14.2 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:28.721549 4.276440 tcp 10.0.2.15 51540 -> 54.36.212.192 80 FSRA_FSRPA 0 0 10 743 282 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:28.721989 4.276365 tcp 10.0.2.15 51541 -> 54.36.212.192 80 FSRA_FSRPA 0 0 10 743 282 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:28.723086 4.310355 tcp 10.0.2.15 51542 -> 192.132.33.27 443 FSPA_FSPA 0 0 20 7497 1333 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:28.723512 4.311384 tcp 10.0.2.15 51543 -> 192.132.33.27 443 FSPA_FSPA 0 0 20 7497 1333 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:28.724616 4.558304 tcp 10.0.2.15 51544 -> 213.155.156.164 443 FSRPA_FSRPA 0 0 22 5188 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:28.725320 4.557341 tcp 10.0.2.15 51545 -> 213.155.156.164 443 FSRPA_FSRPA 0 0 22 5188 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:28.726146 4.556305 tcp 10.0.2.15 51546 -> 213.155.156.164 443 FSRPA_FSRPA 0 0 22 5188 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:28.728246 4.545941 tcp 10.0.2.15 51547 -> 52.48.207.156 443 FSRPA_FSRPA 0 0 15 1570 958 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:28.770919 0.036537 udp 10.0.2.15 64365 <-> 1.0.0.1 53 CON 0 0 2 235 74 1 flow=Normal-UDP-DNS 1970/01/01 02:06:28.808151 4.469863 tcp 10.0.2.15 51548 -> 23.38.91.242 80 FSPA_FSPA 0 0 41 20678 2230 15 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:29.192319 0.007425 udp 10.0.2.15 53349 <-> 1.1.1.1 53 CON 0 0 2 234 72 1 flow=Normal-UDP-DNS 1970/01/01 02:06:29.201522 11.147549 tcp 10.0.2.15 51549 -> 193.0.160.128 443 FSPA_FSPA 0 0 21 6892 2376 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:29.574745 0.056204 udp 10.0.2.15 64246 <-> 1.1.1.1 53 CON 0 0 2 284 78 1 flow=Normal-UDP-DNS 1970/01/01 02:06:29.632276 3.427276 tcp 10.0.2.15 51550 -> 54.204.11.64 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:29.800651 3.258763 tcp 10.0.2.15 51551 -> 54.204.11.64 80 FSPA_FSPA 0 0 11 1643 1156 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:30.082561 137.923859 tcp 10.0.2.15 51552 -> 193.0.160.128 443 FSPA_SPA 0 0 21 4725 1414 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:30.084332 11.097157 tcp 10.0.2.15 51553 -> 193.0.160.128 443 FSPA_FSPA 0 0 17 4506 1303 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:33.593629 9.618942 tcp 10.0.2.15 51554 -> 2.21.74.65 80 FSPA_FSPA 0 0 26 9581 7330 13 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:34.016887 5.212592 tcp 10.0.2.15 51555 -> 185.33.223.218 80 FSRPA_SRPA 0 0 51 25150 8688 21 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:36.557014 6.705562 tcp 10.0.2.15 51556 -> 185.33.223.197 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:36.557281 1.428330 tcp 10.0.2.15 51557 -> 185.33.223.197 80 FSRPA_SPA 0 0 16 5762 3381 8 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:36.557864 7.017767 tcp 10.0.2.15 51558 -> 185.33.223.197 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:36.558941 6.328375 tcp 10.0.2.15 51559 -> 152.195.39.114 443 FSRPA_SRPA 0 0 28 8979 1303 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:36.572702 8.246498 tcp 10.0.2.15 51560 -> 52.54.21.235 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:36.573226 6.995564 tcp 10.0.2.15 51561 -> 52.54.21.235 80 FSA_FSA 0 0 8 460 294 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:36.574012 4.656847 tcp 10.0.2.15 51562 -> 185.33.223.218 80 FSRPA_SRPA 0 0 20 7401 2456 9 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:36.574390 6.040090 tcp 10.0.2.15 51563 -> 185.33.223.218 80 FSPA_FSA 0 0 11 2569 2295 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:36.575211 6.688457 tcp 10.0.2.15 51564 -> 136.243.75.8 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:36.575571 7.528469 tcp 10.0.2.15 51565 -> 136.243.75.8 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:36.576465 6.993357 tcp 10.0.2.15 51566 -> 35.170.15.242 80 FSA_FSA 0 0 8 460 294 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:36.576746 6.477236 tcp 10.0.2.15 51567 -> 35.170.15.242 80 FSA_FSA 0 0 8 460 294 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:36.577779 11.588768 tcp 10.0.2.15 51568 -> 8.41.222.241 80 FSA_FSA 0 0 8 460 294 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:36.578986 16.327530 tcp 10.0.2.15 51569 -> 8.41.222.241 80 FSA_FSA 0 0 8 460 294 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:36.579906 6.693358 tcp 10.0.2.15 51570 -> 151.101.14.2 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:36.580276 6.688114 tcp 10.0.2.15 51571 -> 151.101.14.2 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:36.581066 6.709148 tcp 10.0.2.15 51572 -> 54.36.212.192 80 FSRA_FSRPA 0 0 10 743 282 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:36.581571 7.494116 tcp 10.0.2.15 51573 -> 54.36.212.192 80 FSRA_FSRPA 0 0 10 743 282 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:36.583162 7.478673 tcp 10.0.2.15 51574 -> 192.132.33.27 443 FSA_FSA 0 0 8 460 294 5 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:36.583512 6.470341 tcp 10.0.2.15 51575 -> 192.132.33.27 443 FSPA_FSPA 0 0 20 7497 1333 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:36.584597 6.723860 tcp 10.0.2.15 51576 -> 52.48.207.156 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:36.585227 7.257347 tcp 10.0.2.15 51577 -> 52.48.207.156 443 FSRPA_FSRPA 0 0 15 1570 958 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:36.619976 0.046529 udp 10.0.2.15 59720 <-> 1.1.1.1 53 CON 0 0 2 272 83 1 flow=Normal-UDP-DNS 1970/01/01 02:06:36.667675 6.600282 tcp 10.0.2.15 51578 -> 151.101.14.49 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:36.668077 6.825823 tcp 10.0.2.15 51579 -> 151.101.14.49 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:36.837218 6.214374 tcp 10.0.2.15 51580 -> 192.132.33.27 443 FSPA_FSPA 0 0 21 7551 1387 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:36.837659 6.394807 tcp 10.0.2.15 51581 -> 52.48.207.156 443 FSRPA_FSRPA 0 0 15 1570 958 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:37.224933 0.075698 udp 10.0.2.15 56735 <-> 1.1.1.1 53 CON 0 0 2 455 87 1 flow=Normal-UDP-DNS 1970/01/01 02:06:37.225393 0.090427 udp 10.0.2.15 63250 <-> 1.1.1.1 53 CON 0 0 2 318 79 1 flow=Normal-UDP-DNS 1970/01/01 02:06:37.225755 0.000000 udp 10.0.2.15 61914 -> 1.1.1.1 53 INT 0 1 77 77 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:06:37.226130 0.000000 udp 10.0.2.15 61191 -> 1.1.1.1 53 INT 0 1 75 75 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:06:37.226437 0.081202 udp 10.0.2.15 61390 <-> 1.1.1.1 53 CON 0 0 2 168 76 1 flow=Normal-UDP-DNS 1970/01/01 02:06:37.226718 0.000000 udp 10.0.2.15 61943 -> 1.1.1.1 53 INT 0 1 77 77 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:06:37.301971 15.735123 tcp 10.0.2.15 51582 -> 54.86.197.253 443 FSRPA_FSRPA 0 0 25 6638 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:37.302499 0.068931 udp 10.0.2.15 60248 <-> 1.1.1.1 53 CON 0 0 2 288 80 1 flow=Normal-UDP-DNS 1970/01/01 02:06:37.308845 5.742547 tcp 10.0.2.15 51583 -> 173.239.42.221 443 FSPA_FSPA 0 0 21 6804 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:37.309195 0.039833 udp 10.0.2.15 56861 <-> 1.1.1.1 53 CON 0 0 2 166 75 1 flow=Normal-UDP-DNS 1970/01/01 02:06:37.318856 1.323750 tcp 10.0.2.15 51584 -> 52.86.215.43 80 FSRPA_FSRPA 0 0 12 1939 1283 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:37.319540 0.085099 udp 10.0.2.15 64233 <-> 1.1.1.1 53 CON 0 0 2 288 80 1 flow=Normal-UDP-DNS 1970/01/01 02:06:37.352660 5.895096 tcp 10.0.2.15 51585 -> 107.178.242.85 80 FSPA_FSPA 0 0 11 1491 738 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:37.353799 0.107428 udp 10.0.2.15 63926 <-> 1.1.1.1 53 CON 0 0 2 454 100 1 flow=Normal-UDP-DNS 1970/01/01 02:06:37.358096 5.858433 tcp 10.0.2.15 51586 -> 216.58.201.99 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-Google-Net-8 1970/01/01 02:06:37.373233 0.939058 tcp 10.0.2.15 51587 -> 54.217.236.197 80 FSRPA_FSRPA 0 0 12 1576 759 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:37.407092 6.668548 tcp 10.0.2.15 51588 -> 52.202.66.81 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:37.411185 6.120757 tcp 10.0.2.15 51589 -> 54.86.197.253 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:37.412608 7.593777 tcp 10.0.2.15 51590 -> 52.86.215.43 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:37.418917 9.645101 tcp 10.0.2.15 51591 -> 173.239.42.221 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:37.434348 5.833777 tcp 10.0.2.15 51592 -> 54.217.236.197 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:37.448921 6.471747 tcp 10.0.2.15 51593 -> 52.202.66.81 443 FSRPA_FSRPA 0 0 21 4840 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:37.463255 5.533816 tcp 10.0.2.15 51594 -> 52.210.52.158 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:37.610467 5.370856 tcp 10.0.2.15 51595 -> 216.58.201.99 443 FSPA_FSPA 0 0 28 4186 2686 12 flow=Normal-Google-Net-8 1970/01/01 02:06:37.703303 5.546783 tcp 10.0.2.15 51596 -> 52.210.52.158 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:38.236489 0.043326 udp 10.0.2.15 61191 <-> 1.0.0.1 53 CON 0 0 2 358 75 1 flow=Normal-UDP-DNS 1970/01/01 02:06:38.236671 0.044067 udp 10.0.2.15 61914 <-> 1.0.0.1 53 CON 0 0 2 331 77 1 flow=Normal-UDP-DNS 1970/01/01 02:06:38.236811 0.044539 udp 10.0.2.15 61943 <-> 1.0.0.1 53 CON 0 0 2 218 77 1 flow=Normal-UDP-DNS 1970/01/01 02:06:38.282342 5.042242 tcp 10.0.2.15 51597 -> 212.71.237.162 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:38.283117 5.020742 tcp 10.0.2.15 51598 -> 52.30.254.225 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:38.285518 4.936141 tcp 10.0.2.15 51599 -> 136.243.213.54 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:42.526541 1.888689 tcp 10.0.2.15 51600 -> 185.33.223.218 80 FSPA_FSA 0 0 11 2567 2293 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:43.378978 9.610513 tcp 10.0.2.15 51601 -> 2.21.74.65 80 FSPA_FSPA 0 0 15 4140 3140 8 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:43.831516 3.220054 tcp 10.0.2.15 51602 -> 185.33.223.218 80 FSRPA_SRPA 0 0 55 28368 11157 24 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:44.488630 8.583909 tcp 10.0.2.15 51603 -> 54.204.11.64 80 FSPA_FSPA 0 0 11 1646 1159 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:45.259016 8.013798 tcp 10.0.2.15 51604 -> 185.33.223.197 80 FSPA_FSPA 0 0 47 25722 15264 20 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:45.259292 8.008294 tcp 10.0.2.15 51605 -> 185.33.223.197 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:45.259752 8.579800 tcp 10.0.2.15 51606 -> 185.33.223.197 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:45.260099 8.002044 tcp 10.0.2.15 51607 -> 152.195.39.114 443 FSPA_FSPA 0 0 43 13746 4641 19 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:45.309257 7.952654 tcp 10.0.2.15 51608 -> 54.217.236.197 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:45.309535 8.256464 tcp 10.0.2.15 51609 -> 54.217.236.197 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:45.309787 7.951033 tcp 10.0.2.15 51610 -> 54.217.236.197 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:45.310370 7.679173 tcp 10.0.2.15 51611 -> 136.243.213.54 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:45.311145 7.941523 tcp 10.0.2.15 51612 -> 136.243.213.54 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:45.311825 7.918754 tcp 10.0.2.15 51613 -> 136.243.213.54 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:45.312849 8.211610 tcp 10.0.2.15 51614 -> 212.71.237.162 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:45.313461 7.678131 tcp 10.0.2.15 51615 -> 212.71.237.162 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:45.315537 8.210440 tcp 10.0.2.15 51616 -> 212.71.237.162 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:45.316027 7.946828 tcp 10.0.2.15 51617 -> 52.210.52.158 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:45.316720 8.249631 tcp 10.0.2.15 51618 -> 52.210.52.158 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:45.317076 8.540380 tcp 10.0.2.15 51619 -> 52.210.52.158 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:45.317849 7.674929 tcp 10.0.2.15 51620 -> 52.30.254.225 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:45.318175 7.675433 tcp 10.0.2.15 51621 -> 52.30.254.225 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:45.318658 7.678573 tcp 10.0.2.15 51622 -> 52.30.254.225 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:45.319341 8.492763 tcp 10.0.2.15 51623 -> 107.178.242.85 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:45.319688 8.491152 tcp 10.0.2.15 51624 -> 107.178.242.85 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:45.320025 9.253196 tcp 10.0.2.15 51625 -> 107.178.242.85 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:45.320765 7.782463 tcp 10.0.2.15 51626 -> 52.86.215.43 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:45.321177 7.782093 tcp 10.0.2.15 51627 -> 52.86.215.43 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:45.321801 7.781305 tcp 10.0.2.15 51628 -> 52.86.215.43 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:45.323246 7.701235 tcp 10.0.2.15 51629 -> 173.239.42.221 443 FSPA_FSPA 0 0 23 6912 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:45.323976 7.706461 tcp 10.0.2.15 51630 -> 173.239.42.221 443 FSPA_FSPA 0 0 23 6912 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:45.324348 7.748764 tcp 10.0.2.15 51631 -> 173.239.42.221 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:45.325327 7.711394 tcp 10.0.2.15 51632 -> 54.86.197.253 443 FSRPA_SPA 0 0 12 1408 904 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:45.325703 7.713198 tcp 10.0.2.15 51633 -> 54.86.197.253 443 FSRPA_FSRPA 0 0 15 1570 958 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:45.326395 8.466551 tcp 10.0.2.15 51634 -> 52.202.66.81 443 FSRPA_FSRPA 0 0 15 1570 958 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:45.326790 7.578975 tcp 10.0.2.15 51635 -> 52.202.66.81 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:45.327250 7.569088 tcp 10.0.2.15 51636 -> 52.202.66.81 443 FSRPA_SRPA 0 0 15 1570 1012 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:45.574137 7.455855 tcp 10.0.2.15 51637 -> 173.239.42.221 443 FSPA_FSPA 0 0 23 6912 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:45.577930 7.318385 tcp 10.0.2.15 51638 -> 52.202.66.81 443 FSRPA_SRPA 0 0 15 1570 1012 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:45.944651 0.031646 udp 10.0.2.15 56752 <-> 1.0.0.1 53 CON 0 0 2 304 86 1 flow=Normal-UDP-DNS 1970/01/01 02:06:45.944966 0.035255 udp 10.0.2.15 60103 <-> 1.0.0.1 53 CON 0 0 2 166 75 1 flow=Normal-UDP-DNS 1970/01/01 02:06:45.945573 0.041732 udp 10.0.2.15 58182 <-> 1.0.0.1 53 CON 0 0 2 252 78 1 flow=Normal-UDP-DNS 1970/01/01 02:06:45.977415 7.068163 tcp 10.0.2.15 51639 -> 152.163.64.2 80 FSPA_FSPA 0 0 11 1696 968 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:45.981558 7.009005 tcp 10.0.2.15 51640 -> 35.186.234.100 80 FSPA_FSPA 0 0 15 3272 1540 8 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:45.987064 0.036525 udp 10.0.2.15 63138 <-> 1.0.0.1 53 CON 0 0 2 205 76 1 flow=Normal-UDP-DNS 1970/01/01 02:06:45.988300 0.044142 udp 10.0.2.15 52397 <-> 1.0.0.1 53 CON 0 0 2 244 76 1 flow=Normal-UDP-DNS 1970/01/01 02:06:45.989477 1.253008 tcp 10.0.2.15 51641 -> 216.52.1.12 80 FSPA_FSPA 0 0 11 1518 752 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:45.990018 0.039064 udp 10.0.2.15 61137 <-> 1.0.0.1 53 CON 0 0 2 277 81 1 flow=Normal-UDP-DNS 1970/01/01 02:06:45.990999 0.044312 udp 10.0.2.15 50577 <-> 1.0.0.1 53 CON 0 0 2 170 77 1 flow=Normal-UDP-DNS 1970/01/01 02:06:45.991742 0.042297 udp 10.0.2.15 63475 <-> 1.0.0.1 53 CON 0 0 2 198 83 1 flow=Normal-UDP-DNS 1970/01/01 02:06:45.992014 0.047351 udp 10.0.2.15 56383 <-> 1.0.0.1 53 CON 0 0 2 376 89 1 flow=Normal-UDP-DNS 1970/01/01 02:06:46.025007 7.235478 tcp 10.0.2.15 51642 -> 37.252.161.184 443 FSPA_FSPA 0 0 24 7085 2710 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:46.025536 0.041675 udp 10.0.2.15 63998 <-> 1.0.0.1 53 CON 0 0 2 188 78 1 flow=Normal-UDP-DNS 1970/01/01 02:06:46.030062 7.223512 tcp 10.0.2.15 51643 -> 89.207.16.140 80 FSPA_FSPA 0 0 11 1465 857 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:46.033188 7.456871 tcp 10.0.2.15 51644 -> 23.38.89.179 80 FSPA_FSPA 0 0 15 3190 1540 8 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:46.036325 0.102049 tcp 10.0.2.15 51645 -> 85.114.159.93 80 FSPA_FSPA 0 0 10 1336 672 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:46.040161 7.123934 tcp 10.0.2.15 51646 -> 63.251.210.243 80 FSPA_FSPA 0 0 11 1414 785 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:46.041000 0.157158 tcp 10.0.2.15 51647 -> 95.154.251.131 80 FSPA_FSPA 0 0 10 1540 791 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:46.069075 6.920335 tcp 10.0.2.15 51648 -> 104.20.90.61 80 FSPA_FSPA 0 0 17 3801 1508 9 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:46.091444 0.036656 udp 10.0.2.15 60314 <-> 1.0.0.1 53 CON 0 0 2 338 76 1 flow=Normal-UDP-DNS 1970/01/01 02:06:46.103724 0.052658 udp 10.0.2.15 51897 <-> 1.0.0.1 53 CON 0 0 2 212 79 1 flow=Normal-UDP-DNS 1970/01/01 02:06:46.133775 7.672222 tcp 10.0.2.15 51649 -> 176.34.134.245 80 FSPA_FSPA 0 0 11 2673 1073 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:46.157924 7.298112 tcp 10.0.2.15 51650 -> 185.152.65.68 80 FSPA_FSPA 0 0 11 1382 718 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:46.163072 0.883222 tcp 10.0.2.15 51651 -> 185.33.223.218 80 FSPA_FSA 0 0 11 2072 1798 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:46.213277 6.945060 tcp 10.0.2.15 51652 -> 63.251.210.243 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:46.366785 0.054945 udp 10.0.2.15 61702 <-> 1.0.0.1 53 CON 0 0 2 266 125 1 flow=Normal-UDP-DNS 1970/01/01 02:06:47.032978 6.227366 tcp 10.0.2.15 51653 -> 185.33.223.218 80 FSPA_FSPA 0 0 46 22483 8410 19 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:47.861076 5.188330 tcp 10.0.2.15 51654 -> 152.163.64.2 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:47.861475 5.183904 tcp 10.0.2.15 51655 -> 152.163.64.2 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:47.862936 5.915782 tcp 10.0.2.15 51656 -> 89.207.16.140 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:47.863844 6.927476 tcp 10.0.2.15 51657 -> 89.207.16.140 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:47.864726 5.368841 tcp 10.0.2.15 51658 -> 104.20.90.61 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:47.865134 5.581215 tcp 10.0.2.15 51659 -> 104.20.90.61 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:47.867321 5.939138 tcp 10.0.2.15 51660 -> 95.154.251.131 80 FSRA_FSRPA 0 0 10 743 282 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:47.867689 5.956475 tcp 10.0.2.15 51661 -> 95.154.251.131 80 FSRA_FSRPA 0 0 10 743 282 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:47.868119 5.393513 tcp 10.0.2.15 51662 -> 95.154.251.131 80 FSRA_FSRPA 0 0 10 743 282 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:47.869049 1.630595 tcp 10.0.2.15 51663 -> 85.114.159.93 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:47.869387 1.630288 tcp 10.0.2.15 51664 -> 85.114.159.93 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:47.869756 5.031562 tcp 10.0.2.15 51665 -> 85.114.159.93 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:47.870393 5.122331 tcp 10.0.2.15 51666 -> 216.52.1.12 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:47.871232 5.121337 tcp 10.0.2.15 51667 -> 216.52.1.12 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:47.871715 5.388439 tcp 10.0.2.15 51668 -> 216.52.1.12 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:47.872920 5.118609 tcp 10.0.2.15 51669 -> 35.186.234.100 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:47.873294 5.360438 tcp 10.0.2.15 51670 -> 35.186.234.100 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:47.874118 5.844819 tcp 10.0.2.15 51671 -> 63.251.210.243 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:47.874836 95.055115 tcp 10.0.2.15 51672 -> 23.38.89.179 80 FSA_SA 0 0 9 504 284 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:47.875133 95.054832 tcp 10.0.2.15 51673 -> 23.38.89.179 80 FSA_SA 0 0 9 504 284 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:47.876036 5.114392 tcp 10.0.2.15 51674 -> 37.252.161.184 443 FSPA_FSPA 0 0 20 4864 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:47.876485 5.642808 tcp 10.0.2.15 51675 -> 37.252.161.184 443 FSPA_FSPA 0 0 20 4864 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:48.018366 0.045939 udp 10.0.2.15 52983 <-> 1.0.0.1 53 CON 0 0 2 283 81 1 flow=Normal-UDP-DNS 1970/01/01 02:06:48.018648 0.061182 udp 10.0.2.15 58998 <-> 1.0.0.1 53 CON 0 0 2 282 77 1 flow=Normal-UDP-DNS 1970/01/01 02:06:48.018967 0.060819 udp 10.0.2.15 54216 <-> 1.0.0.1 53 CON 0 0 2 168 76 1 flow=Normal-UDP-DNS 1970/01/01 02:06:48.019421 0.059933 udp 10.0.2.15 62903 <-> 1.0.0.1 53 CON 0 0 2 182 75 1 flow=Normal-UDP-DNS 1970/01/01 02:06:48.019714 0.051383 udp 10.0.2.15 50686 <-> 1.0.0.1 53 CON 0 0 2 243 78 1 flow=Normal-UDP-DNS 1970/01/01 02:06:48.020022 0.060086 udp 10.0.2.15 63108 <-> 1.0.0.1 53 CON 0 0 2 172 78 1 flow=Normal-UDP-DNS 1970/01/01 02:06:48.068371 1.431873 tcp 10.0.2.15 51676 -> 52.215.80.162 80 FSPA_FSPA 0 0 11 1108 724 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:48.069188 0.000000 udp 10.0.2.15 62582 -> 1.0.0.1 53 INT 0 1 80 80 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:06:48.071753 5.194913 tcp 10.0.2.15 51677 -> 88.208.52.65 80 FSPA_FSPA 0 0 11 1466 755 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:48.072206 0.073060 udp 10.0.2.15 58547 <-> 1.0.0.1 53 CON 0 0 2 219 80 1 flow=Normal-UDP-DNS 1970/01/01 02:06:48.080761 5.887042 tcp 10.0.2.15 51678 -> 104.20.68.222 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:48.081479 0.000000 udp 10.0.2.15 55817 -> 1.0.0.1 53 INT 0 1 87 87 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:06:48.084021 6.034621 tcp 10.0.2.15 51679 -> 52.192.36.211 80 FSPA_FSPA 0 0 11 1533 731 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:48.085257 5.182887 tcp 10.0.2.15 51680 -> 54.72.175.170 80 FSPA_FSPA 0 0 11 1811 792 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:48.086076 4.913188 tcp 10.0.2.15 51681 -> 95.142.20.29 80 FSPA_FSPA 0 0 11 1287 785 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:48.086504 0.065417 udp 10.0.2.15 55835 <-> 1.0.0.1 53 CON 0 0 2 270 71 1 flow=Normal-UDP-DNS 1970/01/01 02:06:48.146318 5.603834 tcp 10.0.2.15 51682 -> 13.32.114.102 80 FSPA_FSPA 0 0 11 1431 748 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:48.152939 0.169978 tcp 10.0.2.15 51683 -> 52.49.24.175 80 FSPA_FSPA 0 0 10 1549 840 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:48.248120 5.005825 tcp 10.0.2.15 51684 -> 52.192.36.211 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:48.250933 94.678986 tcp 10.0.2.15 51685 -> 104.20.68.222 80 FSPA_SPA 0 0 13 1677 796 7 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:48.252517 0.067370 udp 10.0.2.15 54989 <-> 1.0.0.1 53 CON 0 0 2 379 74 1 flow=Normal-UDP-DNS 1970/01/01 02:06:48.323604 4.935502 tcp 10.0.2.15 51686 -> 52.214.151.124 80 FSPA_FSPA 0 0 14 4313 2321 7 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:48.331596 0.044719 udp 10.0.2.15 59315 <-> 1.0.0.1 53 CON 0 0 2 357 70 1 flow=Normal-UDP-DNS 1970/01/01 02:06:48.377867 5.532571 tcp 10.0.2.15 51687 -> 18.195.44.88 80 FSPA_FSPA 0 0 11 1741 878 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:49.069681 0.042542 udp 10.0.2.15 62582 <-> 1.1.1.1 53 CON 0 0 2 224 80 1 flow=Normal-UDP-DNS 1970/01/01 02:06:49.076656 0.036704 udp 10.0.2.15 55817 <-> 1.1.1.1 53 CON 0 0 2 296 87 1 flow=Normal-UDP-DNS 1970/01/01 02:06:49.114299 4.391692 tcp 10.0.2.15 51688 -> 13.32.121.33 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:49.116843 3.922303 tcp 10.0.2.15 51689 -> 54.173.218.25 443 FSRPA_SPA 0 0 23 5707 1655 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:49.262859 3.973321 tcp 10.0.2.15 51690 -> 13.32.121.33 80 FSPA_FSPA 0 0 11 1632 879 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:49.267419 3.819395 tcp 10.0.2.15 51691 -> 54.173.218.25 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:49.501949 11.066813 tcp 10.0.2.15 51692 -> 193.0.160.128 443 FSPA_FSPA 0 0 16 4452 1303 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:49.503780 11.064732 tcp 10.0.2.15 51693 -> 193.0.160.128 443 FSPA_FSPA 0 0 16 4452 1303 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:49.539937 0.045186 udp 10.0.2.15 61483 <-> 1.1.1.1 53 CON 0 0 2 334 75 1 flow=Normal-UDP-DNS 1970/01/01 02:06:49.540273 0.041863 udp 10.0.2.15 56536 <-> 1.1.1.1 53 CON 0 0 2 215 79 1 flow=Normal-UDP-DNS 1970/01/01 02:06:49.586272 3.556379 tcp 10.0.2.15 51694 -> 35.157.4.170 443 FSRPA_FSRPA 0 0 22 5293 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:49.591090 3.551483 tcp 10.0.2.15 51695 -> 35.157.4.170 443 FSRPA_FSRPA 0 0 21 5239 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:49.637804 0.049775 udp 10.0.2.15 54874 <-> 1.1.1.1 53 CON 0 0 2 166 75 1 flow=Normal-UDP-DNS 1970/01/01 02:06:49.693487 0.278067 tcp 10.0.2.15 51696 -> 141.170.25.54 443 FSRPA_FSRPA 0 0 24 7067 2024 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:06:58.971101 8.780145 udp 10.0.2.15 1900 -> 239.255.255.250 1900 INT 0 18 9327 9327 18 flow=Normal-UDP-Attempt 1970/01/01 02:06:58.971449 8.780063 udp fe80::353e:6fce:ee32:1a73 1900 -> ff02::c 1900 INT 0 18 9903 9903 18 flow=Normal-UDP-Attempt 1970/01/01 02:06:59.469675 8.617142 tcp 10.0.2.15 51697 -> 54.204.11.64 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:06:59.724682 8.855848 tcp 10.0.2.15 51698 -> 54.204.11.64 80 FSPA_FSPA 0 0 11 1646 1159 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:09.915677 3.007116 udp 10.0.2.15 54882 -> 239.255.255.250 1900 INT 0 4 864 864 4 flow=Normal-UDP-Attempt 1970/01/01 02:07:12.988393 0.074245 udp 10.0.2.15 56633 <-> 1.1.1.1 53 CON 0 0 2 280 83 1 flow=Normal-UDP-DNS 1970/01/01 02:07:13.065569 4.868605 tcp 10.0.2.15 51699 -> 2.21.74.65 80 FSPA_FSPA 0 0 22 7785 5951 11 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:13.707730 1.832102 tcp 10.0.2.15 51700 -> 185.33.223.218 80 FSRPA_FSRPA 0 0 35 14614 5419 15 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:14.471126 3.568623 tcp 10.0.2.15 51701 -> 54.204.11.64 80 FSPA_FSPA 0 0 11 1646 1159 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:15.363828 0.874027 tcp 10.0.2.15 51702 -> 185.33.223.218 80 FSRPA_SRPA 0 0 14 4269 2459 7 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:16.046744 1.154944 tcp 10.0.2.15 51703 -> 185.33.223.218 80 FSPA_FSA 0 0 11 2538 2264 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:16.301577 1.656893 tcp 10.0.2.15 51704 -> 185.33.223.218 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:17.161885 10.828909 tcp 10.0.2.15 51705 -> 185.33.223.218 80 FSPA_FSPA 0 0 36 18286 6618 15 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:17.941928 10.039654 tcp 10.0.2.15 51706 -> 185.33.223.197 80 FSPA_FSPA 0 0 27 12982 7705 13 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:17.942489 10.039728 tcp 10.0.2.15 51707 -> 185.33.223.197 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:17.942899 10.047270 tcp 10.0.2.15 51708 -> 185.33.223.197 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:17.943905 10.037507 tcp 10.0.2.15 51709 -> 152.195.39.114 443 FSPA_FSPA 0 0 37 11630 3070 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:07:17.963432 1.876039 tcp 10.0.2.15 51710 -> 52.49.24.175 80 FSPA_FSPA 0 0 11 1603 840 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:17.964676 10.019125 tcp 10.0.2.15 51711 -> 52.49.24.175 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:17.965105 10.016943 tcp 10.0.2.15 51712 -> 52.49.24.175 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:17.966529 10.011509 tcp 10.0.2.15 51713 -> 13.32.114.102 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:17.967075 10.012083 tcp 10.0.2.15 51714 -> 13.32.114.102 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:17.968070 10.010468 tcp 10.0.2.15 51715 -> 13.32.114.102 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:17.970362 10.010589 tcp 10.0.2.15 51716 -> 13.32.121.33 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:17.971153 10.009731 tcp 10.0.2.15 51717 -> 13.32.121.33 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:17.971568 10.009207 tcp 10.0.2.15 51718 -> 13.32.121.33 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:17.972287 10.020522 tcp 10.0.2.15 51719 -> 52.215.80.162 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:17.972563 10.021031 tcp 10.0.2.15 51720 -> 52.215.80.162 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:17.972970 10.026610 tcp 10.0.2.15 51721 -> 52.215.80.162 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:17.973656 10.021174 tcp 10.0.2.15 51722 -> 54.72.175.170 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:17.974002 10.021049 tcp 10.0.2.15 51723 -> 54.72.175.170 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:17.974335 10.020348 tcp 10.0.2.15 51724 -> 54.72.175.170 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:17.974994 10.238446 tcp 10.0.2.15 51725 -> 104.20.68.222 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:17.975291 10.238377 tcp 10.0.2.15 51726 -> 104.20.68.222 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:17.975765 10.239705 tcp 10.0.2.15 51727 -> 104.20.68.222 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:17.977496 10.258608 tcp 10.0.2.15 51728 -> 52.192.36.211 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:17.979062 10.251453 tcp 10.0.2.15 51729 -> 52.192.36.211 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:17.979332 10.250830 tcp 10.0.2.15 51730 -> 52.192.36.211 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:17.980173 10.014713 tcp 10.0.2.15 51731 -> 88.208.52.65 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:17.980481 10.010256 tcp 10.0.2.15 51732 -> 88.208.52.65 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:17.980859 10.009752 tcp 10.0.2.15 51733 -> 88.208.52.65 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:17.981413 10.018773 tcp 10.0.2.15 51734 -> 95.142.20.29 80 FSRA_FSRPA 0 0 10 738 282 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:17.981707 10.017045 tcp 10.0.2.15 51735 -> 95.142.20.29 80 FSRA_FSRPA 0 0 10 738 282 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:17.981928 10.009340 tcp 10.0.2.15 51736 -> 95.142.20.29 80 FSRA_FSRPA 0 0 10 738 282 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:17.983233 10.072884 tcp 10.0.2.15 51737 -> 54.173.218.25 443 FSRPA_FSRPA 0 0 24 5761 1655 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:07:17.983760 10.072940 tcp 10.0.2.15 51738 -> 54.173.218.25 443 FSRPA_SPA 0 0 18 4766 1087 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:07:17.984182 10.073792 tcp 10.0.2.15 51739 -> 54.173.218.25 443 FSRPA_SPA 0 0 17 4712 1087 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:07:18.054951 0.004230 udp 10.0.2.15 61993 <-> 1.1.1.1 53 CON 0 0 2 234 89 1 flow=Normal-UDP-DNS 1970/01/01 02:07:18.346122 0.033832 udp 10.0.2.15 62548 <-> 1.1.1.1 53 CON 0 0 2 238 83 1 flow=Normal-UDP-DNS 1970/01/01 02:07:18.348220 9.642725 tcp 10.0.2.15 51740 -> 52.214.151.124 80 FSPA_FSPA 0 0 11 2251 1210 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:18.349193 9.710301 tcp 10.0.2.15 51741 -> 152.163.64.2 80 FSPA_FSPA 0 0 11 1696 968 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:18.350597 9.629967 tcp 10.0.2.15 51742 -> 35.186.234.100 80 FSPA_FSPA 0 0 11 1852 867 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:18.351973 9.560514 tcp 10.0.2.15 51743 -> 216.52.1.12 80 FSPA_FSPA 0 0 11 1518 752 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:18.353766 0.029622 udp 10.0.2.15 58619 <-> 1.1.1.1 53 CON 0 0 2 170 77 1 flow=Normal-UDP-DNS 1970/01/01 02:07:18.355092 0.040320 udp 10.0.2.15 58681 <-> 1.1.1.1 53 CON 0 0 2 220 81 1 flow=Normal-UDP-DNS 1970/01/01 02:07:18.360353 9.622133 tcp 10.0.2.15 51744 -> 37.252.161.184 443 FSPA_FSPA 0 0 24 7442 3067 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:07:18.381637 9.684667 tcp 10.0.2.15 51745 -> 204.2.197.204 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:18.384255 0.442716 tcp 10.0.2.15 51746 -> 204.144.140.22 80 FSPA_FSPA 0 0 10 1056 710 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:18.396646 9.593737 tcp 10.0.2.15 51747 -> 66.117.28.68 80 FSPA_FSPA 0 0 11 2230 834 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:18.410790 9.797118 tcp 10.0.2.15 51748 -> 18.195.44.88 80 FSPA_FSPA 0 0 11 1741 878 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:18.528893 0.294172 udp 10.0.2.15 58683 <-> 172.217.23.226 443 CON 0 0 12 7391 5001 8 flow=Normal-Google-Net-9 1970/01/01 02:07:18.596425 9.463279 tcp 10.0.2.15 51749 -> 204.2.197.204 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:18.598508 9.515523 tcp 10.0.2.15 51750 -> 204.144.140.22 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:18.609824 79.073753 udp 10.0.2.15 58684 <-> 216.58.201.97 443 CON 0 0 633 521557 28783 267 flow=Normal-Google-Net-8 1970/01/01 02:07:18.689935 9.289930 tcp 10.0.2.15 51751 -> 2.21.74.65 80 FSPA_FSPA 0 0 11 2282 1699 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:29.469886 3.575552 tcp 10.0.2.15 51752 -> 54.204.11.64 80 FSPA_FSPA 0 0 11 1647 1160 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:29.641376 3.265689 tcp 10.0.2.15 51753 -> 216.58.201.99 443 FSRPA_SRPA 0 0 20 6425 1162 10 flow=Normal-Google-Net-8 1970/01/01 02:07:29.651550 17.525597 udp 10.0.2.15 58688 <-> 66.102.1.157 443 CON 0 0 21 8001 4287 12 flow=Normal-UDP-Established 1970/01/01 02:07:29.894322 3.050093 tcp 10.0.2.15 51754 -> 216.58.201.99 443 FSPA_FSPA 0 0 37 9537 3213 17 flow=Normal-Google-Net-8 1970/01/01 02:07:29.941439 3.009611 tcp 10.0.2.15 51755 -> 216.58.201.99 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-Google-Net-8 1970/01/01 02:07:32.058358 0.881229 tcp 10.0.2.15 51756 -> 2.21.74.65 80 FSPA_FSPA 0 0 11 2237 1654 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:32.554887 2.816176 tcp 10.0.2.15 51757 -> 185.33.223.218 80 FSRPA_SRPA 0 0 73 41372 15560 30 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:33.118196 7.861662 tcp 10.0.2.15 51758 -> 52.49.24.175 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:33.119845 7.858965 tcp 10.0.2.15 51759 -> 52.49.24.175 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:33.120583 6.141703 tcp 10.0.2.15 51760 -> 152.163.64.2 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:33.120913 6.142379 tcp 10.0.2.15 51761 -> 152.163.64.2 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:33.121254 6.141326 tcp 10.0.2.15 51762 -> 152.163.64.2 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:33.121999 5.144853 tcp 10.0.2.15 51763 -> 52.214.151.124 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:33.122988 5.142757 tcp 10.0.2.15 51764 -> 52.214.151.124 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:33.123256 5.141783 tcp 10.0.2.15 51765 -> 52.214.151.124 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:33.124030 5.004529 tcp 10.0.2.15 51766 -> 204.144.140.22 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:33.124485 5.003950 tcp 10.0.2.15 51767 -> 204.144.140.22 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:33.124907 6.182346 tcp 10.0.2.15 51768 -> 204.144.140.22 80 FSA_FSA 0 0 8 460 294 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:33.126330 4.043519 tcp 10.0.2.15 51769 -> 185.33.223.218 80 FSRPA_SRPA 0 0 24 11677 5313 11 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:33.127812 5.159772 tcp 10.0.2.15 51770 -> 185.33.223.218 80 FSPA_FSA 0 0 11 2874 2600 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:33.130123 5.478060 tcp 10.0.2.15 51771 -> 204.2.197.204 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:33.131058 5.669476 tcp 10.0.2.15 51772 -> 204.2.197.204 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:33.131359 5.758865 tcp 10.0.2.15 51773 -> 204.2.197.204 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:33.132025 5.174891 tcp 10.0.2.15 51774 -> 216.52.1.12 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:33.132943 5.155659 tcp 10.0.2.15 51775 -> 216.52.1.12 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:33.133238 5.165722 tcp 10.0.2.15 51776 -> 216.52.1.12 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:33.134653 4.869366 tcp 10.0.2.15 51777 -> 66.117.28.68 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:33.136694 4.979796 tcp 10.0.2.15 51778 -> 66.117.28.68 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:33.137576 4.974664 tcp 10.0.2.15 51779 -> 66.117.28.68 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:33.138426 4.853696 tcp 10.0.2.15 51780 -> 35.186.234.100 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:33.139054 5.092809 tcp 10.0.2.15 51781 -> 35.186.234.100 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:33.139512 5.092227 tcp 10.0.2.15 51782 -> 35.186.234.100 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:33.140258 4.862761 tcp 10.0.2.15 51783 -> 37.252.161.184 443 FSPA_FSPA 0 0 19 4810 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:07:33.141028 5.181147 tcp 10.0.2.15 51784 -> 37.252.161.184 443 FSPA_FSPA 0 0 19 4810 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:07:33.141782 4.862278 tcp 10.0.2.15 51785 -> 37.252.161.184 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:07:33.241831 5.287265 tcp 10.0.2.15 51786 -> 185.33.223.197 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:33.242103 5.790274 tcp 10.0.2.15 51787 -> 185.33.223.197 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:33.242310 2.146889 tcp 10.0.2.15 51788 -> 185.33.223.197 80 FSPA_FSA 0 0 13 3789 3461 7 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:33.243281 5.285043 tcp 10.0.2.15 51789 -> 152.195.39.114 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:07:33.244074 0.000000 udp 10.0.2.15 56291 -> 1.1.1.1 53 INT 0 1 77 77 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:07:33.244386 0.000000 udp 10.0.2.15 59452 -> 1.1.1.1 53 INT 0 1 80 80 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:07:33.245496 0.085807 udp 10.0.2.15 61800 <-> 1.1.1.1 53 CON 0 0 2 267 84 1 flow=Normal-UDP-DNS 1970/01/01 02:07:33.333857 0.232469 udp 10.0.2.15 52952 <-> 1.1.1.1 53 CON 0 0 2 243 76 1 flow=Normal-UDP-DNS 1970/01/01 02:07:33.354458 0.540616 tcp 10.0.2.15 51790 -> 185.33.223.197 80 FSRPA_SRPA 0 0 19 6193 3480 9 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:33.354810 4.556051 tcp 10.0.2.15 51791 -> 152.195.39.114 443 FSRPA_SRPA 0 0 22 8655 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:07:33.392767 5.222511 tcp 10.0.2.15 51792 -> 37.252.161.184 443 FSPA_FSPA 0 0 18 4756 1087 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:07:33.549038 14.459180 tcp 10.0.2.15 51793 -> 2.21.74.65 80 FSPA_FSPA 0 0 39 15167 11665 20 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:34.252041 0.037610 udp 10.0.2.15 56291 <-> 1.0.0.1 53 CON 0 0 2 216 77 1 flow=Normal-UDP-DNS 1970/01/01 02:07:34.252313 0.037755 udp 10.0.2.15 59452 <-> 1.0.0.1 53 CON 0 0 2 245 80 1 flow=Normal-UDP-DNS 1970/01/01 02:07:34.955657 2.057120 udp 10.0.2.15 52623 <-> 1.0.0.1 53 CON 0 0 3 296 160 2 flow=Normal-UDP-DNS 1970/01/01 02:07:34.955937 0.000000 udp 10.0.2.15 62264 -> 1.0.0.1 53 INT 0 1 79 79 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:07:35.004331 0.038156 udp 10.0.2.15 51570 <-> 1.0.0.1 53 CON 0 0 2 215 87 1 flow=Normal-UDP-DNS 1970/01/01 02:07:35.121629 0.103804 tcp 10.0.2.15 51794 -> 85.114.159.93 80 FSPA_FSPA 0 0 10 1373 709 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:35.125334 0.166013 tcp 10.0.2.15 51795 -> 95.154.251.131 80 FSPA_FSPA 0 0 10 1545 858 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:35.129685 2.862277 tcp 10.0.2.15 51796 -> 104.20.90.61 80 FSPA_FSPA 0 0 11 2152 815 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:35.132335 0.031931 udp 10.0.2.15 61750 <-> 1.0.0.1 53 CON 0 0 2 262 75 1 flow=Normal-UDP-DNS 1970/01/01 02:07:35.166143 3.093120 tcp 10.0.2.15 51797 -> 18.195.221.159 80 FSPA_FSPA 0 0 11 1546 809 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:35.201125 0.049317 udp 10.0.2.15 54554 <-> 1.0.0.1 53 CON 0 0 2 328 71 1 flow=Normal-UDP-DNS 1970/01/01 02:07:35.201492 0.006003 udp 10.0.2.15 61815 <-> 1.0.0.1 53 CON 0 0 2 172 78 1 flow=Normal-UDP-DNS 1970/01/01 02:07:35.202297 0.007169 udp 10.0.2.15 59723 <-> 1.0.0.1 53 CON 0 0 2 304 72 1 flow=Normal-UDP-DNS 1970/01/01 02:07:35.202621 0.065723 udp 10.0.2.15 58029 <-> 1.0.0.1 53 CON 0 0 2 256 77 1 flow=Normal-UDP-DNS 1970/01/01 02:07:35.210058 2.940605 tcp 10.0.2.15 51798 -> 104.225.134.94 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:35.212878 0.150167 tcp 10.0.2.15 51799 -> 188.165.137.78 80 FSRPA_SPA 0 0 9 1461 659 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:35.213507 0.057789 udp 10.0.2.15 51493 <-> 1.0.0.1 53 CON 0 0 2 221 80 1 flow=Normal-UDP-DNS 1970/01/01 02:07:35.213855 0.059780 udp 10.0.2.15 57922 <-> 1.0.0.1 53 CON 0 0 2 212 74 1 flow=Normal-UDP-DNS 1970/01/01 02:07:35.252424 0.178199 tcp 10.0.2.15 51800 -> 23.38.89.179 80 FSRPA_FSRPA 0 0 12 2059 990 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:35.253395 4.273709 tcp 10.0.2.15 51801 -> 54.85.59.41 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:35.270313 2.830331 tcp 10.0.2.15 51802 -> 18.205.206.156 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:35.272083 2.731835 tcp 10.0.2.15 51803 -> 63.215.202.75 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:35.274707 2.825794 tcp 10.0.2.15 51804 -> 50.16.249.185 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:35.315263 0.043785 udp 10.0.2.15 64116 <-> 1.0.0.1 53 CON 0 0 2 223 76 1 flow=Normal-UDP-DNS 1970/01/01 02:07:35.360743 3.711284 tcp 10.0.2.15 51805 -> 146.148.112.133 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:35.963971 0.057081 udp 10.0.2.15 62264 <-> 1.1.1.1 53 CON 0 0 2 214 79 1 flow=Normal-UDP-DNS 1970/01/01 02:07:35.964222 0.000000 udp 10.0.2.15 52623 -> 1.1.1.1 53 INT 0 1 80 80 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:07:41.220680 3.777409 tcp 10.0.2.15 51806 -> 185.33.223.218 80 FSRPA_SRPA 0 0 56 31345 13040 24 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:42.103448 1.181329 tcp 10.0.2.15 51807 -> 185.33.223.197 80 FSPA_FSPA 0 0 28 13629 8107 13 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:42.109980 0.891380 tcp 10.0.2.15 51808 -> 104.20.90.61 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:42.111076 1.122152 tcp 10.0.2.15 51809 -> 104.20.90.61 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:42.111904 0.889286 tcp 10.0.2.15 51810 -> 104.20.90.61 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:42.112971 6.243428 tcp 10.0.2.15 51811 -> 95.154.251.131 80 FSRA_FSRPA 0 0 10 743 282 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:42.113471 1.186127 tcp 10.0.2.15 51812 -> 95.154.251.131 80 FSRA_FSRPA 0 0 10 743 282 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:42.113908 6.243692 tcp 10.0.2.15 51813 -> 95.154.251.131 80 FSRA_FSRPA 0 0 11 809 348 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:42.114921 2.177210 tcp 10.0.2.15 51814 -> 85.114.159.93 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:42.115402 1.146440 tcp 10.0.2.15 51815 -> 85.114.159.93 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:42.115982 45.804832 tcp 10.0.2.15 51816 -> 85.114.159.93 80 FSA_SA 0 0 7 395 229 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:42.116763 0.896088 tcp 10.0.2.15 51817 -> 188.165.137.78 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:42.117114 1.161197 tcp 10.0.2.15 51818 -> 188.165.137.78 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:42.118036 6.187406 tcp 10.0.2.15 51819 -> 188.165.137.78 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:42.119354 0.972871 tcp 10.0.2.15 51820 -> 54.85.59.41 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:42.120606 0.971459 tcp 10.0.2.15 51821 -> 54.85.59.41 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:42.121284 0.976859 tcp 10.0.2.15 51822 -> 54.85.59.41 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:42.122568 1.901906 tcp 10.0.2.15 51823 -> 63.215.202.75 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:42.123002 1.900137 tcp 10.0.2.15 51824 -> 63.215.202.75 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:42.123618 0.890442 tcp 10.0.2.15 51825 -> 63.215.202.75 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:42.124469 6.023302 tcp 10.0.2.15 51826 -> 104.225.134.94 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:42.125015 1.032391 tcp 10.0.2.15 51827 -> 104.225.134.94 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:42.125449 6.022478 tcp 10.0.2.15 51828 -> 104.225.134.94 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:42.126599 0.970491 tcp 10.0.2.15 51829 -> 50.16.249.185 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:42.127857 2.350606 tcp 10.0.2.15 51830 -> 50.16.249.185 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:42.128413 1.419571 tcp 10.0.2.15 51831 -> 50.16.249.185 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:42.129587 2.202528 tcp 10.0.2.15 51832 -> 18.205.206.156 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:42.130770 0.968352 tcp 10.0.2.15 51833 -> 18.205.206.156 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:42.132202 0.967041 tcp 10.0.2.15 51834 -> 18.205.206.156 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:42.133145 1.106260 tcp 10.0.2.15 51835 -> 18.195.221.159 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:42.133553 0.878432 tcp 10.0.2.15 51836 -> 18.195.221.159 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:42.133973 0.879053 tcp 10.0.2.15 51837 -> 18.195.221.159 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:42.364731 5.650560 tcp 10.0.2.15 51838 -> 152.195.39.114 443 FSPA_FSPA 0 0 40 11839 3226 17 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:07:43.172962 0.154808 tcp 10.0.2.15 51839 -> 104.127.60.107 80 FSRPA_SPA 0 0 11 3265 1856 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:43.177117 0.673636 tcp 10.0.2.15 51840 -> 151.101.12.166 80 FSRPA_SPA 0 0 9 2254 1008 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:43.217834 0.066569 udp 10.0.2.15 57072 <-> 1.0.0.1 53 CON 0 0 2 309 72 1 flow=Normal-UDP-DNS 1970/01/01 02:07:43.220193 4.933412 tcp 10.0.2.15 51841 -> 63.251.210.243 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:43.286978 4.983874 tcp 10.0.2.15 51842 -> 202.241.208.52 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:43.315739 49.689419 tcp 10.0.2.15 51843 -> 62.67.193.75 80 FSA_SA 0 0 7 395 229 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:43.316283 0.000000 udp 10.0.2.15 52023 -> 1.0.0.1 53 INT 0 1 75 75 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:07:43.316773 0.081077 udp 10.0.2.15 62966 <-> 1.0.0.1 53 CON 0 0 2 216 73 1 flow=Normal-UDP-DNS 1970/01/01 02:07:43.399468 4.860159 tcp 10.0.2.15 51844 -> 202.241.208.4 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:43.435840 0.000000 udp 10.0.2.15 51942 -> 1.0.0.1 53 INT 0 1 76 76 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:07:44.316459 0.053191 udp 10.0.2.15 52023 <-> 1.1.1.1 53 CON 0 0 2 214 75 1 flow=Normal-UDP-DNS 1970/01/01 02:07:44.373442 3.641977 tcp 10.0.2.15 51845 -> 31.172.81.160 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:44.440727 0.080717 udp 10.0.2.15 51942 <-> 1.1.1.1 53 CON 0 0 2 197 76 1 flow=Normal-UDP-DNS 1970/01/01 02:07:44.468734 0.081988 udp 10.0.2.15 49213 <-> 1.1.1.1 53 CON 0 0 2 284 78 1 flow=Normal-UDP-DNS 1970/01/01 02:07:44.512711 1.761754 tcp 10.0.2.15 51846 -> 185.33.223.218 80 FSRPA_SRPA 0 0 31 15352 6083 13 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:44.523492 3.396359 tcp 10.0.2.15 51847 -> 31.13.84.36 443 FSRPA_SRPA 0 0 19 5128 1079 9 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:07:44.551905 3.520473 tcp 10.0.2.15 51848 -> 50.19.84.118 80 FSPA_FSPA 0 0 11 1647 1160 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:45.349550 45.071915 tcp 10.0.2.15 49642 -> 199.16.156.75 443 A_A 0 0 4 218 110 2 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:07:46.311045 1.976733 tcp 10.0.2.15 51849 -> 185.33.223.218 80 FSPA_FSPA 0 0 32 17624 7724 14 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:47.314258 0.945134 tcp 10.0.2.15 51850 -> 216.58.201.99 443 FSPA_FSPA 0 0 36 9198 2987 16 flow=Normal-Google-Net-8 1970/01/01 02:07:47.339540 5.658131 tcp 10.0.2.15 51851 -> 185.33.223.197 80 FSPA_FSPA 0 0 29 14101 8531 14 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:47.348690 0.933442 tcp 10.0.2.15 51852 -> 151.101.12.166 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:47.348995 1.006750 tcp 10.0.2.15 51853 -> 151.101.12.166 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:47.349419 0.659974 tcp 10.0.2.15 51854 -> 151.101.12.166 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:47.351979 0.897988 tcp 10.0.2.15 51855 -> 202.241.208.4 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:47.353670 0.906126 tcp 10.0.2.15 51856 -> 202.241.208.4 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:47.354883 2.395373 tcp 10.0.2.15 51857 -> 185.33.223.218 80 FSPA_FSA 0 0 11 2924 2650 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:47.355215 0.934605 tcp 10.0.2.15 51858 -> 185.33.223.218 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:47.356421 5.635994 tcp 10.0.2.15 51859 -> 62.67.193.75 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:47.356701 5.640902 tcp 10.0.2.15 51860 -> 62.67.193.75 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:47.357724 2.386909 tcp 10.0.2.15 51861 -> 104.127.60.107 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:47.358108 3.662663 tcp 10.0.2.15 51862 -> 104.127.60.107 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:47.358504 2.263575 tcp 10.0.2.15 51863 -> 104.127.60.107 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:47.359106 5.619426 tcp 10.0.2.15 51864 -> 31.172.81.160 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:47.359469 5.615210 tcp 10.0.2.15 51865 -> 31.172.81.160 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:47.360559 0.719931 tcp 10.0.2.15 51866 -> 50.16.249.185 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:47.360942 0.719698 tcp 10.0.2.15 51867 -> 50.16.249.185 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:47.361755 3.728186 tcp 10.0.2.15 51868 -> 202.241.208.52 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:47.362074 1.850003 tcp 10.0.2.15 51869 -> 202.241.208.52 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:47.399495 0.739093 tcp 10.0.2.15 51870 -> 63.251.210.243 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:47.399791 0.749015 tcp 10.0.2.15 51871 -> 63.251.210.243 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:47.589604 1.249247 tcp 10.0.2.15 51872 -> 185.33.223.197 80 FSRPA_FSRPA 0 0 32 14257 8585 15 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:48.029664 4.926854 tcp 10.0.2.15 51873 -> 2.21.74.65 80 FSPA_FSPA 0 0 15 4103 3103 8 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:48.215916 4.761807 tcp 10.0.2.15 51874 -> 152.195.39.114 443 FSPA_FSPA 0 0 40 11792 3233 18 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:07:49.697390 3.299124 tcp 10.0.2.15 51875 -> 185.33.223.218 80 FSPA_FSPA 0 0 29 17464 7670 13 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:50.155885 2.816178 tcp 10.0.2.15 51876 -> 151.101.12.166 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:50.156880 2.814773 tcp 10.0.2.15 51877 -> 151.101.12.166 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:50.158272 3.089909 tcp 10.0.2.15 51878 -> 202.241.208.4 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:50.158649 3.091479 tcp 10.0.2.15 51879 -> 202.241.208.4 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:50.159930 2.880036 tcp 10.0.2.15 51880 -> 185.33.223.218 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:50.161307 3.034879 tcp 10.0.2.15 51881 -> 63.251.210.243 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:50.161737 3.034395 tcp 10.0.2.15 51882 -> 63.251.210.243 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:50.162572 2.808380 tcp 10.0.2.15 51883 -> 104.127.60.107 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:50.162921 2.808538 tcp 10.0.2.15 51884 -> 104.127.60.107 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:50.164089 3.315953 tcp 10.0.2.15 51885 -> 50.16.249.185 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:50.164461 3.338746 tcp 10.0.2.15 51886 -> 50.16.249.185 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:50.165646 3.084482 tcp 10.0.2.15 51887 -> 202.241.208.52 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:50.166450 3.083678 tcp 10.0.2.15 51888 -> 202.241.208.52 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:50.167285 2.761146 tcp 10.0.2.15 51889 -> 31.13.84.36 443 FSRPA_SRPA 0 0 19 5129 1079 9 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:07:51.316195 59.737095 udp 10.0.2.15 49220 <-> 172.217.23.226 443 CON 0 0 43 18638 13989 24 flow=Normal-Google-Net-9 1970/01/01 02:07:51.400368 0.003329 udp 10.0.2.15 51903 <-> 1.1.1.1 53 CON 0 0 2 164 74 1 flow=Normal-UDP-DNS 1970/01/01 02:07:51.401350 60.061138 udp 10.0.2.15 49221 <-> 172.217.23.226 443 CON 0 0 223 116312 32731 110 flow=Normal-Google-Net-9 1970/01/01 02:07:51.769282 1.270540 tcp 10.0.2.15 51890 -> 141.170.25.54 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:07:51.769552 6.305735 tcp 10.0.2.15 51891 -> 141.170.25.54 443 FSPA_FSPA 0 0 12 1436 928 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:07:51.769774 6.307295 tcp 10.0.2.15 51892 -> 141.170.25.54 443 FSPA_FSPA 0 0 18 5192 1303 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:07:51.771123 0.000000 udp 10.0.2.15 55574 -> 1.1.1.1 53 INT 0 1 75 75 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:07:51.771827 0.034759 udp 10.0.2.15 62679 <-> 1.1.1.1 53 CON 0 0 2 234 72 1 flow=Normal-UDP-DNS 1970/01/01 02:07:51.789490 0.000000 udp 10.0.2.15 59624 -> 1.1.1.1 53 INT 0 1 83 83 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:07:51.808222 11.063580 tcp 10.0.2.15 51893 -> 193.0.160.129 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:07:51.808519 11.081466 tcp 10.0.2.15 51894 -> 193.0.160.129 443 FSPA_FSPA 0 0 17 4506 1303 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:07:51.868024 0.081601 udp 10.0.2.15 58958 <-> 1.1.1.1 53 CON 0 0 2 220 78 1 flow=Normal-UDP-DNS 1970/01/01 02:07:51.950596 1.479094 tcp 10.0.2.15 51895 -> 52.209.224.33 443 FSRPA_SPA 0 0 21 7398 1665 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:07:52.016824 0.982044 tcp 10.0.2.15 51896 -> 141.170.25.54 443 FSPA_FSPA 0 0 18 5192 1303 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:07:52.017112 45.914440 tcp 10.0.2.15 51897 -> 193.0.160.129 443 FSPA_SPA 0 0 17 4507 1304 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:07:52.117085 5.960199 tcp 10.0.2.15 51898 -> 52.209.224.33 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:07:52.777002 0.005820 udp 10.0.2.15 55574 <-> 1.0.0.1 53 CON 0 0 2 334 75 1 flow=Normal-UDP-DNS 1970/01/01 02:07:52.796565 0.007375 udp 10.0.2.15 59624 <-> 1.0.0.1 53 CON 0 0 2 272 83 1 flow=Normal-UDP-DNS 1970/01/01 02:07:53.090649 9.950019 tcp 10.0.2.15 51899 -> 2.21.74.65 80 FSPA_FSPA 0 0 31 11500 8832 16 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:53.465378 2.201482 tcp 10.0.2.15 51900 -> 185.33.223.218 80 FSRPA_SPA 0 0 20 7899 2953 9 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:55.648638 2.674232 tcp 10.0.2.15 51901 -> 185.33.223.218 80 FSPA_FSPA 0 0 56 33172 13805 22 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:56.293642 1.783589 tcp 10.0.2.15 51902 -> 185.33.223.197 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:56.294075 1.878243 tcp 10.0.2.15 51903 -> 185.33.223.197 80 FSRPA_SRPA 0 0 47 23202 12921 21 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:56.294768 1.778673 tcp 10.0.2.15 51904 -> 152.195.39.114 443 FSPA_FSPA 0 0 37 11778 3273 16 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:07:56.303458 2.032258 tcp 10.0.2.15 51905 -> 151.101.12.166 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:56.303846 2.000501 tcp 10.0.2.15 51906 -> 151.101.12.166 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:56.304922 1.998420 tcp 10.0.2.15 51907 -> 202.241.208.4 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:56.305301 2.007385 tcp 10.0.2.15 51908 -> 202.241.208.4 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:56.306080 1.771820 tcp 10.0.2.15 51909 -> 185.33.223.218 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:56.306681 1.767755 tcp 10.0.2.15 51910 -> 62.67.193.75 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:56.307263 1.767011 tcp 10.0.2.15 51911 -> 62.67.193.75 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:56.307974 1.897656 tcp 10.0.2.15 51912 -> 63.251.210.243 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:56.308370 1.897373 tcp 10.0.2.15 51913 -> 63.251.210.243 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:56.309557 1.752986 tcp 10.0.2.15 51914 -> 104.127.60.107 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:56.309899 1.752523 tcp 10.0.2.15 51915 -> 104.127.60.107 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:56.310575 2.017663 tcp 10.0.2.15 51916 -> 31.172.81.160 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:56.310961 1.764157 tcp 10.0.2.15 51917 -> 31.172.81.160 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:56.312507 1.998980 tcp 10.0.2.15 51918 -> 202.241.208.52 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:56.313198 2.006594 tcp 10.0.2.15 51919 -> 202.241.208.52 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:56.314004 1.689735 tcp 10.0.2.15 51920 -> 31.13.84.36 443 FSRPA_SRPA 0 0 19 5128 1079 9 flow=Normal-TCP-Facebook-Net-1 1970/01/01 02:07:58.135089 1.215190 tcp 10.0.2.15 51921 -> 185.33.223.218 80 FSRPA_SRPA 0 0 35 18390 7778 15 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:58.649394 0.777887 tcp 10.0.2.15 51922 -> 185.33.223.197 80 FSRPA_FSRPA 0 0 23 8416 3860 10 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:59.347114 3.720869 tcp 10.0.2.15 51923 -> 185.33.223.218 80 FSPA_FSPA 0 0 69 38800 15920 27 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:59.471466 3.679671 tcp 10.0.2.15 51924 -> 50.19.84.118 80 FSPA_FSPA 0 0 11 1647 1160 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:07:59.997883 0.728376 tcp 10.0.2.15 51925 -> 185.33.223.197 80 FSRPA_FSRPA 0 0 31 14867 9059 14 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:00.241612 2.809089 tcp 10.0.2.15 51926 -> 152.195.39.114 443 FSPA_FSPA 0 0 41 13382 4769 18 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:01.263326 1.808265 tcp 10.0.2.15 51927 -> 185.33.223.197 80 FSPA_FSPA 0 0 29 14770 9071 14 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:02.576511 11.085323 tcp 10.0.2.15 51928 -> 193.0.160.129 80 FSPA_FSPA 0 0 11 2490 1255 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:02.619527 0.000000 udp 10.0.2.15 62865 -> 1.0.0.1 53 INT 0 1 73 73 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:08:02.700825 5.401655 tcp 10.0.2.15 51929 -> 77.238.185.35 443 FSA_SRA 0 0 6 340 174 3 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:02.764426 0.072826 udp 10.0.2.15 53057 <-> 1.0.0.1 53 CON 0 0 2 366 71 1 flow=Normal-UDP-DNS 1970/01/01 02:08:02.806018 0.054831 udp 10.0.2.15 51928 <-> 1.0.0.1 53 CON 0 0 2 164 74 1 flow=Normal-UDP-DNS 1970/01/01 02:08:02.806670 0.054866 udp 10.0.2.15 55165 <-> 1.0.0.1 53 CON 0 0 2 304 86 1 flow=Normal-UDP-DNS 1970/01/01 02:08:02.807184 0.055162 udp 10.0.2.15 56287 <-> 1.0.0.1 53 CON 0 0 2 166 75 1 flow=Normal-UDP-DNS 1970/01/01 02:08:02.807546 0.055673 udp 10.0.2.15 63363 <-> 1.0.0.1 53 CON 0 0 2 252 78 1 flow=Normal-UDP-DNS 1970/01/01 02:08:02.841288 5.401906 tcp 10.0.2.15 51930 -> 54.149.208.95 80 FSPA_FSPA 0 0 11 1419 735 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:02.843976 0.031317 udp 10.0.2.15 57505 <-> 1.0.0.1 53 CON 0 0 2 205 76 1 flow=Normal-UDP-DNS 1970/01/01 02:08:02.863697 0.203303 tcp 10.0.2.15 51931 -> 178.250.2.76 80 FSPA_FSPA 0 0 10 1386 783 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:02.864216 5.294600 tcp 10.0.2.15 51932 -> 149.174.28.143 80 FSPA_FSPA 0 0 14 2880 1625 7 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:02.865478 0.038816 udp 10.0.2.15 64929 <-> 1.0.0.1 53 CON 0 0 2 244 76 1 flow=Normal-UDP-DNS 1970/01/01 02:08:02.865873 0.175903 tcp 10.0.2.15 51933 -> 35.186.234.100 80 FSPA_FSPA 0 0 10 1780 795 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:02.866612 1.975368 tcp 10.0.2.15 51934 -> 216.52.1.12 80 FSPA_FSPA 0 0 11 1500 734 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:02.876436 5.193296 tcp 10.0.2.15 51935 -> 37.252.161.184 443 FSPA_FSPA 0 0 23 7760 3385 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:02.882643 2.489132 tcp 10.0.2.15 51936 -> 185.33.223.218 443 FSRPA_SRPA 0 0 33 13976 5447 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:02.907106 5.156370 tcp 10.0.2.15 51937 -> 23.38.89.179 80 FSPA_FSPA 0 0 11 1651 760 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:02.950980 5.153627 tcp 10.0.2.15 51938 -> 77.238.185.35 443 FSPA_FSPA 0 0 32 8489 1828 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:02.952489 5.289901 tcp 10.0.2.15 51939 -> 54.149.208.95 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:02.960682 5.199154 tcp 10.0.2.15 51940 -> 149.174.28.143 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:02.986716 0.041902 udp 10.0.2.15 61251 <-> 1.0.0.1 53 CON 0 0 2 278 81 1 flow=Normal-UDP-DNS 1970/01/01 02:08:03.030097 5.050127 tcp 10.0.2.15 51941 -> 89.207.16.137 80 FSPA_FSPA 0 0 11 1447 839 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:03.078913 2.352327 tcp 10.0.2.15 51942 -> 185.33.223.218 80 FSRPA_FSRPA 0 0 27 9967 4712 12 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:03.083805 0.043344 udp 10.0.2.15 52813 <-> 1.0.0.1 53 CON 0 0 2 191 70 1 flow=Normal-UDP-DNS 1970/01/01 02:08:03.138394 4.941768 tcp 10.0.2.15 51943 -> 46.228.164.13 80 FSPA_FSPA 0 0 11 1518 777 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:03.142492 0.050730 udp 10.0.2.15 53477 <-> 1.0.0.1 53 CON 0 0 2 210 73 1 flow=Normal-UDP-DNS 1970/01/01 02:08:03.158126 4.912879 tcp 10.0.2.15 51944 -> 159.253.128.188 443 FSPA_FSPA 0 0 23 6657 1664 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:03.188859 4.885874 tcp 10.0.2.15 51945 -> 52.209.224.33 443 FSRPA_SPA 0 0 12 1408 904 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:03.189591 4.884758 tcp 10.0.2.15 51946 -> 52.209.224.33 443 FSRPA_FSRPA 0 0 15 1570 958 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:03.190040 4.901314 tcp 10.0.2.15 51947 -> 52.209.224.33 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:03.190961 4.890311 tcp 10.0.2.15 51948 -> 141.170.25.54 443 FSPA_FSPA 0 0 19 5246 1357 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:03.191395 4.904584 tcp 10.0.2.15 51949 -> 141.170.25.54 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:03.193413 11.153737 tcp 10.0.2.15 51950 -> 193.0.160.129 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:03.199941 4.873094 tcp 10.0.2.15 51951 -> 217.182.126.162 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:03.283701 4.445962 tcp 10.0.2.15 51952 -> 185.33.223.218 80 FSRPA_SRPA 0 0 54 28599 12920 23 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:03.318400 4.766768 tcp 10.0.2.15 51953 -> 185.29.132.30 443 FSPA_FSPA 0 0 23 6449 1899 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:03.394019 1.055984 tcp 10.0.2.15 51954 -> 217.182.126.162 80 FSPA_FSPA 0 0 10 1376 673 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:03.439729 4.628611 tcp 10.0.2.15 51955 -> 52.209.224.33 443 FSRPA_FSRPA 0 0 25 6457 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:03.447710 4.632258 tcp 10.0.2.15 51956 -> 141.170.25.54 443 FSPA_FSPA 0 0 18 5192 1303 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:03.448718 49.570934 tcp 10.0.2.15 51957 -> 193.0.160.129 443 FSPA_SPA 0 0 17 4507 1304 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:03.626670 0.036831 udp 10.0.2.15 62865 <-> 1.1.1.1 53 CON 0 0 2 327 73 1 flow=Normal-UDP-DNS 1970/01/01 02:08:03.664643 4.502713 tcp 10.0.2.15 51958 -> 34.199.116.32 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:03.845501 0.082445 udp 10.0.2.15 50418 <-> 1.1.1.1 53 CON 0 0 2 379 77 1 flow=Normal-UDP-DNS 1970/01/01 02:08:03.862677 4.302565 tcp 10.0.2.15 51959 -> 34.199.116.32 80 FSPA_FSPA 0 0 11 1509 882 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:03.929058 0.695253 tcp 10.0.2.15 51960 -> 52.89.92.187 80 FSPA_FSPA 0 0 10 1811 856 5 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:04.097139 4.149245 tcp 10.0.2.15 51961 -> 52.89.92.187 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:04.217970 8.438306 tcp 10.0.2.15 51962 -> 185.33.223.218 80 FSRPA_FSRPA 0 0 91 54831 22312 37 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:04.457991 3.616303 tcp 10.0.2.15 51963 -> 217.182.126.162 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:04.842001 3.211477 tcp 10.0.2.15 51964 -> 2.21.74.65 80 FSPA_FSPA 0 0 19 5929 4512 10 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:05.948196 1.475537 tcp 10.0.2.15 51965 -> 185.33.223.197 80 FSRPA_SPA 0 0 28 14182 8621 13 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:05.953941 2.120671 tcp 10.0.2.15 51966 -> 217.182.126.162 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:05.955709 2.205136 tcp 10.0.2.15 51967 -> 149.174.28.143 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:05.956440 2.132576 tcp 10.0.2.15 51968 -> 89.207.16.137 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:05.956845 2.126890 tcp 10.0.2.15 51969 -> 89.207.16.137 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:05.957601 2.122453 tcp 10.0.2.15 51970 -> 46.228.164.13 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:05.957946 2.125953 tcp 10.0.2.15 51971 -> 46.228.164.13 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:05.959026 2.126031 tcp 10.0.2.15 51972 -> 216.52.1.12 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:05.959983 2.118807 tcp 10.0.2.15 51973 -> 216.52.1.12 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:05.960613 2.120813 tcp 10.0.2.15 51974 -> 216.52.1.12 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:05.961841 2.100230 tcp 10.0.2.15 51975 -> 35.186.234.100 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:05.962488 2.100746 tcp 10.0.2.15 51976 -> 35.186.234.100 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:05.963033 2.100128 tcp 10.0.2.15 51977 -> 35.186.234.100 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:05.963920 2.101890 tcp 10.0.2.15 51978 -> 23.38.89.179 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:05.964293 2.102603 tcp 10.0.2.15 51979 -> 23.38.89.179 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:05.965223 2.103093 tcp 10.0.2.15 51980 -> 159.253.128.188 443 FSPA_FSPA 0 0 12 1388 904 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:05.965747 2.114094 tcp 10.0.2.15 51981 -> 159.253.128.188 443 FSPA_FSPA 0 0 12 1388 904 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:05.967307 2.120544 tcp 10.0.2.15 51982 -> 37.252.161.184 443 FSPA_FSPA 0 0 18 4756 1087 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:05.967961 2.100885 tcp 10.0.2.15 51983 -> 37.252.161.184 443 FSPA_FSPA 0 0 12 1369 904 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:06.191412 1.820154 tcp 10.0.2.15 51984 -> 152.195.39.114 443 FSRPA_SRPA 0 0 27 8925 1303 12 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:06.442496 1.628619 tcp 10.0.2.15 51985 -> 152.195.39.114 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:08.116198 3.099326 tcp 10.0.2.15 51986 -> 185.33.223.197 80 FSRPA_FSRPA 0 0 48 22497 12433 21 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:08.116853 3.782882 tcp 10.0.2.15 51987 -> 185.33.223.197 80 FSPA_FSA 0 0 13 4278 3950 7 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:08.117575 4.953059 tcp 10.0.2.15 51988 -> 152.195.39.114 443 FSPA_FSPA 0 0 39 11740 3126 16 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:08.132988 4.943799 tcp 10.0.2.15 51989 -> 217.182.126.162 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:08.133981 4.942728 tcp 10.0.2.15 51990 -> 217.182.126.162 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:08.134996 5.026433 tcp 10.0.2.15 51991 -> 149.174.28.143 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:08.135424 5.028305 tcp 10.0.2.15 51992 -> 149.174.28.143 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:08.136406 4.947386 tcp 10.0.2.15 51993 -> 89.207.16.137 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:08.136963 4.946741 tcp 10.0.2.15 51994 -> 89.207.16.137 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:08.138589 4.942380 tcp 10.0.2.15 51995 -> 46.228.164.13 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:08.139170 4.944326 tcp 10.0.2.15 51996 -> 46.228.164.13 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:08.140073 4.944483 tcp 10.0.2.15 51997 -> 185.33.223.218 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:08.141222 4.948142 tcp 10.0.2.15 51998 -> 185.33.223.218 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:08.142235 4.949503 tcp 10.0.2.15 51999 -> 216.52.1.12 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:08.142821 4.942670 tcp 10.0.2.15 52000 -> 216.52.1.12 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:08.143551 4.922711 tcp 10.0.2.15 52001 -> 35.186.234.100 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:08.143941 4.921922 tcp 10.0.2.15 52002 -> 35.186.234.100 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:08.144625 4.921800 tcp 10.0.2.15 52003 -> 23.38.89.179 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:08.145010 4.921483 tcp 10.0.2.15 52004 -> 23.38.89.179 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:08.145881 4.874984 tcp 10.0.2.15 52005 -> 159.253.128.188 443 FSRPA_SRPA 0 0 19 5253 1173 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:08.146587 4.874191 tcp 10.0.2.15 52006 -> 159.253.128.188 443 FSRPA_SRPA 0 0 19 5253 1173 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:08.147126 4.933686 tcp 10.0.2.15 52007 -> 37.252.161.184 443 FSPA_FSPA 0 0 19 4810 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:08.147472 4.937138 tcp 10.0.2.15 52008 -> 37.252.161.184 443 FSPA_FSPA 0 0 18 4756 1087 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:09.427458 3.646111 tcp 10.0.2.15 52009 -> 52.209.224.33 443 FSRPA_FSRPA 0 0 26 6511 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:09.428108 3.644106 tcp 10.0.2.15 52010 -> 52.209.224.33 443 FSRPA_FSRPA 0 0 26 6511 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:09.429025 3.650391 tcp 10.0.2.15 52011 -> 141.170.25.54 443 FSPA_FSPA 0 0 19 5246 1357 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:09.429445 3.648234 tcp 10.0.2.15 52012 -> 141.170.25.54 443 FSPA_FSPA 0 0 19 5246 1357 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:09.430368 3.658631 tcp 10.0.2.15 52013 -> 185.29.132.30 443 FSPA_FSPA 0 0 19 4869 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:09.431191 3.658001 tcp 10.0.2.15 52014 -> 185.29.132.30 443 FSPA_FSPA 0 0 18 4815 1087 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:09.431634 3.658745 tcp 10.0.2.15 52015 -> 185.29.132.30 443 FSPA_FSPA 0 0 19 4869 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:09.602684 0.068610 udp 10.0.2.15 51356 <-> 1.1.1.1 53 CON 0 0 2 180 74 1 flow=Normal-UDP-DNS 1970/01/01 02:08:09.682249 3.428358 tcp 10.0.2.15 52016 -> 195.209.111.17 443 FSPA_FSPA 0 0 20 5318 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:09.769214 3.285563 tcp 10.0.2.15 52017 -> 2.21.74.65 80 FSPA_FSPA 0 0 23 7806 5972 12 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:14.469193 4.308423 tcp 10.0.2.15 52018 -> 50.19.84.118 80 FSPA_FSPA 0 0 11 1648 1161 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:14.721475 3.512933 tcp 10.0.2.15 52019 -> 50.19.84.118 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:15.896757 0.083009 udp 10.0.2.15 51884 <-> 1.1.1.1 53 CON 0 0 2 280 83 1 flow=Normal-UDP-DNS 1970/01/01 02:08:15.981628 7.102599 tcp 10.0.2.15 52020 -> 2.21.74.65 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:16.081474 2.246220 tcp 10.0.2.15 52021 -> 2.21.74.65 80 FSPA_FSPA 0 0 15 4091 3091 8 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:16.245291 1.532577 tcp 10.0.2.15 52022 -> 185.33.223.218 80 FSRPA_FSRPA 0 0 39 18750 8328 16 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:17.184410 0.662587 tcp 10.0.2.15 52023 -> 185.33.223.197 80 FSRPA_FSRPA 0 0 22 8751 4112 10 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:17.617407 0.400039 tcp 10.0.2.15 52024 -> 152.195.39.114 443 FSRPA_SRPA 0 0 25 8817 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:17.745408 5.337611 tcp 10.0.2.15 52025 -> 185.33.223.218 80 FSPA_FSPA 0 0 32 17838 7938 14 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:18.493410 4.598347 tcp 10.0.2.15 52026 -> 185.33.223.197 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:18.744446 4.338346 tcp 10.0.2.15 52027 -> 185.33.223.197 80 FSPA_FSPA 0 0 29 14236 8675 14 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:19.047742 0.079096 udp 10.0.2.15 62875 <-> 1.1.1.1 53 CON 0 0 2 156 70 1 flow=Normal-UDP-DNS 1970/01/01 02:08:19.134632 15.186714 udp 10.0.2.15 62876 <-> 216.58.201.110 443 CON 0 0 13 4299 2306 7 flow=Normal-Google-Net-8 1970/01/01 02:08:19.303418 3.776338 tcp 10.0.2.15 52028 -> 152.195.39.114 443 FSPA_FSPA 0 0 36 11578 3018 14 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:20.020815 3.067819 tcp 10.0.2.15 52029 -> 52.209.224.33 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:20.021261 3.062887 tcp 10.0.2.15 52030 -> 52.209.224.33 443 FSRPA_FSRPA 0 0 24 6403 1195 10 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:20.022032 3.087196 tcp 10.0.2.15 52031 -> 195.209.111.17 443 FSPA_FSPA 0 0 20 5318 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:20.022601 3.083391 tcp 10.0.2.15 52032 -> 195.209.111.17 443 FSPA_FSPA 0 0 20 5318 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:20.023126 3.090682 tcp 10.0.2.15 52033 -> 195.209.111.17 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:20.023719 3.071326 tcp 10.0.2.15 52034 -> 185.29.132.30 443 FSPA_FSPA 0 0 20 4923 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:20.024304 3.070804 tcp 10.0.2.15 52035 -> 185.29.132.30 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:20.072885 0.383555 tcp 10.0.2.15 52036 -> 141.170.25.54 443 FSRPA_FSRPA 0 0 26 7047 2078 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:20.272757 2.811587 tcp 10.0.2.15 52037 -> 52.209.224.33 443 FSRPA_FSRPA 0 0 25 6457 1249 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:20.273081 2.835982 tcp 10.0.2.15 52038 -> 195.209.111.17 443 FSPA_FSPA 0 0 20 5318 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:20.278516 2.816371 tcp 10.0.2.15 52039 -> 185.29.132.30 443 FSPA_FSPA 0 0 12 1369 904 6 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:20.847527 17.775915 udp 10.0.2.15 62879 <-> 216.58.207.227 443 CON 0 0 29 8410 5897 16 flow=Normal-Google-Net-8 1970/01/01 02:08:23.416155 4.674730 tcp 10.0.2.15 52040 -> 2.21.74.65 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:23.669681 9.401988 tcp 10.0.2.15 52041 -> 2.21.74.65 80 FSPA_FSPA 0 0 55 22682 17512 28 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:23.803137 3.703873 tcp 10.0.2.15 52042 -> 185.33.223.218 80 FSRPA_FSRPA 0 0 91 54283 24078 37 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:24.383455 0.461728 tcp 10.0.2.15 52043 -> 185.33.223.197 80 FSRPA_SPA 0 0 29 14240 8621 13 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:24.663668 3.437356 tcp 10.0.2.15 52044 -> 152.195.39.114 443 FSPA_FSPA 0 0 41 12753 4607 17 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:25.420874 1.894786 tcp 10.0.2.15 52045 -> 185.33.223.197 80 FSRPA_SRPA 0 0 38 20377 12979 18 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:27.245219 0.535998 tcp 10.0.2.15 52046 -> 185.33.223.218 80 FSPA_FSPA 0 0 25 11227 6117 11 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:27.700741 0.840516 tcp 10.0.2.15 52047 -> 185.33.223.218 80 FSPA_FSPA 0 0 26 11277 6173 12 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:28.971255 4.272622 tcp 10.0.2.15 52048 -> 185.33.223.218 80 FSRPA_FSRPA 0 0 118 79107 32869 47 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:29.480544 3.687814 tcp 10.0.2.15 52049 -> 50.19.84.118 80 FSPA_FSPA 0 0 11 1648 1161 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:29.526268 17.132025 udp 10.0.2.15 62887 <-> 66.102.1.157 443 CON 0 0 17 5052 2670 8 flow=Normal-UDP-Established 1970/01/01 02:08:29.574068 0.176378 tcp 10.0.2.15 52050 -> 185.33.223.197 80 FSPA_FSA 0 0 13 4282 3954 7 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:30.215881 0.146327 tcp 10.0.2.15 52051 -> 185.33.223.197 80 FSPA_FSA 0 0 13 4098 3770 7 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:30.465639 2.606186 tcp 10.0.2.15 52052 -> 216.58.201.99 443 FSPA_FSPA 0 0 37 9932 3668 16 flow=Normal-Google-Net-8 1970/01/01 02:08:30.733785 2.359785 tcp 10.0.2.15 52053 -> 185.33.223.197 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:31.207671 0.763784 tcp 10.0.2.15 52054 -> 185.33.223.197 80 FSRPA_SPA 0 0 28 14191 8621 13 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:31.788102 1.284573 tcp 10.0.2.15 52055 -> 152.195.39.114 443 FSPA_FSPA 0 0 35 11044 3114 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:33.077065 5.306532 tcp 10.0.2.15 52056 -> 185.33.223.218 80 FSPA_FSPA 0 0 60 35977 15984 25 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:33.651574 0.083912 udp 10.0.2.15 63447 <-> 1.1.1.1 53 CON 0 0 2 282 77 1 flow=Normal-UDP-DNS 1970/01/01 02:08:33.657771 0.077017 udp 10.0.2.15 50946 <-> 1.1.1.1 53 CON 0 0 2 338 91 1 flow=Normal-UDP-DNS 1970/01/01 02:08:33.736945 0.652307 tcp 10.0.2.15 52057 -> 185.33.223.204 80 FSRPA_SRPA 0 0 30 14291 8675 14 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:33.888924 4.460684 tcp 10.0.2.15 52058 -> 2.21.74.65 80 FSPA_FSPA 0 0 11 2250 1667 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:33.964575 4.392769 tcp 10.0.2.15 52059 -> 152.195.39.114 443 FSPA_FSPA 0 0 36 13411 4468 15 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:34.690974 0.000000 udp 10.0.2.15 61788 -> 1.1.1.1 53 INT 0 1 81 81 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:08:34.884810 3.498459 tcp 10.0.2.15 52060 -> 185.33.223.204 80 FSPA_FSPA 0 0 26 14753 9161 13 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:35.363875 0.000209 tcp 10.0.2.15 49717 -> 199.16.156.52 443 A_A 0 0 2 109 55 1 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:35.692129 0.034018 udp 10.0.2.15 61788 <-> 1.0.0.1 53 CON 0 0 2 250 81 1 flow=Normal-UDP-DNS 1970/01/01 02:08:36.064418 0.006638 udp 10.0.2.15 61236 <-> 1.0.0.1 53 CON 0 0 2 207 73 1 flow=Normal-UDP-DNS 1970/01/01 02:08:36.083829 15.132610 udp 10.0.2.15 61237 <-> 216.58.201.97 443 CON 0 0 12 6419 2093 6 flow=Normal-Google-Net-8 1970/01/01 02:08:36.118764 0.006267 udp 10.0.2.15 49538 <-> 1.0.0.1 53 CON 0 0 2 231 71 1 flow=Normal-UDP-DNS 1970/01/01 02:08:36.133049 15.108374 udp 10.0.2.15 49539 <-> 172.217.23.214 443 CON 0 0 56 41524 4094 24 flow=Normal-Google-Net-9 1970/01/01 02:08:37.361484 5.756863 tcp 10.0.2.15 52061 -> 195.209.111.17 443 FSPA_FSPA 0 0 20 5318 1141 9 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:37.361791 5.765162 tcp 10.0.2.15 52062 -> 195.209.111.17 443 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:37.368373 0.000000 udp 10.0.2.15 49536 -> 1.0.0.1 53 INT 0 1 76 76 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:08:37.461887 0.083391 udp 10.0.2.15 61869 <-> 1.0.0.1 53 CON 0 0 2 226 72 1 flow=Normal-UDP-DNS 1970/01/01 02:08:37.547731 5.628006 tcp 10.0.2.15 52063 -> 169.55.70.175 443 FSRPA_FSRPA 0 0 26 8757 1874 11 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:37.612062 0.812773 tcp 10.0.2.15 52064 -> 195.209.111.17 443 FSPA_FSPA 0 0 17 5156 1033 7 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:38.376105 0.006492 udp 10.0.2.15 49536 <-> 1.1.1.1 53 CON 0 0 2 243 76 1 flow=Normal-UDP-DNS 1970/01/01 02:08:38.384431 4.706494 tcp 10.0.2.15 52065 -> 185.29.135.234 443 FSPA_FSPA 0 0 18 4815 1087 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:38.384758 4.702903 tcp 10.0.2.15 52066 -> 185.29.135.234 443 FSPA_FSPA 0 0 17 4761 1087 8 flow=Normal-TCP-WEB-Established-TLS 1970/01/01 02:08:42.208579 0.858270 tcp 10.0.2.15 52067 -> 216.58.201.99 443 FSPA_FSPA 0 0 34 8304 2148 15 flow=Normal-Google-Net-8 1970/01/01 02:08:51.215464 0.000000 udp 10.0.2.15 61120 -> 1.1.1.1 53 INT 0 1 87 87 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:08:51.583111 0.031336 udp 10.0.2.15 64384 <-> 1.1.1.1 53 CON 0 0 2 284 78 1 flow=Normal-UDP-DNS 1970/01/01 02:08:51.617984 1.602105 tcp 10.0.2.15 52068 -> 23.21.49.226 80 FSPA_FSPA 0 0 11 1647 1160 6 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:51.752903 1.470136 tcp 10.0.2.15 52069 -> 23.21.49.226 80 FSA_FSA 0 0 7 394 228 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:52.221197 0.004289 udp 10.0.2.15 61120 <-> 1.0.0.1 53 CON 0 0 2 215 87 1 flow=Normal-UDP-DNS 1970/01/01 02:08:52.226448 0.849460 tcp 10.0.2.15 52070 -> 172.217.23.226 80 FSPA_FSPA 0 0 11 1824 1058 6 flow=Normal-Google-Net-9 1970/01/01 02:08:52.797742 0.094603 udp 10.0.2.15 65003 <-> 1.0.0.1 53 CON 0 0 2 268 73 1 flow=Normal-UDP-DNS 1970/01/01 02:08:52.879240 0.073250 udp 10.0.2.15 61486 <-> 1.0.0.1 53 CON 0 0 2 166 75 1 flow=Normal-UDP-DNS 1970/01/01 02:08:52.879598 0.047692 udp 10.0.2.15 49893 <-> 1.0.0.1 53 CON 0 0 2 215 85 1 flow=Normal-UDP-DNS 1970/01/01 02:08:52.880489 0.047866 udp 10.0.2.15 59721 <-> 1.0.0.1 53 CON 0 0 2 166 75 1 flow=Normal-UDP-DNS 1970/01/01 02:08:52.883033 0.000000 udp 10.0.2.15 49294 -> 1.0.0.1 53 INT 0 1 75 75 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:08:52.897314 0.621320 tcp 10.0.2.15 52071 -> 23.4.248.121 80 SPA_SPA 0 0 7 1823 1419 4 flow=Normal-TCP-WEB-Established 1970/01/01 02:08:52.947664 0.591774 udp 10.0.2.15 49295 <-> 216.58.201.97 443 CON 0 0 9 4646 3103 6 flow=Normal-Google-Net-8 1970/01/01 02:08:52.962567 3.224180 udp 10.0.2.15 49296 <-> 216.58.201.99 443 CON 0 0 11 4234 2163 5 flow=Normal-Google-Net-8 1970/01/01 02:08:52.985659 6.333908 udp 10.0.2.15 49297 <-> 216.58.201.110 443 CON 0 0 161 87275 13883 67 flow=Normal-Google-Net-8 1970/01/01 02:08:53.771290 0.220075 udp 10.0.2.15 63137 <-> 1.0.0.1 53 CON 0 0 2 250 73 1 flow=Normal-UDP-DNS 1970/01/01 02:08:53.771587 0.146651 udp 10.0.2.15 51519 <-> 1.0.0.1 53 CON 0 0 2 210 73 1 flow=Normal-UDP-DNS 1970/01/01 02:08:53.772020 0.278255 udp 10.0.2.15 62687 <-> 1.0.0.1 53 CON 0 0 2 213 80 1 flow=Normal-UDP-DNS 1970/01/01 02:08:53.885701 0.048440 udp 10.0.2.15 49294 <-> 1.1.1.1 53 CON 0 0 2 166 75 1 flow=Normal-UDP-DNS 1970/01/01 02:08:53.923780 0.000000 udp 10.0.2.15 55060 -> 1.0.0.1 53 INT 0 1 79 79 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:08:53.939215 0.088939 udp 10.0.2.15 51507 <-> 1.1.1.1 53 CON 0 0 2 206 77 1 flow=Normal-UDP-DNS 1970/01/01 02:08:54.004523 0.062406 udp 10.0.2.15 62417 <-> 1.1.1.1 53 CON 0 0 2 212 80 1 flow=Normal-UDP-DNS 1970/01/01 02:08:54.047877 0.180221 udp 10.0.2.15 62418 <-> 216.58.201.99 443 CON 0 0 7 3164 1627 4 flow=Normal-Google-Net-8 1970/01/01 02:08:54.055146 0.000000 udp 10.0.2.15 65298 -> 1.1.1.1 53 INT 0 1 83 83 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:08:54.071170 0.000000 udp 10.0.2.15 58721 -> 1.1.1.1 53 INT 0 1 84 84 1 flow=Normal-UDP-Attempt-DNS 1970/01/01 02:08:54.931155 0.042534 udp 10.0.2.15 55060 <-> 1.1.1.1 53 CON 0 0 2 314 79 1 flow=Normal-UDP-DNS 1970/01/01 02:08:54.981344 0.037964 udp 10.0.2.15 52061 <-> 1.1.1.1 53 CON 0 0 2 211 79 1 flow=Normal-UDP-DNS 1970/01/01 02:08:55.020778 0.145315 udp 10.0.2.15 52259 <-> 1.1.1.1 53 CON 0 0 2 225 84 1 flow=Normal-UDP-DNS 1970/01/01 02:08:55.057216 0.036121 udp 10.0.2.15 65298 <-> 1.0.0.1 53 CON 0 0 2 218 83 1 flow=Normal-UDP-DNS 1970/01/01 02:08:55.073682 0.035516 udp 10.0.2.15 58721 <-> 1.0.0.1 53 CON 0 0 2 220 84 1 flow=Normal-UDP-DNS 1970/01/01 02:08:55.094802 0.069841 udp 10.0.2.15 56251 <-> 1.0.0.1 53 CON 0 0 2 256 74 1 flow=Normal-UDP-DNS 1970/01/01 02:08:57.999869 0.496468 tcp 10.0.2.15 52072 -> 216.58.201.99 443 SPA_SPA 0 0 22 3889 2605 10 flow=Normal-Google-Net-8 1970/01/01 02:08:59.037723 0.033003 udp 10.0.2.15 51501 <-> 1.0.0.1 53 CON 0 0 2 206 77 1 flow=Normal-UDP-DNS 1970/01/01 02:08:59.075891 0.135148 tcp 10.0.2.15 52073 -> 74.125.133.189 443 SPA_SPA 0 0 15 5321 1695 7 flow=Normal-Google-Net-6 1970/01/01 02:08:59.122670 0.004535 udp 10.0.2.15 59121 <-> 1.0.0.1 53 CON 0 0 2 190 87 1 flow=Normal-UDP-DNS 1970/01/01 02:08:59.134150 0.189839 udp 10.0.2.15 59122 <-> 216.58.201.106 443 CON 0 0 7 4215 2281 4 flow=Normal-Google-Net-8 2018/07/22 13:01:35.896300 1.037628 man 0 0 2014 1 STP 0 25659852 0 0