[{"af":4,"dst_addr":"192.36.148.17","from":"180.233.120.30","fw":4790,"group_id":16660764,"lts":187,"msm_id":16660764,"msm_name":"Tdig","prb_id":1083,"proto":"UDP","result":{"ANCOUNT":1,"ARCOUNT":0,"ID":28506,"NSCOUNT":1,"QDCOUNT":1,"abuf":"b1qEAAABAAEAAQAAAmlkBnNlcnZlcgAAEAADwAwAEAADAAAAAAAHBnMxLm11bcAMAAIAAwAAAAAAAsAM","answers":[{"NAME":"id.server","RDATA":["s1.mum"],"TYPE":"TXT"}],"rt":82.467,"size":60},"src_addr":"180.233.120.30","stored_timestamp":1540418370,"timestamp":1540418360,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","dst_port":"53","from":"14.102.189.242","fw":4940,"group_id":16660764,"lts":39,"msm_id":16660764,"msm_name":"Tdig","prb_id":17011,"proto":"UDP","result":{"ANCOUNT":1,"ARCOUNT":0,"ID":45298,"NSCOUNT":1,"QDCOUNT":1,"abuf":"sPKEAAABAAEAAQAAAmlkBnNlcnZlcgAAEAADwAwAEAADAAAAAAAHBnMxLmxueMAMAAIAAwAAAAAAAsAM","answers":[{"NAME":"id.server","RDATA":["s1.lnx"],"TYPE":"TXT"}],"rt":164.035,"size":60},"src_addr":"172.16.0.14","stored_timestamp":1540418376,"timestamp":1540418361,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","dst_port":"53","from":"122.177.127.138","fw":4940,"group_id":16660764,"lts":39,"msm_id":16660764,"msm_name":"Tdig","prb_id":23419,"proto":"UDP","result":{"ANCOUNT":1,"ARCOUNT":0,"ID":50101,"NSCOUNT":1,"QDCOUNT":1,"abuf":"w7WEAAABAAEAAQAAAmlkBnNlcnZlcgAAEAADwAwAEAADAAAAAAAHBnMxLmxueMAMAAIAAwAAAAAAAsAM","answers":[{"NAME":"id.server","RDATA":["s1.lnx"],"TYPE":"TXT"}],"rt":155.819,"size":60},"src_addr":"192.168.1.2","stored_timestamp":1540418370,"timestamp":1540418361,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","from":"103.100.201.254","fw":4900,"group_id":16660764,"lts":33,"msm_id":16660764,"msm_name":"Tdig","prb_id":23696,"proto":"UDP","result":{"ANCOUNT":1,"ARCOUNT":0,"ID":61833,"NSCOUNT":1,"QDCOUNT":1,"abuf":"8YmEAAABAAEAAQAAAmlkBnNlcnZlcgAAEAADwAwAEAADAAAAAAAHBnMxLm11bcAMAAIAAwAAAAAAAsAM","answers":[{"NAME":"id.server","RDATA":["s1.mum"],"TYPE":"TXT"}],"rt":28.987,"size":60},"src_addr":"103.100.201.254","stored_timestamp":1540418368,"timestamp":1540418362,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","dst_port":"53","from":"27.109.5.2","fw":4940,"group_id":16660764,"lts":14,"msm_id":16660764,"msm_name":"Tdig","prb_id":23697,"proto":"UDP","result":{"ANCOUNT":1,"ARCOUNT":0,"ID":17852,"NSCOUNT":1,"QDCOUNT":1,"abuf":"RbyEAAABAAEAAQAAAmlkBnNlcnZlcgAAEAADwAwAEAADAAAAAAAHBnMxLm11bcAMAAIAAwAAAAAAAsAM","answers":[{"NAME":"id.server","RDATA":["s1.mum"],"TYPE":"TXT"}],"rt":17.707,"size":60},"src_addr":"192.168.1.254","stored_timestamp":1540418377,"timestamp":1540418359,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","dst_port":"53","error":{"timeout":5000},"from":"106.51.140.171","fw":4940,"group_id":16660764,"lts":6,"msm_id":16660764,"msm_name":"Tdig","prb_id":24912,"proto":"UDP","src_addr":"192.168.5.7","stored_timestamp":1540418381,"timestamp":1540418360,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","dst_port":"53","from":"103.41.24.193","fw":4940,"group_id":16660764,"lts":64,"msm_id":16660764,"msm_name":"Tdig","prb_id":24916,"proto":"UDP","result":{"ANCOUNT":1,"ARCOUNT":0,"ID":8538,"NSCOUNT":1,"QDCOUNT":1,"abuf":"IVqEAAABAAEAAQAAAmlkBnNlcnZlcgAAEAADwAwAEAADAAAAAAAHBnMxLmxueMAMAAIAAwAAAAAAAsAM","answers":[{"NAME":"id.server","RDATA":["s1.lnx"],"TYPE":"TXT"}],"rt":178.095,"size":60},"src_addr":"192.168.1.19","stored_timestamp":1540418368,"timestamp":1540418359,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","dst_port":"53","from":"112.196.181.21","fw":4940,"group_id":16660764,"lts":103,"msm_id":16660764,"msm_name":"Tdig","prb_id":24973,"proto":"UDP","result":{"ANCOUNT":1,"ARCOUNT":0,"ID":48786,"NSCOUNT":1,"QDCOUNT":1,"abuf":"vpKEAAABAAEAAQAAAmlkBnNlcnZlcgAAEAADwAwAEAADAAAAAAAHBnMxLm11bcAMAAIAAwAAAAAAAsAM","answers":[{"NAME":"id.server","RDATA":["s1.mum"],"TYPE":"TXT"}],"rt":52.838,"size":60},"src_addr":"192.168.1.103","stored_timestamp":1540418377,"timestamp":1540418361,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","dst_port":"53","from":"103.225.46.3","fw":4940,"group_id":16660764,"lts":86,"msm_id":16660764,"msm_name":"Tdig","prb_id":25064,"proto":"UDP","result":{"ANCOUNT":1,"ARCOUNT":0,"ID":13604,"NSCOUNT":1,"QDCOUNT":1,"abuf":"NSSEAAABAAEAAQAAAmlkBnNlcnZlcgAAEAADwAwAEAADAAAAAAAHBnMxLmxueMAMAAIAAwAAAAAAAsAM","answers":[{"NAME":"id.server","RDATA":["s1.lnx"],"TYPE":"TXT"}],"rt":286.95,"size":60},"src_addr":"103.225.46.3","stored_timestamp":1540418369,"timestamp":1540418360,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","dst_port":"53","from":"103.23.29.158","fw":4940,"group_id":16660764,"lts":91,"msm_id":16660764,"msm_name":"Tdig","prb_id":25161,"proto":"UDP","result":{"ANCOUNT":1,"ARCOUNT":0,"ID":49791,"NSCOUNT":1,"QDCOUNT":1,"abuf":"wn+EAAABAAEAAQAAAmlkBnNlcnZlcgAAEAADwAwAEAADAAAAAAAHBnMxLm11bcAMAAIAAwAAAAAAAsAM","answers":[{"NAME":"id.server","RDATA":["s1.mum"],"TYPE":"TXT"}],"rt":37.743,"size":60},"src_addr":"172.17.58.200","stored_timestamp":1540418377,"timestamp":1540418362,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","dst_port":"53","from":"122.161.88.178","fw":4940,"group_id":16660764,"lts":1,"msm_id":16660764,"msm_name":"Tdig","prb_id":25164,"proto":"UDP","result":{"ANCOUNT":1,"ARCOUNT":0,"ID":64677,"NSCOUNT":1,"QDCOUNT":1,"abuf":"/KWEAAABAAEAAQAAAmlkBnNlcnZlcgAAEAADwAwAEAADAAAAAAAHBnMxLmxueMAMAAIAAwAAAAAAAsAM","answers":[{"NAME":"id.server","RDATA":["s1.lnx"],"TYPE":"TXT"}],"rt":174.313,"size":60},"src_addr":"192.168.1.3","stored_timestamp":1540418369,"timestamp":1540418361,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","dst_port":"53","from":"117.254.82.113","fw":4940,"group_id":16660764,"lts":7,"msm_id":16660764,"msm_name":"Tdig","prb_id":25185,"proto":"UDP","result":{"ANCOUNT":1,"ARCOUNT":0,"ID":48848,"NSCOUNT":1,"QDCOUNT":1,"abuf":"vtCEAAABAAEAAQAAAmlkBnNlcnZlcgAAEAADwAwAEAADAAAAAAAHBnMxLmxueMAMAAIAAwAAAAAAAsAM","answers":[{"NAME":"id.server","RDATA":["s1.lnx"],"TYPE":"TXT"}],"rt":174.454,"size":60},"src_addr":"172.21.4.92","stored_timestamp":1540418378,"timestamp":1540418360,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","dst_port":"53","from":"103.121.150.176","fw":4940,"group_id":16660764,"lts":54,"msm_id":16660764,"msm_name":"Tdig","prb_id":25189,"proto":"UDP","result":{"ANCOUNT":1,"ARCOUNT":0,"ID":36661,"NSCOUNT":1,"QDCOUNT":1,"abuf":"jzWEAAABAAEAAQAAAmlkBnNlcnZlcgAAEAADwAwAEAADAAAAAAAHBnMxLm11bcAMAAIAAwAAAAAAAsAM","answers":[{"NAME":"id.server","RDATA":["s1.mum"],"TYPE":"TXT"}],"rt":36.507,"size":60},"src_addr":"192.168.0.100","stored_timestamp":1540418377,"timestamp":1540418361,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","dst_port":"53","error":{"timeout":5000},"from":"49.204.222.192","fw":4940,"group_id":16660764,"lts":7,"msm_id":16660764,"msm_name":"Tdig","prb_id":25252,"proto":"UDP","src_addr":"192.168.10.59","stored_timestamp":1540418381,"timestamp":1540418360,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","dst_port":"53","from":"150.107.183.233","fw":4940,"group_id":16660764,"lts":82,"msm_id":16660764,"msm_name":"Tdig","prb_id":25261,"proto":"UDP","result":{"ANCOUNT":1,"ARCOUNT":0,"ID":64677,"NSCOUNT":1,"QDCOUNT":1,"abuf":"/KWEAAABAAEAAQAAAmlkBnNlcnZlcgAAEAADwAwAEAADAAAAAAAHBnMxLmxueMAMAAIAAwAAAAAAAsAM","answers":[{"NAME":"id.server","RDATA":["s1.lnx"],"TYPE":"TXT"}],"rt":144.869,"size":60},"src_addr":"192.168.10.94","stored_timestamp":1540418366,"timestamp":1540418361,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","dst_port":"53","from":"45.250.11.53","fw":4940,"group_id":16660764,"lts":124,"msm_id":16660764,"msm_name":"Tdig","prb_id":25280,"proto":"UDP","result":{"ANCOUNT":1,"ARCOUNT":0,"ID":59342,"NSCOUNT":1,"QDCOUNT":1,"abuf":"586EAAABAAEAAQAAAmlkBnNlcnZlcgAAEAADwAwAEAADAAAAAAAHBnMxLmxueMAMAAIAAwAAAAAAAsAM","answers":[{"NAME":"id.server","RDATA":["s1.lnx"],"TYPE":"TXT"}],"rt":170.793,"size":60},"src_addr":"10.10.1.53","stored_timestamp":1540418369,"timestamp":1540418359,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","dst_port":"53","from":"203.193.179.18","fw":4940,"group_id":16660764,"lts":4,"msm_id":16660764,"msm_name":"Tdig","prb_id":25375,"proto":"UDP","result":{"ANCOUNT":1,"ARCOUNT":0,"ID":38357,"NSCOUNT":1,"QDCOUNT":1,"abuf":"ldWEAAABAAEAAQAAAmlkBnNlcnZlcgAAEAADwAwAEAADAAAAAAAHBnMxLm11bcAMAAIAAwAAAAAAAsAM","answers":[{"NAME":"id.server","RDATA":["s1.mum"],"TYPE":"TXT"}],"rt":43.906,"size":60},"src_addr":"192.168.1.9","stored_timestamp":1540418376,"timestamp":1540418361,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","dst_port":"53","from":"45.64.213.230","fw":4940,"group_id":16660764,"lts":127,"msm_id":16660764,"msm_name":"Tdig","prb_id":25387,"proto":"UDP","result":{"ANCOUNT":1,"ARCOUNT":0,"ID":51,"NSCOUNT":1,"QDCOUNT":1,"abuf":"ADOEAAABAAEAAQAAAmlkBnNlcnZlcgAAEAADwAwAEAADAAAAAAAHBnMxLm11bcAMAAIAAwAAAAAAAsAM","answers":[{"NAME":"id.server","RDATA":["s1.mum"],"TYPE":"TXT"}],"rt":30.799,"size":60},"src_addr":"192.168.88.66","stored_timestamp":1540418376,"timestamp":1540418359,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","dst_port":"53","from":"122.180.33.152","fw":4940,"group_id":16660764,"lts":22,"msm_id":16660764,"msm_name":"Tdig","prb_id":25398,"proto":"UDP","result":{"ANCOUNT":1,"ARCOUNT":0,"ID":45298,"NSCOUNT":1,"QDCOUNT":1,"abuf":"sPKEAAABAAEAAQAAAmlkBnNlcnZlcgAAEAADwAwAEAADAAAAAAAHBnMxLmxueMAMAAIAAwAAAAAAAsAM","answers":[{"NAME":"id.server","RDATA":["s1.lnx"],"TYPE":"TXT"}],"rt":161.784,"size":60},"src_addr":"192.168.1.49","stored_timestamp":1540418378,"timestamp":1540418360,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","dst_port":"53","from":"122.166.191.40","fw":4940,"group_id":16660764,"lts":2,"msm_id":16660764,"msm_name":"Tdig","prb_id":28176,"proto":"UDP","result":{"ANCOUNT":1,"ARCOUNT":0,"ID":8960,"NSCOUNT":1,"QDCOUNT":1,"abuf":"IwCEAAABAAEAAQAAAmlkBnNlcnZlcgAAEAADwAwAEAADAAAAAAAHBnMxLmxueMAMAAIAAwAAAAAAAsAM","answers":[{"NAME":"id.server","RDATA":["s1.lnx"],"TYPE":"TXT"}],"rt":179.866,"size":60},"src_addr":"10.1.1.240","stored_timestamp":1540418369,"timestamp":1540418358,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","dst_port":"53","from":"202.134.178.13","fw":4940,"group_id":16660764,"lts":263,"msm_id":16660764,"msm_name":"Tdig","prb_id":28502,"proto":"UDP","result":{"ANCOUNT":1,"ARCOUNT":0,"ID":20759,"NSCOUNT":1,"QDCOUNT":1,"abuf":"UReEAAABAAEAAQAAAmlkBnNlcnZlcgAAEAADwAwAEAADAAAAAAAHBnMxLm11bcAMAAIAAwAAAAAAAsAM","answers":[{"NAME":"id.server","RDATA":["s1.mum"],"TYPE":"TXT"}],"rt":4.032,"size":60},"src_addr":"202.134.178.13","stored_timestamp":1540418366,"timestamp":1540418361,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","dst_port":"53","from":"117.247.87.84","fw":4940,"group_id":16660764,"lts":55,"msm_id":16660764,"msm_name":"Tdig","prb_id":28879,"proto":"UDP","result":{"ANCOUNT":1,"ARCOUNT":0,"ID":45298,"NSCOUNT":1,"QDCOUNT":1,"abuf":"sPKEAAABAAEAAQAAAmlkBnNlcnZlcgAAEAADwAwAEAADAAAAAAAHBnMxLm11bcAMAAIAAwAAAAAAAsAM","answers":[{"NAME":"id.server","RDATA":["s1.mum"],"TYPE":"TXT"}],"rt":12.583,"size":60},"src_addr":"192.168.0.100","stored_timestamp":1540418364,"timestamp":1540418361,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","dst_port":"53","from":"103.210.49.60","fw":4940,"group_id":16660764,"lts":20,"msm_id":16660764,"msm_name":"Tdig","prb_id":29814,"proto":"UDP","result":{"ANCOUNT":1,"ARCOUNT":0,"ID":33558,"NSCOUNT":1,"QDCOUNT":1,"abuf":"gxaEAAABAAEAAQAAAmlkBnNlcnZlcgAAEAADwAwAEAADAAAAAAAHBnMxLm11bcAMAAIAAwAAAAAAAsAM","answers":[{"NAME":"id.server","RDATA":["s1.mum"],"TYPE":"TXT"}],"rt":12.07,"size":60},"src_addr":"192.168.1.194","stored_timestamp":1540418366,"timestamp":1540418361,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","dst_port":"53","error":{"timeout":5000},"from":"49.207.55.77","fw":4940,"group_id":16660764,"lts":11,"msm_id":16660764,"msm_name":"Tdig","prb_id":29902,"proto":"UDP","src_addr":"192.168.31.31","stored_timestamp":1540418380,"timestamp":1540418360,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","dst_port":"53","from":"103.69.92.17","fw":4940,"group_id":16660764,"lts":6,"msm_id":16660764,"msm_name":"Tdig","prb_id":29959,"proto":"UDP","result":{"ANCOUNT":1,"ARCOUNT":0,"ID":38357,"NSCOUNT":1,"QDCOUNT":1,"abuf":"ldWEAAABAAEAAQAAAmlkBnNlcnZlcgAAEAADwAwAEAADAAAAAAAHBnMxLm11bcAMAAIAAwAAAAAAAsAM","answers":[{"NAME":"id.server","RDATA":["s1.mum"],"TYPE":"TXT"}],"rt":36.404,"size":60},"src_addr":"192.168.1.51","stored_timestamp":1540418376,"timestamp":1540418360,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","dst_port":"53","from":"103.210.49.70","fw":4940,"group_id":16660764,"lts":5,"msm_id":16660764,"msm_name":"Tdig","prb_id":29983,"proto":"UDP","result":{"ANCOUNT":1,"ARCOUNT":0,"ID":64677,"NSCOUNT":1,"QDCOUNT":1,"abuf":"/KWEAAABAAEAAQAAAmlkBnNlcnZlcgAAEAADwAwAEAADAAAAAAAHBnMxLm11bcAMAAIAAwAAAAAAAsAM","answers":[{"NAME":"id.server","RDATA":["s1.mum"],"TYPE":"TXT"}],"rt":12.668,"size":60},"src_addr":"192.168.1.48","stored_timestamp":1540418370,"timestamp":1540418361,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","dst_port":"53","error":{"timeout":5000},"from":"49.205.217.233","fw":4940,"group_id":16660764,"lts":9,"msm_id":16660764,"msm_name":"Tdig","prb_id":30276,"proto":"UDP","src_addr":"192.168.31.164","stored_timestamp":1540418380,"timestamp":1540418361,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","dst_port":"53","from":"202.142.112.14","fw":4940,"group_id":16660764,"lts":2,"msm_id":16660764,"msm_name":"Tdig","prb_id":30478,"proto":"UDP","result":{"ANCOUNT":1,"ARCOUNT":0,"ID":61959,"NSCOUNT":1,"QDCOUNT":1,"abuf":"8geEAAABAAEAAQAAAmlkBnNlcnZlcgAAEAADwAwAEAADAAAAAAAHBnMxLmxueMAMAAIAAwAAAAAAAsAM","answers":[{"NAME":"id.server","RDATA":["s1.lnx"],"TYPE":"TXT"}],"rt":170.335,"size":60},"src_addr":"202.142.112.14","stored_timestamp":1540418380,"timestamp":1540418359,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","from":"122.161.206.16","fw":4790,"group_id":16660764,"lts":23,"msm_id":16660764,"msm_name":"Tdig","prb_id":305,"proto":"UDP","result":{"ANCOUNT":1,"ARCOUNT":0,"ID":44524,"NSCOUNT":1,"QDCOUNT":1,"abuf":"reyEAAABAAEAAQAAAmlkBnNlcnZlcgAAEAADwAwAEAADAAAAAAAHBnMxLmxueMAMAAIAAwAAAAAAAsAM","answers":[{"NAME":"id.server","RDATA":["s1.lnx"],"TYPE":"TXT"}],"rt":240.058,"size":60},"src_addr":"192.168.1.3","stored_timestamp":1540418377,"timestamp":1540418361,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","dst_port":"53","from":"103.225.178.90","fw":4940,"group_id":16660764,"lts":11,"msm_id":16660764,"msm_name":"Tdig","prb_id":30639,"proto":"UDP","result":{"ANCOUNT":1,"ARCOUNT":0,"ID":344,"NSCOUNT":1,"QDCOUNT":1,"abuf":"AViEAAABAAEAAQAAAmlkBnNlcnZlcgAAEAADwAwAEAADAAAAAAAHBnMxLmxueMAMAAIAAwAAAAAAAsAM","answers":[{"NAME":"id.server","RDATA":["s1.lnx"],"TYPE":"TXT"}],"rt":167.189,"size":60},"src_addr":"103.225.178.90","stored_timestamp":1540418376,"timestamp":1540418360,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","dst_port":"53","from":"103.25.231.101","fw":4940,"group_id":16660764,"lts":2,"msm_id":16660764,"msm_name":"Tdig","prb_id":30669,"proto":"UDP","result":{"ANCOUNT":1,"ARCOUNT":0,"ID":14091,"NSCOUNT":1,"QDCOUNT":1,"abuf":"NwuEAAABAAEAAQAAAmlkBnNlcnZlcgAAEAADwAwAEAADAAAAAAAHBnMxLmFteMAMAAIAAwAAAAAAAsAM","answers":[{"NAME":"id.server","RDATA":["s1.amx"],"TYPE":"TXT"}],"rt":163.673,"size":60},"src_addr":"192.168.28.94","stored_timestamp":1540418378,"timestamp":1540418360,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","dst_port":"53","from":"150.129.64.101","fw":4940,"group_id":16660764,"lts":58,"msm_id":16660764,"msm_name":"Tdig","prb_id":30867,"proto":"UDP","result":{"ANCOUNT":0,"ARCOUNT":0,"ID":31061,"NSCOUNT":1,"QDCOUNT":1,"abuf":"eVWEAAABAAAAAQAAAmlkBnNlcnZlcgAAEAADwAwABgADAAFRgAAjwAwKaG9zdG1hc3RlcsAMAAAAAAAAcIAAABwgAAk6gAABUYA=","rt":2.059,"size":74},"src_addr":"192.168.26.3","stored_timestamp":1540418370,"timestamp":1540418362,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","dst_port":"53","from":"45.116.0.230","fw":4940,"group_id":16660764,"lts":46,"msm_id":16660764,"msm_name":"Tdig","prb_id":31242,"proto":"UDP","result":{"ANCOUNT":1,"ARCOUNT":0,"ID":58672,"NSCOUNT":1,"QDCOUNT":1,"abuf":"5TCEAAABAAEAAQAAAmlkBnNlcnZlcgAAEAADwAwAEAADAAAAAAAHBnMxLm11bcAMAAIAAwAAAAAAAsAM","answers":[{"NAME":"id.server","RDATA":["s1.mum"],"TYPE":"TXT"}],"rt":10.602,"size":60},"src_addr":"45.116.0.230","stored_timestamp":1540418366,"timestamp":1540418361,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","dst_port":"53","from":"49.36.1.137","fw":4940,"group_id":16660764,"lts":3,"msm_id":16660764,"msm_name":"Tdig","prb_id":31997,"proto":"UDP","result":{"ANCOUNT":1,"ARCOUNT":0,"ID":18897,"NSCOUNT":1,"QDCOUNT":1,"abuf":"SdGEAAABAAEAAQAAAmlkBnNlcnZlcgAAEAADwAwAEAADAAAAAAAHBnMxLm11bcAMAAIAAwAAAAAAAsAM","answers":[{"NAME":"id.server","RDATA":["s1.mum"],"TYPE":"TXT"}],"rt":26.507,"size":60},"src_addr":"192.168.29.168","stored_timestamp":1540418378,"timestamp":1540418361,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","dst_port":"53","from":"117.247.138.75","fw":4940,"group_id":16660764,"lts":1,"msm_id":16660764,"msm_name":"Tdig","prb_id":31998,"proto":"UDP","result":{"ANCOUNT":1,"ARCOUNT":0,"ID":28835,"NSCOUNT":1,"QDCOUNT":1,"abuf":"cKOEAAABAAEAAQAAAmlkBnNlcnZlcgAAEAADwAwAEAADAAAAAAAHBnMxLm11bcAMAAIAAwAAAAAAAsAM","answers":[{"NAME":"id.server","RDATA":["s1.mum"],"TYPE":"TXT"}],"rt":101.048,"size":60},"src_addr":"192.168.1.183","stored_timestamp":1540418366,"timestamp":1540418361,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","dst_port":"53","from":"45.249.82.9","fw":4940,"group_id":16660764,"lts":2,"msm_id":16660764,"msm_name":"Tdig","prb_id":32001,"proto":"UDP","result":{"ANCOUNT":0,"ARCOUNT":0,"ID":45298,"NSCOUNT":1,"QDCOUNT":1,"abuf":"sPKEAAABAAAAAQAAAmlkBnNlcnZlcgAAEAADwAwABgADAAFRgAAjwAwKaG9zdG1hc3RlcsAMAAAAAAAAcIAAABwgAAk6gAABUYA=","rt":5.593,"size":74},"src_addr":"192.168.105.199","stored_timestamp":1540418378,"timestamp":1540418361,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","dst_port":"53","from":"103.59.141.206","fw":4940,"group_id":16660764,"lts":55,"msm_id":16660764,"msm_name":"Tdig","prb_id":32395,"proto":"UDP","result":{"ANCOUNT":1,"ARCOUNT":0,"ID":50954,"NSCOUNT":1,"QDCOUNT":1,"abuf":"xwqEAAABAAEAAQAAAmlkBnNlcnZlcgAAEAADwAwAEAADAAAAAAAHBnMxLmxueMAMAAIAAwAAAAAAAsAM","answers":[{"NAME":"id.server","RDATA":["s1.lnx"],"TYPE":"TXT"}],"rt":176.756,"size":60},"src_addr":"10.0.0.5","stored_timestamp":1540418370,"timestamp":1540418361,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","dst_port":"53","from":"106.201.97.0","fw":4940,"group_id":16660764,"lts":18,"msm_id":16660764,"msm_name":"Tdig","prb_id":32886,"proto":"UDP","result":{"ANCOUNT":1,"ARCOUNT":0,"ID":12187,"NSCOUNT":1,"QDCOUNT":1,"abuf":"L5uEAAABAAEAAQAAAmlkBnNlcnZlcgAAEAADwAwAEAADAAAAAAAHBnMxLmxueMAMAAIAAwAAAAAAAsAM","answers":[{"NAME":"id.server","RDATA":["s1.lnx"],"TYPE":"TXT"}],"rt":165.704,"size":60},"src_addr":"192.168.1.8","stored_timestamp":1540418366,"timestamp":1540418360,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","dst_port":"53","from":"125.21.123.51","fw":4940,"group_id":16660764,"lts":3,"msm_id":16660764,"msm_name":"Tdig","prb_id":32903,"proto":"UDP","result":{"ANCOUNT":1,"ARCOUNT":0,"ID":5605,"NSCOUNT":1,"QDCOUNT":1,"abuf":"FeWEAAABAAEAAQAAAmlkBnNlcnZlcgAAEAADwAwAEAADAAAAAAAHBnMxLmxueMAMAAIAAwAAAAAAAsAM","answers":[{"NAME":"id.server","RDATA":["s1.lnx"],"TYPE":"TXT"}],"rt":158.699,"size":60},"src_addr":"192.168.2.70","stored_timestamp":1540418376,"timestamp":1540418363,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","dst_port":"53","from":"120.60.132.76","fw":4940,"group_id":16660764,"lts":43,"msm_id":16660764,"msm_name":"Tdig","prb_id":32954,"proto":"UDP","result":{"ANCOUNT":1,"ARCOUNT":0,"ID":34822,"NSCOUNT":1,"QDCOUNT":1,"abuf":"iAaEAAABAAEAAQAAAmlkBnNlcnZlcgAAEAADwAwAEAADAAAAAAAHBnMxLm11bcAMAAIAAwAAAAAAAsAM","answers":[{"NAME":"id.server","RDATA":["s1.mum"],"TYPE":"TXT"}],"rt":17.619,"size":60},"src_addr":"192.168.1.33","stored_timestamp":1540418367,"timestamp":1540418360,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","dst_port":"53","from":"175.101.19.78","fw":4940,"group_id":16660764,"lts":86,"msm_id":16660764,"msm_name":"Tdig","prb_id":32983,"proto":"UDP","result":{"ANCOUNT":1,"ARCOUNT":0,"ID":10282,"NSCOUNT":1,"QDCOUNT":1,"abuf":"KCqEAAABAAEAAQAAAmlkBnNlcnZlcgAAEAADwAwAEAADAAAAAAAHBnMxLm11bcAMAAIAAwAAAAAAAsAM","answers":[{"NAME":"id.server","RDATA":["s1.mum"],"TYPE":"TXT"}],"rt":22.01,"size":60},"src_addr":"192.168.1.2","stored_timestamp":1540418376,"timestamp":1540418361,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","dst_port":"53","from":"202.88.236.104","fw":4940,"group_id":16660764,"lts":3,"msm_id":16660764,"msm_name":"Tdig","prb_id":33101,"proto":"UDP","result":{"ANCOUNT":1,"ARCOUNT":0,"ID":15848,"NSCOUNT":1,"QDCOUNT":1,"abuf":"PeiEAAABAAEAAQAAAmlkBnNlcnZlcgAAEAADwAwAEAADAAAAAAAHBnMxLm11bcAMAAIAAwAAAAAAAsAM","answers":[{"NAME":"id.server","RDATA":["s1.mum"],"TYPE":"TXT"}],"rt":46.375,"size":60},"src_addr":"192.168.88.3","stored_timestamp":1540418377,"timestamp":1540418361,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","dst_port":"53","from":"103.194.232.68","fw":4940,"group_id":16660764,"lts":62,"msm_id":16660764,"msm_name":"Tdig","prb_id":33192,"proto":"UDP","result":{"ANCOUNT":1,"ARCOUNT":0,"ID":32060,"NSCOUNT":1,"QDCOUNT":1,"abuf":"fTyEAAABAAEAAQAAAmlkBnNlcnZlcgAAEAADwAwAEAADAAAAAAAHBnMxLm11bcAMAAIAAwAAAAAAAsAM","answers":[{"NAME":"id.server","RDATA":["s1.mum"],"TYPE":"TXT"}],"rt":201.541,"size":60},"src_addr":"192.168.1.12","stored_timestamp":1540418369,"timestamp":1540418360,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","dst_port":"53","from":"223.226.70.33","fw":4940,"group_id":16660764,"lts":4,"msm_id":16660764,"msm_name":"Tdig","prb_id":33546,"proto":"UDP","result":{"ANCOUNT":1,"ARCOUNT":0,"ID":10282,"NSCOUNT":1,"QDCOUNT":1,"abuf":"KCqEAAABAAEAAQAAAmlkBnNlcnZlcgAAEAADwAwAEAADAAAAAAAHBnMxLmxueMAMAAIAAwAAAAAAAsAM","answers":[{"NAME":"id.server","RDATA":["s1.lnx"],"TYPE":"TXT"}],"rt":155.818,"size":60},"src_addr":"192.168.1.2","stored_timestamp":1540418366,"timestamp":1540418360,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","dst_port":"53","from":"103.38.13.128","fw":4940,"group_id":16660764,"lts":52,"msm_id":16660764,"msm_name":"Tdig","prb_id":34017,"proto":"UDP","result":{"ANCOUNT":0,"ARCOUNT":0,"ID":57207,"NSCOUNT":0,"QDCOUNT":1,"abuf":"33eAggABAAAAAAAAAmlkBnNlcnZlcgAAEAAD","rt":28.041,"size":27},"src_addr":"192.168.0.12","stored_timestamp":1540418378,"timestamp":1540418360,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","dst_port":"53","from":"202.142.122.231","fw":4940,"group_id":16660764,"lts":37,"msm_id":16660764,"msm_name":"Tdig","prb_id":34024,"proto":"UDP","result":{"ANCOUNT":1,"ARCOUNT":0,"ID":45298,"NSCOUNT":1,"QDCOUNT":1,"abuf":"sPKEAAABAAEAAQAAAmlkBnNlcnZlcgAAEAADwAwAEAADAAAAAAAHBnMxLmxueMAMAAIAAwAAAAAAAsAM","answers":[{"NAME":"id.server","RDATA":["s1.lnx"],"TYPE":"TXT"}],"rt":171.083,"size":60},"src_addr":"192.168.0.100","stored_timestamp":1540418368,"timestamp":1540418360,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","from":"103.106.101.27","fw":4780,"group_id":16660764,"lts":25,"msm_id":16660764,"msm_name":"Tdig","prb_id":34671,"proto":"UDP","result":{"ANCOUNT":1,"ARCOUNT":0,"ID":5707,"NSCOUNT":1,"QDCOUNT":1,"abuf":"FkuEAAABAAEAAQAAAmlkBnNlcnZlcgAAEAADwAwAEAADAAAAAAAHBnMxLm11bcAMAAIAAwAAAAAAAsAM","answers":[{"NAME":"id.server","RDATA":["s1.mum"],"TYPE":"TXT"}],"rt":17.074,"size":60},"src_addr":"192.168.90.2","stored_timestamp":1540418370,"timestamp":1540418360,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","dst_port":"53","from":"117.206.116.0","fw":4940,"group_id":16660764,"lts":5,"msm_id":16660764,"msm_name":"Tdig","prb_id":35106,"proto":"UDP","result":{"ANCOUNT":1,"ARCOUNT":0,"ID":45298,"NSCOUNT":1,"QDCOUNT":1,"abuf":"sPKEAAABAAEAAQAAAmlkBnNlcnZlcgAAEAADwAwAEAADAAAAAAAHBnMxLm11bcAMAAIAAwAAAAAAAsAM","answers":[{"NAME":"id.server","RDATA":["s1.mum"],"TYPE":"TXT"}],"rt":72.379,"size":60},"src_addr":"192.168.1.34","stored_timestamp":1540418380,"timestamp":1540418360,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","dst_port":"53","from":"113.193.145.86","fw":4940,"group_id":16660764,"lts":33,"msm_id":16660764,"msm_name":"Tdig","prb_id":35648,"proto":"UDP","result":{"ANCOUNT":1,"ARCOUNT":0,"ID":10282,"NSCOUNT":1,"QDCOUNT":1,"abuf":"KCqEAAABAAEAAQAAAmlkBnNlcnZlcgAAEAADwAwAEAADAAAAAAAHBnMxLmxueMAMAAIAAwAAAAAAAsAM","answers":[{"NAME":"id.server","RDATA":["s1.lnx"],"TYPE":"TXT"}],"rt":163.286,"size":60},"src_addr":"192.168.1.220","stored_timestamp":1540418369,"timestamp":1540418362,"type":"dns"},{"af":4,"dst_addr":"192.36.148.17","dst_port":"53","from":"180.149.244.132","fw":4910,"group_id":16660764,"lts":87,"msm_id":16660764,"msm_name":"Tdig","prb_id":6107,"proto":"UDP","result":{"ANCOUNT":1,"ARCOUNT":0,"ID":61303,"NSCOUNT":1,"QDCOUNT":1,"abuf":"73eEAAABAAEAAQAAAmlkBnNlcnZlcgAAEAADwAwAEAADAAAAAAAHBnMxLm11bcAMAAIAAwAAAAAAAsAM","answers":[{"NAME":"id.server","RDATA":["s1.mum"],"TYPE":"TXT"}],"rt":1.983,"size":60},"src_addr":"180.149.244.132","stored_timestamp":1540418370,"timestamp":1540418360,"type":"dns"}]