Skip to content

Instantly share code, notes, and snippets.

@adulau

adulau/sample-dnstap-decoded.json

Created August 13, 2022 13:59
Show Gist options
  • Save adulau/9061fa14ce3f9f650dbf35f077097d86 to your computer and use it in GitHub Desktop.
Save adulau/9061fa14ce3f9f650dbf35f077097d86 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
sample-dnstap-decoded.json
{
"identity": "recursive-5003",
"qname": "www.aboil.info.",
"rrtype": "A",
"query-ip": "127.0.0.1",
"query-port": 34882,
"response-ip": "127.0.0.1",
"response-port": 5003,
"latency": 0.027,
"message": "CLIENT_RESPONSE",
"family": "INET",
"protocol": "UDP",
"payload": "4nOBgwABAAAAAQABA3d3dwVhYm9pbARpbmZvAAABAAHAFgAGAAEAAAxlAEMCYTAEaW5mbwthZmlsaWFzLW5zdMAWCmhvc3RtYXN0ZXIGZG9udXRzBWVtYWlsAGL3qtoAABwgAAADhAASdQAAAA4QAAApBNAAAAAAAAA=",
"length": 122,
"timestamp": 1660399112.222987,
"time-sec": 1660399112,
"time-nsec": 222987000,
"type": "response",
"rcode": "NXDOMAIN",
"id": 57971,
"datetime": "2022-08-13T13:58:32.222987+00:00",
"decoded_payload": "id 57971\nopcode QUERY\nrcode NXDOMAIN\nflags QR RD RA\nedns 0\npayload 1232\n;QUESTION\nwww.aboil.info. IN A\n;ANSWER\n;AUTHORITY\ninfo. 3173 IN SOA a0.info.afilias-nst.info. hostmaster.donuts.email. 1660398298 7200 900 1209600 3600\n;ADDITIONAL"
}
{
"identity": "recursive-5003",
"qname": "www.abolition.info.",
"rrtype": "A",
"query-ip": "127.0.0.1",
"query-port": 52510,
"response-ip": "127.0.0.1",
"response-port": 5003,
"latency": "-",
"message": "CLIENT_QUERY",
"family": "INET",
"protocol": "UDP",
"payload": "MakBAAABAAAAAAABA3d3dwlhYm9saXRpb24EaW5mbwAAAQABAAApBNAAAAAAAAA=",
"length": 47,
"timestamp": 1660399112.233061,
"time-sec": 1660399112,
"time-nsec": 233061000,
"type": "query",
"rcode": "NOERROR",
"id": 12713,
"datetime": "2022-08-13T13:58:32.233061+00:00",
"decoded_payload": "id 12713\nopcode QUERY\nrcode NOERROR\nflags RD\nedns 0\npayload 1232\n;QUESTION\nwww.abolition.info. IN A\n;ANSWER\n;AUTHORITY\n;ADDITIONAL"
}
{
"identity": "recursive-5003",
"qname": "www.abolition.info.",
"rrtype": "A",
"query-ip": "127.0.0.1",
"query-port": 52510,
"response-ip": "127.0.0.1",
"response-port": 5003,
"latency": 0.217,
"message": "CLIENT_RESPONSE",
"family": "INET",
"protocol": "UDP",
"payload": "MamBgAABAAEAAAABA3d3dwlhYm9saXRpb24EaW5mbwAAAQABwAwAAQABAAAADwAExjZ18gAAKQTQAAAAAAAA",
"length": 63,
"timestamp": 1660399112.449712,
"time-sec": 1660399112,
"time-nsec": 449712000,
"type": "response",
"rcode": "NOERROR",
"id": 12713,
"datetime": "2022-08-13T13:58:32.449712+00:00",
"decoded_payload": "id 12713\nopcode QUERY\nrcode NOERROR\nflags QR RD RA\nedns 0\npayload 1232\n;QUESTION\nwww.abolition.info. IN A\n;ANSWER\nwww.abolition.info. 15 IN A 198.54.117.242\n;AUTHORITY\n;ADDITIONAL"
}
{
"identity": "recursive-5003",
"qname": "www.abomasum.info.",
"rrtype": "A",
"query-ip": "127.0.0.1",
"query-port": 40104,
"response-ip": "127.0.0.1",
"response-port": 5003,
"latency": "-",
"message": "CLIENT_QUERY",
"family": "INET",
"protocol": "UDP",
"payload": "YHEBAAABAAAAAAABA3d3dwhhYm9tYXN1bQRpbmZvAAABAAEAACkE0AAAAAAAAA==",
"length": 46,
"timestamp": 1660399112.466067,
"time-sec": 1660399112,
"time-nsec": 466067000,
"type": "query",
"rcode": "NOERROR",
"id": 24689,
"datetime": "2022-08-13T13:58:32.466067+00:00",
"decoded_payload": "id 24689\nopcode QUERY\nrcode NOERROR\nflags RD\nedns 0\npayload 1232\n;QUESTION\nwww.abomasum.info. IN A\n;ANSWER\n;AUTHORITY\n;ADDITIONAL"
}
{
"identity": "recursive-5003",
"qname": "www.abomasum.info.",
"rrtype": "A",
"query-ip": "127.0.0.1",
"query-port": 40104,
"response-ip": "127.0.0.1",
"response-port": 5003,
"latency": 0.041,
"message": "CLIENT_RESPONSE",
"family": "INET",
"protocol": "UDP",
"payload": "YHGBgwABAAAAAQABA3d3dwhhYm9tYXN1bQRpbmZvAAABAAHAGQAGAAEAAAxlAEMCYTAEaW5mbwthZmlsaWFzLW5zdMAZCmhvc3RtYXN0ZXIGZG9udXRzBWVtYWlsAGL3qtoAABwgAAADhAASdQAAAA4QAAApBNAAAAAAAAA=",
"length": 125,
"timestamp": 1660399112.506743,
"time-sec": 1660399112,
"time-nsec": 506743000,
"type": "response",
"rcode": "NXDOMAIN",
"id": 24689,
"datetime": "2022-08-13T13:58:32.506743+00:00",
"decoded_payload": "id 24689\nopcode QUERY\nrcode NXDOMAIN\nflags QR RD RA\nedns 0\npayload 1232\n;QUESTION\nwww.abomasum.info. IN A\n;ANSWER\n;AUTHORITY\ninfo. 3173 IN SOA a0.info.afilias-nst.info. hostmaster.donuts.email. 1660398298 7200 900 1209600 3600\n;ADDITIONAL"
}
{
"identity": "recursive-5003",
"qname": "www.abomination.net.",
"rrtype": "A",
"query-ip": "127.0.0.1",
"query-port": 56415,
"response-ip": "127.0.0.1",
"response-port": 5003,
"latency": "-",
"message": "CLIENT_QUERY",
"family": "INET",
"protocol": "UDP",
"payload": "RC8BAAABAAAAAAABA3d3dwthYm9taW5hdGlvbgNuZXQAAAEAAQAAKQTQAAAAAAAA",
"length": 48,
"timestamp": 1660399112.519542,
"time-sec": 1660399112,
"time-nsec": 519542000,
"type": "query",
"rcode": "NOERROR",
"id": 17455,
"datetime": "2022-08-13T13:58:32.519542+00:00",
"decoded_payload": "id 17455\nopcode QUERY\nrcode NOERROR\nflags RD\nedns 0\npayload 1232\n;QUESTION\nwww.abomination.net. IN A\n;ANSWER\n;AUTHORITY\n;ADDITIONAL"
}
{
"identity": "recursive-5003",
"qname": "www.abomination.net.",
"rrtype": "A",
"query-ip": "127.0.0.1",
"query-port": 56415,
"response-ip": "127.0.0.1",
"response-port": 5003,
"latency": 0.153,
"message": "CLIENT_RESPONSE",
"family": "INET",
"protocol": "UDP",
"payload": "RC+BgAABAAwAAAABA3d3dwthYm9taW5hdGlvbgNuZXQAAAEAAcAMAAEAAQAAAlgABC04TxfADAABAAEAAAJYAARIDrKuwAwAAQABAAACWAAEYH579MAMAAEAAQAAAlgABK3/wobADAABAAEAAAJYAARIDrkrwAwAAQABAAACWAAExjp2p8AMAAEAAQAAAlgABC1PE8TADAABAAEAAAJYAAQtIRe3wAwAAQABAAACWAAELSEU68AMAAEAAQAAAlgABC0hAk/ADAABAAEAAAJYAAQtIR7FwAwAAQABAAACWAAELSESLAAAKQTQAAAAAAAA",
"length": 240,
"timestamp": 1660399112.672122,
"time-sec": 1660399112,
"time-nsec": 672122000,
"type": "response",
"rcode": "NOERROR",
"id": 17455,
"datetime": "2022-08-13T13:58:32.672122+00:00",
"decoded_payload": "id 17455\nopcode QUERY\nrcode NOERROR\nflags QR RD RA\nedns 0\npayload 1232\n;QUESTION\nwww.abomination.net. IN A\n;ANSWER\nwww.abomination.net. 600 IN A 45.56.79.23\nwww.abomination.net. 600 IN A 72.14.178.174\nwww.abomination.net. 600 IN A 96.126.123.244\nwww.abomination.net. 600 IN A 173.255.194.134\nwww.abomination.net. 600 IN A 72.14.185.43\nwww.abomination.net. 600 IN A 198.58.118.167\nwww.abomination.net. 600 IN A 45.79.19.196\nwww.abomination.net. 600 IN A 45.33.23.183\nwww.abomination.net. 600 IN A 45.33.20.235\nwww.abomination.net. 600 IN A 45.33.2.79\nwww.abomination.net. 600 IN A 45.33.30.197\nwww.abomination.net. 600 IN A 45.33.18.44\n;AUTHORITY\n;ADDITIONAL"
}
{
"identity": "recursive-5003",
"qname": "www.abomination.info.",
"rrtype": "A",
"query-ip": "127.0.0.1",
"query-port": 59502,
"response-ip": "127.0.0.1",
"response-port": 5003,
"latency": "-",
"message": "CLIENT_QUERY",
"family": "INET",
"protocol": "UDP",
"payload": "WA8BAAABAAAAAAABA3d3dwthYm9taW5hdGlvbgRpbmZvAAABAAEAACkE0AAAAAAAAA==",
"length": 49,
"timestamp": 1660399112.673713,
"time-sec": 1660399112,
"time-nsec": 673713000,
"type": "query",
"rcode": "NOERROR",
"id": 22543,
"datetime": "2022-08-13T13:58:32.673713+00:00",
"decoded_payload": "id 22543\nopcode QUERY\nrcode NOERROR\nflags RD\nedns 0\npayload 1232\n;QUESTION\nwww.abomination.info. IN A\n;ANSWER\n;AUTHORITY\n;ADDITIONAL"
}
{
"identity": "recursive-5003",
"qname": "www.abomination.info.",
"rrtype": "A",
"query-ip": "127.0.0.1",
"query-port": 59502,
"response-ip": "127.0.0.1",
"response-port": 5003,
"latency": 0.133,
"message": "CLIENT_RESPONSE",
"family": "INET",
"protocol": "UDP",
"payload": "WA+BgAABAAIAAAABA3d3dwthYm9taW5hdGlvbgRpbmZvAAABAAHADAAFAAEAADhAAALAEMAQAAEAAQAAOEAABB+qppoAACkE0AAAAAAAAA==",
"length": 79,
"timestamp": 1660399112.806992,
"time-sec": 1660399112,
"time-nsec": 806992000,
"type": "response",
"rcode": "NOERROR",
"id": 22543,
"datetime": "2022-08-13T13:58:32.806992+00:00",
"decoded_payload": "id 22543\nopcode QUERY\nrcode NOERROR\nflags QR RD RA\nedns 0\npayload 1232\n;QUESTION\nwww.abomination.info. IN A\n;ANSWER\nwww.abomination.info. 14400 IN CNAME abomination.info.\nabomination.info. 14400 IN A 31.170.166.154\n;AUTHORITY\n;ADDITIONAL"
}
{
"identity": "recursive-5003",
"qname": "www.Abongo.net.",
"rrtype": "A",
"query-ip": "127.0.0.1",
"query-port": 40874,
"response-ip": "127.0.0.1",
"response-port": 5003,
"latency": "-",
"message": "CLIENT_QUERY",
"family": "INET",
"protocol": "UDP",
"payload": "xKsBAAABAAAAAAABA3d3dwZBYm9uZ28DbmV0AAABAAEAACkE0AAAAAAAAA==",
"length": 43,
"timestamp": 1660399112.815657,
"time-sec": 1660399112,
"time-nsec": 815657000,
"type": "query",
"rcode": "NOERROR",
"id": 50347,
"datetime": "2022-08-13T13:58:32.815657+00:00",
"decoded_payload": "id 50347\nopcode QUERY\nrcode NOERROR\nflags RD\nedns 0\npayload 1232\n;QUESTION\nwww.Abongo.net. IN A\n;ANSWER\n;AUTHORITY\n;ADDITIONAL"
}
{
"identity": "recursive-5003",
"qname": "www.Abongo.net.",
"rrtype": "A",
"query-ip": "127.0.0.1",
"query-port": 40874,
"response-ip": "127.0.0.1",
"response-port": 5003,
"latency": 0.124,
"message": "CLIENT_RESPONSE",
"family": "INET",
"protocol": "UDP",
"payload": "xKuBgwABAAAAAQABA3d3dwZBYm9uZ28DbmV0AAABAAHAEAAGAAEAAAJYAEQNaGlkZGVuLW1hc3RlcgV5YWhvbwNjb20ACmhvc3RtYXN0ZXIJeWFob28taW5jwEB4hXM1AABwgAAAA4QACTqAAAACWAAAKQTQAAAAAAAA",
"length": 123,
"timestamp": 1660399112.939178,
"time-sec": 1660399112,
"time-nsec": 939178000,
"type": "response",
"rcode": "NXDOMAIN",
"id": 50347,
"datetime": "2022-08-13T13:58:32.939178+00:00",
"decoded_payload": "id 50347\nopcode QUERY\nrcode NXDOMAIN\nflags QR RD RA\nedns 0\npayload 1232\n;QUESTION\nwww.Abongo.net. IN A\n;ANSWER\n;AUTHORITY\nAbongo.net. 600 IN SOA hidden-master.yahoo.com. hostmaster.yahoo-inc.com. 2022011701 28800 900 604800 600\n;ADDITIONAL"
}
{
"identity": "recursive-5003",
"qname": "www.abord.com.",
"rrtype": "A",
"query-ip": "127.0.0.1",
"query-port": 42397,
"response-ip": "127.0.0.1",
"response-port": 5003,
"latency": "-",
"message": "CLIENT_QUERY",
"family": "INET",
"protocol": "UDP",
"payload": "X3wBAAABAAAAAAABA3d3dwVhYm9yZANjb20AAAEAAQAAKQTQAAAAAAAA",
"length": 42,
"timestamp": 1660399112.951397,
"time-sec": 1660399112,
"time-nsec": 951397000,
"type": "query",
"rcode": "NOERROR",
"id": 24444,
"datetime": "2022-08-13T13:58:32.951397+00:00",
"decoded_payload": "id 24444\nopcode QUERY\nrcode NOERROR\nflags RD\nedns 0\npayload 1232\n;QUESTION\nwww.abord.com. IN A\n;ANSWER\n;AUTHORITY\n;ADDITIONAL"
}
{
"identity": "recursive-5003",
"qname": "www.abord.com.",
"rrtype": "A",
"query-ip": "127.0.0.1",
"query-port": 42397,
"response-ip": "127.0.0.1",
"response-port": 5003,
"latency": 0.225,
"message": "CLIENT_RESPONSE",
"family": "INET",
"protocol": "UDP",
"payload": "X3yBgAABAAEAAAABA3d3dwVhYm9yZANjb20AAAEAAcAMAAEAAQAAKjAABMc789wAACkE0AAAAAAAAA==",
"length": 58,
"timestamp": 1660399113.176786,
"time-sec": 1660399113,
"time-nsec": 176786000,
"type": "response",
"rcode": "NOERROR",
"id": 24444,
"datetime": "2022-08-13T13:58:33.176786+00:00",
"decoded_payload": "id 24444\nopcode QUERY\nrcode NOERROR\nflags QR RD RA\nedns 0\npayload 1232\n;QUESTION\nwww.abord.com. IN A\n;ANSWER\nwww.abord.com. 10800 IN A 199.59.243.220\n;AUTHORITY\n;ADDITIONAL"
}
{
"identity": "recursive-5003",
"qname": "www.aborted.net.",
"rrtype": "A",
"query-ip": "127.0.0.1",
"query-port": 57964,
"response-ip": "127.0.0.1",
"response-port": 5003,
"latency": "-",
"message": "CLIENT_QUERY",
"family": "INET",
"protocol": "UDP",
"payload": "9/4BAAABAAAAAAABA3d3dwdhYm9ydGVkA25ldAAAAQABAAApBNAAAAAAAAA=",
"length": 44,
"timestamp": 1660399113.192275,
"time-sec": 1660399113,
"time-nsec": 192275000,
"type": "query",
"rcode": "NOERROR",
"id": 63486,
"datetime": "2022-08-13T13:58:33.192275+00:00",
"decoded_payload": "id 63486\nopcode QUERY\nrcode NOERROR\nflags RD\nedns 0\npayload 1232\n;QUESTION\nwww.aborted.net. IN A\n;ANSWER\n;AUTHORITY\n;ADDITIONAL"
}
{
"identity": "recursive-5003",
"qname": "www.aborted.net.",
"rrtype": "A",
"query-ip": "127.0.0.1",
"query-port": 57964,
"response-ip": "127.0.0.1",
"response-port": 5003,
"latency": 0.059,
"message": "CLIENT_RESPONSE",
"family": "INET",
"protocol": "UDP",
"payload": "9/6BgAABAAEAAAABA3d3dwdhYm9ydGVkA25ldAAAAQABwAwAAQABAAAOEAAEI7ruZQAAKQTQAAAAAAAA",
"length": 60,
"timestamp": 1660399113.250818,
"time-sec": 1660399113,
"time-nsec": 250818000,
"type": "response",
"rcode": "NOERROR",
"id": 63486,
"datetime": "2022-08-13T13:58:33.250818+00:00",
"decoded_payload": "id 63486\nopcode QUERY\nrcode NOERROR\nflags QR RD RA\nedns 0\npayload 1232\n;QUESTION\nwww.aborted.net. IN A\n;ANSWER\nwww.aborted.net. 3600 IN A 35.186.238.101\n;AUTHORITY\n;ADDITIONAL"
}
{
"identity": "recursive-5003",
"qname": "www.abortionist.com.",
"rrtype": "A",
"query-ip": "127.0.0.1",
"query-port": 57918,
"response-ip": "127.0.0.1",
"response-port": 5003,
"latency": "-",
"message": "CLIENT_QUERY",
"family": "INET",
"protocol": "UDP",
"payload": "dg8BAAABAAAAAAABA3d3dwthYm9ydGlvbmlzdANjb20AAAEAAQAAKQTQAAAAAAAA",
"length": 48,
"timestamp": 1660399113.266283,
"time-sec": 1660399113,
"time-nsec": 266283000,
"type": "query",
"rcode": "NOERROR",
"id": 30223,
"datetime": "2022-08-13T13:58:33.266283+00:00",
"decoded_payload": "id 30223\nopcode QUERY\nrcode NOERROR\nflags RD\nedns 0\npayload 1232\n;QUESTION\nwww.abortionist.com. IN A\n;ANSWER\n;AUTHORITY\n;ADDITIONAL"
}
{
"identity": "recursive-5003",
"qname": "www.abortionist.com.",
"rrtype": "A",
"query-ip": "127.0.0.1",
"query-port": 57918,
"response-ip": "127.0.0.1",
"response-port": 5003,
"latency": 0.042,
"message": "CLIENT_RESPONSE",
"family": "INET",
"protocol": "UDP",
"payload": "dg+BgAABAAEAAAABA3d3dwthYm9ydGlvbmlzdANjb20AAAEAAcAMAAEAAQAADhAABCO67mUAACkE0AAAAAAAAA==",
"length": 64,
"timestamp": 1660399113.308385,
"time-sec": 1660399113,
"time-nsec": 308385000,
"type": "response",
"rcode": "NOERROR",
"id": 30223,
"datetime": "2022-08-13T13:58:33.308385+00:00",
"decoded_payload": "id 30223\nopcode QUERY\nrcode NOERROR\nflags QR RD RA\nedns 0\npayload 1232\n;QUESTION\nwww.abortionist.com. IN A\n;ANSWER\nwww.abortionist.com. 3600 IN A 35.186.238.101\n;AUTHORITY\n;ADDITIONAL"
}
{
"identity": "recursive-5003",
"qname": "www.abouchement.net.",
"rrtype": "A",
"query-ip": "127.0.0.1",
"query-port": 58096,
"response-ip": "127.0.0.1",
"response-port": 5003,
"latency": "-",
"message": "CLIENT_QUERY",
"family": "INET",
"protocol": "UDP",
"payload": "JsIBAAABAAAAAAABA3d3dwthYm91Y2hlbWVudANuZXQAAAEAAQAAKQTQAAAAAAAA",
"length": 48,
"timestamp": 1660399113.320596,
"time-sec": 1660399113,
"time-nsec": 320596000,
"type": "query",
"rcode": "NOERROR",
"id": 9922,
"datetime": "2022-08-13T13:58:33.320596+00:00",
"decoded_payload": "id 9922\nopcode QUERY\nrcode NOERROR\nflags RD\nedns 0\npayload 1232\n;QUESTION\nwww.abouchement.net. IN A\n;ANSWER\n;AUTHORITY\n;ADDITIONAL"
}
{
"identity": "recursive-5003",
"qname": "www.abouchement.net.",
"rrtype": "A",
"query-ip": "127.0.0.1",
"query-port": 58096,
"response-ip": "127.0.0.1",
"response-port": 5003,
"latency": 0.038,
"message": "CLIENT_RESPONSE",
"family": "INET",
"protocol": "UDP",
"payload": "JsKBgwABAAAAAQABA3d3dwthYm91Y2hlbWVudANuZXQAAAEAAcAcAAYAAQAAA4IAPQFhDGd0bGQtc2VydmVyc8AcBW5zdGxkDHZlcmlzaWduLWdycwNjb20AYvet6AAABwgAAAOEAAk6gAABUYAAACkE0AAAAAAAAA==",
"length": 121,
"timestamp": 1660399113.358198,
"time-sec": 1660399113,
"time-nsec": 358198000,
"type": "response",
"rcode": "NXDOMAIN",
"id": 9922,
"datetime": "2022-08-13T13:58:33.358198+00:00",
"decoded_payload": "id 9922\nopcode QUERY\nrcode NXDOMAIN\nflags QR RD RA\nedns 0\npayload 1232\n;QUESTION\nwww.abouchement.net. IN A\n;ANSWER\n;AUTHORITY\nnet. 898 IN SOA a.gtld-servers.net. nstld.verisign-grs.com. 1660399080 1800 900 604800 86400\n;ADDITIONAL"
}
{
"identity": "recursive-5003",
"qname": "www.aboundingly.info.",
"rrtype": "A",
"query-ip": "127.0.0.1",
"query-port": 56070,
"response-ip": "127.0.0.1",
"response-port": 5003,
"latency": "-",
"message": "CLIENT_QUERY",
"family": "INET",
"protocol": "UDP",
"payload": "7/MBAAABAAAAAAABA3d3dwthYm91bmRpbmdseQRpbmZvAAABAAEAACkE0AAAAAAAAA==",
"length": 49,
"timestamp": 1660399113.370294,
"time-sec": 1660399113,
"time-nsec": 370294000,
"type": "query",
"rcode": "NOERROR",
"id": 61427,
"datetime": "2022-08-13T13:58:33.370294+00:00",
"decoded_payload": "id 61427\nopcode QUERY\nrcode NOERROR\nflags RD\nedns 0\npayload 1232\n;QUESTION\nwww.aboundingly.info. IN A\n;ANSWER\n;AUTHORITY\n;ADDITIONAL"
}
{
"identity": "recursive-5003",
"qname": "www.aboundingly.info.",
"rrtype": "A",
"query-ip": "127.0.0.1",
"query-port": 56070,
"response-ip": "127.0.0.1",
"response-port": 5003,
"latency": 0.027,
"message": "CLIENT_RESPONSE",
"family": "INET",
"protocol": "UDP",
"payload": "7/OBgwABAAAAAQABA3d3dwthYm91bmRpbmdseQRpbmZvAAABAAHAHAAGAAEAAAxkAEMCYTAEaW5mbwthZmlsaWFzLW5zdMAcCmhvc3RtYXN0ZXIGZG9udXRzBWVtYWlsAGL3qtoAABwgAAADhAASdQAAAA4QAAApBNAAAAAAAAA=",
"length": 128,
"timestamp": 1660399113.39692,
"time-sec": 1660399113,
"time-nsec": 396920000,
"type": "response",
"rcode": "NXDOMAIN",
"id": 61427,
"datetime": "2022-08-13T13:58:33.396920+00:00",
"decoded_payload": "id 61427\nopcode QUERY\nrcode NXDOMAIN\nflags QR RD RA\nedns 0\npayload 1232\n;QUESTION\nwww.aboundingly.info. IN A\n;ANSWER\n;AUTHORITY\ninfo. 3172 IN SOA a0.info.afilias-nst.info. hostmaster.donuts.email. 1660398298 7200 900 1209600 3600\n;ADDITIONAL"
}
{
"identity": "recursive-5003",
"qname": "www.abovedeck.info.",
"rrtype": "A",
"query-ip": "127.0.0.1",
"query-port": 36356,
"response-ip": "127.0.0.1",
"response-port": 5003,
"latency": "-",
"message": "CLIENT_QUERY",
"family": "INET",
"protocol": "UDP",
"payload": "DIQBAAABAAAAAAABA3d3dwlhYm92ZWRlY2sEaW5mbwAAAQABAAApBNAAAAAAAAA=",
"length": 47,
"timestamp": 1660399113.411384,
"time-sec": 1660399113,
"time-nsec": 411384000,
"type": "query",
"rcode": "NOERROR",
"id": 3204,
"datetime": "2022-08-13T13:58:33.411384+00:00",
"decoded_payload": "id 3204\nopcode QUERY\nrcode NOERROR\nflags RD\nedns 0\npayload 1232\n;QUESTION\nwww.abovedeck.info. IN A\n;ANSWER\n;AUTHORITY\n;ADDITIONAL"
}
{
"identity": "recursive-5003",
"qname": "www.abovedeck.info.",
"rrtype": "A",
"query-ip": "127.0.0.1",
"query-port": 36356,
"response-ip": "127.0.0.1",
"response-port": 5003,
"latency": 0.027,
"message": "CLIENT_RESPONSE",
"family": "INET",
"protocol": "UDP",
"payload": "DISBgwABAAAAAQABA3d3dwlhYm92ZWRlY2sEaW5mbwAAAQABwBoABgABAAAMZABDAmEwBGluZm8LYWZpbGlhcy1uc3TAGgpob3N0bWFzdGVyBmRvbnV0cwVlbWFpbABi96raAAAcIAAAA4QAEnUAAAAOEAAAKQTQAAAAAAAA",
"length": 126,
"timestamp": 1660399113.438394,
"time-sec": 1660399113,
"time-nsec": 438394000,
"type": "response",
"rcode": "NXDOMAIN",
"id": 3204,
"datetime": "2022-08-13T13:58:33.438394+00:00",
"decoded_payload": "id 3204\nopcode QUERY\nrcode NXDOMAIN\nflags QR RD RA\nedns 0\npayload 1232\n;QUESTION\nwww.abovedeck.info. IN A\n;ANSWER\n;AUTHORITY\ninfo. 3172 IN SOA a0.info.afilias-nst.info. hostmaster.donuts.email. 1660398298 7200 900 1209600 3600\n;ADDITIONAL"
}
{
"identity": "recursive-5003",
"qname": "www.aboveproof.com.",
"rrtype": "A",
"query-ip": "127.0.0.1",
"query-port": 36257,
"response-ip": "127.0.0.1",
"response-port": 5003,
"latency": "-",
"message": "CLIENT_QUERY",
"family": "INET",
"protocol": "UDP",
"payload": "c30BAAABAAAAAAABA3d3dwphYm92ZXByb29mA2NvbQAAAQABAAApBNAAAAAAAAA=",
"length": 47,
"timestamp": 1660399113.442953,
"time-sec": 1660399113,
"time-nsec": 442953000,
"type": "query",
"rcode": "NOERROR",
"id": 29565,
"datetime": "2022-08-13T13:58:33.442953+00:00",
"decoded_payload": "id 29565\nopcode QUERY\nrcode NOERROR\nflags RD\nedns 0\npayload 1232\n;QUESTION\nwww.aboveproof.com. IN A\n;ANSWER\n;AUTHORITY\n;ADDITIONAL"
}
{
"identity": "recursive-5003",
"qname": "www.aboveproof.com.",
"rrtype": "A",
"query-ip": "127.0.0.1",
"query-port": 36257,
"response-ip": "127.0.0.1",
"response-port": 5003,
"latency": 0.367,
"message": "CLIENT_RESPONSE",
"family": "INET",
"protocol": "UDP",
"payload": "c32BgAABAAUAAAABA3d3dwphYm92ZXByb29mA2NvbQAAAQABwAwABQABAAAOEAASBWdjZG4wBndpeGRucwNuZXQAwDAABQABAAABLAALCGJhbGFuY2VywDbATgAFAAEAAAEsABQRYmNiN2EzYjctYmFsYW5jZXLANsBlAAUAAQAAASwAHRp0ZC1iYWxhbmNlci0xOTktMTUtMTYzLTE0OMA2wIUAAQABAAAOEAAExw+jlAAAKQTQAAAAAAAA",
"length": 189,
"timestamp": 1660399113.809475,
"time-sec": 1660399113,
"time-nsec": 809475000,
"type": "response",
"rcode": "NOERROR",
"id": 29565,
"datetime": "2022-08-13T13:58:33.809475+00:00",
"decoded_payload": "id 29565\nopcode QUERY\nrcode NOERROR\nflags QR RD RA\nedns 0\npayload 1232\n;QUESTION\nwww.aboveproof.com. IN A\n;ANSWER\nwww.aboveproof.com. 3600 IN CNAME gcdn0.wixdns.net.\ngcdn0.wixdns.net. 300 IN CNAME balancer.wixdns.net.\nbalancer.wixdns.net. 300 IN CNAME bcb7a3b7-balancer.wixdns.net.\nbcb7a3b7-balancer.wixdns.net. 300 IN CNAME td-balancer-199-15-163-148.wixdns.net.\ntd-balancer-199-15-163-148.wixdns.net. 3600 IN A 199.15.163.148\n;AUTHORITY\n;ADDITIONAL"
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment