Перейти к содержимому
Калькуляторы

FastNetMon - программа для выявления входящих/исходящих атак

Ответить

pavel.odintsov   

pavel.odintsov
Опубликовано · Жалоба

Трафика не будет где-то несколько минут, после этого польется. Попробуйте подождать и посмотрите логи.

Поделиться сообщением

Ссылка на сообщение
Поделиться на других сайтах

nukerpsych   

nukerpsych
Опубликовано · Жалоба

Трафика не будет где-то несколько минут, после этого польется. Попробуйте подождать и посмотрите логи.

Спустя 20 минут трафика тоже не появилось.

2015-03-16 19:36:14,641 [iNFO] Logger initialized!
2015-03-16 19:36:14,641 [iNFO] Read configuration file
2015-03-16 19:36:14,641 [iNFO] We loaded 12 networks from networks file
2015-03-16 19:36:14,641 [iNFO] I will allocate 1024 records for subnet  cidr mask: 22
2015-03-16 19:36:14,642 [iNFO] I will allocate 512 records for subnet cidr mask: 23
2015-03-16 19:36:14,642 [iNFO] I will allocate 256 records for subnet cidr mask: 24
2015-03-16 19:36:14,642 [iNFO] I will allocate 1024 records for subnet cidr mask: 22
2015-03-16 19:36:14,643 [iNFO] I will allocate 2048 records for subnet cidr mask: 21
2015-03-16 19:36:14,645 [iNFO] I will allocate 512 records for subnet cidr mask: 23
2015-03-16 19:36:14,645 [iNFO] I will allocate 1024 records for subnet cidr mask: 22
2015-03-16 19:36:14,646 [iNFO] I will allocate 1024 records for subnet cidr mask: 22
2015-03-16 19:36:14,646 [iNFO] I will allocate 1024 records for subnet cidr mask: 22
2015-03-16 19:36:14,647 [iNFO] I will allocate 512 records for subnet cidr mask: 23
2015-03-16 19:36:14,647 [iNFO] I will allocate 1024 records for subnet cidr mask: 22
2015-03-16 19:36:14,648 [iNFO] I will allocate 2048 records for subnet cidr mask: 21
2015-03-16 19:36:14,650 [iNFO] We start total zerofication of counters
2015-03-16 19:36:14,650 [iNFO] We finished zerofication
2015-03-16 19:36:14,650 [iNFO] We loaded 12 subnets to our in-memory list of networks
2015-03-16 19:36:14,650 [iNFO] Total number of monitored hosts (total size of all networks): 12032
2015-03-16 19:36:14,650 [iNFO] Run banlist cleanup thread
2015-03-16 19:36:14,650 [iNFO] netflow plugin started
2015-03-16 19:50:53,003 [iNFO] Time from last run of speed_recalc is soooo big, we got ugly lags: 2

В логах вроде ничего криминального

Поделиться сообщением

Ссылка на сообщение
Поделиться на других сайтах

pavel.odintsov   

pavel.odintsov
Опубликовано · Жалоба

Не собралась нужная ревизия, попробуйте вот так:

cd /usr/src/fastnetmon
git pull
cd build 
make

 

И в текущей папке появится два бинарика - fastnetmon, fastnetmon_client.

Поделиться сообщением

Ссылка на сообщение
Поделиться на других сайтах

pavel.odintsov   

pavel.odintsov
Опубликовано · Жалоба

Захачил инсталлер, теперь его можно запускать несколько раз для апдейта.

Поделиться сообщением

Ссылка на сообщение
Поделиться на других сайтах

nukerpsych   

nukerpsych
Опубликовано (изменено) · Жалоба

Захачил инсталлер, теперь его можно запускать несколько раз для апдейта.

Огромное спасибо.

Заработало, но каунтеры flows, mbps по 0.

ППСы отрисовываются отлично.

Incoming traffic        192463 pps      0 mbps      0 flows
x.80            84492 pps      0 mbps      0 flows
x.31              6963 pps      0 mbps      0 flows
x.211            1631 pps      0 mbps      0 flows
x.100            7187 pps      0 mbps      0 flows
x.34              4392 pps      0 mbps      0 flows
x.33              5124 pps      0 mbps      0 flows
x.30              3734 pps      0 mbps      0 flows
x.65             7502 pps      0 mbps      0 flows
x.171            1249 pps      0 mbps      0 flows
x.40              689 pps      0 mbps      0 flows

Outgoing traffic        248638 pps      0 mbps      0 flows
x.80            62740 pps      0 mbps      0 flows
x.194              7483 pps      0 mbps      0 flows
x.15            7825 pps      0 mbps      0 flows
x.100           20650 pps      0 mbps      0 flows
x.130              4486 pps      0 mbps      0 flows
x.118           2031 pps      0 mbps      0 flows
x.34             10415 pps      0 mbps      0 flows
x.65            10606 pps      0 mbps      0 flows
x.79            1209 pps      0 mbps      0 flows
x.2                 719 pps      0 mbps      0 flows

 

И можно ещё одну хотелку на будущее, возможность поменять в конфиге входящий - исходящий траф местами?

У нас к примеру флоу висит на стыке между бордером и глав свичом, в итоге вход по идее исход и наоборот.

 

 

Подумал наверное глупость написал про поменять местами вход и исход.

Изменено пользователем nukerpsych

Поделиться сообщением

Ссылка на сообщение
Поделиться на других сайтах

pavel.odintsov   

pavel.odintsov
Опубликовано · Жалоба

Отлично!

 

Flow трекинг по дефалту выключен, включается спец параметром в конфиге, попробуйте вот так:

enable_connection_tracking = on

 

Входящий и исходящий детектятся по принадлежности к Вашим сеткам, а не по направлению взятому из flow - поэтому изменить - очень проблемно.

 

А вот что с трафиком в байтах, не понятно, давайте добьемся работы визуализации flow, а следом решим проблему с мегабитами.

Поделиться сообщением

Ссылка на сообщение
Поделиться на других сайтах

pavel.odintsov   

pavel.odintsov
Опубликовано · Жалоба

Если кому интересен мониторинг http флуда и его блокировка, то прошу в новый проект: https://github.com/FastVPSEestiOu/flood_shield :)

Поделиться сообщением

Ссылка на сообщение
Поделиться на других сайтах

ttttt   

ttttt
Опубликовано · Жалоба

Если кому интересен мониторинг http флуда и его блокировка, то прошу в новый проект: https://github.com/FastVPSEestiOu/flood_shield :)

Бинарники забыли в .gitignore добавить, и Kazuho Oku вообще-то не тим, а то стоит "Picohttpparser team" (не придираюсь, просто знаю человека, в глаза бросилось).

Поделиться сообщением

Ссылка на сообщение
Поделиться на других сайтах

pavel.odintsov   

pavel.odintsov
Опубликовано · Жалоба

За бинарики спасибо - вычистил :) Ну, в репо их много стоит - Kazuho Oku, Tokuhiro Matsuno, Daisuke Murase, Shigeo Mitsunari. Упомянул явно) Спасибо!

Поделиться сообщением

Ссылка на сообщение
Поделиться на других сайтах

pavel.odintsov   

pavel.odintsov
Опубликовано · Жалоба

Всем привет!

 

Сделал порт для FreeBSD, просьба протестировать и раскритиковать :)

 

Критиковать тут: https://github.com/FastVPSEestiOu/fastnetmon/tree/master/src/FreeBSD_port

 

Тестировать так (boost лучше ставить бинарный, ибо собирается он целую вечность):

pkg install cmake git ncurses boost-all log4cpp
/etc/rc.d/ldconfig restart

mkdir /usr/local/src
cd /usr/local/src
git clone https://github.com/FastVPSEestiOu/fastnetmon.git
cd fastnetmon/src/FreeBSD_port/
make makesum
make install

Поделиться сообщением

Ссылка на сообщение
Поделиться на других сайтах

nukerpsych   

nukerpsych
Опубликовано · Жалоба

Павел огромное спасибо за поддержку IPFIX, и вообще помошь с вашей программой.

Поделиться сообщением

Ссылка на сообщение
Поделиться на других сайтах

pavel.odintsov   

pavel.odintsov
Опубликовано · Жалоба

Всегда пожалуйста :)

Поделиться сообщением

Ссылка на сообщение
Поделиться на других сайтах

pavel.odintsov   

pavel.odintsov
Опубликовано · Жалоба

Внимание! Внимание! Только сегодня! Только у нас! Безгеморройная установка FastNetMon из RPM пакета на CentOS 6 и 7: https://github.com/FastVPSEestiOu/fastnetmon/blob/master/docs/INSTALL_RPM_PACKAGES.md

 

Если Вы еще не попробовали наш софт, спешите - установка за две минуты! !:)

Поделиться сообщением

Ссылка на сообщение
Поделиться на других сайтах

SyJet   

SyJet
Опубликовано (изменено) · Жалоба

Внимание! Внимание! Только сегодня! Только у нас! Безгеморройная установка FastNetMon из RPM пакета на CentOS 6 и 7: https://github.com/FastVPSEestiOu/fastnetmon/blob/master/docs/INSTALL_RPM_PACKAGES.md

 

Если Вы еще не попробовали наш софт, спешите - установка за две минуты! !:)

Еще немного и инсталятор универсальный будет? ;)

Изменено пользователем SyJet

Поделиться сообщением

Ссылка на сообщение
Поделиться на других сайтах

pavel.odintsov   

pavel.odintsov
Опубликовано · Жалоба

Есть такой шанс :) Но PF_RING сильно портит затею отсуствием пакетов)

Поделиться сообщением

Ссылка на сообщение
Поделиться на других сайтах

SyJet   

SyJet
Опубликовано · Жалоба

Есть такой шанс :) Но PF_RING сильно портит затею отсуствием пакетов)

Тыж впроде на нетмап переходить собирался?

Поделиться сообщением

Ссылка на сообщение
Поделиться на других сайтах

pavel.odintsov   

pavel.odintsov
Опубликовано · Жалоба

И netmap и PF_RING поддерживаются :) Netmap - штука крайне геморройная на линуксе и требует пересборки патчинга дров сетевых, а это не под силу обычному кастомеру зачастую. Поэтому для Linux PF_RING штука более предпочтительная.

Поделиться сообщением

Ссылка на сообщение
Поделиться на других сайтах

Иванов Денис   

Иванов Денис
Опубликовано · Жалоба

Всем доброго времени суток!

Автору отдельное спасибо за данную утилиту! :)

 

Пожалуйста, поделитесь, кто какие значения threshold_pps и average_calculation_time выставляет для клиентов со 100 Мбит'ными тарифами?

У меня значения по умолчанию (threshold_pps=2000, average_calculation_time=5), и сегодня произошло ложное срабатывание, при кратковременном всплеске PPS.

К сожалению в тот момент я выключил коллектор статистики, поэтому точная продолжительность всплеска мне неизвестна. Знаю только, что меньше 5 минут.

 

На всякий случай выложу отчёт от fastnetmon:

 

 

IP: XXX.XXX.XXX.XXX
Initial attack power: 23810 packets per second
Peak attack power: 23810 packets per second
Attack direction: incoming
Attack protocol: udp
Total incoming traffic: 266 mbps
Total outgoing traffic: 0 mbps
Total incoming pps: 23810 packets per second
Total outgoing pps: 0 packets per second
Total incoming flows: 0 flows per second
Total outgoing flows: 0 flows per second
Average incoming traffic: 266 mbps
Average outgoing traffic: 0 mbps
Average incoming pps: 23810 packets per second
Average outgoing pps: 0 packets per second
Average incoming flows: 0 flows per second
Average outgoing flows: 0 flows per second
Incoming tcp traffic: 17 mbps
Outgoing tcp traffic: 0 mbps
Incoming tcp pps: 1395 packets per second
Outgoing tcp pps: 0 packets per second
Incoming udp traffic: 1096 mbps
Outgoing udp traffic: 0 mbps
Incoming udp pps: 98012 packets per second
Outgoing udp pps: 0 packets per second
Incoming icmp traffic: 0 mbps
Outgoing icmp traffic: 0 mbps
Incoming icmp pps: 7 packets per second
Outgoing icmp pps: 0 packets per second


2015-03-25 16:30:01.814492 192.162.152.78:16494 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1514 bytes sample ratio: 1  
2015-03-25 16:30:01.815024 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.815219 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.815276 80.245.118.165:45786 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1480 bytes sample ratio: 1  
2015-03-25 16:30:01.815417 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.815609 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.815804 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.815810 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.815999 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.816664 192.162.152.78:16494 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1514 bytes sample ratio: 1  
2015-03-25 16:30:01.817387 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.817569 192.162.152.78:16494 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1514 bytes sample ratio: 1  
2015-03-25 16:30:01.817582 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.817755 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.818553 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.818570 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.818754 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.818759 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.818943 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.818949 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.819151 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.819672 192.162.152.78:16494 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1514 bytes sample ratio: 1  
2015-03-25 16:30:01.820332 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.820520 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.820526 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.820532 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.820638 192.162.152.78:16494 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1514 bytes sample ratio: 1  
2015-03-25 16:30:01.820727 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.820732 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.820917 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.820923 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.821075 80.245.118.165:45786 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1480 bytes sample ratio: 1  
2015-03-25 16:30:01.822279 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.822474 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.822570 192.162.152.78:16494 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1514 bytes sample ratio: 1  
2015-03-25 16:30:01.822670 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.822677 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.822699 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.823563 192.162.152.78:16494 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1514 bytes sample ratio: 1  
2015-03-25 16:30:01.824623 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.824972 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.825173 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.825364 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.825371 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.825564 192.162.152.78:16494 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1514 bytes sample ratio: 1  
2015-03-25 16:30:01.825566 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.825569 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.825753 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.825806 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.825947 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.825994 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.826142 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.826146 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.826149 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.826333 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.826337 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.826341 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.826587 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.826594 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.826621 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.826627 192.162.152.78:16494 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1514 bytes sample ratio: 1  
2015-03-25 16:30:01.826636 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.826670 80.245.118.165:45786 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1480 bytes sample ratio: 1  
2015-03-25 16:30:01.826759 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.826766 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.826924 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.827711 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.827715 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.827906 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.828067 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.828087 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.828102 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.828231 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.828353 192.162.152.78:16494 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1514 bytes sample ratio: 1  
2015-03-25 16:30:01.829396 192.162.152.78:16494 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1514 bytes sample ratio: 1  
2015-03-25 16:30:01.830620 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.830808 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.830994 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.831010 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.831150 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.831345 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.831539 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.831585 192.162.152.78:16494 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1514 bytes sample ratio: 1  
2015-03-25 16:30:01.831717 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.831721 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.831930 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.832120 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.832323 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.832327 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.832482 80.245.118.165:45786 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1480 bytes sample ratio: 1  
2015-03-25 16:30:01.832754 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.832991 192.162.152.78:16494 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1514 bytes sample ratio: 1  
2015-03-25 16:30:01.833000 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.833017 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.833201 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.833327 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.833528 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.833715 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.834039 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.834058 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.834078 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.834094 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.834100 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.834348 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.834380 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.834389 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.834398 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.834531 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.834718 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.834898 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.834899 192.162.152.78:16494 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1514 bytes sample ratio: 1  
2015-03-25 16:30:01.835099 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.835284 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.835288 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.835296 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.835512 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.835520 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.835526 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.835533 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.835546 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.835678 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.835904 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.836094 192.162.152.78:16494 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1514 bytes sample ratio: 1  
2015-03-25 16:30:01.836100 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.836148 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.836489 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.837133 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.837141 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.837301 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.837310 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.837495 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.837501 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.837614 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.837640 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.837653 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.837844 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.837854 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.837933 192.162.152.78:16494 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1514 bytes sample ratio: 1  
2015-03-25 16:30:01.838040 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.838040 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.838053 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.838063 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.838064 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.838078 80.245.118.165:45786 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1480 bytes sample ratio: 1  
2015-03-25 16:30:01.838200 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.838233 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.838423 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.838423 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.838436 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.838651 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.838651 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.838661 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.838671 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.838692 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.838853 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.839038 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.839064 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.839247 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.839257 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.839354 192.162.152.78:16494 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1514 bytes sample ratio: 1  
2015-03-25 16:30:01.839429 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.839623 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.839633 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.839653 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.839674 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.839822 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.840207 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.840409 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.840566 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.840790 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.840798 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.840988 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.841220 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.841245 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.841403 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.841547 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.841775 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.841783 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.841793 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.841965 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.841972 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.841979 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.842125 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.842130 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.842134 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.842329 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.842334 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.842338 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.842521 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.842525 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.842534 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.843158 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.843179 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.843413 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.843423 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.843436 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.843444 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.843778 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.843798 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.843808 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.843818 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.843844 80.245.118.165:45786 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1480 bytes sample ratio: 1  
2015-03-25 16:30:01.843919 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.843927 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.843940 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.844100 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.844107 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.844114 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.844123 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.844149 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.844322 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.844486 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.844655 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.844943 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.844949 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.844958 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.845113 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.845120 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.845331 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.845448 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.845629 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.845643 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.845940 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.845948 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.845955 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.846078 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.846312 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.846344 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.846355 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.846467 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.846680 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.846699 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.847086 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.847260 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.847267 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.847302 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.847443 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.847633 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.848251 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.848258 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.848337 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.848421 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.848436 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.848476 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.848573 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.848582 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.848586 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.848687 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.848691 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.848757 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.848769 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.848807 80.245.118.165:45786 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1480 bytes sample ratio: 1  
2015-03-25 16:30:01.848864 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.848896 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.848951 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.849085 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.849202 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.849209 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.849273 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.849281 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.849385 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.849400 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.849459 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.849481 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.849538 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.849547 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.849551 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.849609 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.849690 192.162.152.78:16494 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1514 bytes sample ratio: 1  
2015-03-25 16:30:01.849728 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.849733 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.849804 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.849813 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.849924 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.849929 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.849998 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.850117 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.850132 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.850191 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.850312 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.850317 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.850321 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.851310 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.851509 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.851515 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.851520 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.851674 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.851678 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.851799 192.162.152.78:16494 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1514 bytes sample ratio: 1  
2015-03-25 16:30:01.852082 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.852088 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.852125 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.852133 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.852305 192.162.152.78:16494 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1514 bytes sample ratio: 1  
2015-03-25 16:30:01.852306 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.852310 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.852314 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.852519 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.852913 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.853126 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.854481 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.854494 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.854529 80.245.118.165:45786 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1480 bytes sample ratio: 1  
2015-03-25 16:30:01.854614 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.854683 192.162.152.78:16494 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1514 bytes sample ratio: 1  
2015-03-25 16:30:01.854809 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.855598 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.855688 192.162.152.78:16494 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1514 bytes sample ratio: 1  
2015-03-25 16:30:01.855784 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.857468 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.857628 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.858683 192.162.152.78:16494 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1514 bytes sample ratio: 1  
2015-03-25 16:30:01.860691 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.860707 80.245.118.165:45786 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1480 bytes sample ratio: 1  
2015-03-25 16:30:01.861020 192.162.152.78:16494 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1514 bytes sample ratio: 1  
2015-03-25 16:30:01.861990 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.862160 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.862647 192.162.152.78:16494 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1514 bytes sample ratio: 1  
2015-03-25 16:30:01.863868 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.863879 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.864295 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.864325 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.864575 192.162.152.78:16494 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1514 bytes sample ratio: 1  
2015-03-25 16:30:01.866312 80.245.118.165:45786 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1480 bytes sample ratio: 1  
2015-03-25 16:30:01.867155 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.867200 192.162.152.78:16494 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1514 bytes sample ratio: 1  
2015-03-25 16:30:01.867266 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.867514 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.867521 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.867531 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.867549 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.867832 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.868054 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.868309 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.868493 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.868717 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.868908 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.869190 89.16.120.83:12841 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1431 bytes sample ratio: 1  
2015-03-25 16:30:01.869272 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.869453 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.869726 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.869738 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.869762 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.869780 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.869849 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.870051 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.870059 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.870066 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.870409 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.870418 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.870428 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.870603 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.870819 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.870830 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.870840 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.871021 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.871190 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.871417 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.871424 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.871788 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.871798 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.872000 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.872211 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.872226 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.872441 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.872674 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.872733 80.245.118.165:45786 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1480 bytes sample ratio: 1  
2015-03-25 16:30:01.872874 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.872882 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.873071 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.873252 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.873457 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.873485 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.873506 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.873614 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.873868 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.874228 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.874427 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.874501 192.162.152.78:16494 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1514 bytes sample ratio: 1  
2015-03-25 16:30:01.874608 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.874803 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.874810 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.874851 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.874862 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.875002 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 495 bytes sample ratio: 1  
2015-03-25 16:30:01.875010 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.875206 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.875439 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.875446 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.875485 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.875831 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.875847 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.875858 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.875869 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.875879 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.876018 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.876200 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.876387 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.876394 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.876558 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.876725 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.876736 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.876952 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.876959 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.877149 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.877158 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.877346 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.877378 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.877545 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.877555 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.877565 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.877732 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.877744 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.877942 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.877950 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.877957 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.878125 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.878135 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.878145 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.878307 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.878520 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.878758 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.878766 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.878872 80.245.118.165:45786 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1480 bytes sample ratio: 1  
2015-03-25 16:30:01.878930 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.879112 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.879285 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.879306 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.879498 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.879854 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.879872 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.879894 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.879999 192.162.152.78:16494 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1514 bytes sample ratio: 1  
2015-03-25 16:30:01.880080 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.880091 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.880308 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.880316 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.880492 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.880687 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.880701 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.880708 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.880721 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.880827 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.880849 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.881047 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.881234 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.881506 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.881603 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.881623 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.881735 37.213.119.200:26243 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 62 bytes sample ratio: 1  
2015-03-25 16:30:01.881795 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.881806 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.882040 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.882228 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.882437 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.882441 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.882460 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.882463 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.882468 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.882633 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.882834 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.882846 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.883029 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.883033 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.883041 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.883397 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.883597 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.883609 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.883680 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.883688 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.883757 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.883761 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.883872 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.883887 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.883890 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.883952 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.883956 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.883964 5.53.29.208:17122 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.884074 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.884081 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.884094 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.884476 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.884497 80.245.118.165:45786 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1480 bytes sample ratio: 1  
2015-03-25 16:30:01.884541 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.884548 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.884668 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.884735 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.884934 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.885461 109.248.83.88:36544 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.885869 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.886024 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.886032 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.886038 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.886234 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.886420 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.886627 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.886646 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.886654 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.886658 176.194.10.183:11015 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  
2015-03-25 16:30:01.886701 87.255.75.242:22381 > XXX.XXX.XXX.XXX:17527 protocol: udp packets: 1 size: 1467 bytes sample ratio: 1  

We got more packets (500 from 500) for protocol: udp

 

 

Поделиться сообщением

Ссылка на сообщение
Поделиться на других сайтах

pavel.odintsov   

pavel.odintsov
Опубликовано · Жалоба

Спасибо за использование :) average_calculation_time лучше не трогать и держать в районе 10-20 секунд, как раз такое усреднение дает возможность не замечать определенные всплески трафика и блокировать лишь только тогда, когда реально существует угроза железу.

 

А вот по pps - вопрос сложный, мы держали для VPS клиентов (с полосой 30-40) его в районе 50 000 pps, ложных срабатываний не было вовсе.

 

Я думаю, алгоритм нужно взять следующий. Взять минимальный mtu в сети, это 1496, то для 100 000 килобит (100 мегабит) деленных на 1.5 килобита, то выйдет около 65000 пакетов чтобы забить весь канал. Если пользователь будет что-то качать на полной скорости то будет примерно такая цифра и выйдет. Чтобы нивелировать всякие протоколы, которые могут плодить мелкие пакеты, то 100 000 pps будет оптимальным порогом. Но при это нужно также следить за полосой, которую выедает клиент, если будет атака на канал, пакетов будет мало, а вот полосы - за 200 и более мегабит.

 

Мы сами на практике считали порог так - создавали синтетическую атаку и смотрели, когда начинается деградация сервиса у клиентов (разумеется, в тестовой среде) и выставляем это значение как крайний порог для срабатывания.

 

Кстати, дамп меня смущает :) Что это за трафик? На UDP усиление не похоже - порты нестандартные, в усилении бы светлись 53/123/1900.

Поделиться сообщением

Ссылка на сообщение
Поделиться на других сайтах

purecopper   

purecopper
Опубликовано · Жалоба

pavel.odintsov

Павел приветствую.

Столкнулись с проблемой - в логах /var/log/fastnetmon_attacks дата всегда стоит одна и та же: 1970-01-01 03:00:00.000000

Поделиться сообщением

Ссылка на сообщение
Поделиться на других сайтах

pavel.odintsov   

pavel.odintsov
Опубликовано · Жалоба

Какой режим захвата трафика?

Поделиться сообщением

Ссылка на сообщение
Поделиться на других сайтах

Иванов Денис   

Иванов Денис
Опубликовано · Жалоба

Павел, спасибо!

 

Кстати, дамп меня смущает :) Что это за трафик? На UDP усиление не похоже - порты нестандартные, в усилении бы светлись 53/123/1900.

Это трафик с машины, на которую зеркалируется только входящий трафик для определённой группы клиентов.

Наверное поэтому дамп выглядит необычно. Ну и IP клиента я в нём заменил на XXX.XXX.XXX.XXX.

Поделиться сообщением

Ссылка на сообщение
Поделиться на других сайтах

pavel.odintsov   

pavel.odintsov
Опубликовано · Жалоба

А что за сервис по этим портам бегает?

Поделиться сообщением

Ссылка на сообщение
Поделиться на других сайтах

pavel.odintsov   

pavel.odintsov
Опубликовано · Жалоба

sFlow

 

Боюсь, что оно для sFLOW сейчас не обрабатывается вообще.

 

Можете выслать pcap дамп на порт sFLOW минут за 5-10 силами tcpdump -w 'dst port 6343' на pavel.odintsov@gmail.com?

Поделиться сообщением

Ссылка на сообщение
Поделиться на других сайтах

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Гость
Ответить в тему...

×   Вставлено в виде отформатированного текста.   Вставить в виде обычного текста

  Разрешено не более 75 смайлов.

×   Ваша ссылка была автоматически встроена.   Отобразить как ссылку

×   Ваш предыдущий контент был восстановлен.   Очистить редактор

×   Вы не можете вставить изображения напрямую. Загрузите или вставьте изображения по ссылке.

×
Перейти к списку тем Программное обеспечение, биллинг и *unix системы