This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

PPPoE connection on XGS 2100 SFOS 19.0.0 GA-Build31 - slow page loading

Carlo 4 months ago

Hi,

I have problem with pppoe connection which I don't know how to solve

MTU 1492

MSS 1452

no web policy

no ips

no DoS

tried changing port (on port 2 connection was terrible)

Problem is that pages are loading slow, after I press "enter" on url nothing happens for 10 seconds and then it start to looking for page. I checked on multiple pc's, diferent browsers and directly plugged to lan port (without other clients). Internet speed is about 200 mbps faster on ISP equipment. Behind XG I get around 350 download and 200 upload.

Maybe this has to do something with dns but I don't know how to troubleshoot.

Thanks.

Carlo

This thread was automatically locked due to age.

Top Replies

LuCar Toni 4 months ago +1 suggested

A good indicator of troubleshooting is developer mode of your browser. Press F12 and check the Network tab. There you should find an information about delays.

Parents

0 Carlo 4 months ago

When I turn off DNS service browsing speed on clients improves on clients
Cancel
Vote Up 0 Vote Down

Cancel
0 Thomas_XG 4 months ago in reply to Carlo

Please show us your DNS settings

_______________________________________________________

Sophos SG 210 with Sophos XG Home - 19.5 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Thomas_XG 4 months ago in reply to Bharat J

Hi Bharat,

the screenshot was from my sophos not Carlo's one

_______________________________________________________

Sophos SG 210 with Sophos XG Home - 19.5 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Carlo 4 months ago in reply to Bharat J

Thank you. We tried all possible combinations for DNS through GUI but nothing seems to work.

I need support from Sophos and ISP for this one.
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni 4 months ago in reply to Carlo

In the end, it is easy to find out, who is responsible for this issue.

Simply do a BPF string in Packet Capture on Diagnostic - Webadmin with: port 53

Then filter for your PPPoE Interface.

If you see packets leaving the interface with the correct IP to the internet (DNS Server), the ISP is responsible for this issue.

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 Carlo 4 months ago in reply to LuCar Toni

Can you please share correct syntax
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni 4 months ago in reply to Carlo

port 53

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 Carlo 4 months ago in reply to LuCar Toni

I don't know how to read that
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni 4 months ago in reply to Carlo

You read it from bottom to top.

So it looks fine from a perspective of getting a response. The question is, what the responsive contains.

Next step: Go to the Advanced shell (SSH - Option 5 and Option 3).

Then perform the following:

tcpdump -ni Port2_ppp port 53

You should see the requests.

14:43:55.259292 PortB, IN: IP 168.63.129.16.53 > 192.168.0.4.6945: 59033 3/0/0 A 52.48.198.35, A 34.255.238.223, A 34.248.210.158 (136)

That would be a valid response.

Please post a snippet from the Advanced Shell.

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel

0 Carlo 4 months ago in reply to LuCar Toni

XGS2100_RL01_SFOS 19.0.0 GA-Build317# tcpdump -ni Port2_ppp port 53
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on Port2_ppp, link-type LINUX_SLL (Linux cooked v1), capture size 262144 bytes
14:45:34.868822 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.46776 > 8.8.8.8.53: 36884+ A? www4.bing.com. (31)
14:45:35.646632 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.41362 > 4.2.2.2.53: 23225+ A? login.microsoftonline.com. (43)
14:45:35.774147 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.41362: 23225 13/13/13 CNAME ak.privatelink.msidentity.com., CNAME www.tm.ak.prd.aadg.akadns.net., A 20.190.159.1, A 20.190.159.3, A 20.190.159.22, A 20.190.159.19, A 20.190.159.74, A 40.126.31.72, A 40.126.31.70, A 40.126.31.64, A 20.190.159.72, A 20.190.159.5, A 20.190.159.69 (718)
14:45:36.526453 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.7200 > 8.8.8.8.53: 21982+ A? www.youtube.com. (33)
14:45:36.526492 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.40443 > 8.8.8.8.53: 38953+ A? login.windows.net. (35)
14:45:36.649795 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.7200: 21982 8/13/13 CNAME youtube-ui.l.google.com., A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 142.251.39.14 (598)
14:45:36.654730 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.40443: 38953 15/13/13 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.trafficmanager.net., A 20.190.159.22, A 40.126.31.64, A 20.190.159.1, A 20.190.159.69, A 40.126.31.68, A 40.126.31.70, A 20.190.159.3, A 20.190.159.72, A 20.190.159.5, A 20.190.159.19, A 40.126.31.72, A 20.190.159.74 (756)
14:45:37.888640 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.13499 > 4.2.2.2.53: 15040+ A? www4.bing.com. (31)
14:45:37.991261 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.13499: 15040 5/13/13 CNAME www4-www4.bing.com.trafficmanager.net., CNAME www4.bing.com.edgekey.net., CNAME e86303.dscx.akamaiedge.net., A 2.23.97.241, A 2.23.97.178 (603)
14:45:39.547224 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.37912 > 4.2.2.2.53: 59625+ A? www.youtube.com. (33)
14:45:39.547272 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.27265 > 4.2.2.2.53: 1802+ A? login.windows.net. (35)
14:45:39.572067 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.37912: 59625 8/13/13 CNAME youtube-ui.l.google.com., A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 142.251.39.14, A 142.251.39.46, A 142.251.39.78 (598)
14:45:39.576643 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.27265: 1802 15/13/13 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.trafficmanager.net., A 40.126.31.68, A 40.126.31.70, A 20.190.159.3, A 20.190.159.72, A 20.190.159.5, A 20.190.159.19, A 40.126.31.72, A 20.190.159.74, A 20.190.159.22, A 40.126.31.64, A 20.190.159.1, A 20.190.159.69 (756)
14:45:39.990110 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.25728 > 1.0.0.1.53: 35522+ A? www.bing.com. (30)
14:45:40.016627 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.25728: 35522 5/13/13 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (611)
^Ctcpdump: Unable to write output: Interrupted system call
XGS2100_RL01_SFOS 19.0.0 GA-Build317#

0 Carlo 4 months ago in reply to LuCar Toni

Little bit longer running example

XGS2100_RL01_SFOS 19.0.0 GA-Build317# tcpdump -ni Port2_ppp port 53
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on Port2_ppp, link-type LINUX_SLL (Linux cooked v1), capture size 262144 bytes
14:53:22.872434 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.39519 > 4.2.2.2.53: 16619+ A? www.bing.com. (30)
14:53:22.981078 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.39519: 16619 5/13/13 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (611)
14:53:23.995275 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.45190 > 1.0.0.1.53: 54422+ PTR? b.8.4.0.c.b.e.f.f.f.c.1.a.5.e.7.0.0.0.0.0.0.0.0.0.0.0.0.0.8.e.f.ip6.arpa. (90)
14:53:24.013764 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.51891 > 1.0.0.1.53: 54714+ A? www.google.gr. (31)
14:53:24.091997 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.14329 > 8.8.8.8.53: 31412+ A? wp.m.bing.com. (31)
14:53:24.135995 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.32350 > 1.0.0.1.53: 50895+ A? 4.sophosxl.net. (32)
14:53:24.292061 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.45190: 54422 NXDomain 0/0/0 (90)
14:53:24.351563 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.14329: 31412 5/13/13 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (612)
14:53:24.358264 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.51891: 54714 1/13/13 A 142.250.180.227 (466)
14:53:24.410458 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.32350: 50895 8/13/13 A 3.248.133.40, A 3.251.5.30, A 34.240.170.13, A 34.252.30.182, A 34.241.111.122, A 52.30.153.100, A 52.209.185.252, A 52.212.172.142 (576)
14:53:24.651907 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.14771 > 192.228.79.201.53: 65284 A? login.microsoftonline.com. (43)
14:53:24.667777 Port2_ppp, IN: IP 192.228.79.201.53 > XXX.XXX.XXX.XXX.14771: 65284 26/13/13 CNAME ak.privatelink.msidentity.com., CNAME www.tm.ak.prd.aadg.trafficmanager.net., A 20.190.159.3, A 40.126.31.64, A 20.190.159.72, A 20.190.159.70, A 20.190.159.19, A 20.190.159.22, A 40.126.31.70, A 20.190.159.1, A 40.126.32.69, A 40.126.32.73, A 20.190.160.15, A 20.190.160.13, A 20.190.160.12, A 40.126.32.132, A 40.126.32.135, A 40.126.32.67, A 20.190.159.5, A 20.190.159.69, A 40.126.31.72, A 40.126.32.75, A 40.126.32.139, A 40.126.32.137, A 20.190.160.23, A 20.190.160.21 (934)
14:53:24.909200 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.41149 > 198.41.0.4.53: 63381 A? wp.m.bing.com. (31)
14:53:24.913943 Port2_ppp, IN: IP 198.41.0.4.53 > XXX.XXX.XXX.XXX.41149: 63381 5/13/13 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (612)
14:53:25.049585 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.5550 > 192.112.36.4.53: 725 A? xg-up2date-patterns.sophosupd.com. (51)
14:53:25.059052 Port2_ppp, IN: IP 192.112.36.4.53 > XXX.XXX.XXX.XXX.5550: 725 3/13/13 CNAME xg-up2date-patterns.sophosupd.com.edgekey.net., CNAME e13687.d.akamaiedge.net., A 23.205.49.159 (576)
14:53:25.072767 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.63531 > 1.0.0.1.53: 49485+ A? www.google.com.eg. (35)
14:53:25.141562 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.63531: 49485 1/13/13 A 142.251.39.35 (470)
14:53:25.212836 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.57451 > 4.2.2.2.53: 230+ A? www2.bing.com. (31)
14:53:25.290023 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.57451: 230 5/13/13 CNAME www2-www2.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (614)
14:53:25.549441 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.40701 > 192.203.230.10.53: 19769 A? www.youtube.com. (33)
14:53:25.596795 Port2_ppp, IN: IP 192.203.230.10.53 > XXX.XXX.XXX.XXX.40701: 19769 9/13/13 CNAME youtube-ui.l.google.com., A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14 (614)
14:53:26.404388 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.42370 > 1.0.0.1.53: 2301+ A? xg-up2date-patterns.sophosupd.com. (51)
14:53:26.404478 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.13549 > 1.0.0.1.53: 52811+ AAAA? xg-up2date-patterns.sophosupd.com. (51)
14:53:27.096404 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.48555 > 1.0.0.1.53: 4164+ A? www.google.dz. (31)
14:53:27.096456 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.56975 > 4.2.2.2.53: 17370+ A? wp.m.bing.com. (31)
14:53:27.155653 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.64975 > 8.8.8.8.53: 26761+ A? 4.sophosxl.net. (32)
14:53:27.363688 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.56975: 17370 5/13/13 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (612)
14:53:27.369062 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.48555: 4164 1/13/13 A 172.217.19.99 (466)
14:53:27.711354 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.39007 > 193.0.14.129.53: 8756 A? login.windows.net. (35)
14:53:27.820376 Port2_ppp, IN: IP 193.0.14.129.53 > XXX.XXX.XXX.XXX.39007: 8756 23/13/21 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.trafficmanager.net., A 40.126.31.64, A 40.126.32.137, A 40.126.32.75, A 40.126.32.67, A 40.126.31.68, A 20.190.159.70, A 20.190.159.72, A 20.190.160.23, A 20.190.159.5, A 20.190.159.69, A 20.190.159.1, A 20.190.159.19, A 40.126.31.72, A 20.190.159.22, A 40.126.31.70, A 20.190.160.15, A 20.190.159.3, A 20.190.160.21, A 40.126.32.132, A 20.190.160.13 (1037)
14:53:28.055961 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.32781 > 192.36.148.17.53: 8030 A? xg-up2date-patterns.sophosupd.com. (51)
14:53:28.155673 Port2_ppp, IN: IP 192.36.148.17.53 > XXX.XXX.XXX.XXX.32781: 8030 3/13/13 CNAME xg-up2date-patterns.sophosupd.com.edgekey.net., CNAME e13687.d.akamaiedge.net., A 23.35.229.161 (576)
14:53:29.037384 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.64500 > 1.0.0.1.53: 14+ A? www.google.com.pe. (35)
14:53:29.037466 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.48020 > 1.0.0.1.53: 52747+ A? www.google.com.vc. (35)
14:53:29.112582 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.64500: 14 1/13/13 A 142.251.39.3 (470)
14:53:29.148382 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.48020: 52747 1/13/13 A 142.251.39.3 (470)
14:53:29.423916 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.2681 > 8.8.8.8.53: 7393+ A? xg-up2date-patterns.sophosupd.com. (51)
14:53:29.423959 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.61511 > 8.8.8.8.53: 17538+ AAAA? xg-up2date-patterns.sophosupd.com. (51)
14:53:30.175623 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.4015 > 4.2.2.2.53: 32296+ A? 4.sophosxl.net. (32)
14:53:30.184299 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.4015: 32296 8/13/13 A 3.251.5.30, A 34.240.170.13, A 34.252.30.182, A 34.241.111.122, A 52.30.153.100, A 52.209.185.252, A 52.212.172.142, A 3.248.133.40 (576)
14:53:31.479871 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.47461 > 1.0.0.1.53: 60319+ A? www.google.co.ug. (34)
14:53:31.522799 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.47461: 60319 1/13/13 A 142.251.39.35 (469)
14:53:32.444264 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.19779 > 4.2.2.2.53: 21805+ A? xg-up2date-patterns.sophosupd.com. (51)
14:53:32.444302 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.32700 > 4.2.2.2.53: 10604+ AAAA? xg-up2date-patterns.sophosupd.com. (51)
14:53:32.476493 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.19779: 21805 3/13/13 CNAME xg-up2date-patterns.sophosupd.com.edgekey.net., CNAME e13687.d.akamaiedge.net., A 23.35.229.161 (576)
14:53:32.511750 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.32700: 10604 0/13/13 (470)
14:53:32.716020 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.60336 > 128.63.2.53.53: 38053 A? www.bing.com. (30)
14:53:32.765067 Port2_ppp, IN: IP 128.63.2.53.53 > XXX.XXX.XXX.XXX.60336: 38053 5/13/13 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (611)
14:53:33.049570 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.1945 > 199.7.83.42.53: 10233 A? www4.bing.com. (31)
14:53:33.064904 Port2_ppp, IN: IP 199.7.83.42.53 > XXX.XXX.XXX.XXX.1945: 10233 5/13/13 CNAME www4-www4.bing.com.trafficmanager.net., CNAME www4.bing.com.edgekey.net., CNAME e86303.dscx.akamaiedge.net., A 2.22.89.159, A 2.22.89.186 (603)
14:53:33.313512 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.49283 > 1.0.0.1.53: 37245+ A? www.google.com.ni. (35)
14:53:33.412301 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.49283: 37245 1/13/13 A 172.217.19.99 (470)
14:53:34.830706 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.42534 > 199.7.91.13.53: 63071 A? www2.bing.com. (31)
14:53:34.932980 Port2_ppp, IN: IP 199.7.91.13.53 > XXX.XXX.XXX.XXX.42534: 63071 5/13/13 CNAME www2-www2.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (614)
14:53:35.037183 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.29620 > 1.0.0.1.53: 53390+ A? www.google.cm. (31)
14:53:35.122282 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.29620: 53390 1/13/13 A 142.250.180.195 (466)
14:53:35.929586 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.60753 > 202.12.27.33.53: 60434 A? wp.m.bing.com. (31)
14:53:35.934006 Port2_ppp, IN: IP 202.12.27.33.53 > XXX.XXX.XXX.XXX.60753: 60434 5/13/13 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (612)
14:53:36.157662 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.44912 > 1.0.0.1.53: 5197+ A? www.google.td. (31)
14:53:36.227834 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.44912: 5197 1/13/13 A 142.251.39.35 (466)
14:53:38.080877 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.49244 > 1.0.0.1.53: 46411+ A? www.google.me. (31)
14:53:38.207797 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.49244: 46411 1/13/13 A 172.217.20.3 (466)
14:53:39.077003 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.65509 > 192.58.128.30.53: 13264 A? xg-up2date-patterns.sophosupd.com. (51)
14:53:39.081859 Port2_ppp, IN: IP 192.58.128.30.53 > XXX.XXX.XXX.XXX.65509: 13264 3/13/13 CNAME xg-up2date-patterns.sophosupd.com.edgekey.net., CNAME e13687.d.akamaiedge.net., A 23.35.229.161 (576)
14:53:40.031866 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.55285 > 1.0.0.1.53: 5437+ A? www.google.pt. (31)
14:53:40.031983 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.56973 > 1.0.0.1.53: 17177+ A? www.google.co.zm. (34)
14:53:40.088800 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.55285: 5437 1/13/13 A 142.251.39.3 (466)
14:53:40.090703 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.56973: 17177 1/13/13 A 142.251.39.67 (469)
14:53:44.072211 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.53261 > 192.33.4.12.53: 60209 A? www4.bing.com. (31)
14:53:44.159450 Port2_ppp, IN: IP 192.33.4.12.53 > XXX.XXX.XXX.XXX.53261: 60209 5/13/13 CNAME www4-www4.bing.com.trafficmanager.net., CNAME www4.bing.com.edgekey.net., CNAME e86303.dscx.akamaiedge.net., A 2.23.97.178, A 2.23.97.241 (603)
14:53:45.737408 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.7836 > 1.0.0.1.53: 3178+ A? www.youtube-nocookie.com. (42)
14:53:46.948898 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.15564 > 192.112.36.4.53: 21657 A? wp.m.bing.com. (31)
14:53:46.959023 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.20560 > 1.0.0.1.53: 63654+ A? login.microsoft.com. (37)
14:53:46.997991 Port2_ppp, IN: IP 192.112.36.4.53 > XXX.XXX.XXX.XXX.15564: 21657 5/13/13 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (612)
14:53:47.007334 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.20560: 63654 23/13/13 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.trafficmanager.net., A 20.190.159.3, A 20.190.160.21, A 40.126.32.132, A 20.190.160.13, A 40.126.31.64, A 40.126.32.137, A 40.126.32.75, A 40.126.32.67, A 40.126.31.68, A 20.190.159.70, A 20.190.159.72, A 20.190.160.23, A 20.190.159.5, A 20.190.159.69, A 20.190.159.1, A 20.190.159.19, A 40.126.31.72, A 20.190.159.22, A 40.126.31.70, A 20.190.160.15 (886)
14:53:47.059341 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.19144 > 1.0.0.1.53: 32644+ A? www.google.com.bn. (35)
14:53:47.223466 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.19144: 32644 1/13/13 A 142.250.201.195 (470)
14:53:48.758394 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.50688 > 8.8.8.8.53: 7836+ A? www.youtube-nocookie.com. (42)
14:53:48.892946 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.50688: 7836 9/13/13 CNAME youtube-ui.l.google.com., A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110 (623)
14:53:49.978593 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.2195 > 1.0.0.1.53: 13393+ A? login.microsoftonline.com. (43)
14:53:49.978700 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.28026 > 8.8.8.8.53: 36555+ A? login.microsoft.com. (37)
14:53:49.995178 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.2195: 13393 26/13/13 CNAME ak.privatelink.msidentity.com., CNAME www.tm.ak.prd.aadg.trafficmanager.net., A 20.190.159.72, A 20.190.159.70, A 20.190.159.19, A 20.190.159.22, A 40.126.31.70, A 20.190.159.1, A 40.126.32.69, A 40.126.32.73, A 20.190.160.15, A 20.190.160.13, A 20.190.160.12, A 40.126.32.132, A 40.126.32.135, A 40.126.32.67, A 20.190.159.5, A 20.190.159.69, A 40.126.31.72, A 40.126.32.75, A 40.126.32.139, A 40.126.32.137, A 20.190.160.23, A 20.190.160.21, A 20.190.159.3, A 40.126.31.64 (934)
14:53:50.001106 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.28026: 36555 23/13/13 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.trafficmanager.net., A 40.126.31.64, A 40.126.32.137, A 40.126.32.75, A 40.126.32.67, A 40.126.31.68, A 20.190.159.70, A 20.190.159.72, A 20.190.160.23, A 20.190.159.5, A 20.190.159.69, A 20.190.159.1, A 20.190.159.19, A 40.126.31.72, A 20.190.159.22, A 40.126.31.70, A 20.190.160.15, A 20.190.159.3, A 20.190.160.21, A 40.126.32.132, A 20.190.160.13 (886)
14:53:50.078739 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.17627 > 193.0.14.129.53: 44146 A? xg-up2date-patterns.sophosupd.com. (51)
14:53:50.173599 Port2_ppp, IN: IP 193.0.14.129.53 > XXX.XXX.XXX.XXX.17627: 44146 3/13/13 CNAME xg-up2date-patterns.sophosupd.com.edgekey.net., CNAME e13687.d.akamaiedge.net., A 23.205.49.159 (576)
14:53:51.778538 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.28702 > 4.2.2.2.53: 33349+ A? www.youtube-nocookie.com. (42)
14:53:52.320817 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.25895 > 1.0.0.1.53: 27822+ A? www4.bing.com. (31)
14:53:52.321014 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.28040 > 1.0.0.1.53: 61159+ A? login.windows.net. (35)
14:53:52.514907 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.25895: 27822 5/13/13 CNAME www4-www4.bing.com.trafficmanager.net., CNAME www4.bing.com.edgekey.net., CNAME e86303.dscx.akamaiedge.net., A 2.23.97.178, A 2.23.97.241 (603)
14:53:52.622122 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.33353 > 1.0.0.1.53: 60776+ A? www.youtube.com. (33)
14:53:52.759173 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.33353: 60776 9/13/13 CNAME youtube-ui.l.google.com., A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14 (614)
14:53:52.998311 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.1649 > 4.2.2.2.53: 25259+ A? login.microsoft.com. (37)
14:53:52.998361 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.64550 > 8.8.8.8.53: 53315+ A? login.microsoftonline.com. (43)
14:53:53.023543 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.60419 > 1.0.0.1.53: 29139+ A? www.google.ba. (31)
14:53:53.023630 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.49421 > 1.0.0.1.53: 20784+ A? www.google.li. (31)
14:53:53.138787 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.1649: 25259 23/13/13 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.trafficmanager.net., A 40.126.31.68, A 20.190.159.70, A 20.190.159.72, A 20.190.160.23, A 20.190.159.5, A 20.190.159.69, A 20.190.159.1, A 20.190.159.19, A 40.126.31.72, A 20.190.159.22, A 40.126.31.70, A 20.190.160.15, A 20.190.159.3, A 20.190.160.21, A 40.126.32.132, A 20.190.160.13, A 40.126.31.64, A 40.126.32.137, A 40.126.32.75, A 40.126.32.67 (886)
14:53:53.144855 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.64550: 53315 26/13/13 CNAME ak.privatelink.msidentity.com., CNAME www.tm.ak.prd.aadg.trafficmanager.net., A 20.190.159.22, A 40.126.31.70, A 20.190.159.1, A 40.126.32.69, A 40.126.32.73, A 20.190.160.15, A 20.190.160.13, A 20.190.160.12, A 40.126.32.132, A 40.126.32.135, A 40.126.32.67, A 20.190.159.5, A 20.190.159.69, A 40.126.31.72, A 40.126.32.75, A 40.126.32.139, A 40.126.32.137, A 20.190.160.23, A 20.190.160.21, A 20.190.159.3, A 40.126.31.64, A 20.190.159.72, A 20.190.159.70, A 20.190.159.19 (934)
14:53:53.262315 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.60419: 29139 1/13/13 A 142.251.39.3 (466)
14:53:54.798533 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.9700 > 199.7.83.42.53: 62183 A? www.youtube-nocookie.com. (42)
14:53:54.877128 Port2_ppp, IN: IP 199.7.83.42.53 > XXX.XXX.XXX.XXX.9700: 62183 9/13/13 CNAME youtube-ui.l.google.com., A 142.250.201.206, A 172.217.20.14, A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238 (623)
14:53:55.092568 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.39243 > 192.112.36.4.53: 60156 A? www4.bing.com. (31)
14:53:55.098619 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.44629 > 1.0.0.1.53: 4967+ A? www.google.pl. (31)
14:53:55.146126 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.44629: 4967 1/13/13 A 142.251.39.3 (466)
14:53:55.198892 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.14167 > 1.0.0.1.53: 29241+ A? www.google.co.ck. (34)
14:53:55.198912 Port2_ppp, IN: IP 192.112.36.4.53 > XXX.XXX.XXX.XXX.39243: 60156 7/13/13 CNAME www4-www4.bing.com.trafficmanager.net., CNAME www4.bing.com.edgekey.net., CNAME e86303.dscx.akamaiedge.net., A 2.23.97.178, A 2.23.97.241, A 2.22.89.186, A 2.22.89.159 (635)
14:53:55.268254 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.14167: 29241 1/13/13 A 142.250.201.195 (469)
14:53:55.340561 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.42978 > 8.8.8.8.53: 40234+ A? www4.bing.com. (31)
14:53:55.340598 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.6198 > 8.8.8.8.53: 55573+ A? login.windows.net. (35)
14:53:55.416571 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.42978: 40234 7/13/13 CNAME www4-www4.bing.com.trafficmanager.net., CNAME www4.bing.com.edgekey.net., CNAME e86303.dscx.akamaiedge.net., A 2.23.97.178, A 2.23.97.241, A 2.22.89.186, A 2.22.89.159 (635)
14:53:55.424800 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.6198: 55573 23/13/13 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.trafficmanager.net., A 20.190.159.22, A 40.126.31.70, A 20.190.160.15, A 20.190.159.3, A 20.190.160.21, A 40.126.32.132, A 20.190.160.13, A 40.126.31.64, A 40.126.32.137, A 40.126.32.75, A 40.126.32.67, A 40.126.31.68, A 20.190.159.70, A 20.190.159.72, A 20.190.160.23, A 20.190.159.5, A 20.190.159.69, A 20.190.159.1, A 20.190.159.19, A 40.126.31.72 (884)
14:53:55.616126 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.60395 > 199.7.83.42.53: 9954 A? 4.sophosxl.net. (32)
14:53:55.641271 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.10611 > 8.8.8.8.53: 26485+ A? www.youtube.com. (33)
14:53:55.720298 Port2_ppp, IN: IP 199.7.83.42.53 > XXX.XXX.XXX.XXX.60395: 9954 8/13/13 A 34.240.170.13, A 34.252.30.182, A 34.241.111.122, A 52.30.153.100, A 52.209.185.252, A 52.212.172.142, A 3.248.133.40, A 3.251.5.30 (576)
14:53:55.722997 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.10611: 26485 9/13/13 CNAME youtube-ui.l.google.com., A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14 (614)
14:53:55.818363 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.1034 > 192.112.36.4.53: 26355 A? www.youtube-nocookie.com. (42)
14:53:56.017730 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.14748 > 4.2.2.2.53: 23064+ A? login.microsoftonline.com. (43)
14:53:56.042903 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.43371 > 8.8.8.8.53: 25837+ A? www.google.li. (31)
14:53:56.103052 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.14748: 23064 26/13/13 CNAME ak.privatelink.msidentity.com., CNAME www.tm.ak.prd.aadg.trafficmanager.net., A 20.190.160.13, A 20.190.160.12, A 40.126.32.132, A 40.126.32.135, A 40.126.32.67, A 20.190.159.5, A 20.190.159.69, A 40.126.31.72, A 40.126.32.75, A 40.126.32.139, A 40.126.32.137, A 20.190.160.23, A 20.190.160.21, A 20.190.159.3, A 40.126.31.64, A 20.190.159.72, A 20.190.159.70, A 20.190.159.19, A 20.190.159.22, A 40.126.31.70, A 20.190.159.1, A 40.126.32.69, A 40.126.32.73, A 20.190.160.15 (934)
14:53:56.173303 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.43371: 25837 1/13/13 A 172.217.20.3 (466)
14:53:56.838441 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.27270 > 192.33.4.12.53: 27136 A? www.youtube-nocookie.com. (42)
14:53:56.857680 Port2_ppp, IN: IP 192.33.4.12.53 > XXX.XXX.XXX.XXX.27270: 27136 9/13/13 CNAME youtube-ui.l.google.com., A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14, A 142.251.39.46 (623)
14:53:57.365656 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.58662 > 1.0.0.1.53: 13185+ A? www.google.com.sb. (35)
14:53:57.447334 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.58662: 13185 1/13/13 A 142.250.201.195 (470)
14:53:57.858027 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.40430 > 192.228.79.201.53: 23096 A? www.youtube-nocookie.com. (42)
14:53:57.873885 Port2_ppp, IN: IP 192.228.79.201.53 > XXX.XXX.XXX.XXX.40430: 23096 9/13/13 CNAME youtube-ui.l.google.com., A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14 (623)
14:53:57.967458 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.47676 > 199.7.83.42.53: 17131 A? wp.m.bing.com. (31)
14:53:57.972803 Port2_ppp, IN: IP 199.7.83.42.53 > XXX.XXX.XXX.XXX.47676: 17131 5/13/13 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (612)
14:53:58.067783 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.28385 > 1.0.0.1.53: 28415+ A? www.google.co.cr. (34)
14:53:58.085973 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.28385: 28415 1/13/13 A 142.250.201.195 (469)
14:53:58.360570 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.17178 > 4.2.2.2.53: 1308+ A? www4.bing.com. (31)
14:53:58.360618 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.34842 > 4.2.2.2.53: 61585+ A? login.windows.net. (35)
14:53:58.366340 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.17178: 1308 7/13/13 CNAME www4-www4.bing.com.trafficmanager.net., CNAME www4.bing.com.edgekey.net., CNAME e86303.dscx.akamaiedge.net., A 2.23.97.178, A 2.23.97.241, A 2.22.89.186, A 2.22.89.159 (635)
14:53:58.385509 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.34842: 61585 23/13/13 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.trafficmanager.net., A 20.190.160.21, A 40.126.32.132, A 20.190.160.13, A 40.126.31.64, A 40.126.32.137, A 40.126.32.75, A 40.126.32.67, A 40.126.31.68, A 20.190.159.70, A 20.190.159.72, A 20.190.160.23, A 20.190.159.5, A 20.190.159.69, A 20.190.159.1, A 20.190.159.19, A 40.126.31.72, A 20.190.159.22, A 40.126.31.70, A 20.190.160.15, A 20.190.159.3 (884)
14:53:58.481347 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.17169 > 1.0.0.1.53: 51052+ A? 4.sophosxl.net. (32)
14:53:58.484872 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.17169: 51052 8/13/13 A 34.252.30.182, A 34.241.111.122, A 52.30.153.100, A 52.209.185.252, A 52.212.172.142, A 3.248.133.40, A 3.251.5.30, A 34.240.170.13 (576)
14:53:58.661192 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.59854 > 4.2.2.2.53: 30859+ A? www.youtube.com. (33)
14:53:58.664906 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.59854: 30859 9/13/13 CNAME youtube-ui.l.google.com., A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14, A 142.251.39.46 (614)
14:53:58.878250 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.5194 > 192.203.230.10.53: 7412 A? www.youtube-nocookie.com. (42)
14:53:58.882151 Port2_ppp, IN: IP 192.203.230.10.53 > XXX.XXX.XXX.XXX.5194: 7412 9/13/13 CNAME youtube-ui.l.google.com., A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110 (623)
14:53:59.898174 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.9280 > 193.0.14.129.53: 55481 A? www.youtube-nocookie.com. (42)
14:53:59.914004 Port2_ppp, IN: IP 193.0.14.129.53 > XXX.XXX.XXX.XXX.9280: 55481 9/13/13 CNAME youtube-ui.l.google.com., A 142.250.201.206, A 172.217.20.14, A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238 (623)
14:54:00.410683 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.20291 > 1.0.0.1.53: 16427+ A? google.com. (28)
14:54:00.410848 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.5128 > 1.0.0.1.53: 1501+ A? www.google.com.sv. (35)
14:54:00.466710 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.20291: 16427 1/4/3 A 142.251.39.14 (164)
14:54:00.473678 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.5128: 1501 1/13/13 A 142.251.39.3 (470)
14:54:00.795680 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.51322 > 1.0.0.1.53: 43602+ AAAA? dzr-utm-amzn-eu-west-1-9af7.upe.p.hmr.sophos.com. (66)
14:54:00.831517 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.51322: 43602 0/13/13 (485)
14:54:00.912543 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.17350 > 192.36.148.17.53: 17220 A? www.youtube-nocookie.com. (42)
14:54:00.915862 Port2_ppp, IN: IP 192.36.148.17.53 > XXX.XXX.XXX.XXX.17350: 17220 9/13/13 CNAME youtube-ui.l.google.com., A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14 (623)
14:54:01.012879 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.59263 > 1.0.0.1.53: 4927+ A? www.google.ki. (31)
14:54:01.068374 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.59263: 4927 1/13/13 A 142.251.39.67 (466)
14:54:01.098676 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.15904 > 192.228.79.201.53: 10619 A? xg-up2date-patterns.sophosupd.com. (51)
14:54:01.102976 Port2_ppp, IN: IP 192.228.79.201.53 > XXX.XXX.XXX.XXX.15904: 10619 3/13/13 CNAME xg-up2date-patterns.sophosupd.com.edgekey.net., CNAME e13687.d.akamaiedge.net., A 23.205.49.159 (576)
14:54:01.501364 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.25300 > 8.8.8.8.53: 20365+ A? 4.sophosxl.net. (32)
14:54:01.511331 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.25300: 20365 8/13/13 A 34.241.111.122, A 52.30.153.100, A 52.209.185.252, A 52.212.172.142, A 3.248.133.40, A 3.251.5.30, A 34.240.170.13, A 34.252.30.182 (576)
14:54:01.932117 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.21195 > 192.58.128.30.53: 14687 A? www.youtube-nocookie.com. (42)
14:54:01.935706 Port2_ppp, IN: IP 192.58.128.30.53 > XXX.XXX.XXX.XXX.21195: 14687 9/13/13 CNAME youtube-ui.l.google.com., A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14, A 142.251.39.46 (623)
14:54:02.218651 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.50966 > 1.0.0.1.53: 55664+ A? www.bing.com. (30)
14:54:02.218729 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.26938 > 1.0.0.1.53: 30492+ A? www.google.it. (31)
14:54:02.236849 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.50966: 55664 5/13/13 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (611)
14:54:02.255658 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.26938: 30492 1/13/13 A 142.250.180.227 (466)
14:54:02.657669 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.15662 > 1.0.0.1.53: 13294+ PTR? b.8.4.0.c.b.e.f.f.f.c.1.a.5.e.7.0.0.0.0.0.0.0.0.0.0.0.0.0.8.e.f.ip6.arpa. (90)
14:54:02.665185 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.15662: 13294 NXDomain 0/0/0 (90)
14:54:02.951803 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.19602 > 199.7.91.13.53: 26012 A? www.youtube-nocookie.com. (42)
14:54:02.955688 Port2_ppp, IN: IP 199.7.91.13.53 > XXX.XXX.XXX.XXX.19602: 26012 9/13/13 CNAME youtube-ui.l.google.com., A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110 (623)
14:54:03.894653 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.18485 > 1.0.0.1.53: 55604+ A? dzr-utm-amzn-eu-west-1-9af7.upe.p.hmr.sophos.com. (66)
14:54:03.894755 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.19941 > 1.0.0.1.53: 25424+ AAAA? dzr-utm-amzn-eu-west-1-9af7.upe.p.hmr.sophos.com. (66)
14:54:03.972012 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.39998 > 202.12.27.33.53: 28189 A? www.youtube-nocookie.com. (42)
14:54:04.085641 Port2_ppp, IN: IP 202.12.27.33.53 > XXX.XXX.XXX.XXX.39998: 28189 9/13/13 CNAME youtube-ui.l.google.com., A 142.250.201.206, A 172.217.20.14, A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238 (623)
14:54:04.521319 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.58650 > 4.2.2.2.53: 36829+ A? 4.sophosxl.net. (32)
14:54:04.560899 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.29504 > 1.0.0.1.53: 33345+ A? www2.bing.com. (31)
14:54:04.610149 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.58650: 36829 8/13/13 A 52.30.153.100, A 52.209.185.252, A 52.212.172.142, A 3.248.133.40, A 3.251.5.30, A 34.240.170.13, A 34.252.30.182, A 34.241.111.122 (576)
14:54:04.658004 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.29504: 33345 5/13/13 CNAME www2-www2.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (614)
14:54:04.991490 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.15380 > 192.5.5.241.53: 16521 A? www.youtube-nocookie.com. (42)
14:54:04.994816 Port2_ppp, IN: IP 192.5.5.241.53 > XXX.XXX.XXX.XXX.15380: 16521 9/13/13 CNAME youtube-ui.l.google.com., A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14 (623)
14:54:05.166133 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.51684 > 1.0.0.1.53: 5032+ A? wpad.enecom.hr. (32)
14:54:05.167249 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.49867 > 1.0.0.1.53: 35377+ A? wpad.enecom.hr. (32)
14:54:05.188056 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.14380 > 1.0.0.1.53: 43615+ A? youtube.googleapis.com. (40)
14:54:05.200345 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.14380: 43615 1/13/13 A 172.217.19.106 (475)
14:54:05.238779 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.31903 > 8.8.8.8.53: 36084+ A? www.bing.com. (30)
14:54:05.242776 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.31903: 36084 5/13/13 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (611)
14:54:05.298620 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.51684: 5032 NXDomain 0/0/0 (32)
14:54:05.298815 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.49867: 35377 NXDomain 0/0/0 (32)
14:54:06.012028 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.53588 > 198.41.0.4.53: 12645 A? www.youtube-nocookie.com. (42)
14:54:06.015731 Port2_ppp, IN: IP 198.41.0.4.53 > XXX.XXX.XXX.XXX.53588: 12645 9/13/13 CNAME youtube-ui.l.google.com., A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14, A 142.251.39.46 (623)
14:54:06.111987 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.35534 > 192.228.79.201.53: 59037 A? www4.bing.com. (31)
14:54:06.116827 Port2_ppp, IN: IP 192.228.79.201.53 > XXX.XXX.XXX.XXX.35534: 59037 5/13/13 CNAME www4-www4.bing.com.trafficmanager.net., CNAME www4.bing.com.edgekey.net., CNAME e86303.dscx.akamaiedge.net., A 2.22.89.186, A 2.22.89.159 (603)
14:54:06.416420 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.10757 > 1.0.0.1.53: 6798+ A? wp.m.bing.com. (31)
14:54:06.416489 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.35943 > 1.0.0.1.53: 8616+ A? www.google.am. (31)
14:54:06.428108 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.10757: 6798 5/13/13 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (612)
14:54:06.494066 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.35943: 8616 1/13/13 A 142.250.180.227 (466)
14:54:06.914485 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.5892 > 1.0.0.1.53: 699 AAAA? dzr-utm-amzn-eu-west-1-9af7.upe.p.hmr.sophos.com. (66)
14:54:06.914539 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.38620 > 1.0.0.1.53: 21436+ A? dzr-utm-amzn-eu-west-1-9af7.upe.p.hmr.sophos.com. (66)
14:54:06.964807 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.38620: 21436 3/13/13 A 34.249.168.191, A 54.217.122.195, A 34.253.123.11 (533)
14:54:06.966844 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.5892: 699 0/13/13 (485)
14:54:07.032122 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.58252 > 128.63.2.53.53: 20971 A? www.youtube-nocookie.com. (42)
14:54:07.040083 Port2_ppp, IN: IP 128.63.2.53.53 > XXX.XXX.XXX.XXX.58252: 20971 9/13/13 CNAME youtube-ui.l.google.com., A 142.250.201.206, A 172.217.20.14, A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238 (623)
14:54:07.580138 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.22305 > 8.8.8.8.53: 25935+ A? www2.bing.com. (31)
14:54:07.586125 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.22305: 25935 5/13/13 CNAME www2-www2.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (614)
14:54:08.034135 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.10800 > 1.0.0.1.53: 20093+ A? www.google.com.cu. (35)
14:54:08.034209 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.22222 > 199.7.83.42.53: 35299 A? www.youtube-nocookie.com. (42)
14:54:08.034276 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.61228 > 1.0.0.1.53: 8199+ A? www.google.com.sg. (35)
14:54:08.034364 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.63773 > 1.0.0.1.53: 37715+ A? youtube.googleapis.com. (40)
14:54:08.174724 Port2_ppp, IN: IP 199.7.83.42.53 > XXX.XXX.XXX.XXX.22222: 35299 9/13/13 CNAME youtube-ui.l.google.com., A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14, A 142.251.39.46 (623)
14:54:08.228888 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.63773: 37715 1/13/13 A 172.217.19.106 (475)
14:54:08.232914 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.61228: 8199 1/13/13 A 142.251.39.3 (470)
14:54:08.240374 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.10800: 20093 2/13/13 A 142.250.201.195, A 142.251.39.35 (486)
14:54:08.240550 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.32655 > 4.2.2.2.53: 15099+ A? www.bing.com. (30)
14:54:08.359587 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.32655: 15099 5/13/13 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (611)
14:54:08.987001 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.44156 > 193.0.14.129.53: 27984 A? wp.m.bing.com. (31)
14:54:09.022341 Port2_ppp, IN: IP 193.0.14.129.53 > XXX.XXX.XXX.XXX.44156: 27984 5/13/13 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (612)
14:54:09.436943 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.19456 > 8.8.8.8.53: 2590+ A? wp.m.bing.com. (31)
14:54:09.445604 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.19456: 2590 5/13/13 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (612)
14:54:09.671200 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.5671 > 192.112.36.4.53: 26803 A? login.microsoftonline.com. (43)
14:54:09.687601 Port2_ppp, IN: IP 192.112.36.4.53 > XXX.XXX.XXX.XXX.5671: 26803 26/13/13 CNAME ak.privatelink.msidentity.com., CNAME www.tm.ak.prd.aadg.trafficmanager.net., A 20.190.160.21, A 20.190.159.3, A 40.126.31.64, A 20.190.159.72, A 20.190.159.70, A 20.190.159.19, A 20.190.159.22, A 40.126.31.70, A 20.190.159.1, A 40.126.32.69, A 40.126.32.73, A 20.190.160.15, A 20.190.160.13, A 20.190.160.12, A 40.126.32.132, A 40.126.32.135, A 40.126.32.67, A 20.190.159.5, A 20.190.159.69, A 40.126.31.72, A 40.126.32.75, A 40.126.32.139, A 40.126.32.137, A 20.190.160.23 (934)
14:54:10.569440 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.21566 > 192.112.36.4.53: 19131 A? www.youtube.com. (33)
14:54:10.575390 Port2_ppp, IN: IP 192.112.36.4.53 > XXX.XXX.XXX.XXX.21566: 19131 9/13/13 CNAME youtube-ui.l.google.com., A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14 (614)
14:54:10.599534 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.56409 > 4.2.2.2.53: 10696+ A? www2.bing.com. (31)
14:54:10.615734 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.56409: 10696 5/13/13 CNAME www2-www2.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (614)
14:54:11.054320 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.39036 > 192.112.36.4.53: 32741 A? www.youtube-nocookie.com. (42)
14:54:11.071837 Port2_ppp, IN: IP 192.112.36.4.53 > XXX.XXX.XXX.XXX.39036: 32741 9/13/13 CNAME youtube-ui.l.google.com., A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110 (623)
14:54:12.118454 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.38862 > 192.33.4.12.53: 43376 A? xg-up2date-patterns.sophosupd.com. (51)
14:54:12.231877 Port2_ppp, IN: IP 192.33.4.12.53 > XXX.XXX.XXX.XXX.38862: 43376 3/13/13 CNAME xg-up2date-patterns.sophosupd.com.edgekey.net., CNAME e13687.d.akamaiedge.net., A 23.35.229.161 (576)
14:54:12.457257 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.41385 > 4.2.2.2.53: 22774+ A? wp.m.bing.com. (31)
14:54:12.599955 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.41385: 22774 5/13/13 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 131.253.33.200, A 13.107.22.200 (612)
14:54:12.731318 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.20728 > 192.36.148.17.53: 45861 A? login.windows.net. (35)
14:54:12.854676 Port2_ppp, IN: IP 192.36.148.17.53 > XXX.XXX.XXX.XXX.20728: 45861 27/13/13 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.trafficmanager.net., A 20.190.160.23, A 20.190.159.5, A 20.190.159.69, A 20.190.159.1, A 20.190.159.19, A 40.126.31.72, A 20.190.159.22, A 40.126.31.70, A 40.126.32.73, A 20.190.160.12, A 40.126.32.69, A 20.190.160.15, A 20.190.159.3, A 20.190.160.21, A 40.126.32.132, A 20.190.160.13, A 40.126.31.64, A 40.126.32.137, A 40.126.32.139, A 40.126.32.75, A 40.126.32.67, A 40.126.31.68, A 20.190.159.70, A 20.190.159.72 (948)
14:54:13.432400 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.61126 > 1.0.0.1.53: 46453+ A? www.google.com. (32)
14:54:13.524445 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.61126: 46453 2/4/3 A 142.251.39.68, A 142.250.180.228 (184)
14:54:13.548707 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.3076 > 1.0.0.1.53: 28873+ A? 4.sophosxl.net. (32)
14:54:13.627108 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.3076: 28873 8/13/13 A 52.209.185.252, A 52.212.172.142, A 3.248.133.40, A 3.251.5.30, A 34.240.170.13, A 34.252.30.182, A 34.241.111.122, A 52.30.153.100 (576)
14:54:14.073658 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.12974 > 192.33.4.12.53: 43225 A? www.youtube-nocookie.com. (42)
14:54:14.206444 Port2_ppp, IN: IP 192.33.4.12.53 > XXX.XXX.XXX.XXX.12974: 43225 9/13/13 CNAME youtube-ui.l.google.com., A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110 (623)
14:54:14.881411 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.53626 > 1.0.0.1.53: 45533+ A? www.apple.com. (31)
14:54:14.975147 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.53626: 45533 4/13/13 CNAME www.apple.com.edgekey.net., CNAME www.apple.com.edgekey.net.globalredir.akadns.net., CNAME e6858.dscx.akamaiedge.net., A 2.18.168.213 (597)
14:54:16.079844 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.62444 > 1.0.0.1.53: 34367+ A? www.google.de. (31)
14:54:16.079920 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.43435 > 1.0.0.1.53: 35656+ A? www.google.com.pr. (35)
14:54:16.205161 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.62444: 34367 1/13/13 A 142.251.39.67 (466)
14:54:16.214550 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.43435: 35656 1/13/13 A 142.250.180.195 (470)
14:54:16.568575 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.25068 > 8.8.8.8.53: 22862+ A? 4.sophosxl.net. (32)
14:54:16.577921 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.25068: 22862 8/13/13 A 52.212.172.142, A 3.248.133.40, A 3.251.5.30, A 34.240.170.13, A 34.252.30.182, A 34.241.111.122, A 52.30.153.100, A 52.209.185.252 (576)
14:54:17.008249 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.29465 > 1.0.0.1.53: 2059+ A? www.google.be. (31)
14:54:17.008355 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.42132 > 1.0.0.1.53: 22888+ A? www.google.je. (31)
14:54:17.093564 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.56094 > 192.228.79.201.53: 42295 A? www.youtube-nocookie.com. (42)
14:54:17.114792 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.56063 > 192.5.5.241.53: 42155 A? www4.bing.com. (31)
14:54:17.114899 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.58983 > 1.0.0.1.53: 35118+ AAAA? dzr-utm-amzn-eu-west-1-9af7.upe.p.hmr.sophos.com. (66)
14:54:17.141367 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.29465: 2059 2/13/13 A 142.251.39.35, A 142.251.39.67 (482)
14:54:17.161482 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.42132: 22888 2/13/13 A 142.250.201.195, A 172.217.19.99 (482)
14:54:17.212542 Port2_ppp, IN: IP 192.228.79.201.53 > XXX.XXX.XXX.XXX.56094: 42295 9/13/13 CNAME youtube-ui.l.google.com., A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14 (623)
14:54:17.259164 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.58983: 35118 0/13/13 (485)
14:54:17.367588 Port2_ppp, IN: IP 192.5.5.241.53 > XXX.XXX.XXX.XXX.56063: 42155 5/13/13 CNAME www4-www4.bing.com.trafficmanager.net., CNAME www4.bing.com.edgekey.net., CNAME e86303.dscx.akamaiedge.net., A 2.23.97.178, A 2.23.97.241 (603)
14:54:17.735917 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.10626 > 192.36.148.17.53: 56809 A? www.bing.com. (30)
14:54:17.815808 Port2_ppp, IN: IP 192.36.148.17.53 > XXX.XXX.XXX.XXX.10626: 56809 5/13/15 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 131.253.33.200, A 13.107.22.200 (643)
14:54:18.045232 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.3154 > 1.0.0.1.53: 7749+ A? www.google.de. (31)
14:54:18.045314 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.49276 > 1.0.0.1.53: 32740+ A? www.google.mn. (31)
14:54:18.045376 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.23914 > 1.0.0.1.53: 10795+ A? www.google.com.pr. (35)
14:54:18.057076 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.3154: 7749 1/13/13 A 142.251.39.35 (466)
14:54:18.058740 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.49276: 32740 2/13/13 A 142.250.180.227, A 142.250.201.195 (482)
14:54:18.060377 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.23914: 10795 1/13/13 A 142.250.180.227 (470)
14:54:18.530509 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.57282 > 1.0.0.1.53: 43874+ A? securemetrics.apple.com. (41)
14:54:18.545004 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.60375 > 1.0.0.1.53: 15791+ A? securemvt.apple.com. (37)
14:54:18.568102 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.57282: 43874 4/13/13 CNAME appleglobal.102.112.2o7.net., A 15.236.176.210, A 15.188.95.229, A 13.36.218.177 (546)
14:54:18.626541 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.60375: 15791 11/13/13 CNAME apple.tt.omtrdc.net., CNAME mboxedge37.tt.omtrdc.net., CNAME mboxedge37-alb.tt.omtrdc.net., A 54.229.84.199, A 54.77.179.162, A 54.74.157.109, A 79.125.52.138, A 63.34.179.114, A 52.49.242.9, A 52.48.238.49, A 18.202.95.235 (668)
14:54:19.266589 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.23190 > 1.0.0.1.53: 36233+ A? www.google.be. (31)
14:54:19.288699 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.23190: 36233 1/13/13 A 142.251.39.67 (466)
14:54:19.588240 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.44320 > 4.2.2.2.53: 16560+ A? 4.sophosxl.net. (32)
14:54:19.639842 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.44320: 16560 8/13/13 A 3.248.133.40, A 3.251.5.30, A 34.240.170.13, A 34.252.30.182, A 34.241.111.122, A 52.30.153.100, A 52.209.185.252, A 52.212.172.142 (576)
14:54:19.850668 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.57860 > 198.41.0.4.53: 8860 A? www2.bing.com. (31)
14:54:20.006245 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.52133 > 192.36.148.17.53: 23336 A? wp.m.bing.com. (31)
14:54:20.012728 Port2_ppp, IN: IP 198.41.0.4.53 > XXX.XXX.XXX.XXX.57860: 8860 5/13/15 CNAME www2-www2.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (646)
14:54:20.067304 Port2_ppp, IN: IP 192.36.148.17.53 > XXX.XXX.XXX.XXX.52133: 23336 5/13/15 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.a-msedge.net., A 13.107.21.200, A 204.79.197.200 (644)
14:54:20.071421 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.7590 > 1.0.0.1.53: 9655+ A? search.yahoo.com. (34)
14:54:20.107199 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.7590: 9655 2/13/13 CNAME ds-global3.l7.search.ystg1.b.yahoo.com., A 212.82.100.137 (512)
14:54:20.107343 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.55270 > 1.0.0.1.53: 25117+ A? ds-global3.l7.search.ystg1.b.yahoo.com. (56)
14:54:20.107399 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.4823 > 192.203.230.10.53: 13446 A? www.youtube-nocookie.com. (42)
14:54:20.126095 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.55270: 25117 1/13/13 A 212.82.100.137 (491)
14:54:20.128641 Port2_ppp, IN: IP 192.203.230.10.53 > XXX.XXX.XXX.XXX.4823: 13446 9/13/13 CNAME youtube-ui.l.google.com., A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206 (623)
14:54:21.293060 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.21418 > 1.0.0.1.53: 58892+ A? www.google.com.au. (35)
14:54:21.293154 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.40386 > 1.0.0.1.53: 9176+ A? www.google.lv. (31)
14:54:21.372854 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.21418: 58892 1/13/13 A 142.250.201.195 (470)
14:54:21.388297 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.40386: 9176 1/13/13 A 142.251.39.35 (466)
14:54:22.095958 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.5042 > 1.0.0.1.53: 3602+ A? www.google.rw. (31)
14:54:22.119084 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.51863 > 1.0.0.1.53: 59639+ AAAA? dzr-utm-amzn-eu-west-1-9af7.upe.p.hmr.sophos.com. (66)
14:54:22.156349 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.5042: 3602 2/13/13 A 142.250.180.195, A 172.217.20.3 (482)
14:54:22.158618 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.51863: 59639 0/13/13 (485)
14:54:23.127216 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.42870 > 202.12.27.33.53: 30540 A? xg-up2date-patterns.sophosupd.com. (51)
14:54:23.127290 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.32648 > 193.0.14.129.53: 63097 A? www.youtube-nocookie.com. (42)
14:54:23.133419 Port2_ppp, IN: IP 193.0.14.129.53 > XXX.XXX.XXX.XXX.32648: 63097 9/13/13 CNAME youtube-ui.l.google.com., A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110 (623)
14:54:23.185905 Port2_ppp, IN: IP 202.12.27.33.53 > XXX.XXX.XXX.XXX.42870: 30540 3/13/13 CNAME xg-up2date-patterns.sophosupd.com.edgekey.net., CNAME e13687.d.akamaiedge.net., A 23.205.49.159 (576)
14:54:24.019551 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.28384 > 1.0.0.1.53: 55827+ A? www.google.it. (31)
14:54:24.019622 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.25711 > 1.0.0.1.53: 17434+ A? www.google.mk. (31)
14:54:24.092575 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.28384: 55827 2/13/13 A 142.250.180.227, A 172.217.19.99 (482)
14:54:24.108736 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.25711: 17434 1/13/13 A 142.251.39.3 (466)
14:54:24.139057 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.54118 > 1.0.0.1.53: 6757+ A? hbbtv.plustv.info. (35)
14:54:24.320120 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.54118: 6757 1/13/13 A 185.46.34.160 (470)
14:54:24.333146 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.54118 > 1.0.0.1.53: 54520+ AAAA? hbbtv.plustv.info. (35)
14:54:24.493157 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.54118: 54520 0/13/13 (454)
14:54:24.514719 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.23356 > 1.0.0.1.53: 11969+ A? 4.sophosxl.net. (32)
14:54:24.688644 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.23356: 11969 14/13/13 A 34.240.170.13, A 34.252.30.182, A 34.241.111.122, A 52.30.153.100, A 52.209.185.252, A 52.212.172.142, A 3.248.133.40, A 3.251.5.30, A 52.48.106.161, A 52.214.200.136, A 52.214.157.208, A 52.19.6.81, A 34.241.156.140, A 54.171.66.20 (672)
14:54:25.241205 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.18190 > 1.0.0.1.53: 34612+ A? www.google.co.mz. (34)
14:54:25.373722 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.18190: 34612 1/13/13 A 142.250.180.195 (469)
14:54:26.147792 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.38258 > 192.36.148.17.53: 6968 A? www.youtube-nocookie.com. (42)
14:54:26.154504 Port2_ppp, IN: IP 192.36.148.17.53 > XXX.XXX.XXX.XXX.38258: 6968 9/13/13 CNAME youtube-ui.l.google.com., A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206 (623)
14:54:27.099414 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.15844 > 1.0.0.1.53: 11142+ A? www.google.co.ao. (34)
14:54:27.099516 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.42395 > 1.0.0.1.53: 49738+ A? www.google.com.jm. (35)
14:54:27.160922 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.24924 > 1.0.0.1.53: 14810+ A? xg-up2date-patterns.sophosupd.com. (51)
14:54:27.161013 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.44844 > 1.0.0.1.53: 15409+ AAAA? xg-up2date-patterns.sophosupd.com. (51)
14:54:27.282575 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.42395: 49738 2/13/13 A 142.251.39.67, A 142.250.180.227 (486)

14:54:27.285001 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.15844: 11142 2/13/13 A 172.217.19.99, A 142.251.39.67 (485)
14:54:27.305317 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.24924: 14810 3/13/13 CNAME xg-up2date-patterns.sophosupd.com.edgekey.net., CNAME e13687.d.akamaiedge.net., A 23.205.49.159 (576)
14:54:27.325011 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.44844: 15409 0/13/13 (470)
14:54:27.515672 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.25553 > 8.8.8.8.53: 19087+ A? 4.sophosxl.net. (32)
14:54:27.650519 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.25553: 19087 8/13/13 A 52.30.153.100, A 3.248.133.40, A 52.48.106.161, A 52.214.200.136, A 52.214.157.208, A 52.19.6.81, A 34.241.156.140, A 54.171.66.20 (576)
14:54:28.085748 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.45411 > 1.0.0.1.53: 9744+ A? www.google.hu. (31)
14:54:28.134974 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.42894 > 192.203.230.10.53: 4178 A? www4.bing.com. (31)
14:54:28.145668 Port2_ppp, IN: IP 192.203.230.10.53 > XXX.XXX.XXX.XXX.42894: 4178 5/13/13 CNAME www4-www4.bing.com.trafficmanager.net., CNAME www4.bing.com.edgekey.net., CNAME e86303.dscx.akamaiedge.net., A 2.23.97.178, A 2.23.97.241 (603)
14:54:28.191415 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.45411: 9744 1/13/13 A 142.251.39.35 (466)
14:54:29.167776 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.29128 > 192.58.128.30.53: 2929 A? www.youtube-nocookie.com. (42)
14:54:29.172686 Port2_ppp, IN: IP 192.58.128.30.53 > XXX.XXX.XXX.XXX.29128: 2929 9/13/13 CNAME youtube-ui.l.google.com., A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14 (623)
14:54:30.015028 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.44127 > 1.0.0.1.53: 56011+ A? www.google.gl. (31)
14:54:30.123957 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.44127: 56011 1/13/13 A 142.251.39.3 (466)
14:54:30.180387 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.10429 > 8.8.8.8.53: 2933+ A? xg-up2date-patterns.sophosupd.com. (51)
14:54:30.184885 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.10429: 2933 3/13/13 CNAME xg-up2date-patterns.sophosupd.com.edgekey.net., CNAME e13687.d.akamaiedge.net., A 23.205.49.159 (576)
14:54:30.535265 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.55129 > 4.2.2.2.53: 16431+ A? 4.sophosxl.net. (32)
14:54:30.722059 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.55129: 16431 8/13/13 A 3.248.133.40, A 52.48.106.161, A 52.214.200.136, A 52.214.157.208, A 52.19.6.81, A 34.241.156.140, A 54.171.66.20, A 52.30.153.100 (576)
14:54:31.026599 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.43539 > 199.7.91.13.53: 38151 A? wp.m.bing.com. (31)
14:54:31.051556 Port2_ppp, IN: IP 199.7.91.13.53 > XXX.XXX.XXX.XXX.43539: 38151 5/13/15 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.a-msedge.net., A 204.79.197.200, A 13.107.21.200 (644)
14:54:31.244856 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.57006 > 1.0.0.1.53: 31715+ A? plus.l.google.com. (35)
14:54:31.244952 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.34863 > 1.0.0.1.53: 11505+ A? www.google.si. (31)
14:54:31.245024 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.39808 > 1.0.0.1.53: 41522+ A? www.youtube-nocookie.com. (42)
14:54:31.257998 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.39808: 41522 9/13/13 CNAME youtube-ui.l.google.com., A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14, A 142.251.39.46, A 142.251.39.78 (623)
14:54:31.303573 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.57006: 31715 1/4/3 A 142.251.39.78 (171)
14:54:31.310591 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.34863: 11505 1/13/13 A 142.250.180.195 (466)
14:54:32.187532 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.49056 > 199.7.91.13.53: 57825 A? www.youtube-nocookie.com. (42)
14:54:32.194576 Port2_ppp, IN: IP 199.7.91.13.53 > XXX.XXX.XXX.XXX.49056: 57825 9/13/13 CNAME youtube-ui.l.google.com., A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206 (623)
14:54:32.471411 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.60237 > 1.0.0.1.53: 29742+ A? login.microsoft.com. (37)
14:54:32.496320 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.60237: 29742 27/13/29 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.trafficmanager.net., A 40.126.32.75, A 40.126.32.67, A 40.126.31.68, A 20.190.159.70, A 20.190.159.72, A 20.190.160.23, A 20.190.159.5, A 20.190.159.69, A 20.190.159.1, A 20.190.159.19, A 40.126.31.72, A 20.190.159.22, A 40.126.31.70, A 40.126.32.73, A 20.190.160.12, A 40.126.32.69, A 20.190.160.15, A 20.190.159.3, A 20.190.160.21, A 40.126.32.132, A 20.190.160.13, A 40.126.31.64, A 40.126.32.137, A 40.126.32.139 (1231)
14:54:33.073272 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.44805 > 1.0.0.1.53: 4269+ A? www.google.bi. (31)
14:54:33.138200 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.44805: 4269 1/13/13 A 142.250.180.195 (466)
14:54:33.199632 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.16016 > 4.2.2.2.53: 52819+ A? xg-up2date-patterns.sophosupd.com. (51)
14:54:33.203803 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.16016: 52819 3/13/13 CNAME xg-up2date-patterns.sophosupd.com.edgekey.net., CNAME e13687.d.akamaiedge.net., A 23.205.49.159 (576)
14:54:33.677923 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.57282 > 1.0.0.1.53: 12493+ A? encrypted-tbn0.gstatic.com. (44)
14:54:33.681911 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.57282: 12493 1/13/13 A 142.251.39.78 (479)
14:54:33.706590 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.49497 > 1.0.0.1.53: 18871+ A? 4.sophosxl.net. (32)
14:54:33.709696 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.49497: 18871 8/13/13 A 52.48.106.161, A 52.214.200.136, A 52.214.157.208, A 52.19.6.81, A 34.241.156.140, A 54.171.66.20, A 52.30.153.100, A 3.248.133.40 (576)
14:54:34.147385 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.30346 > 128.63.2.53.53: 30364 A? xg-up2date-patterns.sophosupd.com. (51)
14:54:34.262489 Port2_ppp, IN: IP 128.63.2.53.53 > XXX.XXX.XXX.XXX.30346: 30364 3/13/13 CNAME xg-up2date-patterns.sophosupd.com.edgekey.net., CNAME e13687.d.akamaiedge.net., A 23.205.49.159 (576)
14:54:34.262702 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.62165 > 8.8.8.8.53: 56355+ A? www.youtube-nocookie.com. (42)
14:54:34.343005 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.62165: 56355 9/13/13 CNAME youtube-ui.l.google.com., A 172.217.20.14, A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206 (623)
14:54:35.208008 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.47034 > 202.12.27.33.53: 62559 A? www.youtube-nocookie.com. (42)
14:54:35.212423 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.22447 > 1.0.0.1.53: 34013+ PTR? b.8.4.0.c.b.e.f.f.f.c.1.a.5.e.7.0.0.0.0.0.0.0.0.0.0.0.0.0.8.e.f.ip6.arpa. (90)
14:54:35.286075 Port2_ppp, IN: IP 202.12.27.33.53 > XXX.XXX.XXX.XXX.47034: 62559 9/13/13 CNAME youtube-ui.l.google.com., A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14 (623)
14:54:35.293256 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.22447: 34013 NXDomain 0/0/0 (90)
14:54:35.490838 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.33388 > 8.8.8.8.53: 5748+ A? login.microsoft.com. (37)
14:54:35.492483 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.49145 > 1.0.0.1.53: 5716+ A? login.microsoftonline.com. (43)
14:54:35.610476 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.33388: 5748 19/13/37 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.akadns.net., A 20.190.159.68, A 20.190.159.64, A 20.190.159.23, A 20.190.159.75, A 20.190.159.4, A 20.190.159.2, A 20.190.159.73, A 40.126.31.67, A 20.190.159.69, A 40.126.31.64, A 40.126.31.68, A 20.190.159.70, A 40.126.31.70, A 20.190.159.5, A 20.190.159.3, A 20.190.159.19 (1231)
14:54:35.615944 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.49145: 5716 23/13/13 CNAME ak.privatelink.msidentity.com., CNAME www.tm.ak.prd.aadg.trafficmanager.net., A 20.190.159.72, A 20.190.159.70, A 20.190.159.22, A 40.126.31.70, A 20.190.159.1, A 40.126.32.69, A 40.126.32.73, A 20.190.160.15, A 20.190.160.13, A 20.190.160.12, A 40.126.32.132, A 40.126.32.135, A 40.126.32.67, A 20.190.159.5, A 40.126.32.75, A 40.126.32.139, A 40.126.32.137, A 20.190.160.23, A 20.190.160.21, A 20.190.159.3, A 40.126.31.64 (886)
14:54:36.072334 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.57282 > 1.0.0.1.53: 47945+ A? optimizationguide-pa.googleapis.com. (53)
14:54:36.073780 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.49211 > 1.0.0.1.53: 50591+ A? www.sophos.com. (32)
14:54:36.073788 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.60193 > 1.0.0.1.53: 36540+ A? fonts.googleapis.com. (38)
14:54:36.073858 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.49782 > 1.0.0.1.53: 260+ A? dev.visualwebsiteoptimizer.com. (48)
14:54:36.079430 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.62873 > 1.0.0.1.53: 44724+ A? safebrowsing.google.com. (41)
14:54:36.098878 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.57282: 47945 1/13/13 A 142.250.180.202 (488)
14:54:36.105559 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.60193: 36540 1/13/13 A 142.251.39.10 (473)
14:54:36.107436 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.49782: 260 1/13/13 A 34.96.102.137 (483)
14:54:36.108053 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.57282 > 1.0.0.1.53: 9432+ A? cdn.cookielaw.org. (35)
14:54:36.116924 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.62873: 44724 2/4/3 CNAME sb.l.google.com., A 142.251.39.78 (196)
14:54:36.172748 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.57282: 9432 2/13/13 A 104.16.149.64, A 104.16.148.64 (486)
14:54:36.183902 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.49211: 50591 3/13/13 CNAME www.sophos.com.edgekey.net., CNAME e6203.b.akamaiedge.net., A 23.7.199.174 (537)
14:54:36.726980 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.14191 > 8.8.8.8.53: 60882+ A? 4.sophosxl.net. (32)
14:54:36.729857 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.14191: 60882 8/13/13 A 52.214.200.136, A 52.214.157.208, A 52.19.6.81, A 34.241.156.140, A 54.171.66.20, A 52.30.153.100, A 3.248.133.40, A 52.48.106.161 (576)
14:54:37.282466 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.14630 > 4.2.2.2.53: 46519+ A? www.youtube-nocookie.com. (42)
14:54:37.339830 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.14630: 46519 9/13/13 CNAME youtube-ui.l.google.com., A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206 (623)
14:54:37.840317 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.61369 > 1.0.0.1.53: 64922+ A? www4.bing.com. (31)
14:54:37.840523 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.44784 > 1.0.0.1.53: 23938+ A? www.youtube.com. (33)
14:54:37.840597 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.8845 > 1.0.0.1.53: 63665+ A? login.windows.net. (35)
14:54:37.864230 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.44784: 23938 9/13/13 CNAME youtube-ui.l.google.com., A 172.217.20.14, A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206 (614)
14:54:37.884127 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.8845: 63665 27/13/29 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.trafficmanager.net., A 20.190.160.15, A 20.190.159.3, A 20.190.160.21, A 40.126.32.132, A 20.190.160.13, A 40.126.31.64, A 40.126.32.137, A 40.126.32.139, A 40.126.32.75, A 40.126.32.67, A 40.126.31.68, A 20.190.159.70, A 20.190.159.72, A 20.190.160.23, A 20.190.159.5, A 20.190.159.69, A 20.190.159.1, A 20.190.159.19, A 40.126.31.72, A 20.190.159.22, A 40.126.31.70, A 40.126.32.73, A 20.190.160.12, A 40.126.32.69 (1229)
14:54:37.916887 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.61369: 64922 5/13/13 CNAME www4-www4.bing.com.trafficmanager.net., CNAME www4.bing.com.edgekey.net., CNAME e86303.dscx.akamaiedge.net., A 2.23.97.178, A 2.23.97.241 (603)
14:54:38.041354 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.22448 > 1.0.0.1.53: 9894+ A? www.google.co.ma. (34)
14:54:38.041511 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.15627 > 1.0.0.1.53: 16562+ A? www.google.md. (31)
14:54:38.041662 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.33114 > 1.0.0.1.53: 5480+ A? www.google.ml. (31)
14:54:38.208505 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.33114: 5480 1/13/13 A 142.250.180.195 (466)
14:54:38.208782 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.41217 > 192.5.5.241.53: 14789 A? www.youtube-nocookie.com. (42)
14:54:38.211388 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.22448: 9894 1/13/13 A 142.251.39.67 (469)
14:54:38.227697 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.15627: 16562 1/13/13 A 142.250.180.227 (466)
14:54:38.403406 Port2_ppp, IN: IP 192.5.5.241.53 > XXX.XXX.XXX.XXX.41217: 14789 9/13/13 CNAME youtube-ui.l.google.com., A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14 (623)
14:54:38.510760 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.20158 > 4.2.2.2.53: 63043+ A? login.microsoft.com. (37)
14:54:38.510798 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.12297 > 8.8.8.8.53: 64024+ A? login.microsoftonline.com. (43)
14:54:38.604977 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.20158: 63043 19/13/37 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.akadns.net., A 20.190.159.73, A 40.126.31.67, A 20.190.159.69, A 40.126.31.64, A 40.126.31.68, A 20.190.159.70, A 40.126.31.70, A 20.190.159.5, A 20.190.159.3, A 20.190.159.19, A 20.190.159.68, A 20.190.159.64, A 20.190.159.23, A 20.190.159.75, A 20.190.159.4, A 20.190.159.2 (1231)
14:54:38.609870 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.12297: 64024 15/13/13 CNAME ak.privatelink.msidentity.com., CNAME www.tm.ak.prd.aadg.trafficmanager.net., A 20.190.160.21, A 40.126.32.69, A 40.126.32.73, A 20.190.160.15, A 20.190.160.13, A 20.190.160.12, A 40.126.32.132, A 40.126.32.135, A 40.126.32.67, A 40.126.32.75, A 40.126.32.139, A 40.126.32.137, A 20.190.160.23 (758)
14:54:39.155341 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.24487 > 193.0.14.129.53: 64166 A? www4.bing.com. (31)
14:54:39.305572 Port2_ppp, IN: IP 193.0.14.129.53 > XXX.XXX.XXX.XXX.24487: 64166 5/13/13 CNAME www4-www4.bing.com.trafficmanager.net., CNAME www4.bing.com.edgekey.net., CNAME e86303.dscx.akamaiedge.net., A 2.23.97.178, A 2.23.97.241 (603)
14:54:39.746800 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.3523 > 4.2.2.2.53: 54434+ A? 4.sophosxl.net. (32)
14:54:39.756139 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.3523: 54434 8/13/13 A 52.214.157.208, A 52.19.6.81, A 34.241.156.140, A 54.171.66.20, A 52.30.153.100, A 3.248.133.40, A 52.48.106.161, A 52.214.200.136 (576)
14:54:40.517007 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.60193 > 1.0.0.1.53: 1871+ A? builder.lift.acquia.com. (41)
14:54:40.517463 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.49782 > 1.0.0.1.53: 46273+ A? img03.en25.com. (32)
14:54:40.517594 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.62873 > 1.0.0.1.53: 13108+ A? stats.g.doubleclick.net. (41)
14:54:40.523498 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.62873: 13108 5/13/13 CNAME stats.l.doubleclick.net., A 142.250.102.157, A 142.250.102.155, A 142.250.102.156, A 142.250.102.154 (543)
14:54:40.535576 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.57282 > 1.0.0.1.53: 61807+ A? www.googletagmanager.com. (42)
14:54:40.548739 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.57282: 61807 2/13/13 CNAME www-googletagmanager.l.google.com., A 142.250.180.232 (521)
14:54:40.553863 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.62873 > 1.0.0.1.53: 54007+ A? id.rlcdn.com. (30)
14:54:40.566076 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.62873: 54007 1/13/13 A 35.244.174.68 (465)
14:54:40.568525 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.57282 > 1.0.0.1.53: 39698+ A? scripts.demandbase.com. (40)
14:54:40.573640 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.60193: 1871 4/13/13 A 52.84.106.58, A 52.84.106.48, A 52.84.106.41, A 52.84.106.44 (524)
14:54:40.584634 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.49782: 46273 3/13/13 CNAME wildcard.en25.com.edgekey.net., CNAME e5763.g.akamaiedge.net., A 104.94.241.61 (540)
14:54:40.635812 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.30338 > 192.203.230.10.53: 29588 A? 4.sophosxl.net. (32)
14:54:40.642204 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.57282: 39698 4/13/13 A 52.84.106.8, A 52.84.106.104, A 52.84.106.66, A 52.84.106.125 (523)
14:54:40.648380 Port2_ppp, IN: IP 192.203.230.10.53 > XXX.XXX.XXX.XXX.30338: 29588 8/13/13 A 52.19.6.81, A 34.241.156.140, A 54.171.66.20, A 52.30.153.100, A 3.248.133.40, A 52.48.106.161, A 52.214.200.136, A 52.214.157.208 (576)
14:54:40.653300 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.62873 > 1.0.0.1.53: 60199+ A? fonts.gstatic.com. (35)
14:54:40.671762 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.62873: 60199 2/13/13 CNAME gstaticadssl.l.google.com., A 142.251.39.3 (506)
14:54:40.672905 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.60193 > 1.0.0.1.53: 8154+ A? s.go-mpulse.net. (33)
14:54:40.701815 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.57282 > 1.0.0.1.53: 57641+ A? api.company-target.com. (40)
14:54:40.712858 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.52235 > 1.0.0.1.53: 60570+ AAAA? xg-up2date-patterns.sophosupd.com. (51)
14:54:40.719465 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.57282: 57641 4/13/13 A 65.9.25.15, A 65.9.25.38, A 65.9.25.58, A 65.9.25.122 (523)
14:54:40.735486 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.60193: 8154 3/13/13 CNAME ip46.go-mpulse.net.edgekey.net., CNAME e4518.dscx.akamaiedge.net., A 2.18.168.136 (542)
14:54:40.760212 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.52235: 60570 0/13/13 (470)
14:54:40.760315 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.54983 > 8.8.8.8.53: 5135+ AAAA? xg-up2date-patterns.sophosupd.com. (51)
14:54:40.784966 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.54983: 5135 0/13/13 (470)
14:54:40.860203 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.6848 > 8.8.8.8.53: 60875+ A? www4.bing.com. (31)
14:54:40.860239 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.38997 > 8.8.8.8.53: 56213+ A? www.youtube.com. (33)
14:54:40.860273 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.57861 > 8.8.8.8.53: 18158+ A? login.windows.net. (35)
14:54:40.865986 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.6848: 60875 5/13/13 CNAME www4-www4.bing.com.trafficmanager.net., CNAME www4.bing.com.edgekey.net., CNAME e86303.dscx.akamaiedge.net., A 2.23.97.178, A 2.23.97.241 (603)
14:54:40.871851 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.38997: 56213 9/13/13 CNAME youtube-ui.l.google.com., A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14, A 142.251.39.46, A 142.251.39.78 (614)
14:54:40.883559 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.57861: 18158 27/13/29 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.trafficmanager.net., A 20.190.159.72, A 20.190.160.23, A 20.190.159.5, A 20.190.159.69, A 20.190.159.1, A 20.190.159.19, A 40.126.31.72, A 20.190.159.22, A 40.126.31.70, A 40.126.32.73, A 20.190.160.12, A 40.126.32.69, A 20.190.160.15, A 20.190.159.3, A 20.190.160.21, A 40.126.32.132, A 20.190.160.13, A 40.126.31.64, A 40.126.32.137, A 40.126.32.139, A 40.126.32.75, A 40.126.32.67, A 40.126.31.68, A 20.190.159.70 (1229)
14:54:41.229147 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.52794 > 198.41.0.4.53: 3919 A? www.youtube-nocookie.com. (42)
14:54:41.281794 Port2_ppp, IN: IP 198.41.0.4.53 > XXX.XXX.XXX.XXX.52794: 3919 9/13/13 CNAME youtube-ui.l.google.com., A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206 (623)
14:54:41.530010 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.51512 > 199.7.83.42.53: 37024 A? login.microsoft.com. (37)
14:54:41.530053 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.14730 > 4.2.2.2.53: 49258+ A? login.microsoftonline.com. (43)
14:54:41.551131 Port2_ppp, IN: IP 199.7.83.42.53 > XXX.XXX.XXX.XXX.51512: 37024 19/13/37 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.akadns.net., A 40.126.31.70, A 20.190.159.5, A 20.190.159.3, A 20.190.159.19, A 20.190.159.68, A 20.190.159.64, A 20.190.159.23, A 20.190.159.75, A 20.190.159.4, A 20.190.159.2, A 20.190.159.73, A 40.126.31.67, A 20.190.159.69, A 40.126.31.64, A 40.126.31.68, A 20.190.159.70 (1231)
14:54:41.557154 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.14730: 49258 15/13/13 CNAME ak.privatelink.msidentity.com., CNAME www.tm.ak.prd.aadg.trafficmanager.net., A 20.190.160.15, A 20.190.160.13, A 20.190.160.12, A 40.126.32.132, A 40.126.32.135, A 40.126.32.67, A 40.126.32.75, A 40.126.32.139, A 40.126.32.137, A 20.190.160.23, A 20.190.160.21, A 40.126.32.69, A 40.126.32.73 (758)
14:54:42.046659 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.1127 > 192.33.4.12.53: 62009 A? wp.m.bing.com. (31)
14:54:42.081106 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.57098 > 1.0.0.1.53: 7652+ A? www.google.fi. (31)
14:54:42.171368 Port2_ppp, IN: IP 192.33.4.12.53 > XXX.XXX.XXX.XXX.1127: 62009 5/13/15 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (644)
14:54:42.250531 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.57098: 7652 1/13/13 A 142.251.39.67 (466)
14:54:42.485134 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.62873 > 1.0.0.1.53: 38696+ A? match.prod.bidr.io. (36)
14:54:42.550124 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.32547 > 192.228.79.201.53: 44664 A? login.microsoft.com. (37)
14:54:42.621193 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.62873: 38696 8/13/13 A 54.154.238.203, A 52.209.232.242, A 52.48.120.34, A 52.212.188.172, A 54.220.105.73, A 52.19.186.186, A 52.210.67.20, A 52.212.196.36 (583)
14:54:42.662743 Port2_ppp, IN: IP 192.228.79.201.53 > XXX.XXX.XXX.XXX.32547: 44664 27/13/29 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.trafficmanager.net., A 20.190.159.1, A 20.190.159.19, A 40.126.31.72, A 20.190.159.22, A 40.126.31.70, A 40.126.32.73, A 20.190.160.12, A 40.126.32.69, A 20.190.160.15, A 20.190.159.3, A 20.190.160.21, A 40.126.32.132, A 20.190.160.13, A 40.126.31.64, A 40.126.32.137, A 40.126.32.139, A 40.126.32.75, A 40.126.32.67, A 40.126.31.68, A 20.190.159.70, A 20.190.159.72, A 20.190.160.23, A 20.190.159.5, A 20.190.159.69 (1231)
14:54:43.569460 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.24217 > 192.5.5.241.53: 41741 A? login.microsoft.com. (37)
14:54:43.582281 Port2_ppp, IN: IP 192.5.5.241.53 > XXX.XXX.XXX.XXX.24217: 41741 19/13/37 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.akadns.net., A 20.190.159.68, A 20.190.159.64, A 20.190.159.23, A 20.190.159.75, A 20.190.159.4, A 20.190.159.2, A 20.190.159.73, A 40.126.31.67, A 20.190.159.69, A 40.126.31.64, A 40.126.31.68, A 20.190.159.70, A 40.126.31.70, A 20.190.159.5, A 20.190.159.3, A 20.190.159.19 (1231)
14:54:43.873709 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.39700 > 4.2.2.2.53: 56739+ A? www4.bing.com. (31)
14:54:43.873761 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.65415 > 4.2.2.2.53: 36403+ A? www.youtube.com. (33)
14:54:43.873792 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.13132 > 4.2.2.2.53: 63870+ A? login.windows.net. (35)
14:54:43.901388 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.39700: 56739 5/13/13 CNAME www4-www4.bing.com.trafficmanager.net., CNAME www4.bing.com.edgekey.net., CNAME e86303.dscx.akamaiedge.net., A 2.23.97.178, A 2.23.97.241 (603)
14:54:43.904865 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.65415: 36403 9/13/13 CNAME youtube-ui.l.google.com., A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14 (614)
14:54:43.919411 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.13132: 63870 27/13/29 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.trafficmanager.net., A 40.126.31.70, A 40.126.32.73, A 20.190.160.12, A 40.126.32.69, A 20.190.160.15, A 20.190.159.3, A 20.190.160.21, A 40.126.32.132, A 20.190.160.13, A 40.126.31.64, A 40.126.32.137, A 40.126.32.139, A 40.126.32.75, A 40.126.32.67, A 40.126.31.68, A 20.190.159.70, A 20.190.159.72, A 20.190.160.23, A 20.190.159.5, A 20.190.159.69, A 20.190.159.1, A 20.190.159.19, A 40.126.31.72, A 20.190.159.22 (1229)
14:54:44.074449 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.45830 > 1.0.0.1.53: 21122+ A? www.google.com.co. (35)
14:54:44.174576 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.45830: 21122 1/13/13 A 142.251.39.67 (470)
14:54:44.187924 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.23204 > 1.0.0.1.53: 37375+ A? 4.sophosxl.net. (32)
14:54:44.193470 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.23204: 37375 8/13/13 A 34.241.156.140, A 54.171.66.20, A 52.30.153.100, A 3.248.133.40, A 52.48.106.161, A 52.214.200.136, A 52.214.157.208, A 52.19.6.81 (576)
14:54:44.196343 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.57282 > 1.0.0.1.53: 55697+ A? sessions.bugsnag.com. (38)
14:54:44.199570 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.57282: 55697 1/13/13 A 35.190.88.7 (473)
14:54:44.201587 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.57282 > 1.0.0.1.53: 60346+ A? us-east-1-decisionapi.lift.acquia.com. (55)
14:54:44.235765 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.57282: 60346 3/13/13 A 34.234.5.249, A 54.196.241.159, A 50.16.174.225 (522)
14:54:44.249249 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.48232 > 128.63.2.53.53: 45297 A? www.youtube-nocookie.com. (42)
14:54:44.253107 Port2_ppp, IN: IP 128.63.2.53.53 > XXX.XXX.XXX.XXX.48232: 45297 9/13/13 CNAME youtube-ui.l.google.com., A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110 (623)
14:54:44.365210 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.57282 > 1.0.0.1.53: 18060+ A? 9570324.fls.doubleclick.net. (45)
14:54:44.380028 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.62231 > 1.0.0.1.53: 46+ A? 9816844.fls.doubleclick.net. (45)
14:54:44.420289 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.57282: 18060 2/13/13 CNAME dart.l.doubleclick.net., A 172.217.19.102 (498)
14:54:44.434845 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.62231: 46 2/13/13 CNAME dart.l.doubleclick.net., A 172.217.19.102 (498)
14:54:44.489243 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.57282 > 1.0.0.1.53: 55635+ A? c.go-mpulse.net. (33)
14:54:44.548565 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.57282: 55635 3/13/13 CNAME wildcard46.go-mpulse.net.edgekey.net., CNAME e4518.dscapi7.akamaiedge.net., A 2.18.168.136 (551)
14:54:44.572670 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.13461 > 192.58.128.30.53: 53880 A? login.microsoft.com. (37)
14:54:44.581678 Port2_ppp, IN: IP 192.58.128.30.53 > XXX.XXX.XXX.XXX.13461: 53880 19/13/37 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.akadns.net., A 20.190.159.4, A 20.190.159.2, A 20.190.159.73, A 40.126.31.67, A 20.190.159.69, A 40.126.31.64, A 40.126.31.68, A 20.190.159.70, A 40.126.31.70, A 20.190.159.5, A 20.190.159.3, A 20.190.159.19, A 20.190.159.68, A 20.190.159.64, A 20.190.159.23, A 20.190.159.75 (1231)
14:54:45.167441 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.26674 > 192.5.5.241.53: 3841 A? xg-up2date-patterns.sophosupd.com. (51)
14:54:45.175001 Port2_ppp, IN: IP 192.5.5.241.53 > XXX.XXX.XXX.XXX.26674: 3841 4/13/13 CNAME xg-up2date-patterns.sophosupd.com.edgekey.net., CNAME e13687.d.akamaiedge.net., A 2.21.185.157, A 23.205.49.159 (592)
14:54:45.324748 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.62231 > 1.0.0.1.53: 12579+ A? www.google.hr. (31)
14:54:45.335367 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.62231: 12579 1/13/13 A 142.251.39.3 (466)
14:54:45.592302 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.22228 > 192.36.148.17.53: 38817 A? login.microsoft.com. (37)
14:54:45.601591 Port2_ppp, IN: IP 192.36.148.17.53 > XXX.XXX.XXX.XXX.22228: 38817 27/13/29 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.trafficmanager.net., A 20.190.160.15, A 20.190.159.3, A 20.190.160.21, A 40.126.32.132, A 20.190.160.13, A 40.126.31.64, A 40.126.32.137, A 40.126.32.139, A 40.126.32.75, A 40.126.32.67, A 40.126.31.68, A 20.190.159.70, A 20.190.159.72, A 20.190.160.23, A 20.190.159.5, A 20.190.159.69, A 20.190.159.1, A 20.190.159.19, A 40.126.31.72, A 20.190.159.22, A 40.126.31.70, A 40.126.32.73, A 20.190.160.12, A 40.126.32.69 (1231)
14:54:46.313891 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.62231 > 1.0.0.1.53: 63433+ A? segments.company-target.com. (45)
14:54:46.394815 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.62231: 63433 4/13/13 A 52.84.106.52, A 52.84.106.86, A 52.84.106.48, A 52.84.106.120 (528)
14:54:46.612398 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.44694 > 202.12.27.33.53: 21560 A? login.microsoft.com. (37)
14:54:46.621481 Port2_ppp, IN: IP 202.12.27.33.53 > XXX.XXX.XXX.XXX.44694: 21560 19/13/37 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.akadns.net., A 40.126.31.70, A 20.190.159.5, A 20.190.159.3, A 20.190.159.19, A 20.190.159.68, A 20.190.159.64, A 20.190.159.23, A 20.190.159.75, A 20.190.159.4, A 20.190.159.2, A 20.190.159.73, A 40.126.31.67, A 20.190.159.69, A 40.126.31.64, A 40.126.31.68, A 20.190.159.70 (1231)
14:54:47.208393 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.63640 > 8.8.8.8.53: 43413+ A? 4.sophosxl.net. (32)
14:54:47.210994 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.63640: 43413 8/13/13 A 54.171.66.20, A 52.30.153.100, A 3.248.133.40, A 52.48.106.161, A 52.214.200.136, A 52.214.157.208, A 52.19.6.81, A 34.241.156.140 (576)
14:54:47.269189 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.4711 > 199.7.83.42.53: 21336 A? www.youtube-nocookie.com. (42)
14:54:47.284664 Port2_ppp, IN: IP 199.7.83.42.53 > XXX.XXX.XXX.XXX.4711: 21336 9/13/13 CNAME youtube-ui.l.google.com., A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14 (623)
14:54:47.632180 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.19774 > 199.7.91.13.53: 65191 A? login.microsoft.com. (37)
14:54:47.639301 Port2_ppp, IN: IP 199.7.91.13.53 > XXX.XXX.XXX.XXX.19774: 65191 27/13/29 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.trafficmanager.net., A 40.126.31.64, A 40.126.32.137, A 40.126.32.139, A 40.126.32.75, A 40.126.32.67, A 40.126.31.68, A 20.190.159.70, A 20.190.159.72, A 20.190.160.23, A 20.190.159.5, A 20.190.159.69, A 20.190.159.1, A 20.190.159.19, A 40.126.31.72, A 20.190.159.22, A 40.126.31.70, A 40.126.32.73, A 20.190.160.12, A 40.126.32.69, A 20.190.160.15, A 20.190.159.3, A 20.190.160.21, A 40.126.32.132, A 20.190.160.13 (1231)
14:54:47.732251 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.26444 > 1.0.0.1.53: 37227+ A? www.bing.com. (30)
14:54:47.738398 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.26444: 37227 5/13/15 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.a-msedge.net., A 204.79.197.200, A 13.107.21.200 (643)
14:54:48.146782 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.50592 > 1.0.0.1.53: 52531+ A? adservice.google.com. (38)
14:54:48.150504 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.50592: 52531 1/4/3 A 142.250.180.226 (174)
14:54:48.652370 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.57684 > 193.0.14.129.53: 42929 A? login.microsoft.com. (37)
14:54:48.662126 Port2_ppp, IN: IP 193.0.14.129.53 > XXX.XXX.XXX.XXX.57684: 42929 19/13/37 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.akadns.net., A 20.190.159.68, A 20.190.159.64, A 20.190.159.23, A 20.190.159.75, A 20.190.159.4, A 20.190.159.2, A 20.190.159.73, A 40.126.31.67, A 20.190.159.69, A 40.126.31.64, A 40.126.31.68, A 20.190.159.70, A 40.126.31.70, A 20.190.159.5, A 20.190.159.3, A 20.190.159.19 (1231)
14:54:49.054272 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.61919 > 1.0.0.1.53: 55107+ A? www.google.hr. (31)
14:54:49.057019 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.61919: 55107 1/13/13 A 142.251.39.3 (466)
14:54:49.057130 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.50592 > 1.0.0.1.53: 3100+ A? s1777052651.t.eloqua.com. (42)
14:54:49.110883 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.50592: 3100 2/13/13 CNAME p06a.t.eloqua.com., A 192.29.202.14 (496)
14:54:49.139440 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.50592 > 1.0.0.1.53: 51054+ A? j.6sc.co. (26)
14:54:49.144447 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.50592: 51054 3/13/13 CNAME j.6sc.co.edgekey.net., CNAME e7313.g.akamaiedge.net., A 184.30.220.95 (525)
14:54:49.672480 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.44418 > 128.63.2.53.53: 52579 A? login.microsoft.com. (37)
14:54:49.695028 Port2_ppp, IN: IP 128.63.2.53.53 > XXX.XXX.XXX.XXX.44418: 52579 27/13/29 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.trafficmanager.net., A 40.126.32.73, A 20.190.160.12, A 40.126.32.69, A 20.190.160.15, A 20.190.159.3, A 20.190.160.21, A 40.126.32.132, A 20.190.160.13, A 40.126.31.64, A 40.126.32.137, A 40.126.32.139, A 40.126.32.75, A 40.126.32.67, A 40.126.31.68, A 20.190.159.70, A 20.190.159.72, A 20.190.160.23, A 20.190.159.5, A 20.190.159.69, A 20.190.159.1, A 20.190.159.19, A 40.126.31.72, A 20.190.159.22, A 40.126.31.70 (1231)
14:54:50.077617 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.50592 > 1.0.0.1.53: 47399+ A? siteimproveanalytics.com. (42)
14:54:50.167909 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.50592: 47399 2/13/13 A 188.114.96.13, A 188.114.97.13 (493)
14:54:50.175506 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.18026 > 202.12.27.33.53: 28062 A? www4.bing.com. (31)
14:54:50.202421 Port2_ppp, IN: IP 202.12.27.33.53 > XXX.XXX.XXX.XXX.18026: 28062 5/13/13 CNAME www4-www4.bing.com.trafficmanager.net., CNAME www4.bing.com.edgekey.net., CNAME e86303.dscx.akamaiedge.net., A 2.23.97.178, A 2.23.97.241 (603)
14:54:50.227612 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.10271 > 4.2.2.2.53: 34789+ A? 4.sophosxl.net. (32)
14:54:50.275749 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.44695 > 1.0.0.1.53: 42341+ A? www2.bing.com. (31)
14:54:50.327141 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.10271: 34789 8/13/13 A 52.214.200.136, A 52.30.4.176, A 52.209.136.153, A 52.213.69.211, A 34.248.135.181, A 34.247.61.87, A 34.254.149.68, A 52.211.149.113 (576)
14:54:50.380289 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.44695: 42341 5/13/15 CNAME www2-www2.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.a-msedge.net., A 13.107.21.200, A 204.79.197.200 (646)
14:54:50.692752 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.48075 > 192.203.230.10.53: 2692 A? login.microsoft.com. (37)
14:54:50.721929 Port2_ppp, IN: IP 192.203.230.10.53 > XXX.XXX.XXX.XXX.48075: 2692 19/13/37 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.akadns.net., A 40.126.31.67, A 20.190.159.69, A 40.126.31.64, A 40.126.31.68, A 20.190.159.70, A 40.126.31.70, A 20.190.159.5, A 20.190.159.3, A 20.190.159.19, A 20.190.159.68, A 20.190.159.64, A 20.190.159.23, A 20.190.159.75, A 20.190.159.4, A 20.190.159.2, A 20.190.159.73 (1231)
14:54:50.752110 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.45248 > 8.8.8.8.53: 49232+ A? www.bing.com. (30)
14:54:50.770434 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.45248: 49232 5/13/15 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 131.253.33.200, A 13.107.22.200 (643)
14:54:51.713602 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.3586 > 192.33.4.12.53: 61859 A? login.microsoft.com. (37)
14:54:51.735855 Port2_ppp, IN: IP 192.33.4.12.53 > XXX.XXX.XXX.XXX.3586: 61859 27/13/29 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.trafficmanager.net., A 40.126.32.67, A 40.126.31.68, A 20.190.159.70, A 20.190.159.72, A 20.190.160.23, A 20.190.159.5, A 20.190.159.69, A 20.190.159.1, A 20.190.159.19, A 40.126.31.72, A 20.190.159.22, A 40.126.31.70, A 40.126.32.73, A 20.190.160.12, A 40.126.32.69, A 20.190.160.15, A 20.190.159.3, A 20.190.160.21, A 40.126.32.132, A 20.190.160.13, A 40.126.31.64, A 40.126.32.137, A 40.126.32.139, A 40.126.32.75 (1231)
14:54:51.913267 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.9688 > 1.0.0.1.53: 5572+ A? wp.m.bing.com. (31)
14:54:51.996897 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.9688: 5572 5/13/15 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.a-msedge.net., A 13.107.21.200, A 204.79.197.200 (644)
14:54:52.013652 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.32548 > 1.0.0.1.53: 62085+ A? www.google.co.jp. (34)
14:54:52.154002 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.32548: 62085 1/13/13 A 172.217.20.3 (469)
14:54:52.733911 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.33409 > 192.112.36.4.53: 61065 A? login.microsoft.com. (37)
14:54:52.770520 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.60852 > 1.0.0.1.53: 33748+ A? secure.adnxs.com. (34)
14:54:52.771438 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.61992 > 1.0.0.1.53: 37197+ A? ipv6.6sc.co. (29)
14:54:52.817579 Port2_ppp, IN: IP 192.112.36.4.53 > XXX.XXX.XXX.XXX.33409: 61065 19/13/37 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.akadns.net., A 20.190.159.5, A 20.190.159.3, A 20.190.159.19, A 20.190.159.68, A 20.190.159.64, A 20.190.159.23, A 20.190.159.75, A 20.190.159.4, A 20.190.159.2, A 20.190.159.73, A 40.126.31.67, A 20.190.159.69, A 40.126.31.64, A 40.126.31.68, A 20.190.159.70, A 40.126.31.70 (1231)
14:54:52.821499 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.52090 > 1.0.0.1.53: 56298+ A? px.spiceworks.com. (35)
14:54:52.831730 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.60852: 33748 11/13/13 CNAME g.geogslb.com., CNAME ib.anycast.adnxs.com., A 37.252.172.37, A 37.252.173.215, A 37.252.173.62, A 37.252.173.38, A 37.252.173.27, A 37.252.172.249, A 37.252.172.123, A 37.252.172.250, A 37.252.173.22 (646)
14:54:52.840793 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.61992: 37197 3/13/13 CNAME ipv6.6sc.co.edgekey.net., CNAME e7313.dscb.akamaiedge.net., A 104.96.140.70 (534)
14:54:52.855306 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.60852 > 1.0.0.1.53: 50845+ A? snap.licdn.com. (32)
14:54:52.892175 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.52090: 56298 2/13/13 CNAME a6nrdb6.x.incapdns.net., A 45.60.13.212 (503)
14:54:52.917673 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.60852: 50845 7/13/13 CNAME od.linkedin.edgesuite.net., CNAME a1916.dscg2.akamai.net., A 2.22.22.83, A 2.22.22.177, A 2.22.22.138, A 2.22.22.74, A 2.22.22.82 (600)
14:54:53.066762 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.18698 > 192.228.79.201.53: 29206 A? wp.m.bing.com. (31)
14:54:53.106153 Port2_ppp, IN: IP 192.228.79.201.53 > XXX.XXX.XXX.XXX.18698: 29206 5/13/15 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.a-msedge.net., A 204.79.197.200, A 13.107.21.200 (644)
14:54:53.295709 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.41864 > 8.8.8.8.53: 51398+ A? www2.bing.com. (31)
14:54:53.300795 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.41864: 51398 5/13/15 CNAME www2-www2.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 131.253.33.200, A 13.107.22.200 (646)
14:54:53.754409 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.24283 > 198.41.0.4.53: 31549 A? login.microsoft.com. (37)
14:54:53.754451 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.41774 > 4.2.2.2.53: 51267+ A? www.bing.com. (30)
14:54:53.766935 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.61992 > 1.0.0.1.53: 9160+ A? connect.facebook.net. (38)
14:54:53.822652 Port2_ppp, IN: IP 198.41.0.4.53 > XXX.XXX.XXX.XXX.24283: 31549 27/13/29 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.trafficmanager.net., A 20.190.160.23, A 20.190.159.5, A 20.190.159.69, A 20.190.159.1, A 20.190.159.19, A 40.126.31.72, A 20.190.159.22, A 40.126.31.70, A 40.126.32.73, A 20.190.160.12, A 40.126.32.69, A 20.190.160.15, A 20.190.159.3, A 20.190.160.21, A 40.126.32.132, A 20.190.160.13, A 40.126.31.64, A 40.126.32.137, A 40.126.32.139, A 40.126.32.75, A 40.126.32.67, A 40.126.31.68, A 20.190.159.70, A 20.190.159.72 (1231)
14:54:53.828735 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.41774: 51267 5/13/15 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.a-msedge.net., A 204.79.197.200, A 13.107.21.200 (643)
14:54:53.834850 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.61992: 9160 2/13/13 CNAME scontent.xx.fbcdn.net., A 157.240.30.27 (502)
14:54:53.856146 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.1657 > 1.0.0.1.53: 985+ A? 4.sophosxl.net. (32)
14:54:53.920913 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.1657: 985 8/13/13 A 52.30.4.176, A 52.209.136.153, A 52.213.69.211, A 34.248.135.181, A 34.247.61.87, A 34.254.149.68, A 52.211.149.113, A 52.214.200.136 (576)
14:54:54.691095 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.49687 > 199.7.91.13.53: 11413 A? login.microsoftonline.com. (43)
14:54:54.774352 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.4564 > 199.7.83.42.53: 29756 A? login.microsoft.com. (37)
14:54:54.826718 Port2_ppp, IN: IP 199.7.91.13.53 > XXX.XXX.XXX.XXX.49687: 11413 21/13/13 CNAME ak.privatelink.msidentity.com., CNAME www.tm.ak.prd.aadg.trafficmanager.net., A 20.190.159.5, A 20.190.159.1, A 20.190.159.22, A 20.190.159.70, A 40.126.31.68, A 20.190.159.69, A 20.190.159.3, A 40.126.32.132, A 40.126.32.135, A 40.126.32.67, A 40.126.32.139, A 40.126.32.137, A 20.190.160.21, A 40.126.32.69, A 40.126.32.73, A 20.190.160.15, A 20.190.160.13, A 20.190.160.12, A 40.126.31.64 (854)
14:54:54.870627 Port2_ppp, IN: IP 199.7.83.42.53 > XXX.XXX.XXX.XXX.4564: 29756 19/13/37 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.akadns.net., A 20.190.159.64, A 20.190.159.23, A 20.190.159.75, A 20.190.159.4, A 20.190.159.2, A 20.190.159.73, A 40.126.31.67, A 20.190.159.69, A 40.126.31.64, A 40.126.31.68, A 20.190.159.70, A 40.126.31.70, A 20.190.159.5, A 20.190.159.3, A 20.190.159.19, A 20.190.159.68 (1231)
14:54:54.932851 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.51525 > 8.8.8.8.53: 45140+ A? wp.m.bing.com. (31)
14:54:55.006603 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.51525: 45140 5/13/15 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 131.253.33.200, A 13.107.22.200 (644)
14:54:56.013418 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.27675 > 1.0.0.1.53: 22689+ A? www.google.co.zw. (34)
14:54:56.055497 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.27675: 22689 1/13/13 A 142.251.39.3 (469)
14:54:56.186888 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.62915 > 198.41.0.4.53: 33947 A? xg-up2date-patterns.sophosupd.com. (51)
14:54:56.203631 Port2_ppp, IN: IP 198.41.0.4.53 > XXX.XXX.XXX.XXX.62915: 33947 4/13/13 CNAME xg-up2date-patterns.sophosupd.com.edgekey.net., CNAME e13687.d.akamaiedge.net., A 23.205.49.159, A 2.21.185.157 (592)
14:54:56.315935 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.48343 > 4.2.2.2.53: 8345+ A? www2.bing.com. (31)
14:54:56.552731 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.48343: 8345 5/13/15 CNAME www2-www2.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.a-msedge.net., A 204.79.197.200, A 13.107.21.200 (646)
14:54:56.609248 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.60852 > 1.0.0.1.53: 15961+ A? www.redditstatic.com. (38)
14:54:56.696058 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.49215 > 1.0.0.1.53: 60732+ A? static.ads-twitter.com. (40)
14:54:56.847263 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.60852: 15961 5/13/13 CNAME dualstack.reddit.map.fastly.net., A 151.101.1.140, A 151.101.65.140, A 151.101.129.140, A 151.101.193.140 (563)
14:54:56.875472 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.53452 > 8.8.8.8.53: 10829+ A? 4.sophosxl.net. (32)
14:54:56.895386 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.49215: 60732 2/13/13 CNAME platform.twitter.map.fastly.net., A 199.232.16.157 (517)
14:54:56.981660 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.53452: 10829 8/13/13 A 52.209.136.153, A 52.213.69.211, A 34.248.135.181, A 34.247.61.87, A 34.254.149.68, A 52.211.149.113, A 52.214.200.136, A 52.30.4.176 (576)
14:54:57.431466 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.52924 > 1.0.0.1.53: 55129+ A? a.quora.com. (29)
14:54:57.751242 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.25043 > 128.63.2.53.53: 57229 A? login.windows.net. (35)
14:54:57.794398 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.38093 > 192.228.79.201.53: 50425 A? login.microsoft.com. (37)
14:54:57.877812 Port2_ppp, IN: IP 128.63.2.53.53 > XXX.XXX.XXX.XXX.25043: 57229 27/13/29 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.trafficmanager.net., A 20.190.159.3, A 20.190.160.21, A 40.126.32.132, A 20.190.160.13, A 40.126.31.64, A 40.126.32.137, A 40.126.32.139, A 40.126.32.75, A 40.126.32.67, A 40.126.31.68, A 20.190.159.70, A 20.190.159.72, A 20.190.160.23, A 20.190.159.5, A 20.190.159.69, A 20.190.159.1, A 20.190.159.19, A 40.126.31.72, A 20.190.159.22, A 40.126.31.70, A 40.126.32.73, A 20.190.160.12, A 40.126.32.69, A 20.190.160.15 (1229)
14:54:57.940031 Port2_ppp, IN: IP 192.228.79.201.53 > XXX.XXX.XXX.XXX.38093: 50425 19/13/37 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.akadns.net., A 40.126.31.67, A 20.190.159.69, A 40.126.31.64, A 40.126.31.68, A 20.190.159.70, A 40.126.31.70, A 20.190.159.5, A 20.190.159.3, A 20.190.159.19, A 20.190.159.68, A 20.190.159.64, A 20.190.159.23, A 20.190.159.75, A 20.190.159.4, A 20.190.159.2, A 20.190.159.73 (1231)
14:54:57.940151 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.26175 > 4.2.2.2.53: 40928+ A? wp.m.bing.com. (31)
14:54:58.026071 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.26175: 40928 5/13/15 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 131.253.33.200, A 13.107.22.200 (644)
14:54:58.289551 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.59016 > 192.112.36.4.53: 23830 A? www.youtube-nocookie.com. (42)
14:54:58.361496 Port2_ppp, IN: IP 192.112.36.4.53 > XXX.XXX.XXX.XXX.59016: 23830 8/13/13 CNAME youtube-ui.l.google.com., A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 142.251.39.14, A 142.251.39.46 (607)
14:54:59.894789 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.42507 > 4.2.2.2.53: 53934+ A? 4.sophosxl.net. (32)
14:54:59.941961 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.42507: 53934 8/13/13 A 52.213.69.211, A 34.248.135.181, A 34.247.61.87, A 34.254.149.68, A 52.211.149.113, A 52.214.200.136, A 52.30.4.176, A 52.209.136.153 (576)
14:55:00.044369 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.32615 > 1.0.0.1.53: 12098+ A? www.google.co.nz. (34)
14:55:00.128488 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.32615: 12098 1/13/13 A 142.250.201.195 (469)
14:55:00.363397 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.63602 > 1.0.0.1.53: 16495+ A? js.adsrvr.org. (31)
14:55:00.492310 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.63602: 16495 2/13/13 CNAME dg2iu7dxxehbo.cloudfront.net., A 65.9.19.119 (505)
14:55:00.650299 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.58141 > 1.0.0.1.53: 1642+ A? s.yimg.com. (28)
14:55:00.795555 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.65049 > 1.0.0.1.53: 49989+ A? dzr-utm-amzn-eu-west-1-9af7.upe.p.hmr.sophos.com. (66)
14:55:00.795619 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.59510 > 192.5.5.241.53: 17007 A? login.microsoft.com. (37)
14:55:00.795671 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.20440 > 1.0.0.1.53: 27053+ AAAA? dzr-utm-amzn-eu-west-1-9af7.upe.p.hmr.sophos.com. (66)
14:55:00.804852 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.58141: 1642 3/13/13 CNAME edge.gycpi.b.yahoodns.net., A 87.248.119.251, A 87.248.119.252 (515)
14:55:00.886284 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.65049: 49989 3/13/13 A 54.217.122.195, A 34.253.123.11, A 34.249.168.191 (533)
14:55:00.897150 Port2_ppp, IN: IP 192.5.5.241.53 > XXX.XXX.XXX.XXX.59510: 17007 27/13/29 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.trafficmanager.net., A 40.126.31.64, A 40.126.32.137, A 40.126.32.139, A 40.126.32.75, A 40.126.32.67, A 40.126.31.68, A 20.190.159.70, A 20.190.159.72, A 20.190.160.23, A 20.190.159.5, A 20.190.159.69, A 20.190.159.1, A 20.190.159.19, A 40.126.31.72, A 20.190.159.22, A 40.126.31.70, A 40.126.32.73, A 20.190.160.12, A 40.126.32.69, A 20.190.160.15, A 20.190.159.3, A 20.190.160.21, A 40.126.32.132, A 20.190.160.13 (1231)
14:55:00.952639 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.20440: 27053 0/13/13 (485)
14:55:01.195143 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.42252 > 192.36.148.17.53: 18354 A? www4.bing.com. (31)
14:55:01.265940 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.49316 > 1.0.0.1.53: 1729+ A? clients1.google.com. (37)
14:55:01.266017 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.52394 > 1.0.0.1.53: 38661+ A? clients5.google.com. (37)
14:55:01.335591 Port2_ppp, IN: IP 192.36.148.17.53 > XXX.XXX.XXX.XXX.42252: 18354 5/13/13 CNAME www4-www4.bing.com.trafficmanager.net., CNAME www4.bing.com.edgekey.net., CNAME e86303.dscx.akamaiedge.net., A 2.22.89.186, A 2.22.89.159 (603)
14:55:01.384031 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.49316: 1729 4/4/3 CNAME clients.l.google.com., A 142.250.180.206, A 142.251.39.46, A 142.251.39.14 (229)
14:55:01.388605 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.52394: 38661 5/4/3 CNAME clients.l.google.com., A 142.251.39.14, A 142.250.180.206, A 142.251.39.46, A 142.250.180.238 (245)
14:55:01.436470 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.59017 > 1.0.0.1.53: 56308+ A? js.driftt.com. (31)
14:55:01.635856 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.59017: 56308 5/13/13 CNAME dl7g9llrghqi1.cloudfront.net., A 52.84.106.20, A 52.84.106.107, A 52.84.106.21, A 52.84.106.129 (553)
14:55:02.594641 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.6822 > 1.0.0.1.53: 17863+ A? www.google.com.ua. (35)
14:55:02.755938 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.26103 > 192.33.4.12.53: 9107 A? www.bing.com. (30)
14:55:02.815073 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.6822: 17863 1/13/13 A 142.251.39.3 (470)
14:55:02.932981 Port2_ppp, IN: IP 192.33.4.12.53 > XXX.XXX.XXX.XXX.26103: 9107 5/13/13 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (611)
14:55:03.815402 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.9620 > 1.0.0.1.53: 46213 A? dzr-utm-amzn-eu-west-1-9af7.upe.p.hmr.sophos.com. (66)
14:55:03.815452 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.17252 > 192.58.128.30.53: 33704 A? login.microsoft.com. (37)
14:55:03.858778 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.9620: 46213 3/13/13 A 34.253.123.11, A 34.249.168.191, A 54.217.122.195 (533)
14:55:03.865949 Port2_ppp, IN: IP 192.58.128.30.53 > XXX.XXX.XXX.XXX.17252: 33704 19/13/37 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.akadns.net., A 20.190.159.70, A 40.126.31.70, A 20.190.159.5, A 20.190.159.3, A 20.190.159.19, A 20.190.159.68, A 20.190.159.64, A 20.190.159.23, A 20.190.159.75, A 20.190.159.4, A 20.190.159.2, A 20.190.159.73, A 40.126.31.67, A 20.190.159.69, A 40.126.31.64, A 40.126.31.68 (1231)
14:55:04.086306 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.25969 > 192.5.5.241.53: 18793 A? wp.m.bing.com. (31)
14:55:04.214675 Port2_ppp, IN: IP 192.5.5.241.53 > XXX.XXX.XXX.XXX.25969: 18793 5/13/13 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (612)
14:55:04.423925 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.62132 > 1.0.0.1.53: 43920+ A? edge.fullstory.com. (36)
14:55:04.423943 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.55697 > 1.0.0.1.53: 13102+ A? amplify.outbrain.com. (38)
14:55:04.468706 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.37346 > 1.0.0.1.53: 5311+ A? 4.sophosxl.net. (32)
14:55:04.529895 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.62132: 43920 1/13/13 A 35.201.112.186 (471)
14:55:04.543648 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.37346: 5311 8/13/13 A 34.248.135.181, A 34.247.61.87, A 34.254.149.68, A 52.211.149.113, A 52.214.200.136, A 52.30.4.176, A 52.209.136.153, A 52.213.69.211 (576)
14:55:04.554166 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.55697: 13102 3/13/13 CNAME wildcard.outbrain.com.edgekey.net., CNAME e10883.g.akamaiedge.net., A 2.21.185.80 (551)
14:55:04.835507 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.27670 > 1.0.0.1.53: 28026 A? dzr-utm-amzn-eu-west-1-9af7.upe.p.hmr.sophos.com. (66)
14:55:05.086916 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.27670: 28026 3/13/13 A 34.249.168.191, A 54.217.122.195, A 34.253.123.11 (533)
14:55:05.798473 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.36817 > 1.0.0.1.53: 23811+ AAAA? dzr-utm-amzn-eu-west-1-9af7.upe.p.hmr.sophos.com. (66)
14:55:05.839976 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.36817: 23811 0/13/13 (485)
14:55:06.690454 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.57018 > 1.0.0.1.53: 43222+ A? b.6sc.co. (26)
14:55:06.694189 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.57018: 43222 3/13/13 CNAME b.6sc.co.edgekey.net., CNAME e7313.g.akamaiedge.net., A 104.89.35.64 (525)
14:55:06.834887 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.41993 > 192.36.148.17.53: 7351 A? login.microsoft.com. (37)
14:55:06.854755 Port2_ppp, IN: IP 192.36.148.17.53 > XXX.XXX.XXX.XXX.41993: 7351 27/13/29 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.trafficmanager.net., A 40.126.32.67, A 40.126.31.68, A 20.190.159.70, A 20.190.159.72, A 20.190.160.23, A 20.190.159.5, A 20.190.159.69, A 20.190.159.1, A 20.190.159.19, A 40.126.31.72, A 20.190.159.22, A 40.126.31.70, A 40.126.32.73, A 20.190.160.12, A 40.126.32.69, A 20.190.160.15, A 20.190.159.3, A 20.190.160.21, A 40.126.32.132, A 20.190.160.13, A 40.126.31.64, A 40.126.32.137, A 40.126.32.139, A 40.126.32.75 (1231)
14:55:07.064169 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.35408 > 1.0.0.1.53: 7184+ A? www.google.com.cy. (35)
14:55:07.109485 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.35408: 7184 1/13/13 A 142.251.39.67 (470)
14:55:07.206849 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.20006 > 199.7.91.13.53: 20952 A? xg-up2date-patterns.sophosupd.com. (51)
14:55:07.242177 Port2_ppp, IN: IP 199.7.91.13.53 > XXX.XXX.XXX.XXX.20006: 20952 3/13/13 CNAME xg-up2date-patterns.sophosupd.com.edgekey.net., CNAME e13687.d.akamaiedge.net., A 2.21.185.157 (576)
14:55:07.488601 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.5968 > 8.8.8.8.53: 58486+ A? 4.sophosxl.net. (32)
14:55:07.493847 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.5968: 58486 8/13/13 A 34.247.61.87, A 34.254.149.68, A 52.211.149.113, A 52.214.200.136, A 52.30.4.176, A 52.209.136.153, A 52.213.69.211, A 34.248.135.181 (576)
14:55:07.855384 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.44396 > 1.0.0.1.53: 38991 A? dzr-utm-amzn-eu-west-1-9af7.upe.p.hmr.sophos.com. (66)
14:55:07.980444 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.44396: 38991 3/13/13 A 54.217.122.195, A 34.253.123.11, A 34.249.168.191 (533)
14:55:08.208928 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.57018 > 1.0.0.1.53: 60075+ A? rs.fullstory.com. (34)
14:55:08.211148 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.51950 > 1.0.0.1.53: 25293+ A? 6025286.global.siteimproveanalytics.io. (56)
14:55:08.223070 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.57018: 60075 1/13/13 A 35.186.194.58 (469)
14:55:08.340849 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.51950: 25293 4/13/13 CNAME eu-central-1.global.siteimproveanalytics.io., CNAME ana-collector-elb-eu-2022-04-27-1537287910.eu-central-1.elb.amazonaws.com., A 35.158.55.183, A 54.93.144.248 (621)
14:55:09.310264 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.23776 > 192.33.4.12.53: 15345 A? www.youtube-nocookie.com. (42)
14:55:09.472217 Port2_ppp, IN: IP 192.33.4.12.53 > XXX.XXX.XXX.XXX.23776: 15345 8/13/13 CNAME youtube-ui.l.google.com., A 142.250.201.206, A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238 (607)
14:55:09.854865 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.35799 > 202.12.27.33.53: 45571 A? login.microsoft.com. (37)
14:55:09.862397 Port2_ppp, IN: IP 202.12.27.33.53 > XXX.XXX.XXX.XXX.35799: 45571 19/13/37 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.akadns.net., A 20.190.159.70, A 40.126.31.70, A 20.190.159.5, A 20.190.159.3, A 20.190.159.19, A 20.190.159.68, A 20.190.159.64, A 20.190.159.23, A 20.190.159.75, A 20.190.159.4, A 20.190.159.2, A 20.190.159.73, A 40.126.31.67, A 20.190.159.69, A 40.126.31.64, A 40.126.31.68 (1231)
14:55:10.008236 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.35067 > 1.0.0.1.53: 44164+ A? www.google.rs. (31)
14:55:10.089654 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.35067: 44164 1/13/13 A 172.217.19.99 (466)
14:55:10.508108 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.64722 > 4.2.2.2.53: 40852+ A? 4.sophosxl.net. (32)
14:55:10.521907 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.64722: 40852 8/13/13 A 34.254.149.68, A 52.211.149.113, A 52.214.200.136, A 52.30.4.176, A 52.209.136.153, A 52.213.69.211, A 34.248.135.181, A 34.247.61.87 (576)
14:55:10.849088 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.47152 > 1.0.0.1.53: 22353+ PTR? b.8.4.0.c.b.e.f.f.f.c.1.a.5.e.7.0.0.0.0.0.0.0.0.0.0.0.0.0.8.e.f.ip6.arpa. (90)
14:55:10.870512 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.47152: 22353 NXDomain 0/0/0 (90)
14:55:10.965050 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.57018 > 1.0.0.1.53: 24434+ A? px.ads.linkedin.com. (37)
14:55:10.994777 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.57018: 24434 4/13/13 CNAME www.linkedin.com., CNAME www-linkedin-com.l-0005.l-msedge.net., CNAME l-0005.l-msedge.net., A 13.107.42.14 (551)
14:55:12.215932 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.34858 > 198.41.0.4.53: 53497 A? www4.bing.com. (31)
14:55:12.239934 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.57018 > 1.0.0.1.53: 15210+ A? alb.reddit.com. (32)
14:55:12.319415 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.60025 > 1.0.0.1.53: 4573+ A? q.quora.com. (29)
14:55:12.436620 Port2_ppp, IN: IP 198.41.0.4.53 > XXX.XXX.XXX.XXX.34858: 53497 5/13/13 CNAME www4-www4.bing.com.trafficmanager.net., CNAME www4.bing.com.edgekey.net., CNAME e86303.dscx.akamaiedge.net., A 2.22.89.186, A 2.22.89.159 (603)
14:55:12.466838 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.57018: 15210 5/13/13 CNAME reddit.map.fastly.net., A 151.101.1.140, A 151.101.65.140, A 151.101.129.140, A 151.101.193.140 (547)
14:55:12.519835 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.60025: 4573 7/13/13 A 54.166.85.96, A 18.205.225.81, A 52.2.80.154, A 54.81.239.179, A 54.235.202.120, A 54.204.196.80, A 3.209.54.132 (560)
14:55:12.874488 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.2902 > 199.7.91.13.53: 42959 A? login.microsoft.com. (37)
14:55:13.006512 Port2_ppp, IN: IP 199.7.91.13.53 > XXX.XXX.XXX.XXX.2902: 42959 27/13/29 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.trafficmanager.net., A 20.190.159.1, A 20.190.159.19, A 40.126.31.72, A 20.190.159.22, A 40.126.31.70, A 40.126.32.73, A 20.190.160.12, A 40.126.32.69, A 20.190.160.15, A 20.190.159.3, A 20.190.160.21, A 40.126.32.132, A 20.190.160.13, A 40.126.31.64, A 40.126.32.137, A 40.126.32.139, A 40.126.32.75, A 40.126.32.67, A 40.126.31.68, A 20.190.159.70, A 20.190.159.72, A 20.190.160.23, A 20.190.159.5, A 20.190.159.69 (1231)
14:55:13.391842 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.52389 > 1.0.0.1.53: 9514+ A? www.facebook.com. (34)
14:55:13.534833 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.10727 > 1.0.0.1.53: 17084+ A? 4.sophosxl.net. (32)
14:55:13.559018 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.52389: 9514 2/13/13 CNAME star-mini.c10r.facebook.com., A 157.240.30.35 (498)
14:55:13.719122 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.10727: 17084 13/13/13 A 52.209.136.153, A 52.213.69.211, A 34.248.135.181, A 34.247.61.87, A 34.254.149.68, A 52.211.149.113, A 34.241.111.122, A 52.48.91.83, A 34.240.170.13, A 34.252.30.182, A 52.214.157.208, A 52.214.200.136, A 52.30.4.176 (656)
^C
645 packets captured
645 packets received by filter
0 packets dropped by kernel
XGS2100_RL01_SFOS 19.0.0 GA-Build317#

0 LuCar Toni 4 months ago in reply to Carlo

It looks fine to me. Port2 is your PPPoE Interface? What is your other Interface?

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 LuCar Toni 4 months ago in reply to Carlo

It looks fine to me. Port2 is your PPPoE Interface? What is your other Interface?

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Carlo 4 months ago in reply to LuCar Toni
Cancel
Vote Up 0 Vote Down

Cancel
0 Carlo 4 months ago in reply to LuCar Toni

Yes, port2 or port3 I'm configuring interface three times a day but nothing changes :)
Cancel
Vote Up 0 Vote Down

Cancel
0 Carlo 4 months ago in reply to LuCar Toni

Also, it looks fine but pages resolving takes 20 sec and still cannot register to sophos central
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni 4 months ago in reply to Carlo

Public IP /32 looks odd to me? Why do you use 255.255.255.255?

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 Carlo 4 months ago in reply to LuCar Toni

A always get the same public ip. It is binded to MAC of WAN interface. It is set as Preferred IP in network-port2-pppoe settings
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni 4 months ago in reply to Carlo

It looks fine to me. I guess we cannot give a proper support from this perspective. You should create a support case, so somebody can investigate this matter on your appliance.

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 jprusch 3 months ago in reply to Carlo

hello Carlo,

did you ever try to lower the MTU to a much lower value like 1280 and MSS = 1272 , then?

Can you run this as a test, but please do a restart of the FW before.

Mit freundlichem Gruß, best regards from Germany,

Philipp Rusch

New Vision GmbH, Germany
Sophos Silver-Partner

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Carlo 3 months ago in reply to jprusch

Hi, I did not try to set that low value. I work curently with support on this issue. I did no get solution from them yet but when I set up internal DNS server everything work as it should even with default 1500 mtu. All my problems are related to DNS and name resolving.
Cancel
Vote Up 0 Vote Down

Cancel