This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

PPPoE connection on XGS 2100 SFOS 19.0.0 GA-Build31 - slow page loading

Carlo over 1 year ago

Hi,

I have problem with pppoe connection which I don't know how to solve

MTU 1492

MSS 1452

no web policy

no ips

no DoS

tried changing port (on port 2 connection was terrible)

Problem is that pages are loading slow, after I press "enter" on url nothing happens for 10 seconds and then it start to looking for page. I checked on multiple pc's, diferent browsers and directly plugged to lan port (without other clients). Internet speed is about 200 mbps faster on ISP equipment. Behind XG I get around 350 download and 200 upload.

Maybe this has to do something with dns but I don't know how to troubleshoot.

Thanks.

Carlo

This thread was automatically locked due to age.

Top Replies

LuCar Toni over 1 year ago +1 suggested

A good indicator of troubleshooting is developer mode of your browser. Press F12 and check the Network tab. There you should find an information about delays.

Parents

0 Carlo over 1 year ago

When I turn off DNS service browsing speed on clients improves on clients
Cancel
Vote Up 0 Vote Down

Cancel
0 Thomas_XG over 1 year ago in reply to Carlo

Please show us your DNS settings

_______________________________________________________

Sophos SG 210 with Sophos XG Home - 19.5 MR 2

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Carlo over 1 year ago in reply to LuCar Toni

I don't know how to read that
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 1 year ago in reply to Carlo

You read it from bottom to top.

So it looks fine from a perspective of getting a response. The question is, what the responsive contains.

Next step: Go to the Advanced shell (SSH - Option 5 and Option 3).

Then perform the following:

tcpdump -ni Port2_ppp port 53

You should see the requests.

14:43:55.259292 PortB, IN: IP 168.63.129.16.53 > 192.168.0.4.6945: 59033 3/0/0 A 52.48.198.35, A 34.255.238.223, A 34.248.210.158 (136)

That would be a valid response.

Please post a snippet from the Advanced Shell.

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel

0 Carlo over 1 year ago in reply to LuCar Toni

XGS2100_RL01_SFOS 19.0.0 GA-Build317# tcpdump -ni Port2_ppp port 53
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on Port2_ppp, link-type LINUX_SLL (Linux cooked v1), capture size 262144 bytes
14:45:34.868822 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.46776 > 8.8.8.8.53: 36884+ A? www4.bing.com. (31)
14:45:35.646632 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.41362 > 4.2.2.2.53: 23225+ A? login.microsoftonline.com. (43)
14:45:35.774147 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.41362: 23225 13/13/13 CNAME ak.privatelink.msidentity.com., CNAME www.tm.ak.prd.aadg.akadns.net., A 20.190.159.1, A 20.190.159.3, A 20.190.159.22, A 20.190.159.19, A 20.190.159.74, A 40.126.31.72, A 40.126.31.70, A 40.126.31.64, A 20.190.159.72, A 20.190.159.5, A 20.190.159.69 (718)
14:45:36.526453 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.7200 > 8.8.8.8.53: 21982+ A? www.youtube.com. (33)
14:45:36.526492 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.40443 > 8.8.8.8.53: 38953+ A? login.windows.net. (35)
14:45:36.649795 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.7200: 21982 8/13/13 CNAME youtube-ui.l.google.com., A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 142.251.39.14 (598)
14:45:36.654730 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.40443: 38953 15/13/13 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.trafficmanager.net., A 20.190.159.22, A 40.126.31.64, A 20.190.159.1, A 20.190.159.69, A 40.126.31.68, A 40.126.31.70, A 20.190.159.3, A 20.190.159.72, A 20.190.159.5, A 20.190.159.19, A 40.126.31.72, A 20.190.159.74 (756)
14:45:37.888640 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.13499 > 4.2.2.2.53: 15040+ A? www4.bing.com. (31)
14:45:37.991261 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.13499: 15040 5/13/13 CNAME www4-www4.bing.com.trafficmanager.net., CNAME www4.bing.com.edgekey.net., CNAME e86303.dscx.akamaiedge.net., A 2.23.97.241, A 2.23.97.178 (603)
14:45:39.547224 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.37912 > 4.2.2.2.53: 59625+ A? www.youtube.com. (33)
14:45:39.547272 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.27265 > 4.2.2.2.53: 1802+ A? login.windows.net. (35)
14:45:39.572067 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.37912: 59625 8/13/13 CNAME youtube-ui.l.google.com., A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 142.251.39.14, A 142.251.39.46, A 142.251.39.78 (598)
14:45:39.576643 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.27265: 1802 15/13/13 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.trafficmanager.net., A 40.126.31.68, A 40.126.31.70, A 20.190.159.3, A 20.190.159.72, A 20.190.159.5, A 20.190.159.19, A 40.126.31.72, A 20.190.159.74, A 20.190.159.22, A 40.126.31.64, A 20.190.159.1, A 20.190.159.69 (756)
14:45:39.990110 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.25728 > 1.0.0.1.53: 35522+ A? www.bing.com. (30)
14:45:40.016627 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.25728: 35522 5/13/13 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (611)
^Ctcpdump: Unable to write output: Interrupted system call
XGS2100_RL01_SFOS 19.0.0 GA-Build317#

0 Carlo over 1 year ago in reply to LuCar Toni

Little bit longer running example

XGS2100_RL01_SFOS 19.0.0 GA-Build317# tcpdump -ni Port2_ppp port 53
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on Port2_ppp, link-type LINUX_SLL (Linux cooked v1), capture size 262144 bytes
14:53:22.872434 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.39519 > 4.2.2.2.53: 16619+ A? www.bing.com. (30)
14:53:22.981078 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.39519: 16619 5/13/13 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (611)
14:53:23.995275 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.45190 > 1.0.0.1.53: 54422+ PTR? b.8.4.0.c.b.e.f.f.f.c.1.a.5.e.7.0.0.0.0.0.0.0.0.0.0.0.0.0.8.e.f.ip6.arpa. (90)
14:53:24.013764 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.51891 > 1.0.0.1.53: 54714+ A? www.google.gr. (31)
14:53:24.091997 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.14329 > 8.8.8.8.53: 31412+ A? wp.m.bing.com. (31)
14:53:24.135995 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.32350 > 1.0.0.1.53: 50895+ A? 4.sophosxl.net. (32)
14:53:24.292061 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.45190: 54422 NXDomain 0/0/0 (90)
14:53:24.351563 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.14329: 31412 5/13/13 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (612)
14:53:24.358264 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.51891: 54714 1/13/13 A 142.250.180.227 (466)
14:53:24.410458 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.32350: 50895 8/13/13 A 3.248.133.40, A 3.251.5.30, A 34.240.170.13, A 34.252.30.182, A 34.241.111.122, A 52.30.153.100, A 52.209.185.252, A 52.212.172.142 (576)
14:53:24.651907 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.14771 > 192.228.79.201.53: 65284 A? login.microsoftonline.com. (43)
14:53:24.667777 Port2_ppp, IN: IP 192.228.79.201.53 > XXX.XXX.XXX.XXX.14771: 65284 26/13/13 CNAME ak.privatelink.msidentity.com., CNAME www.tm.ak.prd.aadg.trafficmanager.net., A 20.190.159.3, A 40.126.31.64, A 20.190.159.72, A 20.190.159.70, A 20.190.159.19, A 20.190.159.22, A 40.126.31.70, A 20.190.159.1, A 40.126.32.69, A 40.126.32.73, A 20.190.160.15, A 20.190.160.13, A 20.190.160.12, A 40.126.32.132, A 40.126.32.135, A 40.126.32.67, A 20.190.159.5, A 20.190.159.69, A 40.126.31.72, A 40.126.32.75, A 40.126.32.139, A 40.126.32.137, A 20.190.160.23, A 20.190.160.21 (934)
14:53:24.909200 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.41149 > 198.41.0.4.53: 63381 A? wp.m.bing.com. (31)
14:53:24.913943 Port2_ppp, IN: IP 198.41.0.4.53 > XXX.XXX.XXX.XXX.41149: 63381 5/13/13 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (612)
14:53:25.049585 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.5550 > 192.112.36.4.53: 725 A? xg-up2date-patterns.sophosupd.com. (51)
14:53:25.059052 Port2_ppp, IN: IP 192.112.36.4.53 > XXX.XXX.XXX.XXX.5550: 725 3/13/13 CNAME xg-up2date-patterns.sophosupd.com.edgekey.net., CNAME e13687.d.akamaiedge.net., A 23.205.49.159 (576)
14:53:25.072767 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.63531 > 1.0.0.1.53: 49485+ A? www.google.com.eg. (35)
14:53:25.141562 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.63531: 49485 1/13/13 A 142.251.39.35 (470)
14:53:25.212836 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.57451 > 4.2.2.2.53: 230+ A? www2.bing.com. (31)
14:53:25.290023 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.57451: 230 5/13/13 CNAME www2-www2.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (614)
14:53:25.549441 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.40701 > 192.203.230.10.53: 19769 A? www.youtube.com. (33)
14:53:25.596795 Port2_ppp, IN: IP 192.203.230.10.53 > XXX.XXX.XXX.XXX.40701: 19769 9/13/13 CNAME youtube-ui.l.google.com., A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14 (614)
14:53:26.404388 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.42370 > 1.0.0.1.53: 2301+ A? xg-up2date-patterns.sophosupd.com. (51)
14:53:26.404478 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.13549 > 1.0.0.1.53: 52811+ AAAA? xg-up2date-patterns.sophosupd.com. (51)
14:53:27.096404 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.48555 > 1.0.0.1.53: 4164+ A? www.google.dz. (31)
14:53:27.096456 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.56975 > 4.2.2.2.53: 17370+ A? wp.m.bing.com. (31)
14:53:27.155653 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.64975 > 8.8.8.8.53: 26761+ A? 4.sophosxl.net. (32)
14:53:27.363688 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.56975: 17370 5/13/13 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (612)
14:53:27.369062 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.48555: 4164 1/13/13 A 172.217.19.99 (466)
14:53:27.711354 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.39007 > 193.0.14.129.53: 8756 A? login.windows.net. (35)
14:53:27.820376 Port2_ppp, IN: IP 193.0.14.129.53 > XXX.XXX.XXX.XXX.39007: 8756 23/13/21 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.trafficmanager.net., A 40.126.31.64, A 40.126.32.137, A 40.126.32.75, A 40.126.32.67, A 40.126.31.68, A 20.190.159.70, A 20.190.159.72, A 20.190.160.23, A 20.190.159.5, A 20.190.159.69, A 20.190.159.1, A 20.190.159.19, A 40.126.31.72, A 20.190.159.22, A 40.126.31.70, A 20.190.160.15, A 20.190.159.3, A 20.190.160.21, A 40.126.32.132, A 20.190.160.13 (1037)
14:53:28.055961 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.32781 > 192.36.148.17.53: 8030 A? xg-up2date-patterns.sophosupd.com. (51)
14:53:28.155673 Port2_ppp, IN: IP 192.36.148.17.53 > XXX.XXX.XXX.XXX.32781: 8030 3/13/13 CNAME xg-up2date-patterns.sophosupd.com.edgekey.net., CNAME e13687.d.akamaiedge.net., A 23.35.229.161 (576)
14:53:29.037384 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.64500 > 1.0.0.1.53: 14+ A? www.google.com.pe. (35)
14:53:29.037466 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.48020 > 1.0.0.1.53: 52747+ A? www.google.com.vc. (35)
14:53:29.112582 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.64500: 14 1/13/13 A 142.251.39.3 (470)
14:53:29.148382 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.48020: 52747 1/13/13 A 142.251.39.3 (470)
14:53:29.423916 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.2681 > 8.8.8.8.53: 7393+ A? xg-up2date-patterns.sophosupd.com. (51)
14:53:29.423959 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.61511 > 8.8.8.8.53: 17538+ AAAA? xg-up2date-patterns.sophosupd.com. (51)
14:53:30.175623 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.4015 > 4.2.2.2.53: 32296+ A? 4.sophosxl.net. (32)
14:53:30.184299 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.4015: 32296 8/13/13 A 3.251.5.30, A 34.240.170.13, A 34.252.30.182, A 34.241.111.122, A 52.30.153.100, A 52.209.185.252, A 52.212.172.142, A 3.248.133.40 (576)
14:53:31.479871 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.47461 > 1.0.0.1.53: 60319+ A? www.google.co.ug. (34)
14:53:31.522799 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.47461: 60319 1/13/13 A 142.251.39.35 (469)
14:53:32.444264 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.19779 > 4.2.2.2.53: 21805+ A? xg-up2date-patterns.sophosupd.com. (51)
14:53:32.444302 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.32700 > 4.2.2.2.53: 10604+ AAAA? xg-up2date-patterns.sophosupd.com. (51)
14:53:32.476493 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.19779: 21805 3/13/13 CNAME xg-up2date-patterns.sophosupd.com.edgekey.net., CNAME e13687.d.akamaiedge.net., A 23.35.229.161 (576)
14:53:32.511750 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.32700: 10604 0/13/13 (470)
14:53:32.716020 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.60336 > 128.63.2.53.53: 38053 A? www.bing.com. (30)
14:53:32.765067 Port2_ppp, IN: IP 128.63.2.53.53 > XXX.XXX.XXX.XXX.60336: 38053 5/13/13 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (611)
14:53:33.049570 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.1945 > 199.7.83.42.53: 10233 A? www4.bing.com. (31)
14:53:33.064904 Port2_ppp, IN: IP 199.7.83.42.53 > XXX.XXX.XXX.XXX.1945: 10233 5/13/13 CNAME www4-www4.bing.com.trafficmanager.net., CNAME www4.bing.com.edgekey.net., CNAME e86303.dscx.akamaiedge.net., A 2.22.89.159, A 2.22.89.186 (603)
14:53:33.313512 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.49283 > 1.0.0.1.53: 37245+ A? www.google.com.ni. (35)
14:53:33.412301 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.49283: 37245 1/13/13 A 172.217.19.99 (470)
14:53:34.830706 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.42534 > 199.7.91.13.53: 63071 A? www2.bing.com. (31)
14:53:34.932980 Port2_ppp, IN: IP 199.7.91.13.53 > XXX.XXX.XXX.XXX.42534: 63071 5/13/13 CNAME www2-www2.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (614)
14:53:35.037183 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.29620 > 1.0.0.1.53: 53390+ A? www.google.cm. (31)
14:53:35.122282 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.29620: 53390 1/13/13 A 142.250.180.195 (466)
14:53:35.929586 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.60753 > 202.12.27.33.53: 60434 A? wp.m.bing.com. (31)
14:53:35.934006 Port2_ppp, IN: IP 202.12.27.33.53 > XXX.XXX.XXX.XXX.60753: 60434 5/13/13 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (612)
14:53:36.157662 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.44912 > 1.0.0.1.53: 5197+ A? www.google.td. (31)
14:53:36.227834 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.44912: 5197 1/13/13 A 142.251.39.35 (466)
14:53:38.080877 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.49244 > 1.0.0.1.53: 46411+ A? www.google.me. (31)
14:53:38.207797 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.49244: 46411 1/13/13 A 172.217.20.3 (466)
14:53:39.077003 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.65509 > 192.58.128.30.53: 13264 A? xg-up2date-patterns.sophosupd.com. (51)
14:53:39.081859 Port2_ppp, IN: IP 192.58.128.30.53 > XXX.XXX.XXX.XXX.65509: 13264 3/13/13 CNAME xg-up2date-patterns.sophosupd.com.edgekey.net., CNAME e13687.d.akamaiedge.net., A 23.35.229.161 (576)
14:53:40.031866 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.55285 > 1.0.0.1.53: 5437+ A? www.google.pt. (31)
14:53:40.031983 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.56973 > 1.0.0.1.53: 17177+ A? www.google.co.zm. (34)
14:53:40.088800 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.55285: 5437 1/13/13 A 142.251.39.3 (466)
14:53:40.090703 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.56973: 17177 1/13/13 A 142.251.39.67 (469)
14:53:44.072211 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.53261 > 192.33.4.12.53: 60209 A? www4.bing.com. (31)
14:53:44.159450 Port2_ppp, IN: IP 192.33.4.12.53 > XXX.XXX.XXX.XXX.53261: 60209 5/13/13 CNAME www4-www4.bing.com.trafficmanager.net., CNAME www4.bing.com.edgekey.net., CNAME e86303.dscx.akamaiedge.net., A 2.23.97.178, A 2.23.97.241 (603)
14:53:45.737408 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.7836 > 1.0.0.1.53: 3178+ A? www.youtube-nocookie.com. (42)
14:53:46.948898 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.15564 > 192.112.36.4.53: 21657 A? wp.m.bing.com. (31)
14:53:46.959023 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.20560 > 1.0.0.1.53: 63654+ A? login.microsoft.com. (37)
14:53:46.997991 Port2_ppp, IN: IP 192.112.36.4.53 > XXX.XXX.XXX.XXX.15564: 21657 5/13/13 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (612)
14:53:47.007334 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.20560: 63654 23/13/13 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.trafficmanager.net., A 20.190.159.3, A 20.190.160.21, A 40.126.32.132, A 20.190.160.13, A 40.126.31.64, A 40.126.32.137, A 40.126.32.75, A 40.126.32.67, A 40.126.31.68, A 20.190.159.70, A 20.190.159.72, A 20.190.160.23, A 20.190.159.5, A 20.190.159.69, A 20.190.159.1, A 20.190.159.19, A 40.126.31.72, A 20.190.159.22, A 40.126.31.70, A 20.190.160.15 (886)
14:53:47.059341 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.19144 > 1.0.0.1.53: 32644+ A? www.google.com.bn. (35)
14:53:47.223466 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.19144: 32644 1/13/13 A 142.250.201.195 (470)
14:53:48.758394 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.50688 > 8.8.8.8.53: 7836+ A? www.youtube-nocookie.com. (42)
14:53:48.892946 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.50688: 7836 9/13/13 CNAME youtube-ui.l.google.com., A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110 (623)
14:53:49.978593 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.2195 > 1.0.0.1.53: 13393+ A? login.microsoftonline.com. (43)
14:53:49.978700 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.28026 > 8.8.8.8.53: 36555+ A? login.microsoft.com. (37)
14:53:49.995178 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.2195: 13393 26/13/13 CNAME ak.privatelink.msidentity.com., CNAME www.tm.ak.prd.aadg.trafficmanager.net., A 20.190.159.72, A 20.190.159.70, A 20.190.159.19, A 20.190.159.22, A 40.126.31.70, A 20.190.159.1, A 40.126.32.69, A 40.126.32.73, A 20.190.160.15, A 20.190.160.13, A 20.190.160.12, A 40.126.32.132, A 40.126.32.135, A 40.126.32.67, A 20.190.159.5, A 20.190.159.69, A 40.126.31.72, A 40.126.32.75, A 40.126.32.139, A 40.126.32.137, A 20.190.160.23, A 20.190.160.21, A 20.190.159.3, A 40.126.31.64 (934)
14:53:50.001106 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.28026: 36555 23/13/13 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.trafficmanager.net., A 40.126.31.64, A 40.126.32.137, A 40.126.32.75, A 40.126.32.67, A 40.126.31.68, A 20.190.159.70, A 20.190.159.72, A 20.190.160.23, A 20.190.159.5, A 20.190.159.69, A 20.190.159.1, A 20.190.159.19, A 40.126.31.72, A 20.190.159.22, A 40.126.31.70, A 20.190.160.15, A 20.190.159.3, A 20.190.160.21, A 40.126.32.132, A 20.190.160.13 (886)
14:53:50.078739 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.17627 > 193.0.14.129.53: 44146 A? xg-up2date-patterns.sophosupd.com. (51)
14:53:50.173599 Port2_ppp, IN: IP 193.0.14.129.53 > XXX.XXX.XXX.XXX.17627: 44146 3/13/13 CNAME xg-up2date-patterns.sophosupd.com.edgekey.net., CNAME e13687.d.akamaiedge.net., A 23.205.49.159 (576)
14:53:51.778538 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.28702 > 4.2.2.2.53: 33349+ A? www.youtube-nocookie.com. (42)
14:53:52.320817 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.25895 > 1.0.0.1.53: 27822+ A? www4.bing.com. (31)
14:53:52.321014 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.28040 > 1.0.0.1.53: 61159+ A? login.windows.net. (35)
14:53:52.514907 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.25895: 27822 5/13/13 CNAME www4-www4.bing.com.trafficmanager.net., CNAME www4.bing.com.edgekey.net., CNAME e86303.dscx.akamaiedge.net., A 2.23.97.178, A 2.23.97.241 (603)
14:53:52.622122 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.33353 > 1.0.0.1.53: 60776+ A? www.youtube.com. (33)
14:53:52.759173 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.33353: 60776 9/13/13 CNAME youtube-ui.l.google.com., A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14 (614)
14:53:52.998311 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.1649 > 4.2.2.2.53: 25259+ A? login.microsoft.com. (37)
14:53:52.998361 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.64550 > 8.8.8.8.53: 53315+ A? login.microsoftonline.com. (43)
14:53:53.023543 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.60419 > 1.0.0.1.53: 29139+ A? www.google.ba. (31)
14:53:53.023630 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.49421 > 1.0.0.1.53: 20784+ A? www.google.li. (31)
14:53:53.138787 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.1649: 25259 23/13/13 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.trafficmanager.net., A 40.126.31.68, A 20.190.159.70, A 20.190.159.72, A 20.190.160.23, A 20.190.159.5, A 20.190.159.69, A 20.190.159.1, A 20.190.159.19, A 40.126.31.72, A 20.190.159.22, A 40.126.31.70, A 20.190.160.15, A 20.190.159.3, A 20.190.160.21, A 40.126.32.132, A 20.190.160.13, A 40.126.31.64, A 40.126.32.137, A 40.126.32.75, A 40.126.32.67 (886)
14:53:53.144855 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.64550: 53315 26/13/13 CNAME ak.privatelink.msidentity.com., CNAME www.tm.ak.prd.aadg.trafficmanager.net., A 20.190.159.22, A 40.126.31.70, A 20.190.159.1, A 40.126.32.69, A 40.126.32.73, A 20.190.160.15, A 20.190.160.13, A 20.190.160.12, A 40.126.32.132, A 40.126.32.135, A 40.126.32.67, A 20.190.159.5, A 20.190.159.69, A 40.126.31.72, A 40.126.32.75, A 40.126.32.139, A 40.126.32.137, A 20.190.160.23, A 20.190.160.21, A 20.190.159.3, A 40.126.31.64, A 20.190.159.72, A 20.190.159.70, A 20.190.159.19 (934)
14:53:53.262315 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.60419: 29139 1/13/13 A 142.251.39.3 (466)
14:53:54.798533 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.9700 > 199.7.83.42.53: 62183 A? www.youtube-nocookie.com. (42)
14:53:54.877128 Port2_ppp, IN: IP 199.7.83.42.53 > XXX.XXX.XXX.XXX.9700: 62183 9/13/13 CNAME youtube-ui.l.google.com., A 142.250.201.206, A 172.217.20.14, A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238 (623)
14:53:55.092568 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.39243 > 192.112.36.4.53: 60156 A? www4.bing.com. (31)
14:53:55.098619 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.44629 > 1.0.0.1.53: 4967+ A? www.google.pl. (31)
14:53:55.146126 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.44629: 4967 1/13/13 A 142.251.39.3 (466)
14:53:55.198892 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.14167 > 1.0.0.1.53: 29241+ A? www.google.co.ck. (34)
14:53:55.198912 Port2_ppp, IN: IP 192.112.36.4.53 > XXX.XXX.XXX.XXX.39243: 60156 7/13/13 CNAME www4-www4.bing.com.trafficmanager.net., CNAME www4.bing.com.edgekey.net., CNAME e86303.dscx.akamaiedge.net., A 2.23.97.178, A 2.23.97.241, A 2.22.89.186, A 2.22.89.159 (635)
14:53:55.268254 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.14167: 29241 1/13/13 A 142.250.201.195 (469)
14:53:55.340561 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.42978 > 8.8.8.8.53: 40234+ A? www4.bing.com. (31)
14:53:55.340598 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.6198 > 8.8.8.8.53: 55573+ A? login.windows.net. (35)
14:53:55.416571 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.42978: 40234 7/13/13 CNAME www4-www4.bing.com.trafficmanager.net., CNAME www4.bing.com.edgekey.net., CNAME e86303.dscx.akamaiedge.net., A 2.23.97.178, A 2.23.97.241, A 2.22.89.186, A 2.22.89.159 (635)
14:53:55.424800 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.6198: 55573 23/13/13 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.trafficmanager.net., A 20.190.159.22, A 40.126.31.70, A 20.190.160.15, A 20.190.159.3, A 20.190.160.21, A 40.126.32.132, A 20.190.160.13, A 40.126.31.64, A 40.126.32.137, A 40.126.32.75, A 40.126.32.67, A 40.126.31.68, A 20.190.159.70, A 20.190.159.72, A 20.190.160.23, A 20.190.159.5, A 20.190.159.69, A 20.190.159.1, A 20.190.159.19, A 40.126.31.72 (884)
14:53:55.616126 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.60395 > 199.7.83.42.53: 9954 A? 4.sophosxl.net. (32)
14:53:55.641271 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.10611 > 8.8.8.8.53: 26485+ A? www.youtube.com. (33)
14:53:55.720298 Port2_ppp, IN: IP 199.7.83.42.53 > XXX.XXX.XXX.XXX.60395: 9954 8/13/13 A 34.240.170.13, A 34.252.30.182, A 34.241.111.122, A 52.30.153.100, A 52.209.185.252, A 52.212.172.142, A 3.248.133.40, A 3.251.5.30 (576)
14:53:55.722997 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.10611: 26485 9/13/13 CNAME youtube-ui.l.google.com., A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14 (614)
14:53:55.818363 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.1034 > 192.112.36.4.53: 26355 A? www.youtube-nocookie.com. (42)
14:53:56.017730 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.14748 > 4.2.2.2.53: 23064+ A? login.microsoftonline.com. (43)
14:53:56.042903 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.43371 > 8.8.8.8.53: 25837+ A? www.google.li. (31)
14:53:56.103052 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.14748: 23064 26/13/13 CNAME ak.privatelink.msidentity.com., CNAME www.tm.ak.prd.aadg.trafficmanager.net., A 20.190.160.13, A 20.190.160.12, A 40.126.32.132, A 40.126.32.135, A 40.126.32.67, A 20.190.159.5, A 20.190.159.69, A 40.126.31.72, A 40.126.32.75, A 40.126.32.139, A 40.126.32.137, A 20.190.160.23, A 20.190.160.21, A 20.190.159.3, A 40.126.31.64, A 20.190.159.72, A 20.190.159.70, A 20.190.159.19, A 20.190.159.22, A 40.126.31.70, A 20.190.159.1, A 40.126.32.69, A 40.126.32.73, A 20.190.160.15 (934)
14:53:56.173303 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.43371: 25837 1/13/13 A 172.217.20.3 (466)
14:53:56.838441 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.27270 > 192.33.4.12.53: 27136 A? www.youtube-nocookie.com. (42)
14:53:56.857680 Port2_ppp, IN: IP 192.33.4.12.53 > XXX.XXX.XXX.XXX.27270: 27136 9/13/13 CNAME youtube-ui.l.google.com., A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14, A 142.251.39.46 (623)
14:53:57.365656 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.58662 > 1.0.0.1.53: 13185+ A? www.google.com.sb. (35)
14:53:57.447334 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.58662: 13185 1/13/13 A 142.250.201.195 (470)
14:53:57.858027 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.40430 > 192.228.79.201.53: 23096 A? www.youtube-nocookie.com. (42)
14:53:57.873885 Port2_ppp, IN: IP 192.228.79.201.53 > XXX.XXX.XXX.XXX.40430: 23096 9/13/13 CNAME youtube-ui.l.google.com., A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14 (623)
14:53:57.967458 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.47676 > 199.7.83.42.53: 17131 A? wp.m.bing.com. (31)
14:53:57.972803 Port2_ppp, IN: IP 199.7.83.42.53 > XXX.XXX.XXX.XXX.47676: 17131 5/13/13 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (612)
14:53:58.067783 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.28385 > 1.0.0.1.53: 28415+ A? www.google.co.cr. (34)
14:53:58.085973 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.28385: 28415 1/13/13 A 142.250.201.195 (469)
14:53:58.360570 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.17178 > 4.2.2.2.53: 1308+ A? www4.bing.com. (31)
14:53:58.360618 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.34842 > 4.2.2.2.53: 61585+ A? login.windows.net. (35)
14:53:58.366340 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.17178: 1308 7/13/13 CNAME www4-www4.bing.com.trafficmanager.net., CNAME www4.bing.com.edgekey.net., CNAME e86303.dscx.akamaiedge.net., A 2.23.97.178, A 2.23.97.241, A 2.22.89.186, A 2.22.89.159 (635)
14:53:58.385509 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.34842: 61585 23/13/13 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.trafficmanager.net., A 20.190.160.21, A 40.126.32.132, A 20.190.160.13, A 40.126.31.64, A 40.126.32.137, A 40.126.32.75, A 40.126.32.67, A 40.126.31.68, A 20.190.159.70, A 20.190.159.72, A 20.190.160.23, A 20.190.159.5, A 20.190.159.69, A 20.190.159.1, A 20.190.159.19, A 40.126.31.72, A 20.190.159.22, A 40.126.31.70, A 20.190.160.15, A 20.190.159.3 (884)
14:53:58.481347 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.17169 > 1.0.0.1.53: 51052+ A? 4.sophosxl.net. (32)
14:53:58.484872 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.17169: 51052 8/13/13 A 34.252.30.182, A 34.241.111.122, A 52.30.153.100, A 52.209.185.252, A 52.212.172.142, A 3.248.133.40, A 3.251.5.30, A 34.240.170.13 (576)
14:53:58.661192 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.59854 > 4.2.2.2.53: 30859+ A? www.youtube.com. (33)
14:53:58.664906 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.59854: 30859 9/13/13 CNAME youtube-ui.l.google.com., A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14, A 142.251.39.46 (614)
14:53:58.878250 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.5194 > 192.203.230.10.53: 7412 A? www.youtube-nocookie.com. (42)
14:53:58.882151 Port2_ppp, IN: IP 192.203.230.10.53 > XXX.XXX.XXX.XXX.5194: 7412 9/13/13 CNAME youtube-ui.l.google.com., A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110 (623)
14:53:59.898174 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.9280 > 193.0.14.129.53: 55481 A? www.youtube-nocookie.com. (42)
14:53:59.914004 Port2_ppp, IN: IP 193.0.14.129.53 > XXX.XXX.XXX.XXX.9280: 55481 9/13/13 CNAME youtube-ui.l.google.com., A 142.250.201.206, A 172.217.20.14, A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238 (623)
14:54:00.410683 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.20291 > 1.0.0.1.53: 16427+ A? google.com. (28)
14:54:00.410848 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.5128 > 1.0.0.1.53: 1501+ A? www.google.com.sv. (35)
14:54:00.466710 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.20291: 16427 1/4/3 A 142.251.39.14 (164)
14:54:00.473678 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.5128: 1501 1/13/13 A 142.251.39.3 (470)
14:54:00.795680 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.51322 > 1.0.0.1.53: 43602+ AAAA? dzr-utm-amzn-eu-west-1-9af7.upe.p.hmr.sophos.com. (66)
14:54:00.831517 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.51322: 43602 0/13/13 (485)
14:54:00.912543 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.17350 > 192.36.148.17.53: 17220 A? www.youtube-nocookie.com. (42)
14:54:00.915862 Port2_ppp, IN: IP 192.36.148.17.53 > XXX.XXX.XXX.XXX.17350: 17220 9/13/13 CNAME youtube-ui.l.google.com., A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14 (623)
14:54:01.012879 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.59263 > 1.0.0.1.53: 4927+ A? www.google.ki. (31)
14:54:01.068374 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.59263: 4927 1/13/13 A 142.251.39.67 (466)
14:54:01.098676 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.15904 > 192.228.79.201.53: 10619 A? xg-up2date-patterns.sophosupd.com. (51)
14:54:01.102976 Port2_ppp, IN: IP 192.228.79.201.53 > XXX.XXX.XXX.XXX.15904: 10619 3/13/13 CNAME xg-up2date-patterns.sophosupd.com.edgekey.net., CNAME e13687.d.akamaiedge.net., A 23.205.49.159 (576)
14:54:01.501364 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.25300 > 8.8.8.8.53: 20365+ A? 4.sophosxl.net. (32)
14:54:01.511331 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.25300: 20365 8/13/13 A 34.241.111.122, A 52.30.153.100, A 52.209.185.252, A 52.212.172.142, A 3.248.133.40, A 3.251.5.30, A 34.240.170.13, A 34.252.30.182 (576)
14:54:01.932117 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.21195 > 192.58.128.30.53: 14687 A? www.youtube-nocookie.com. (42)
14:54:01.935706 Port2_ppp, IN: IP 192.58.128.30.53 > XXX.XXX.XXX.XXX.21195: 14687 9/13/13 CNAME youtube-ui.l.google.com., A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14, A 142.251.39.46 (623)
14:54:02.218651 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.50966 > 1.0.0.1.53: 55664+ A? www.bing.com. (30)
14:54:02.218729 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.26938 > 1.0.0.1.53: 30492+ A? www.google.it. (31)
14:54:02.236849 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.50966: 55664 5/13/13 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (611)
14:54:02.255658 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.26938: 30492 1/13/13 A 142.250.180.227 (466)
14:54:02.657669 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.15662 > 1.0.0.1.53: 13294+ PTR? b.8.4.0.c.b.e.f.f.f.c.1.a.5.e.7.0.0.0.0.0.0.0.0.0.0.0.0.0.8.e.f.ip6.arpa. (90)
14:54:02.665185 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.15662: 13294 NXDomain 0/0/0 (90)
14:54:02.951803 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.19602 > 199.7.91.13.53: 26012 A? www.youtube-nocookie.com. (42)
14:54:02.955688 Port2_ppp, IN: IP 199.7.91.13.53 > XXX.XXX.XXX.XXX.19602: 26012 9/13/13 CNAME youtube-ui.l.google.com., A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110 (623)
14:54:03.894653 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.18485 > 1.0.0.1.53: 55604+ A? dzr-utm-amzn-eu-west-1-9af7.upe.p.hmr.sophos.com. (66)
14:54:03.894755 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.19941 > 1.0.0.1.53: 25424+ AAAA? dzr-utm-amzn-eu-west-1-9af7.upe.p.hmr.sophos.com. (66)
14:54:03.972012 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.39998 > 202.12.27.33.53: 28189 A? www.youtube-nocookie.com. (42)
14:54:04.085641 Port2_ppp, IN: IP 202.12.27.33.53 > XXX.XXX.XXX.XXX.39998: 28189 9/13/13 CNAME youtube-ui.l.google.com., A 142.250.201.206, A 172.217.20.14, A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238 (623)
14:54:04.521319 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.58650 > 4.2.2.2.53: 36829+ A? 4.sophosxl.net. (32)
14:54:04.560899 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.29504 > 1.0.0.1.53: 33345+ A? www2.bing.com. (31)
14:54:04.610149 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.58650: 36829 8/13/13 A 52.30.153.100, A 52.209.185.252, A 52.212.172.142, A 3.248.133.40, A 3.251.5.30, A 34.240.170.13, A 34.252.30.182, A 34.241.111.122 (576)
14:54:04.658004 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.29504: 33345 5/13/13 CNAME www2-www2.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (614)
14:54:04.991490 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.15380 > 192.5.5.241.53: 16521 A? www.youtube-nocookie.com. (42)
14:54:04.994816 Port2_ppp, IN: IP 192.5.5.241.53 > XXX.XXX.XXX.XXX.15380: 16521 9/13/13 CNAME youtube-ui.l.google.com., A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14 (623)
14:54:05.166133 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.51684 > 1.0.0.1.53: 5032+ A? wpad.enecom.hr. (32)
14:54:05.167249 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.49867 > 1.0.0.1.53: 35377+ A? wpad.enecom.hr. (32)
14:54:05.188056 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.14380 > 1.0.0.1.53: 43615+ A? youtube.googleapis.com. (40)
14:54:05.200345 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.14380: 43615 1/13/13 A 172.217.19.106 (475)
14:54:05.238779 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.31903 > 8.8.8.8.53: 36084+ A? www.bing.com. (30)
14:54:05.242776 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.31903: 36084 5/13/13 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (611)
14:54:05.298620 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.51684: 5032 NXDomain 0/0/0 (32)
14:54:05.298815 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.49867: 35377 NXDomain 0/0/0 (32)
14:54:06.012028 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.53588 > 198.41.0.4.53: 12645 A? www.youtube-nocookie.com. (42)
14:54:06.015731 Port2_ppp, IN: IP 198.41.0.4.53 > XXX.XXX.XXX.XXX.53588: 12645 9/13/13 CNAME youtube-ui.l.google.com., A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14, A 142.251.39.46 (623)
14:54:06.111987 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.35534 > 192.228.79.201.53: 59037 A? www4.bing.com. (31)
14:54:06.116827 Port2_ppp, IN: IP 192.228.79.201.53 > XXX.XXX.XXX.XXX.35534: 59037 5/13/13 CNAME www4-www4.bing.com.trafficmanager.net., CNAME www4.bing.com.edgekey.net., CNAME e86303.dscx.akamaiedge.net., A 2.22.89.186, A 2.22.89.159 (603)
14:54:06.416420 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.10757 > 1.0.0.1.53: 6798+ A? wp.m.bing.com. (31)
14:54:06.416489 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.35943 > 1.0.0.1.53: 8616+ A? www.google.am. (31)
14:54:06.428108 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.10757: 6798 5/13/13 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (612)
14:54:06.494066 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.35943: 8616 1/13/13 A 142.250.180.227 (466)
14:54:06.914485 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.5892 > 1.0.0.1.53: 699 AAAA? dzr-utm-amzn-eu-west-1-9af7.upe.p.hmr.sophos.com. (66)
14:54:06.914539 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.38620 > 1.0.0.1.53: 21436+ A? dzr-utm-amzn-eu-west-1-9af7.upe.p.hmr.sophos.com. (66)
14:54:06.964807 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.38620: 21436 3/13/13 A 34.249.168.191, A 54.217.122.195, A 34.253.123.11 (533)
14:54:06.966844 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.5892: 699 0/13/13 (485)
14:54:07.032122 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.58252 > 128.63.2.53.53: 20971 A? www.youtube-nocookie.com. (42)
14:54:07.040083 Port2_ppp, IN: IP 128.63.2.53.53 > XXX.XXX.XXX.XXX.58252: 20971 9/13/13 CNAME youtube-ui.l.google.com., A 142.250.201.206, A 172.217.20.14, A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238 (623)
14:54:07.580138 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.22305 > 8.8.8.8.53: 25935+ A? www2.bing.com. (31)
14:54:07.586125 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.22305: 25935 5/13/13 CNAME www2-www2.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (614)
14:54:08.034135 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.10800 > 1.0.0.1.53: 20093+ A? www.google.com.cu. (35)
14:54:08.034209 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.22222 > 199.7.83.42.53: 35299 A? www.youtube-nocookie.com. (42)
14:54:08.034276 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.61228 > 1.0.0.1.53: 8199+ A? www.google.com.sg. (35)
14:54:08.034364 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.63773 > 1.0.0.1.53: 37715+ A? youtube.googleapis.com. (40)
14:54:08.174724 Port2_ppp, IN: IP 199.7.83.42.53 > XXX.XXX.XXX.XXX.22222: 35299 9/13/13 CNAME youtube-ui.l.google.com., A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14, A 142.251.39.46 (623)
14:54:08.228888 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.63773: 37715 1/13/13 A 172.217.19.106 (475)
14:54:08.232914 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.61228: 8199 1/13/13 A 142.251.39.3 (470)
14:54:08.240374 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.10800: 20093 2/13/13 A 142.250.201.195, A 142.251.39.35 (486)
14:54:08.240550 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.32655 > 4.2.2.2.53: 15099+ A? www.bing.com. (30)
14:54:08.359587 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.32655: 15099 5/13/13 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (611)
14:54:08.987001 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.44156 > 193.0.14.129.53: 27984 A? wp.m.bing.com. (31)
14:54:09.022341 Port2_ppp, IN: IP 193.0.14.129.53 > XXX.XXX.XXX.XXX.44156: 27984 5/13/13 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (612)
14:54:09.436943 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.19456 > 8.8.8.8.53: 2590+ A? wp.m.bing.com. (31)
14:54:09.445604 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.19456: 2590 5/13/13 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (612)
14:54:09.671200 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.5671 > 192.112.36.4.53: 26803 A? login.microsoftonline.com. (43)
14:54:09.687601 Port2_ppp, IN: IP 192.112.36.4.53 > XXX.XXX.XXX.XXX.5671: 26803 26/13/13 CNAME ak.privatelink.msidentity.com., CNAME www.tm.ak.prd.aadg.trafficmanager.net., A 20.190.160.21, A 20.190.159.3, A 40.126.31.64, A 20.190.159.72, A 20.190.159.70, A 20.190.159.19, A 20.190.159.22, A 40.126.31.70, A 20.190.159.1, A 40.126.32.69, A 40.126.32.73, A 20.190.160.15, A 20.190.160.13, A 20.190.160.12, A 40.126.32.132, A 40.126.32.135, A 40.126.32.67, A 20.190.159.5, A 20.190.159.69, A 40.126.31.72, A 40.126.32.75, A 40.126.32.139, A 40.126.32.137, A 20.190.160.23 (934)
14:54:10.569440 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.21566 > 192.112.36.4.53: 19131 A? www.youtube.com. (33)
14:54:10.575390 Port2_ppp, IN: IP 192.112.36.4.53 > XXX.XXX.XXX.XXX.21566: 19131 9/13/13 CNAME youtube-ui.l.google.com., A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14 (614)
14:54:10.599534 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.56409 > 4.2.2.2.53: 10696+ A? www2.bing.com. (31)
14:54:10.615734 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.56409: 10696 5/13/13 CNAME www2-www2.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (614)
14:54:11.054320 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.39036 > 192.112.36.4.53: 32741 A? www.youtube-nocookie.com. (42)
14:54:11.071837 Port2_ppp, IN: IP 192.112.36.4.53 > XXX.XXX.XXX.XXX.39036: 32741 9/13/13 CNAME youtube-ui.l.google.com., A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110 (623)
14:54:12.118454 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.38862 > 192.33.4.12.53: 43376 A? xg-up2date-patterns.sophosupd.com. (51)
14:54:12.231877 Port2_ppp, IN: IP 192.33.4.12.53 > XXX.XXX.XXX.XXX.38862: 43376 3/13/13 CNAME xg-up2date-patterns.sophosupd.com.edgekey.net., CNAME e13687.d.akamaiedge.net., A 23.35.229.161 (576)
14:54:12.457257 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.41385 > 4.2.2.2.53: 22774+ A? wp.m.bing.com. (31)
14:54:12.599955 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.41385: 22774 5/13/13 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 131.253.33.200, A 13.107.22.200 (612)
14:54:12.731318 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.20728 > 192.36.148.17.53: 45861 A? login.windows.net. (35)
14:54:12.854676 Port2_ppp, IN: IP 192.36.148.17.53 > XXX.XXX.XXX.XXX.20728: 45861 27/13/13 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.trafficmanager.net., A 20.190.160.23, A 20.190.159.5, A 20.190.159.69, A 20.190.159.1, A 20.190.159.19, A 40.126.31.72, A 20.190.159.22, A 40.126.31.70, A 40.126.32.73, A 20.190.160.12, A 40.126.32.69, A 20.190.160.15, A 20.190.159.3, A 20.190.160.21, A 40.126.32.132, A 20.190.160.13, A 40.126.31.64, A 40.126.32.137, A 40.126.32.139, A 40.126.32.75, A 40.126.32.67, A 40.126.31.68, A 20.190.159.70, A 20.190.159.72 (948)
14:54:13.432400 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.61126 > 1.0.0.1.53: 46453+ A? www.google.com. (32)
14:54:13.524445 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.61126: 46453 2/4/3 A 142.251.39.68, A 142.250.180.228 (184)
14:54:13.548707 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.3076 > 1.0.0.1.53: 28873+ A? 4.sophosxl.net. (32)
14:54:13.627108 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.3076: 28873 8/13/13 A 52.209.185.252, A 52.212.172.142, A 3.248.133.40, A 3.251.5.30, A 34.240.170.13, A 34.252.30.182, A 34.241.111.122, A 52.30.153.100 (576)
14:54:14.073658 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.12974 > 192.33.4.12.53: 43225 A? www.youtube-nocookie.com. (42)
14:54:14.206444 Port2_ppp, IN: IP 192.33.4.12.53 > XXX.XXX.XXX.XXX.12974: 43225 9/13/13 CNAME youtube-ui.l.google.com., A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110 (623)
14:54:14.881411 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.53626 > 1.0.0.1.53: 45533+ A? www.apple.com. (31)
14:54:14.975147 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.53626: 45533 4/13/13 CNAME www.apple.com.edgekey.net., CNAME www.apple.com.edgekey.net.globalredir.akadns.net., CNAME e6858.dscx.akamaiedge.net., A 2.18.168.213 (597)
14:54:16.079844 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.62444 > 1.0.0.1.53: 34367+ A? www.google.de. (31)
14:54:16.079920 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.43435 > 1.0.0.1.53: 35656+ A? www.google.com.pr. (35)
14:54:16.205161 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.62444: 34367 1/13/13 A 142.251.39.67 (466)
14:54:16.214550 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.43435: 35656 1/13/13 A 142.250.180.195 (470)
14:54:16.568575 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.25068 > 8.8.8.8.53: 22862+ A? 4.sophosxl.net. (32)
14:54:16.577921 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.25068: 22862 8/13/13 A 52.212.172.142, A 3.248.133.40, A 3.251.5.30, A 34.240.170.13, A 34.252.30.182, A 34.241.111.122, A 52.30.153.100, A 52.209.185.252 (576)
14:54:17.008249 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.29465 > 1.0.0.1.53: 2059+ A? www.google.be. (31)
14:54:17.008355 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.42132 > 1.0.0.1.53: 22888+ A? www.google.je. (31)
14:54:17.093564 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.56094 > 192.228.79.201.53: 42295 A? www.youtube-nocookie.com. (42)
14:54:17.114792 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.56063 > 192.5.5.241.53: 42155 A? www4.bing.com. (31)
14:54:17.114899 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.58983 > 1.0.0.1.53: 35118+ AAAA? dzr-utm-amzn-eu-west-1-9af7.upe.p.hmr.sophos.com. (66)
14:54:17.141367 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.29465: 2059 2/13/13 A 142.251.39.35, A 142.251.39.67 (482)
14:54:17.161482 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.42132: 22888 2/13/13 A 142.250.201.195, A 172.217.19.99 (482)
14:54:17.212542 Port2_ppp, IN: IP 192.228.79.201.53 > XXX.XXX.XXX.XXX.56094: 42295 9/13/13 CNAME youtube-ui.l.google.com., A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14 (623)
14:54:17.259164 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.58983: 35118 0/13/13 (485)
14:54:17.367588 Port2_ppp, IN: IP 192.5.5.241.53 > XXX.XXX.XXX.XXX.56063: 42155 5/13/13 CNAME www4-www4.bing.com.trafficmanager.net., CNAME www4.bing.com.edgekey.net., CNAME e86303.dscx.akamaiedge.net., A 2.23.97.178, A 2.23.97.241 (603)
14:54:17.735917 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.10626 > 192.36.148.17.53: 56809 A? www.bing.com. (30)
14:54:17.815808 Port2_ppp, IN: IP 192.36.148.17.53 > XXX.XXX.XXX.XXX.10626: 56809 5/13/15 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 131.253.33.200, A 13.107.22.200 (643)
14:54:18.045232 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.3154 > 1.0.0.1.53: 7749+ A? www.google.de. (31)
14:54:18.045314 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.49276 > 1.0.0.1.53: 32740+ A? www.google.mn. (31)
14:54:18.045376 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.23914 > 1.0.0.1.53: 10795+ A? www.google.com.pr. (35)
14:54:18.057076 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.3154: 7749 1/13/13 A 142.251.39.35 (466)
14:54:18.058740 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.49276: 32740 2/13/13 A 142.250.180.227, A 142.250.201.195 (482)
14:54:18.060377 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.23914: 10795 1/13/13 A 142.250.180.227 (470)
14:54:18.530509 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.57282 > 1.0.0.1.53: 43874+ A? securemetrics.apple.com. (41)
14:54:18.545004 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.60375 > 1.0.0.1.53: 15791+ A? securemvt.apple.com. (37)
14:54:18.568102 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.57282: 43874 4/13/13 CNAME appleglobal.102.112.2o7.net., A 15.236.176.210, A 15.188.95.229, A 13.36.218.177 (546)
14:54:18.626541 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.60375: 15791 11/13/13 CNAME apple.tt.omtrdc.net., CNAME mboxedge37.tt.omtrdc.net., CNAME mboxedge37-alb.tt.omtrdc.net., A 54.229.84.199, A 54.77.179.162, A 54.74.157.109, A 79.125.52.138, A 63.34.179.114, A 52.49.242.9, A 52.48.238.49, A 18.202.95.235 (668)
14:54:19.266589 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.23190 > 1.0.0.1.53: 36233+ A? www.google.be. (31)
14:54:19.288699 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.23190: 36233 1/13/13 A 142.251.39.67 (466)
14:54:19.588240 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.44320 > 4.2.2.2.53: 16560+ A? 4.sophosxl.net. (32)
14:54:19.639842 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.44320: 16560 8/13/13 A 3.248.133.40, A 3.251.5.30, A 34.240.170.13, A 34.252.30.182, A 34.241.111.122, A 52.30.153.100, A 52.209.185.252, A 52.212.172.142 (576)
14:54:19.850668 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.57860 > 198.41.0.4.53: 8860 A? www2.bing.com. (31)
14:54:20.006245 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.52133 > 192.36.148.17.53: 23336 A? wp.m.bing.com. (31)
14:54:20.012728 Port2_ppp, IN: IP 198.41.0.4.53 > XXX.XXX.XXX.XXX.57860: 8860 5/13/15 CNAME www2-www2.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (646)
14:54:20.067304 Port2_ppp, IN: IP 192.36.148.17.53 > XXX.XXX.XXX.XXX.52133: 23336 5/13/15 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.a-msedge.net., A 13.107.21.200, A 204.79.197.200 (644)
14:54:20.071421 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.7590 > 1.0.0.1.53: 9655+ A? search.yahoo.com. (34)
14:54:20.107199 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.7590: 9655 2/13/13 CNAME ds-global3.l7.search.ystg1.b.yahoo.com., A 212.82.100.137 (512)
14:54:20.107343 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.55270 > 1.0.0.1.53: 25117+ A? ds-global3.l7.search.ystg1.b.yahoo.com. (56)
14:54:20.107399 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.4823 > 192.203.230.10.53: 13446 A? www.youtube-nocookie.com. (42)
14:54:20.126095 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.55270: 25117 1/13/13 A 212.82.100.137 (491)
14:54:20.128641 Port2_ppp, IN: IP 192.203.230.10.53 > XXX.XXX.XXX.XXX.4823: 13446 9/13/13 CNAME youtube-ui.l.google.com., A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206 (623)
14:54:21.293060 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.21418 > 1.0.0.1.53: 58892+ A? www.google.com.au. (35)
14:54:21.293154 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.40386 > 1.0.0.1.53: 9176+ A? www.google.lv. (31)
14:54:21.372854 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.21418: 58892 1/13/13 A 142.250.201.195 (470)
14:54:21.388297 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.40386: 9176 1/13/13 A 142.251.39.35 (466)
14:54:22.095958 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.5042 > 1.0.0.1.53: 3602+ A? www.google.rw. (31)
14:54:22.119084 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.51863 > 1.0.0.1.53: 59639+ AAAA? dzr-utm-amzn-eu-west-1-9af7.upe.p.hmr.sophos.com. (66)
14:54:22.156349 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.5042: 3602 2/13/13 A 142.250.180.195, A 172.217.20.3 (482)
14:54:22.158618 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.51863: 59639 0/13/13 (485)
14:54:23.127216 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.42870 > 202.12.27.33.53: 30540 A? xg-up2date-patterns.sophosupd.com. (51)
14:54:23.127290 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.32648 > 193.0.14.129.53: 63097 A? www.youtube-nocookie.com. (42)
14:54:23.133419 Port2_ppp, IN: IP 193.0.14.129.53 > XXX.XXX.XXX.XXX.32648: 63097 9/13/13 CNAME youtube-ui.l.google.com., A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110 (623)
14:54:23.185905 Port2_ppp, IN: IP 202.12.27.33.53 > XXX.XXX.XXX.XXX.42870: 30540 3/13/13 CNAME xg-up2date-patterns.sophosupd.com.edgekey.net., CNAME e13687.d.akamaiedge.net., A 23.205.49.159 (576)
14:54:24.019551 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.28384 > 1.0.0.1.53: 55827+ A? www.google.it. (31)
14:54:24.019622 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.25711 > 1.0.0.1.53: 17434+ A? www.google.mk. (31)
14:54:24.092575 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.28384: 55827 2/13/13 A 142.250.180.227, A 172.217.19.99 (482)
14:54:24.108736 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.25711: 17434 1/13/13 A 142.251.39.3 (466)
14:54:24.139057 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.54118 > 1.0.0.1.53: 6757+ A? hbbtv.plustv.info. (35)
14:54:24.320120 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.54118: 6757 1/13/13 A 185.46.34.160 (470)
14:54:24.333146 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.54118 > 1.0.0.1.53: 54520+ AAAA? hbbtv.plustv.info. (35)
14:54:24.493157 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.54118: 54520 0/13/13 (454)
14:54:24.514719 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.23356 > 1.0.0.1.53: 11969+ A? 4.sophosxl.net. (32)
14:54:24.688644 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.23356: 11969 14/13/13 A 34.240.170.13, A 34.252.30.182, A 34.241.111.122, A 52.30.153.100, A 52.209.185.252, A 52.212.172.142, A 3.248.133.40, A 3.251.5.30, A 52.48.106.161, A 52.214.200.136, A 52.214.157.208, A 52.19.6.81, A 34.241.156.140, A 54.171.66.20 (672)
14:54:25.241205 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.18190 > 1.0.0.1.53: 34612+ A? www.google.co.mz. (34)
14:54:25.373722 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.18190: 34612 1/13/13 A 142.250.180.195 (469)
14:54:26.147792 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.38258 > 192.36.148.17.53: 6968 A? www.youtube-nocookie.com. (42)
14:54:26.154504 Port2_ppp, IN: IP 192.36.148.17.53 > XXX.XXX.XXX.XXX.38258: 6968 9/13/13 CNAME youtube-ui.l.google.com., A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206 (623)
14:54:27.099414 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.15844 > 1.0.0.1.53: 11142+ A? www.google.co.ao. (34)
14:54:27.099516 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.42395 > 1.0.0.1.53: 49738+ A? www.google.com.jm. (35)
14:54:27.160922 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.24924 > 1.0.0.1.53: 14810+ A? xg-up2date-patterns.sophosupd.com. (51)
14:54:27.161013 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.44844 > 1.0.0.1.53: 15409+ AAAA? xg-up2date-patterns.sophosupd.com. (51)
14:54:27.282575 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.42395: 49738 2/13/13 A 142.251.39.67, A 142.250.180.227 (486)

14:54:27.285001 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.15844: 11142 2/13/13 A 172.217.19.99, A 142.251.39.67 (485)
14:54:27.305317 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.24924: 14810 3/13/13 CNAME xg-up2date-patterns.sophosupd.com.edgekey.net., CNAME e13687.d.akamaiedge.net., A 23.205.49.159 (576)
14:54:27.325011 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.44844: 15409 0/13/13 (470)
14:54:27.515672 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.25553 > 8.8.8.8.53: 19087+ A? 4.sophosxl.net. (32)
14:54:27.650519 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.25553: 19087 8/13/13 A 52.30.153.100, A 3.248.133.40, A 52.48.106.161, A 52.214.200.136, A 52.214.157.208, A 52.19.6.81, A 34.241.156.140, A 54.171.66.20 (576)
14:54:28.085748 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.45411 > 1.0.0.1.53: 9744+ A? www.google.hu. (31)
14:54:28.134974 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.42894 > 192.203.230.10.53: 4178 A? www4.bing.com. (31)
14:54:28.145668 Port2_ppp, IN: IP 192.203.230.10.53 > XXX.XXX.XXX.XXX.42894: 4178 5/13/13 CNAME www4-www4.bing.com.trafficmanager.net., CNAME www4.bing.com.edgekey.net., CNAME e86303.dscx.akamaiedge.net., A 2.23.97.178, A 2.23.97.241 (603)
14:54:28.191415 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.45411: 9744 1/13/13 A 142.251.39.35 (466)
14:54:29.167776 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.29128 > 192.58.128.30.53: 2929 A? www.youtube-nocookie.com. (42)
14:54:29.172686 Port2_ppp, IN: IP 192.58.128.30.53 > XXX.XXX.XXX.XXX.29128: 2929 9/13/13 CNAME youtube-ui.l.google.com., A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14 (623)
14:54:30.015028 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.44127 > 1.0.0.1.53: 56011+ A? www.google.gl. (31)
14:54:30.123957 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.44127: 56011 1/13/13 A 142.251.39.3 (466)
14:54:30.180387 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.10429 > 8.8.8.8.53: 2933+ A? xg-up2date-patterns.sophosupd.com. (51)
14:54:30.184885 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.10429: 2933 3/13/13 CNAME xg-up2date-patterns.sophosupd.com.edgekey.net., CNAME e13687.d.akamaiedge.net., A 23.205.49.159 (576)
14:54:30.535265 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.55129 > 4.2.2.2.53: 16431+ A? 4.sophosxl.net. (32)
14:54:30.722059 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.55129: 16431 8/13/13 A 3.248.133.40, A 52.48.106.161, A 52.214.200.136, A 52.214.157.208, A 52.19.6.81, A 34.241.156.140, A 54.171.66.20, A 52.30.153.100 (576)
14:54:31.026599 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.43539 > 199.7.91.13.53: 38151 A? wp.m.bing.com. (31)
14:54:31.051556 Port2_ppp, IN: IP 199.7.91.13.53 > XXX.XXX.XXX.XXX.43539: 38151 5/13/15 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.a-msedge.net., A 204.79.197.200, A 13.107.21.200 (644)
14:54:31.244856 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.57006 > 1.0.0.1.53: 31715+ A? plus.l.google.com. (35)
14:54:31.244952 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.34863 > 1.0.0.1.53: 11505+ A? www.google.si. (31)
14:54:31.245024 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.39808 > 1.0.0.1.53: 41522+ A? www.youtube-nocookie.com. (42)
14:54:31.257998 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.39808: 41522 9/13/13 CNAME youtube-ui.l.google.com., A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14, A 142.251.39.46, A 142.251.39.78 (623)
14:54:31.303573 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.57006: 31715 1/4/3 A 142.251.39.78 (171)
14:54:31.310591 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.34863: 11505 1/13/13 A 142.250.180.195 (466)
14:54:32.187532 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.49056 > 199.7.91.13.53: 57825 A? www.youtube-nocookie.com. (42)
14:54:32.194576 Port2_ppp, IN: IP 199.7.91.13.53 > XXX.XXX.XXX.XXX.49056: 57825 9/13/13 CNAME youtube-ui.l.google.com., A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206 (623)
14:54:32.471411 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.60237 > 1.0.0.1.53: 29742+ A? login.microsoft.com. (37)
14:54:32.496320 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.60237: 29742 27/13/29 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.trafficmanager.net., A 40.126.32.75, A 40.126.32.67, A 40.126.31.68, A 20.190.159.70, A 20.190.159.72, A 20.190.160.23, A 20.190.159.5, A 20.190.159.69, A 20.190.159.1, A 20.190.159.19, A 40.126.31.72, A 20.190.159.22, A 40.126.31.70, A 40.126.32.73, A 20.190.160.12, A 40.126.32.69, A 20.190.160.15, A 20.190.159.3, A 20.190.160.21, A 40.126.32.132, A 20.190.160.13, A 40.126.31.64, A 40.126.32.137, A 40.126.32.139 (1231)
14:54:33.073272 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.44805 > 1.0.0.1.53: 4269+ A? www.google.bi. (31)
14:54:33.138200 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.44805: 4269 1/13/13 A 142.250.180.195 (466)
14:54:33.199632 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.16016 > 4.2.2.2.53: 52819+ A? xg-up2date-patterns.sophosupd.com. (51)
14:54:33.203803 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.16016: 52819 3/13/13 CNAME xg-up2date-patterns.sophosupd.com.edgekey.net., CNAME e13687.d.akamaiedge.net., A 23.205.49.159 (576)
14:54:33.677923 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.57282 > 1.0.0.1.53: 12493+ A? encrypted-tbn0.gstatic.com. (44)
14:54:33.681911 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.57282: 12493 1/13/13 A 142.251.39.78 (479)
14:54:33.706590 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.49497 > 1.0.0.1.53: 18871+ A? 4.sophosxl.net. (32)
14:54:33.709696 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.49497: 18871 8/13/13 A 52.48.106.161, A 52.214.200.136, A 52.214.157.208, A 52.19.6.81, A 34.241.156.140, A 54.171.66.20, A 52.30.153.100, A 3.248.133.40 (576)
14:54:34.147385 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.30346 > 128.63.2.53.53: 30364 A? xg-up2date-patterns.sophosupd.com. (51)
14:54:34.262489 Port2_ppp, IN: IP 128.63.2.53.53 > XXX.XXX.XXX.XXX.30346: 30364 3/13/13 CNAME xg-up2date-patterns.sophosupd.com.edgekey.net., CNAME e13687.d.akamaiedge.net., A 23.205.49.159 (576)
14:54:34.262702 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.62165 > 8.8.8.8.53: 56355+ A? www.youtube-nocookie.com. (42)
14:54:34.343005 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.62165: 56355 9/13/13 CNAME youtube-ui.l.google.com., A 172.217.20.14, A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206 (623)
14:54:35.208008 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.47034 > 202.12.27.33.53: 62559 A? www.youtube-nocookie.com. (42)
14:54:35.212423 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.22447 > 1.0.0.1.53: 34013+ PTR? b.8.4.0.c.b.e.f.f.f.c.1.a.5.e.7.0.0.0.0.0.0.0.0.0.0.0.0.0.8.e.f.ip6.arpa. (90)
14:54:35.286075 Port2_ppp, IN: IP 202.12.27.33.53 > XXX.XXX.XXX.XXX.47034: 62559 9/13/13 CNAME youtube-ui.l.google.com., A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14 (623)
14:54:35.293256 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.22447: 34013 NXDomain 0/0/0 (90)
14:54:35.490838 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.33388 > 8.8.8.8.53: 5748+ A? login.microsoft.com. (37)
14:54:35.492483 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.49145 > 1.0.0.1.53: 5716+ A? login.microsoftonline.com. (43)
14:54:35.610476 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.33388: 5748 19/13/37 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.akadns.net., A 20.190.159.68, A 20.190.159.64, A 20.190.159.23, A 20.190.159.75, A 20.190.159.4, A 20.190.159.2, A 20.190.159.73, A 40.126.31.67, A 20.190.159.69, A 40.126.31.64, A 40.126.31.68, A 20.190.159.70, A 40.126.31.70, A 20.190.159.5, A 20.190.159.3, A 20.190.159.19 (1231)
14:54:35.615944 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.49145: 5716 23/13/13 CNAME ak.privatelink.msidentity.com., CNAME www.tm.ak.prd.aadg.trafficmanager.net., A 20.190.159.72, A 20.190.159.70, A 20.190.159.22, A 40.126.31.70, A 20.190.159.1, A 40.126.32.69, A 40.126.32.73, A 20.190.160.15, A 20.190.160.13, A 20.190.160.12, A 40.126.32.132, A 40.126.32.135, A 40.126.32.67, A 20.190.159.5, A 40.126.32.75, A 40.126.32.139, A 40.126.32.137, A 20.190.160.23, A 20.190.160.21, A 20.190.159.3, A 40.126.31.64 (886)
14:54:36.072334 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.57282 > 1.0.0.1.53: 47945+ A? optimizationguide-pa.googleapis.com. (53)
14:54:36.073780 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.49211 > 1.0.0.1.53: 50591+ A? www.sophos.com. (32)
14:54:36.073788 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.60193 > 1.0.0.1.53: 36540+ A? fonts.googleapis.com. (38)
14:54:36.073858 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.49782 > 1.0.0.1.53: 260+ A? dev.visualwebsiteoptimizer.com. (48)
14:54:36.079430 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.62873 > 1.0.0.1.53: 44724+ A? safebrowsing.google.com. (41)
14:54:36.098878 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.57282: 47945 1/13/13 A 142.250.180.202 (488)
14:54:36.105559 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.60193: 36540 1/13/13 A 142.251.39.10 (473)
14:54:36.107436 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.49782: 260 1/13/13 A 34.96.102.137 (483)
14:54:36.108053 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.57282 > 1.0.0.1.53: 9432+ A? cdn.cookielaw.org. (35)
14:54:36.116924 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.62873: 44724 2/4/3 CNAME sb.l.google.com., A 142.251.39.78 (196)
14:54:36.172748 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.57282: 9432 2/13/13 A 104.16.149.64, A 104.16.148.64 (486)
14:54:36.183902 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.49211: 50591 3/13/13 CNAME www.sophos.com.edgekey.net., CNAME e6203.b.akamaiedge.net., A 23.7.199.174 (537)
14:54:36.726980 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.14191 > 8.8.8.8.53: 60882+ A? 4.sophosxl.net. (32)
14:54:36.729857 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.14191: 60882 8/13/13 A 52.214.200.136, A 52.214.157.208, A 52.19.6.81, A 34.241.156.140, A 54.171.66.20, A 52.30.153.100, A 3.248.133.40, A 52.48.106.161 (576)
14:54:37.282466 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.14630 > 4.2.2.2.53: 46519+ A? www.youtube-nocookie.com. (42)
14:54:37.339830 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.14630: 46519 9/13/13 CNAME youtube-ui.l.google.com., A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206 (623)
14:54:37.840317 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.61369 > 1.0.0.1.53: 64922+ A? www4.bing.com. (31)
14:54:37.840523 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.44784 > 1.0.0.1.53: 23938+ A? www.youtube.com. (33)
14:54:37.840597 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.8845 > 1.0.0.1.53: 63665+ A? login.windows.net. (35)
14:54:37.864230 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.44784: 23938 9/13/13 CNAME youtube-ui.l.google.com., A 172.217.20.14, A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206 (614)
14:54:37.884127 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.8845: 63665 27/13/29 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.trafficmanager.net., A 20.190.160.15, A 20.190.159.3, A 20.190.160.21, A 40.126.32.132, A 20.190.160.13, A 40.126.31.64, A 40.126.32.137, A 40.126.32.139, A 40.126.32.75, A 40.126.32.67, A 40.126.31.68, A 20.190.159.70, A 20.190.159.72, A 20.190.160.23, A 20.190.159.5, A 20.190.159.69, A 20.190.159.1, A 20.190.159.19, A 40.126.31.72, A 20.190.159.22, A 40.126.31.70, A 40.126.32.73, A 20.190.160.12, A 40.126.32.69 (1229)
14:54:37.916887 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.61369: 64922 5/13/13 CNAME www4-www4.bing.com.trafficmanager.net., CNAME www4.bing.com.edgekey.net., CNAME e86303.dscx.akamaiedge.net., A 2.23.97.178, A 2.23.97.241 (603)
14:54:38.041354 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.22448 > 1.0.0.1.53: 9894+ A? www.google.co.ma. (34)
14:54:38.041511 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.15627 > 1.0.0.1.53: 16562+ A? www.google.md. (31)
14:54:38.041662 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.33114 > 1.0.0.1.53: 5480+ A? www.google.ml. (31)
14:54:38.208505 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.33114: 5480 1/13/13 A 142.250.180.195 (466)
14:54:38.208782 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.41217 > 192.5.5.241.53: 14789 A? www.youtube-nocookie.com. (42)
14:54:38.211388 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.22448: 9894 1/13/13 A 142.251.39.67 (469)
14:54:38.227697 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.15627: 16562 1/13/13 A 142.250.180.227 (466)
14:54:38.403406 Port2_ppp, IN: IP 192.5.5.241.53 > XXX.XXX.XXX.XXX.41217: 14789 9/13/13 CNAME youtube-ui.l.google.com., A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14 (623)
14:54:38.510760 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.20158 > 4.2.2.2.53: 63043+ A? login.microsoft.com. (37)
14:54:38.510798 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.12297 > 8.8.8.8.53: 64024+ A? login.microsoftonline.com. (43)
14:54:38.604977 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.20158: 63043 19/13/37 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.akadns.net., A 20.190.159.73, A 40.126.31.67, A 20.190.159.69, A 40.126.31.64, A 40.126.31.68, A 20.190.159.70, A 40.126.31.70, A 20.190.159.5, A 20.190.159.3, A 20.190.159.19, A 20.190.159.68, A 20.190.159.64, A 20.190.159.23, A 20.190.159.75, A 20.190.159.4, A 20.190.159.2 (1231)
14:54:38.609870 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.12297: 64024 15/13/13 CNAME ak.privatelink.msidentity.com., CNAME www.tm.ak.prd.aadg.trafficmanager.net., A 20.190.160.21, A 40.126.32.69, A 40.126.32.73, A 20.190.160.15, A 20.190.160.13, A 20.190.160.12, A 40.126.32.132, A 40.126.32.135, A 40.126.32.67, A 40.126.32.75, A 40.126.32.139, A 40.126.32.137, A 20.190.160.23 (758)
14:54:39.155341 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.24487 > 193.0.14.129.53: 64166 A? www4.bing.com. (31)
14:54:39.305572 Port2_ppp, IN: IP 193.0.14.129.53 > XXX.XXX.XXX.XXX.24487: 64166 5/13/13 CNAME www4-www4.bing.com.trafficmanager.net., CNAME www4.bing.com.edgekey.net., CNAME e86303.dscx.akamaiedge.net., A 2.23.97.178, A 2.23.97.241 (603)
14:54:39.746800 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.3523 > 4.2.2.2.53: 54434+ A? 4.sophosxl.net. (32)
14:54:39.756139 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.3523: 54434 8/13/13 A 52.214.157.208, A 52.19.6.81, A 34.241.156.140, A 54.171.66.20, A 52.30.153.100, A 3.248.133.40, A 52.48.106.161, A 52.214.200.136 (576)
14:54:40.517007 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.60193 > 1.0.0.1.53: 1871+ A? builder.lift.acquia.com. (41)
14:54:40.517463 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.49782 > 1.0.0.1.53: 46273+ A? img03.en25.com. (32)
14:54:40.517594 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.62873 > 1.0.0.1.53: 13108+ A? stats.g.doubleclick.net. (41)
14:54:40.523498 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.62873: 13108 5/13/13 CNAME stats.l.doubleclick.net., A 142.250.102.157, A 142.250.102.155, A 142.250.102.156, A 142.250.102.154 (543)
14:54:40.535576 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.57282 > 1.0.0.1.53: 61807+ A? www.googletagmanager.com. (42)
14:54:40.548739 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.57282: 61807 2/13/13 CNAME www-googletagmanager.l.google.com., A 142.250.180.232 (521)
14:54:40.553863 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.62873 > 1.0.0.1.53: 54007+ A? id.rlcdn.com. (30)
14:54:40.566076 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.62873: 54007 1/13/13 A 35.244.174.68 (465)
14:54:40.568525 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.57282 > 1.0.0.1.53: 39698+ A? scripts.demandbase.com. (40)
14:54:40.573640 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.60193: 1871 4/13/13 A 52.84.106.58, A 52.84.106.48, A 52.84.106.41, A 52.84.106.44 (524)
14:54:40.584634 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.49782: 46273 3/13/13 CNAME wildcard.en25.com.edgekey.net., CNAME e5763.g.akamaiedge.net., A 104.94.241.61 (540)
14:54:40.635812 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.30338 > 192.203.230.10.53: 29588 A? 4.sophosxl.net. (32)
14:54:40.642204 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.57282: 39698 4/13/13 A 52.84.106.8, A 52.84.106.104, A 52.84.106.66, A 52.84.106.125 (523)
14:54:40.648380 Port2_ppp, IN: IP 192.203.230.10.53 > XXX.XXX.XXX.XXX.30338: 29588 8/13/13 A 52.19.6.81, A 34.241.156.140, A 54.171.66.20, A 52.30.153.100, A 3.248.133.40, A 52.48.106.161, A 52.214.200.136, A 52.214.157.208 (576)
14:54:40.653300 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.62873 > 1.0.0.1.53: 60199+ A? fonts.gstatic.com. (35)
14:54:40.671762 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.62873: 60199 2/13/13 CNAME gstaticadssl.l.google.com., A 142.251.39.3 (506)
14:54:40.672905 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.60193 > 1.0.0.1.53: 8154+ A? s.go-mpulse.net. (33)
14:54:40.701815 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.57282 > 1.0.0.1.53: 57641+ A? api.company-target.com. (40)
14:54:40.712858 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.52235 > 1.0.0.1.53: 60570+ AAAA? xg-up2date-patterns.sophosupd.com. (51)
14:54:40.719465 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.57282: 57641 4/13/13 A 65.9.25.15, A 65.9.25.38, A 65.9.25.58, A 65.9.25.122 (523)
14:54:40.735486 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.60193: 8154 3/13/13 CNAME ip46.go-mpulse.net.edgekey.net., CNAME e4518.dscx.akamaiedge.net., A 2.18.168.136 (542)
14:54:40.760212 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.52235: 60570 0/13/13 (470)
14:54:40.760315 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.54983 > 8.8.8.8.53: 5135+ AAAA? xg-up2date-patterns.sophosupd.com. (51)
14:54:40.784966 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.54983: 5135 0/13/13 (470)
14:54:40.860203 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.6848 > 8.8.8.8.53: 60875+ A? www4.bing.com. (31)
14:54:40.860239 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.38997 > 8.8.8.8.53: 56213+ A? www.youtube.com. (33)
14:54:40.860273 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.57861 > 8.8.8.8.53: 18158+ A? login.windows.net. (35)
14:54:40.865986 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.6848: 60875 5/13/13 CNAME www4-www4.bing.com.trafficmanager.net., CNAME www4.bing.com.edgekey.net., CNAME e86303.dscx.akamaiedge.net., A 2.23.97.178, A 2.23.97.241 (603)
14:54:40.871851 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.38997: 56213 9/13/13 CNAME youtube-ui.l.google.com., A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14, A 142.251.39.46, A 142.251.39.78 (614)
14:54:40.883559 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.57861: 18158 27/13/29 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.trafficmanager.net., A 20.190.159.72, A 20.190.160.23, A 20.190.159.5, A 20.190.159.69, A 20.190.159.1, A 20.190.159.19, A 40.126.31.72, A 20.190.159.22, A 40.126.31.70, A 40.126.32.73, A 20.190.160.12, A 40.126.32.69, A 20.190.160.15, A 20.190.159.3, A 20.190.160.21, A 40.126.32.132, A 20.190.160.13, A 40.126.31.64, A 40.126.32.137, A 40.126.32.139, A 40.126.32.75, A 40.126.32.67, A 40.126.31.68, A 20.190.159.70 (1229)
14:54:41.229147 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.52794 > 198.41.0.4.53: 3919 A? www.youtube-nocookie.com. (42)
14:54:41.281794 Port2_ppp, IN: IP 198.41.0.4.53 > XXX.XXX.XXX.XXX.52794: 3919 9/13/13 CNAME youtube-ui.l.google.com., A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206 (623)
14:54:41.530010 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.51512 > 199.7.83.42.53: 37024 A? login.microsoft.com. (37)
14:54:41.530053 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.14730 > 4.2.2.2.53: 49258+ A? login.microsoftonline.com. (43)
14:54:41.551131 Port2_ppp, IN: IP 199.7.83.42.53 > XXX.XXX.XXX.XXX.51512: 37024 19/13/37 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.akadns.net., A 40.126.31.70, A 20.190.159.5, A 20.190.159.3, A 20.190.159.19, A 20.190.159.68, A 20.190.159.64, A 20.190.159.23, A 20.190.159.75, A 20.190.159.4, A 20.190.159.2, A 20.190.159.73, A 40.126.31.67, A 20.190.159.69, A 40.126.31.64, A 40.126.31.68, A 20.190.159.70 (1231)
14:54:41.557154 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.14730: 49258 15/13/13 CNAME ak.privatelink.msidentity.com., CNAME www.tm.ak.prd.aadg.trafficmanager.net., A 20.190.160.15, A 20.190.160.13, A 20.190.160.12, A 40.126.32.132, A 40.126.32.135, A 40.126.32.67, A 40.126.32.75, A 40.126.32.139, A 40.126.32.137, A 20.190.160.23, A 20.190.160.21, A 40.126.32.69, A 40.126.32.73 (758)
14:54:42.046659 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.1127 > 192.33.4.12.53: 62009 A? wp.m.bing.com. (31)
14:54:42.081106 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.57098 > 1.0.0.1.53: 7652+ A? www.google.fi. (31)
14:54:42.171368 Port2_ppp, IN: IP 192.33.4.12.53 > XXX.XXX.XXX.XXX.1127: 62009 5/13/15 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (644)
14:54:42.250531 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.57098: 7652 1/13/13 A 142.251.39.67 (466)
14:54:42.485134 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.62873 > 1.0.0.1.53: 38696+ A? match.prod.bidr.io. (36)
14:54:42.550124 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.32547 > 192.228.79.201.53: 44664 A? login.microsoft.com. (37)
14:54:42.621193 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.62873: 38696 8/13/13 A 54.154.238.203, A 52.209.232.242, A 52.48.120.34, A 52.212.188.172, A 54.220.105.73, A 52.19.186.186, A 52.210.67.20, A 52.212.196.36 (583)
14:54:42.662743 Port2_ppp, IN: IP 192.228.79.201.53 > XXX.XXX.XXX.XXX.32547: 44664 27/13/29 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.trafficmanager.net., A 20.190.159.1, A 20.190.159.19, A 40.126.31.72, A 20.190.159.22, A 40.126.31.70, A 40.126.32.73, A 20.190.160.12, A 40.126.32.69, A 20.190.160.15, A 20.190.159.3, A 20.190.160.21, A 40.126.32.132, A 20.190.160.13, A 40.126.31.64, A 40.126.32.137, A 40.126.32.139, A 40.126.32.75, A 40.126.32.67, A 40.126.31.68, A 20.190.159.70, A 20.190.159.72, A 20.190.160.23, A 20.190.159.5, A 20.190.159.69 (1231)
14:54:43.569460 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.24217 > 192.5.5.241.53: 41741 A? login.microsoft.com. (37)
14:54:43.582281 Port2_ppp, IN: IP 192.5.5.241.53 > XXX.XXX.XXX.XXX.24217: 41741 19/13/37 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.akadns.net., A 20.190.159.68, A 20.190.159.64, A 20.190.159.23, A 20.190.159.75, A 20.190.159.4, A 20.190.159.2, A 20.190.159.73, A 40.126.31.67, A 20.190.159.69, A 40.126.31.64, A 40.126.31.68, A 20.190.159.70, A 40.126.31.70, A 20.190.159.5, A 20.190.159.3, A 20.190.159.19 (1231)
14:54:43.873709 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.39700 > 4.2.2.2.53: 56739+ A? www4.bing.com. (31)
14:54:43.873761 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.65415 > 4.2.2.2.53: 36403+ A? www.youtube.com. (33)
14:54:43.873792 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.13132 > 4.2.2.2.53: 63870+ A? login.windows.net. (35)
14:54:43.901388 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.39700: 56739 5/13/13 CNAME www4-www4.bing.com.trafficmanager.net., CNAME www4.bing.com.edgekey.net., CNAME e86303.dscx.akamaiedge.net., A 2.23.97.178, A 2.23.97.241 (603)
14:54:43.904865 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.65415: 36403 9/13/13 CNAME youtube-ui.l.google.com., A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14 (614)
14:54:43.919411 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.13132: 63870 27/13/29 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.trafficmanager.net., A 40.126.31.70, A 40.126.32.73, A 20.190.160.12, A 40.126.32.69, A 20.190.160.15, A 20.190.159.3, A 20.190.160.21, A 40.126.32.132, A 20.190.160.13, A 40.126.31.64, A 40.126.32.137, A 40.126.32.139, A 40.126.32.75, A 40.126.32.67, A 40.126.31.68, A 20.190.159.70, A 20.190.159.72, A 20.190.160.23, A 20.190.159.5, A 20.190.159.69, A 20.190.159.1, A 20.190.159.19, A 40.126.31.72, A 20.190.159.22 (1229)
14:54:44.074449 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.45830 > 1.0.0.1.53: 21122+ A? www.google.com.co. (35)
14:54:44.174576 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.45830: 21122 1/13/13 A 142.251.39.67 (470)
14:54:44.187924 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.23204 > 1.0.0.1.53: 37375+ A? 4.sophosxl.net. (32)
14:54:44.193470 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.23204: 37375 8/13/13 A 34.241.156.140, A 54.171.66.20, A 52.30.153.100, A 3.248.133.40, A 52.48.106.161, A 52.214.200.136, A 52.214.157.208, A 52.19.6.81 (576)
14:54:44.196343 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.57282 > 1.0.0.1.53: 55697+ A? sessions.bugsnag.com. (38)
14:54:44.199570 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.57282: 55697 1/13/13 A 35.190.88.7 (473)
14:54:44.201587 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.57282 > 1.0.0.1.53: 60346+ A? us-east-1-decisionapi.lift.acquia.com. (55)
14:54:44.235765 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.57282: 60346 3/13/13 A 34.234.5.249, A 54.196.241.159, A 50.16.174.225 (522)
14:54:44.249249 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.48232 > 128.63.2.53.53: 45297 A? www.youtube-nocookie.com. (42)
14:54:44.253107 Port2_ppp, IN: IP 128.63.2.53.53 > XXX.XXX.XXX.XXX.48232: 45297 9/13/13 CNAME youtube-ui.l.google.com., A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14, A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110 (623)
14:54:44.365210 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.57282 > 1.0.0.1.53: 18060+ A? 9570324.fls.doubleclick.net. (45)
14:54:44.380028 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.62231 > 1.0.0.1.53: 46+ A? 9816844.fls.doubleclick.net. (45)
14:54:44.420289 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.57282: 18060 2/13/13 CNAME dart.l.doubleclick.net., A 172.217.19.102 (498)
14:54:44.434845 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.62231: 46 2/13/13 CNAME dart.l.doubleclick.net., A 172.217.19.102 (498)
14:54:44.489243 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.57282 > 1.0.0.1.53: 55635+ A? c.go-mpulse.net. (33)
14:54:44.548565 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.57282: 55635 3/13/13 CNAME wildcard46.go-mpulse.net.edgekey.net., CNAME e4518.dscapi7.akamaiedge.net., A 2.18.168.136 (551)
14:54:44.572670 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.13461 > 192.58.128.30.53: 53880 A? login.microsoft.com. (37)
14:54:44.581678 Port2_ppp, IN: IP 192.58.128.30.53 > XXX.XXX.XXX.XXX.13461: 53880 19/13/37 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.akadns.net., A 20.190.159.4, A 20.190.159.2, A 20.190.159.73, A 40.126.31.67, A 20.190.159.69, A 40.126.31.64, A 40.126.31.68, A 20.190.159.70, A 40.126.31.70, A 20.190.159.5, A 20.190.159.3, A 20.190.159.19, A 20.190.159.68, A 20.190.159.64, A 20.190.159.23, A 20.190.159.75 (1231)
14:54:45.167441 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.26674 > 192.5.5.241.53: 3841 A? xg-up2date-patterns.sophosupd.com. (51)
14:54:45.175001 Port2_ppp, IN: IP 192.5.5.241.53 > XXX.XXX.XXX.XXX.26674: 3841 4/13/13 CNAME xg-up2date-patterns.sophosupd.com.edgekey.net., CNAME e13687.d.akamaiedge.net., A 2.21.185.157, A 23.205.49.159 (592)
14:54:45.324748 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.62231 > 1.0.0.1.53: 12579+ A? www.google.hr. (31)
14:54:45.335367 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.62231: 12579 1/13/13 A 142.251.39.3 (466)
14:54:45.592302 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.22228 > 192.36.148.17.53: 38817 A? login.microsoft.com. (37)
14:54:45.601591 Port2_ppp, IN: IP 192.36.148.17.53 > XXX.XXX.XXX.XXX.22228: 38817 27/13/29 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.trafficmanager.net., A 20.190.160.15, A 20.190.159.3, A 20.190.160.21, A 40.126.32.132, A 20.190.160.13, A 40.126.31.64, A 40.126.32.137, A 40.126.32.139, A 40.126.32.75, A 40.126.32.67, A 40.126.31.68, A 20.190.159.70, A 20.190.159.72, A 20.190.160.23, A 20.190.159.5, A 20.190.159.69, A 20.190.159.1, A 20.190.159.19, A 40.126.31.72, A 20.190.159.22, A 40.126.31.70, A 40.126.32.73, A 20.190.160.12, A 40.126.32.69 (1231)
14:54:46.313891 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.62231 > 1.0.0.1.53: 63433+ A? segments.company-target.com. (45)
14:54:46.394815 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.62231: 63433 4/13/13 A 52.84.106.52, A 52.84.106.86, A 52.84.106.48, A 52.84.106.120 (528)
14:54:46.612398 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.44694 > 202.12.27.33.53: 21560 A? login.microsoft.com. (37)
14:54:46.621481 Port2_ppp, IN: IP 202.12.27.33.53 > XXX.XXX.XXX.XXX.44694: 21560 19/13/37 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.akadns.net., A 40.126.31.70, A 20.190.159.5, A 20.190.159.3, A 20.190.159.19, A 20.190.159.68, A 20.190.159.64, A 20.190.159.23, A 20.190.159.75, A 20.190.159.4, A 20.190.159.2, A 20.190.159.73, A 40.126.31.67, A 20.190.159.69, A 40.126.31.64, A 40.126.31.68, A 20.190.159.70 (1231)
14:54:47.208393 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.63640 > 8.8.8.8.53: 43413+ A? 4.sophosxl.net. (32)
14:54:47.210994 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.63640: 43413 8/13/13 A 54.171.66.20, A 52.30.153.100, A 3.248.133.40, A 52.48.106.161, A 52.214.200.136, A 52.214.157.208, A 52.19.6.81, A 34.241.156.140 (576)
14:54:47.269189 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.4711 > 199.7.83.42.53: 21336 A? www.youtube-nocookie.com. (42)
14:54:47.284664 Port2_ppp, IN: IP 199.7.83.42.53 > XXX.XXX.XXX.XXX.4711: 21336 9/13/13 CNAME youtube-ui.l.google.com., A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 172.217.20.14 (623)
14:54:47.632180 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.19774 > 199.7.91.13.53: 65191 A? login.microsoft.com. (37)
14:54:47.639301 Port2_ppp, IN: IP 199.7.91.13.53 > XXX.XXX.XXX.XXX.19774: 65191 27/13/29 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.trafficmanager.net., A 40.126.31.64, A 40.126.32.137, A 40.126.32.139, A 40.126.32.75, A 40.126.32.67, A 40.126.31.68, A 20.190.159.70, A 20.190.159.72, A 20.190.160.23, A 20.190.159.5, A 20.190.159.69, A 20.190.159.1, A 20.190.159.19, A 40.126.31.72, A 20.190.159.22, A 40.126.31.70, A 40.126.32.73, A 20.190.160.12, A 40.126.32.69, A 20.190.160.15, A 20.190.159.3, A 20.190.160.21, A 40.126.32.132, A 20.190.160.13 (1231)
14:54:47.732251 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.26444 > 1.0.0.1.53: 37227+ A? www.bing.com. (30)
14:54:47.738398 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.26444: 37227 5/13/15 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.a-msedge.net., A 204.79.197.200, A 13.107.21.200 (643)
14:54:48.146782 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.50592 > 1.0.0.1.53: 52531+ A? adservice.google.com. (38)
14:54:48.150504 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.50592: 52531 1/4/3 A 142.250.180.226 (174)
14:54:48.652370 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.57684 > 193.0.14.129.53: 42929 A? login.microsoft.com. (37)
14:54:48.662126 Port2_ppp, IN: IP 193.0.14.129.53 > XXX.XXX.XXX.XXX.57684: 42929 19/13/37 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.akadns.net., A 20.190.159.68, A 20.190.159.64, A 20.190.159.23, A 20.190.159.75, A 20.190.159.4, A 20.190.159.2, A 20.190.159.73, A 40.126.31.67, A 20.190.159.69, A 40.126.31.64, A 40.126.31.68, A 20.190.159.70, A 40.126.31.70, A 20.190.159.5, A 20.190.159.3, A 20.190.159.19 (1231)
14:54:49.054272 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.61919 > 1.0.0.1.53: 55107+ A? www.google.hr. (31)
14:54:49.057019 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.61919: 55107 1/13/13 A 142.251.39.3 (466)
14:54:49.057130 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.50592 > 1.0.0.1.53: 3100+ A? s1777052651.t.eloqua.com. (42)
14:54:49.110883 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.50592: 3100 2/13/13 CNAME p06a.t.eloqua.com., A 192.29.202.14 (496)
14:54:49.139440 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.50592 > 1.0.0.1.53: 51054+ A? j.6sc.co. (26)
14:54:49.144447 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.50592: 51054 3/13/13 CNAME j.6sc.co.edgekey.net., CNAME e7313.g.akamaiedge.net., A 184.30.220.95 (525)
14:54:49.672480 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.44418 > 128.63.2.53.53: 52579 A? login.microsoft.com. (37)
14:54:49.695028 Port2_ppp, IN: IP 128.63.2.53.53 > XXX.XXX.XXX.XXX.44418: 52579 27/13/29 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.trafficmanager.net., A 40.126.32.73, A 20.190.160.12, A 40.126.32.69, A 20.190.160.15, A 20.190.159.3, A 20.190.160.21, A 40.126.32.132, A 20.190.160.13, A 40.126.31.64, A 40.126.32.137, A 40.126.32.139, A 40.126.32.75, A 40.126.32.67, A 40.126.31.68, A 20.190.159.70, A 20.190.159.72, A 20.190.160.23, A 20.190.159.5, A 20.190.159.69, A 20.190.159.1, A 20.190.159.19, A 40.126.31.72, A 20.190.159.22, A 40.126.31.70 (1231)
14:54:50.077617 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.50592 > 1.0.0.1.53: 47399+ A? siteimproveanalytics.com. (42)
14:54:50.167909 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.50592: 47399 2/13/13 A 188.114.96.13, A 188.114.97.13 (493)
14:54:50.175506 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.18026 > 202.12.27.33.53: 28062 A? www4.bing.com. (31)
14:54:50.202421 Port2_ppp, IN: IP 202.12.27.33.53 > XXX.XXX.XXX.XXX.18026: 28062 5/13/13 CNAME www4-www4.bing.com.trafficmanager.net., CNAME www4.bing.com.edgekey.net., CNAME e86303.dscx.akamaiedge.net., A 2.23.97.178, A 2.23.97.241 (603)
14:54:50.227612 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.10271 > 4.2.2.2.53: 34789+ A? 4.sophosxl.net. (32)
14:54:50.275749 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.44695 > 1.0.0.1.53: 42341+ A? www2.bing.com. (31)
14:54:50.327141 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.10271: 34789 8/13/13 A 52.214.200.136, A 52.30.4.176, A 52.209.136.153, A 52.213.69.211, A 34.248.135.181, A 34.247.61.87, A 34.254.149.68, A 52.211.149.113 (576)
14:54:50.380289 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.44695: 42341 5/13/15 CNAME www2-www2.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.a-msedge.net., A 13.107.21.200, A 204.79.197.200 (646)
14:54:50.692752 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.48075 > 192.203.230.10.53: 2692 A? login.microsoft.com. (37)
14:54:50.721929 Port2_ppp, IN: IP 192.203.230.10.53 > XXX.XXX.XXX.XXX.48075: 2692 19/13/37 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.akadns.net., A 40.126.31.67, A 20.190.159.69, A 40.126.31.64, A 40.126.31.68, A 20.190.159.70, A 40.126.31.70, A 20.190.159.5, A 20.190.159.3, A 20.190.159.19, A 20.190.159.68, A 20.190.159.64, A 20.190.159.23, A 20.190.159.75, A 20.190.159.4, A 20.190.159.2, A 20.190.159.73 (1231)
14:54:50.752110 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.45248 > 8.8.8.8.53: 49232+ A? www.bing.com. (30)
14:54:50.770434 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.45248: 49232 5/13/15 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 131.253.33.200, A 13.107.22.200 (643)
14:54:51.713602 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.3586 > 192.33.4.12.53: 61859 A? login.microsoft.com. (37)
14:54:51.735855 Port2_ppp, IN: IP 192.33.4.12.53 > XXX.XXX.XXX.XXX.3586: 61859 27/13/29 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.trafficmanager.net., A 40.126.32.67, A 40.126.31.68, A 20.190.159.70, A 20.190.159.72, A 20.190.160.23, A 20.190.159.5, A 20.190.159.69, A 20.190.159.1, A 20.190.159.19, A 40.126.31.72, A 20.190.159.22, A 40.126.31.70, A 40.126.32.73, A 20.190.160.12, A 40.126.32.69, A 20.190.160.15, A 20.190.159.3, A 20.190.160.21, A 40.126.32.132, A 20.190.160.13, A 40.126.31.64, A 40.126.32.137, A 40.126.32.139, A 40.126.32.75 (1231)
14:54:51.913267 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.9688 > 1.0.0.1.53: 5572+ A? wp.m.bing.com. (31)
14:54:51.996897 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.9688: 5572 5/13/15 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.a-msedge.net., A 13.107.21.200, A 204.79.197.200 (644)
14:54:52.013652 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.32548 > 1.0.0.1.53: 62085+ A? www.google.co.jp. (34)
14:54:52.154002 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.32548: 62085 1/13/13 A 172.217.20.3 (469)
14:54:52.733911 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.33409 > 192.112.36.4.53: 61065 A? login.microsoft.com. (37)
14:54:52.770520 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.60852 > 1.0.0.1.53: 33748+ A? secure.adnxs.com. (34)
14:54:52.771438 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.61992 > 1.0.0.1.53: 37197+ A? ipv6.6sc.co. (29)
14:54:52.817579 Port2_ppp, IN: IP 192.112.36.4.53 > XXX.XXX.XXX.XXX.33409: 61065 19/13/37 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.akadns.net., A 20.190.159.5, A 20.190.159.3, A 20.190.159.19, A 20.190.159.68, A 20.190.159.64, A 20.190.159.23, A 20.190.159.75, A 20.190.159.4, A 20.190.159.2, A 20.190.159.73, A 40.126.31.67, A 20.190.159.69, A 40.126.31.64, A 40.126.31.68, A 20.190.159.70, A 40.126.31.70 (1231)
14:54:52.821499 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.52090 > 1.0.0.1.53: 56298+ A? px.spiceworks.com. (35)
14:54:52.831730 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.60852: 33748 11/13/13 CNAME g.geogslb.com., CNAME ib.anycast.adnxs.com., A 37.252.172.37, A 37.252.173.215, A 37.252.173.62, A 37.252.173.38, A 37.252.173.27, A 37.252.172.249, A 37.252.172.123, A 37.252.172.250, A 37.252.173.22 (646)
14:54:52.840793 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.61992: 37197 3/13/13 CNAME ipv6.6sc.co.edgekey.net., CNAME e7313.dscb.akamaiedge.net., A 104.96.140.70 (534)
14:54:52.855306 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.60852 > 1.0.0.1.53: 50845+ A? snap.licdn.com. (32)
14:54:52.892175 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.52090: 56298 2/13/13 CNAME a6nrdb6.x.incapdns.net., A 45.60.13.212 (503)
14:54:52.917673 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.60852: 50845 7/13/13 CNAME od.linkedin.edgesuite.net., CNAME a1916.dscg2.akamai.net., A 2.22.22.83, A 2.22.22.177, A 2.22.22.138, A 2.22.22.74, A 2.22.22.82 (600)
14:54:53.066762 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.18698 > 192.228.79.201.53: 29206 A? wp.m.bing.com. (31)
14:54:53.106153 Port2_ppp, IN: IP 192.228.79.201.53 > XXX.XXX.XXX.XXX.18698: 29206 5/13/15 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.a-msedge.net., A 204.79.197.200, A 13.107.21.200 (644)
14:54:53.295709 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.41864 > 8.8.8.8.53: 51398+ A? www2.bing.com. (31)
14:54:53.300795 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.41864: 51398 5/13/15 CNAME www2-www2.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 131.253.33.200, A 13.107.22.200 (646)
14:54:53.754409 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.24283 > 198.41.0.4.53: 31549 A? login.microsoft.com. (37)
14:54:53.754451 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.41774 > 4.2.2.2.53: 51267+ A? www.bing.com. (30)
14:54:53.766935 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.61992 > 1.0.0.1.53: 9160+ A? connect.facebook.net. (38)
14:54:53.822652 Port2_ppp, IN: IP 198.41.0.4.53 > XXX.XXX.XXX.XXX.24283: 31549 27/13/29 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.trafficmanager.net., A 20.190.160.23, A 20.190.159.5, A 20.190.159.69, A 20.190.159.1, A 20.190.159.19, A 40.126.31.72, A 20.190.159.22, A 40.126.31.70, A 40.126.32.73, A 20.190.160.12, A 40.126.32.69, A 20.190.160.15, A 20.190.159.3, A 20.190.160.21, A 40.126.32.132, A 20.190.160.13, A 40.126.31.64, A 40.126.32.137, A 40.126.32.139, A 40.126.32.75, A 40.126.32.67, A 40.126.31.68, A 20.190.159.70, A 20.190.159.72 (1231)
14:54:53.828735 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.41774: 51267 5/13/15 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.a-msedge.net., A 204.79.197.200, A 13.107.21.200 (643)
14:54:53.834850 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.61992: 9160 2/13/13 CNAME scontent.xx.fbcdn.net., A 157.240.30.27 (502)
14:54:53.856146 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.1657 > 1.0.0.1.53: 985+ A? 4.sophosxl.net. (32)
14:54:53.920913 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.1657: 985 8/13/13 A 52.30.4.176, A 52.209.136.153, A 52.213.69.211, A 34.248.135.181, A 34.247.61.87, A 34.254.149.68, A 52.211.149.113, A 52.214.200.136 (576)
14:54:54.691095 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.49687 > 199.7.91.13.53: 11413 A? login.microsoftonline.com. (43)
14:54:54.774352 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.4564 > 199.7.83.42.53: 29756 A? login.microsoft.com. (37)
14:54:54.826718 Port2_ppp, IN: IP 199.7.91.13.53 > XXX.XXX.XXX.XXX.49687: 11413 21/13/13 CNAME ak.privatelink.msidentity.com., CNAME www.tm.ak.prd.aadg.trafficmanager.net., A 20.190.159.5, A 20.190.159.1, A 20.190.159.22, A 20.190.159.70, A 40.126.31.68, A 20.190.159.69, A 20.190.159.3, A 40.126.32.132, A 40.126.32.135, A 40.126.32.67, A 40.126.32.139, A 40.126.32.137, A 20.190.160.21, A 40.126.32.69, A 40.126.32.73, A 20.190.160.15, A 20.190.160.13, A 20.190.160.12, A 40.126.31.64 (854)
14:54:54.870627 Port2_ppp, IN: IP 199.7.83.42.53 > XXX.XXX.XXX.XXX.4564: 29756 19/13/37 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.akadns.net., A 20.190.159.64, A 20.190.159.23, A 20.190.159.75, A 20.190.159.4, A 20.190.159.2, A 20.190.159.73, A 40.126.31.67, A 20.190.159.69, A 40.126.31.64, A 40.126.31.68, A 20.190.159.70, A 40.126.31.70, A 20.190.159.5, A 20.190.159.3, A 20.190.159.19, A 20.190.159.68 (1231)
14:54:54.932851 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.51525 > 8.8.8.8.53: 45140+ A? wp.m.bing.com. (31)
14:54:55.006603 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.51525: 45140 5/13/15 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 131.253.33.200, A 13.107.22.200 (644)
14:54:56.013418 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.27675 > 1.0.0.1.53: 22689+ A? www.google.co.zw. (34)
14:54:56.055497 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.27675: 22689 1/13/13 A 142.251.39.3 (469)
14:54:56.186888 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.62915 > 198.41.0.4.53: 33947 A? xg-up2date-patterns.sophosupd.com. (51)
14:54:56.203631 Port2_ppp, IN: IP 198.41.0.4.53 > XXX.XXX.XXX.XXX.62915: 33947 4/13/13 CNAME xg-up2date-patterns.sophosupd.com.edgekey.net., CNAME e13687.d.akamaiedge.net., A 23.205.49.159, A 2.21.185.157 (592)
14:54:56.315935 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.48343 > 4.2.2.2.53: 8345+ A? www2.bing.com. (31)
14:54:56.552731 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.48343: 8345 5/13/15 CNAME www2-www2.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.a-msedge.net., A 204.79.197.200, A 13.107.21.200 (646)
14:54:56.609248 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.60852 > 1.0.0.1.53: 15961+ A? www.redditstatic.com. (38)
14:54:56.696058 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.49215 > 1.0.0.1.53: 60732+ A? static.ads-twitter.com. (40)
14:54:56.847263 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.60852: 15961 5/13/13 CNAME dualstack.reddit.map.fastly.net., A 151.101.1.140, A 151.101.65.140, A 151.101.129.140, A 151.101.193.140 (563)
14:54:56.875472 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.53452 > 8.8.8.8.53: 10829+ A? 4.sophosxl.net. (32)
14:54:56.895386 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.49215: 60732 2/13/13 CNAME platform.twitter.map.fastly.net., A 199.232.16.157 (517)
14:54:56.981660 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.53452: 10829 8/13/13 A 52.209.136.153, A 52.213.69.211, A 34.248.135.181, A 34.247.61.87, A 34.254.149.68, A 52.211.149.113, A 52.214.200.136, A 52.30.4.176 (576)
14:54:57.431466 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.52924 > 1.0.0.1.53: 55129+ A? a.quora.com. (29)
14:54:57.751242 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.25043 > 128.63.2.53.53: 57229 A? login.windows.net. (35)
14:54:57.794398 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.38093 > 192.228.79.201.53: 50425 A? login.microsoft.com. (37)
14:54:57.877812 Port2_ppp, IN: IP 128.63.2.53.53 > XXX.XXX.XXX.XXX.25043: 57229 27/13/29 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.trafficmanager.net., A 20.190.159.3, A 20.190.160.21, A 40.126.32.132, A 20.190.160.13, A 40.126.31.64, A 40.126.32.137, A 40.126.32.139, A 40.126.32.75, A 40.126.32.67, A 40.126.31.68, A 20.190.159.70, A 20.190.159.72, A 20.190.160.23, A 20.190.159.5, A 20.190.159.69, A 20.190.159.1, A 20.190.159.19, A 40.126.31.72, A 20.190.159.22, A 40.126.31.70, A 40.126.32.73, A 20.190.160.12, A 40.126.32.69, A 20.190.160.15 (1229)
14:54:57.940031 Port2_ppp, IN: IP 192.228.79.201.53 > XXX.XXX.XXX.XXX.38093: 50425 19/13/37 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.akadns.net., A 40.126.31.67, A 20.190.159.69, A 40.126.31.64, A 40.126.31.68, A 20.190.159.70, A 40.126.31.70, A 20.190.159.5, A 20.190.159.3, A 20.190.159.19, A 20.190.159.68, A 20.190.159.64, A 20.190.159.23, A 20.190.159.75, A 20.190.159.4, A 20.190.159.2, A 20.190.159.73 (1231)
14:54:57.940151 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.26175 > 4.2.2.2.53: 40928+ A? wp.m.bing.com. (31)
14:54:58.026071 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.26175: 40928 5/13/15 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 131.253.33.200, A 13.107.22.200 (644)
14:54:58.289551 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.59016 > 192.112.36.4.53: 23830 A? www.youtube-nocookie.com. (42)
14:54:58.361496 Port2_ppp, IN: IP 192.112.36.4.53 > XXX.XXX.XXX.XXX.59016: 23830 8/13/13 CNAME youtube-ui.l.google.com., A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238, A 142.250.201.206, A 142.251.39.14, A 142.251.39.46 (607)
14:54:59.894789 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.42507 > 4.2.2.2.53: 53934+ A? 4.sophosxl.net. (32)
14:54:59.941961 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.42507: 53934 8/13/13 A 52.213.69.211, A 34.248.135.181, A 34.247.61.87, A 34.254.149.68, A 52.211.149.113, A 52.214.200.136, A 52.30.4.176, A 52.209.136.153 (576)
14:55:00.044369 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.32615 > 1.0.0.1.53: 12098+ A? www.google.co.nz. (34)
14:55:00.128488 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.32615: 12098 1/13/13 A 142.250.201.195 (469)
14:55:00.363397 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.63602 > 1.0.0.1.53: 16495+ A? js.adsrvr.org. (31)
14:55:00.492310 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.63602: 16495 2/13/13 CNAME dg2iu7dxxehbo.cloudfront.net., A 65.9.19.119 (505)
14:55:00.650299 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.58141 > 1.0.0.1.53: 1642+ A? s.yimg.com. (28)
14:55:00.795555 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.65049 > 1.0.0.1.53: 49989+ A? dzr-utm-amzn-eu-west-1-9af7.upe.p.hmr.sophos.com. (66)
14:55:00.795619 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.59510 > 192.5.5.241.53: 17007 A? login.microsoft.com. (37)
14:55:00.795671 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.20440 > 1.0.0.1.53: 27053+ AAAA? dzr-utm-amzn-eu-west-1-9af7.upe.p.hmr.sophos.com. (66)
14:55:00.804852 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.58141: 1642 3/13/13 CNAME edge.gycpi.b.yahoodns.net., A 87.248.119.251, A 87.248.119.252 (515)
14:55:00.886284 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.65049: 49989 3/13/13 A 54.217.122.195, A 34.253.123.11, A 34.249.168.191 (533)
14:55:00.897150 Port2_ppp, IN: IP 192.5.5.241.53 > XXX.XXX.XXX.XXX.59510: 17007 27/13/29 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.trafficmanager.net., A 40.126.31.64, A 40.126.32.137, A 40.126.32.139, A 40.126.32.75, A 40.126.32.67, A 40.126.31.68, A 20.190.159.70, A 20.190.159.72, A 20.190.160.23, A 20.190.159.5, A 20.190.159.69, A 20.190.159.1, A 20.190.159.19, A 40.126.31.72, A 20.190.159.22, A 40.126.31.70, A 40.126.32.73, A 20.190.160.12, A 40.126.32.69, A 20.190.160.15, A 20.190.159.3, A 20.190.160.21, A 40.126.32.132, A 20.190.160.13 (1231)
14:55:00.952639 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.20440: 27053 0/13/13 (485)
14:55:01.195143 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.42252 > 192.36.148.17.53: 18354 A? www4.bing.com. (31)
14:55:01.265940 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.49316 > 1.0.0.1.53: 1729+ A? clients1.google.com. (37)
14:55:01.266017 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.52394 > 1.0.0.1.53: 38661+ A? clients5.google.com. (37)
14:55:01.335591 Port2_ppp, IN: IP 192.36.148.17.53 > XXX.XXX.XXX.XXX.42252: 18354 5/13/13 CNAME www4-www4.bing.com.trafficmanager.net., CNAME www4.bing.com.edgekey.net., CNAME e86303.dscx.akamaiedge.net., A 2.22.89.186, A 2.22.89.159 (603)
14:55:01.384031 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.49316: 1729 4/4/3 CNAME clients.l.google.com., A 142.250.180.206, A 142.251.39.46, A 142.251.39.14 (229)
14:55:01.388605 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.52394: 38661 5/4/3 CNAME clients.l.google.com., A 142.251.39.14, A 142.250.180.206, A 142.251.39.46, A 142.250.180.238 (245)
14:55:01.436470 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.59017 > 1.0.0.1.53: 56308+ A? js.driftt.com. (31)
14:55:01.635856 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.59017: 56308 5/13/13 CNAME dl7g9llrghqi1.cloudfront.net., A 52.84.106.20, A 52.84.106.107, A 52.84.106.21, A 52.84.106.129 (553)
14:55:02.594641 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.6822 > 1.0.0.1.53: 17863+ A? www.google.com.ua. (35)
14:55:02.755938 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.26103 > 192.33.4.12.53: 9107 A? www.bing.com. (30)
14:55:02.815073 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.6822: 17863 1/13/13 A 142.251.39.3 (470)
14:55:02.932981 Port2_ppp, IN: IP 192.33.4.12.53 > XXX.XXX.XXX.XXX.26103: 9107 5/13/13 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (611)
14:55:03.815402 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.9620 > 1.0.0.1.53: 46213 A? dzr-utm-amzn-eu-west-1-9af7.upe.p.hmr.sophos.com. (66)
14:55:03.815452 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.17252 > 192.58.128.30.53: 33704 A? login.microsoft.com. (37)
14:55:03.858778 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.9620: 46213 3/13/13 A 34.253.123.11, A 34.249.168.191, A 54.217.122.195 (533)
14:55:03.865949 Port2_ppp, IN: IP 192.58.128.30.53 > XXX.XXX.XXX.XXX.17252: 33704 19/13/37 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.akadns.net., A 20.190.159.70, A 40.126.31.70, A 20.190.159.5, A 20.190.159.3, A 20.190.159.19, A 20.190.159.68, A 20.190.159.64, A 20.190.159.23, A 20.190.159.75, A 20.190.159.4, A 20.190.159.2, A 20.190.159.73, A 40.126.31.67, A 20.190.159.69, A 40.126.31.64, A 40.126.31.68 (1231)
14:55:04.086306 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.25969 > 192.5.5.241.53: 18793 A? wp.m.bing.com. (31)
14:55:04.214675 Port2_ppp, IN: IP 192.5.5.241.53 > XXX.XXX.XXX.XXX.25969: 18793 5/13/13 CNAME www-www.bing.com.trafficmanager.net., CNAME www-bing-com.dual-a-0001.a-msedge.net., CNAME dual-a-0001.dc-msedge.net., A 13.107.22.200, A 131.253.33.200 (612)
14:55:04.423925 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.62132 > 1.0.0.1.53: 43920+ A? edge.fullstory.com. (36)
14:55:04.423943 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.55697 > 1.0.0.1.53: 13102+ A? amplify.outbrain.com. (38)
14:55:04.468706 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.37346 > 1.0.0.1.53: 5311+ A? 4.sophosxl.net. (32)
14:55:04.529895 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.62132: 43920 1/13/13 A 35.201.112.186 (471)
14:55:04.543648 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.37346: 5311 8/13/13 A 34.248.135.181, A 34.247.61.87, A 34.254.149.68, A 52.211.149.113, A 52.214.200.136, A 52.30.4.176, A 52.209.136.153, A 52.213.69.211 (576)
14:55:04.554166 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.55697: 13102 3/13/13 CNAME wildcard.outbrain.com.edgekey.net., CNAME e10883.g.akamaiedge.net., A 2.21.185.80 (551)
14:55:04.835507 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.27670 > 1.0.0.1.53: 28026 A? dzr-utm-amzn-eu-west-1-9af7.upe.p.hmr.sophos.com. (66)
14:55:05.086916 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.27670: 28026 3/13/13 A 34.249.168.191, A 54.217.122.195, A 34.253.123.11 (533)
14:55:05.798473 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.36817 > 1.0.0.1.53: 23811+ AAAA? dzr-utm-amzn-eu-west-1-9af7.upe.p.hmr.sophos.com. (66)
14:55:05.839976 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.36817: 23811 0/13/13 (485)
14:55:06.690454 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.57018 > 1.0.0.1.53: 43222+ A? b.6sc.co. (26)
14:55:06.694189 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.57018: 43222 3/13/13 CNAME b.6sc.co.edgekey.net., CNAME e7313.g.akamaiedge.net., A 104.89.35.64 (525)
14:55:06.834887 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.41993 > 192.36.148.17.53: 7351 A? login.microsoft.com. (37)
14:55:06.854755 Port2_ppp, IN: IP 192.36.148.17.53 > XXX.XXX.XXX.XXX.41993: 7351 27/13/29 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.trafficmanager.net., A 40.126.32.67, A 40.126.31.68, A 20.190.159.70, A 20.190.159.72, A 20.190.160.23, A 20.190.159.5, A 20.190.159.69, A 20.190.159.1, A 20.190.159.19, A 40.126.31.72, A 20.190.159.22, A 40.126.31.70, A 40.126.32.73, A 20.190.160.12, A 40.126.32.69, A 20.190.160.15, A 20.190.159.3, A 20.190.160.21, A 40.126.32.132, A 20.190.160.13, A 40.126.31.64, A 40.126.32.137, A 40.126.32.139, A 40.126.32.75 (1231)
14:55:07.064169 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.35408 > 1.0.0.1.53: 7184+ A? www.google.com.cy. (35)
14:55:07.109485 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.35408: 7184 1/13/13 A 142.251.39.67 (470)
14:55:07.206849 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.20006 > 199.7.91.13.53: 20952 A? xg-up2date-patterns.sophosupd.com. (51)
14:55:07.242177 Port2_ppp, IN: IP 199.7.91.13.53 > XXX.XXX.XXX.XXX.20006: 20952 3/13/13 CNAME xg-up2date-patterns.sophosupd.com.edgekey.net., CNAME e13687.d.akamaiedge.net., A 2.21.185.157 (576)
14:55:07.488601 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.5968 > 8.8.8.8.53: 58486+ A? 4.sophosxl.net. (32)
14:55:07.493847 Port2_ppp, IN: IP 8.8.8.8.53 > XXX.XXX.XXX.XXX.5968: 58486 8/13/13 A 34.247.61.87, A 34.254.149.68, A 52.211.149.113, A 52.214.200.136, A 52.30.4.176, A 52.209.136.153, A 52.213.69.211, A 34.248.135.181 (576)
14:55:07.855384 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.44396 > 1.0.0.1.53: 38991 A? dzr-utm-amzn-eu-west-1-9af7.upe.p.hmr.sophos.com. (66)
14:55:07.980444 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.44396: 38991 3/13/13 A 54.217.122.195, A 34.253.123.11, A 34.249.168.191 (533)
14:55:08.208928 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.57018 > 1.0.0.1.53: 60075+ A? rs.fullstory.com. (34)
14:55:08.211148 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.51950 > 1.0.0.1.53: 25293+ A? 6025286.global.siteimproveanalytics.io. (56)
14:55:08.223070 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.57018: 60075 1/13/13 A 35.186.194.58 (469)
14:55:08.340849 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.51950: 25293 4/13/13 CNAME eu-central-1.global.siteimproveanalytics.io., CNAME ana-collector-elb-eu-2022-04-27-1537287910.eu-central-1.elb.amazonaws.com., A 35.158.55.183, A 54.93.144.248 (621)
14:55:09.310264 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.23776 > 192.33.4.12.53: 15345 A? www.youtube-nocookie.com. (42)
14:55:09.472217 Port2_ppp, IN: IP 192.33.4.12.53 > XXX.XXX.XXX.XXX.23776: 15345 8/13/13 CNAME youtube-ui.l.google.com., A 142.250.201.206, A 142.251.39.14, A 142.251.39.46, A 142.251.39.78, A 172.217.19.110, A 142.250.180.206, A 142.250.180.238 (607)
14:55:09.854865 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.35799 > 202.12.27.33.53: 45571 A? login.microsoft.com. (37)
14:55:09.862397 Port2_ppp, IN: IP 202.12.27.33.53 > XXX.XXX.XXX.XXX.35799: 45571 19/13/37 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.akadns.net., A 20.190.159.70, A 40.126.31.70, A 20.190.159.5, A 20.190.159.3, A 20.190.159.19, A 20.190.159.68, A 20.190.159.64, A 20.190.159.23, A 20.190.159.75, A 20.190.159.4, A 20.190.159.2, A 20.190.159.73, A 40.126.31.67, A 20.190.159.69, A 40.126.31.64, A 40.126.31.68 (1231)
14:55:10.008236 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.35067 > 1.0.0.1.53: 44164+ A? www.google.rs. (31)
14:55:10.089654 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.35067: 44164 1/13/13 A 172.217.19.99 (466)
14:55:10.508108 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.64722 > 4.2.2.2.53: 40852+ A? 4.sophosxl.net. (32)
14:55:10.521907 Port2_ppp, IN: IP 4.2.2.2.53 > XXX.XXX.XXX.XXX.64722: 40852 8/13/13 A 34.254.149.68, A 52.211.149.113, A 52.214.200.136, A 52.30.4.176, A 52.209.136.153, A 52.213.69.211, A 34.248.135.181, A 34.247.61.87 (576)
14:55:10.849088 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.47152 > 1.0.0.1.53: 22353+ PTR? b.8.4.0.c.b.e.f.f.f.c.1.a.5.e.7.0.0.0.0.0.0.0.0.0.0.0.0.0.8.e.f.ip6.arpa. (90)
14:55:10.870512 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.47152: 22353 NXDomain 0/0/0 (90)
14:55:10.965050 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.57018 > 1.0.0.1.53: 24434+ A? px.ads.linkedin.com. (37)
14:55:10.994777 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.57018: 24434 4/13/13 CNAME www.linkedin.com., CNAME www-linkedin-com.l-0005.l-msedge.net., CNAME l-0005.l-msedge.net., A 13.107.42.14 (551)
14:55:12.215932 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.34858 > 198.41.0.4.53: 53497 A? www4.bing.com. (31)
14:55:12.239934 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.57018 > 1.0.0.1.53: 15210+ A? alb.reddit.com. (32)
14:55:12.319415 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.60025 > 1.0.0.1.53: 4573+ A? q.quora.com. (29)
14:55:12.436620 Port2_ppp, IN: IP 198.41.0.4.53 > XXX.XXX.XXX.XXX.34858: 53497 5/13/13 CNAME www4-www4.bing.com.trafficmanager.net., CNAME www4.bing.com.edgekey.net., CNAME e86303.dscx.akamaiedge.net., A 2.22.89.186, A 2.22.89.159 (603)
14:55:12.466838 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.57018: 15210 5/13/13 CNAME reddit.map.fastly.net., A 151.101.1.140, A 151.101.65.140, A 151.101.129.140, A 151.101.193.140 (547)
14:55:12.519835 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.60025: 4573 7/13/13 A 54.166.85.96, A 18.205.225.81, A 52.2.80.154, A 54.81.239.179, A 54.235.202.120, A 54.204.196.80, A 3.209.54.132 (560)
14:55:12.874488 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.2902 > 199.7.91.13.53: 42959 A? login.microsoft.com. (37)
14:55:13.006512 Port2_ppp, IN: IP 199.7.91.13.53 > XXX.XXX.XXX.XXX.2902: 42959 27/13/29 CNAME a.privatelink.msidentity.com., CNAME prda.aadg.msidentity.com., CNAME www.tm.a.prd.aadg.trafficmanager.net., A 20.190.159.1, A 20.190.159.19, A 40.126.31.72, A 20.190.159.22, A 40.126.31.70, A 40.126.32.73, A 20.190.160.12, A 40.126.32.69, A 20.190.160.15, A 20.190.159.3, A 20.190.160.21, A 40.126.32.132, A 20.190.160.13, A 40.126.31.64, A 40.126.32.137, A 40.126.32.139, A 40.126.32.75, A 40.126.32.67, A 40.126.31.68, A 20.190.159.70, A 20.190.159.72, A 20.190.160.23, A 20.190.159.5, A 20.190.159.69 (1231)
14:55:13.391842 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.52389 > 1.0.0.1.53: 9514+ A? www.facebook.com. (34)
14:55:13.534833 Port2_ppp, OUT: IP XXX.XXX.XXX.XXX.10727 > 1.0.0.1.53: 17084+ A? 4.sophosxl.net. (32)
14:55:13.559018 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.52389: 9514 2/13/13 CNAME star-mini.c10r.facebook.com., A 157.240.30.35 (498)
14:55:13.719122 Port2_ppp, IN: IP 1.0.0.1.53 > XXX.XXX.XXX.XXX.10727: 17084 13/13/13 A 52.209.136.153, A 52.213.69.211, A 34.248.135.181, A 34.247.61.87, A 34.254.149.68, A 52.211.149.113, A 34.241.111.122, A 52.48.91.83, A 34.240.170.13, A 34.252.30.182, A 52.214.157.208, A 52.214.200.136, A 52.30.4.176 (656)
^C
645 packets captured
645 packets received by filter
0 packets dropped by kernel
XGS2100_RL01_SFOS 19.0.0 GA-Build317#

0 LuCar Toni over 1 year ago in reply to Carlo

It looks fine to me. Port2 is your PPPoE Interface? What is your other Interface?

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 Carlo over 1 year ago in reply to LuCar Toni
Cancel
Vote Up 0 Vote Down

Cancel
0 Carlo over 1 year ago in reply to LuCar Toni

Yes, port2 or port3 I'm configuring interface three times a day but nothing changes :)
Cancel
Vote Up 0 Vote Down

Cancel
0 Carlo over 1 year ago in reply to LuCar Toni

Also, it looks fine but pages resolving takes 20 sec and still cannot register to sophos central
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 1 year ago in reply to Carlo

Public IP /32 looks odd to me? Why do you use 255.255.255.255?

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 Carlo over 1 year ago in reply to LuCar Toni

A always get the same public ip. It is binded to MAC of WAN interface. It is set as Preferred IP in network-port2-pppoe settings
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Carlo over 1 year ago in reply to LuCar Toni

A always get the same public ip. It is binded to MAC of WAN interface. It is set as Preferred IP in network-port2-pppoe settings
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 LuCar Toni over 1 year ago in reply to Carlo

It looks fine to me. I guess we cannot give a proper support from this perspective. You should create a support case, so somebody can investigate this matter on your appliance.

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 PhilippRusch over 1 year ago in reply to Carlo

hello Carlo,

did you ever try to lower the MTU to a much lower value like 1280 and MSS = 1272 , then?

Can you run this as a test, but please do a restart of the FW before.

Mit freundlichem Gruß, best regards from Germany,

Philipp Rusch

New Vision GmbH, Germany
Sophos Silver-Partner

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Carlo over 1 year ago in reply to PhilippRusch

Hi, I did not try to set that low value. I work curently with support on this issue. I did no get solution from them yet but when I set up internal DNS server everything work as it should even with default 1500 mtu. All my problems are related to DNS and name resolving.
Cancel
Vote Up 0 Vote Down

Cancel