Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 14:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Prevent large dhcp log entries

Browse source 
A flood of DHCP traffic can result if very large log entries consisting
of many uids and/or msg_types. Such large log entries can disrupt a SIEM
ingestion pipeline. This change forcing a log entry to be written when
the number of uids or the number of msg_Types exceed a certain value.
The values are treated as options for easy configuration.
This commit is contained in:
Peter Cullen 2022-07-28 11:34:18 -07:00
parent d461033978
commit fb4858d42b
6 changed files with 173 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

73
testing/btest/Baseline/scripts.base.protocols.dhcp.dhcp-prevent-large-uids/dhcp.log Normal file
View file

@ -0,0 +1,73 @@
### BTest baseline data generated by btest-diff. Do not edit. Use "btest -U/-u" to update. Requires BTest >= 0.63.
#separator \x09
#set_separator ,
#empty_field (empty)
#unset_field -
#path dhcp
#open XXXX-XX-XX-XX-XX-XX
#fields ts uids client_addr server_addr mac host_name client_fqdn domain requested_addr assigned_addr lease_time client_message server_message msg_types duration
#types time set[string] addr addr string string string string addr addr interval string string vector[string] interval
XXXXXXXXXX.XXXXXX ClEkJM2Vm5giqnMf4h,CHhAvVGS1DHFjwGM9,C4J4Th3PJpwUYZZ6gc,CtPZjS20MLrsMUOJi2,CUM0KZ3MLUfNB0cl11 128.2.5.239 - 90:b1:1c:99:49:29 - - - - - - - - INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.079988
XXXXXXXXXX.XXXXXX CP5puj4I8PtEU4qzYg,CmES5u32sYpV7JYN,C37jN32gN3y3AZzyf6,CUM0KZ3MLUfNB0cl11,C3eiCBGOLw3VtHfOj 128.2.5.235 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070025
XXXXXXXXXX.XXXXXX CwjjYJ2WqgTbAqiHl6,C0LAHyvtKSQHyJxIl,CFLRIC3zaTU1loLGxh,C9rXSW3KSpTYvPrlI1,C3eiCBGOLw3VtHfOj 128.2.5.231 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070011
XXXXXXXXXX.XXXXXX C7fIlMZDuRiqjpYbb,Ck51lg1bScffFj34Ri,C9mvWx3ezztgzcexV7,CNnMIj2QSd84NKf7U3,C9rXSW3KSpTYvPrlI1 128.2.5.227 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070011
XXXXXXXXXX.XXXXXX C7fIlMZDuRiqjpYbb,CpmdRlaUoJLN3uIRa,CykQaM33ztNt0csB9a,C1Xkzz2MaGtLrc1Tla,CtxTCR2Yer0FR1tIBg 128.2.5.223 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070015
XXXXXXXXXX.XXXXXX CLNN1k2QMum1aexUK7,C1Xkzz2MaGtLrc1Tla,CBA8792iHmnhPLksKa,CqlVyW1YwZ15RhTBc4,CGLPPc35OzDQij1XX8 128.2.5.219 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070017
XXXXXXXXXX.XXXXXX Cipfzj1BEnhejw8cGf,CV5WJ42jPYbNW9JNWf,CFSwNi4CNGxcuffo49,CGLPPc35OzDQij1XX8,CiyBAq1bBLNaTiTAc 128.2.5.215 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070010
XXXXXXXXXX.XXXXXX CV5WJ42jPYbNW9JNWf,CAnFrb2Cvxr5T7quOc,CzrZOtXqhwwndQva3,C8rquZ3DjgNW06JGLl,CPhDKt12KQPUVbQz06 128.2.5.211 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070022
XXXXXXXXXX.XXXXXX CNdne23ox8SQTgPoy3,CaGCc13FffXe6RkQl9,CzrZOtXqhwwndQva3,CeGt004UBsXLoZSeCg,CTrywc2ra7tcWn2af 128.2.5.207 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070012
XXXXXXXXXX.XXXXXX CzmEfj4RValNyLfT58,CCk2V03QgWwIurU3f,Cgc67J2CpHIVN7HAw4,CTrywc2ra7tcWn2af,CgwPkWkJfuBIJsNi4 128.2.5.203 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070008
XXXXXXXXXX.XXXXXX CKJVAj1rNx0nolFFc4,CWhRtK3eXodviHmbo7,CImWJ03GsvPvA0P67i,CD7vfu1qu4YJKe1nGi,CgwPkWkJfuBIJsNi4 128.2.5.199 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070018
XXXXXXXXXX.XXXXXX CWhRtK3eXodviHmbo7,CqVUM4vyqCacqFiud,CudMuD3jKHCaCU5CE,CAvUKGaEgLlR4i6t2,CRJ9x54IaE7bkVEpad 128.2.5.195 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070039
XXXXXXXXXX.XXXXXX CAvUKGaEgLlR4i6t2,Cgwg7Z1MHA1YkiZmm3,CDNchHwRoXhVzzHB2,Ck78JG32Y4I7AGp7Vb,CeP1sc28dOzbbYkbA 128.2.5.191 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070014
XXXXXXXXXX.XXXXXX CQcXCjONUKqMfnhXb,CVcd914ZFpaUisaVf2,CeP1sc28dOzbbYkbA,COOKv01AQPAqfGMN9k,C0JEpR1Ij6308CwEhh 128.2.5.187 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070005
XXXXXXXXXX.XXXXXX C5pL731XEkARXOq253,CM4z3Z2rdNfyHYQ0Df,CVcd914ZFpaUisaVf2,CB0Ovs3cNZgLQ93FSh,C1dGa34JRiYAKbMI0c 128.2.5.183 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070003
XXXXXXXXXX.XXXXXX CdY2UF17xGQ6lUx7e8,CkD1144ZtRYffh5zjg,CbI5Qt4rlFnOHuL522,CtEfXf4f39NRDu1Dr4,C1dGa34JRiYAKbMI0c 128.2.5.179 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070021
XXXXXXXXXX.XXXXXX CjGaD11BLkmCG5cEVf,C1ejhC4SXsZ4pEdOd,CbI5Qt4rlFnOHuL522,CdGkzc4fIBRo0721v,CisPKv3PhjrFFhZbq7 128.2.5.175 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070010
XXXXXXXXXX.XXXXXX CWMTYT1vZEQXErCXY7,CWqViP2k4EKfYWy7Y1,CisPKv3PhjrFFhZbq7,CCgIHR2Vna1ZW9BPjd,CBr8Cp4juBTcRQZAA4 128.2.5.171 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070012
XXXXXXXXXX.XXXXXX CWMTYT1vZEQXErCXY7,C4C8Lr4DOGUTRZPAW8,CGwfOa4GYyzNItzc9j,C9Mb033HGlhETKxUbj,CfQutTEgs3g8sUrsa 128.2.5.167 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070011
XXXXXXXXXX.XXXXXX CdzNo91LLZlfe0pmT8,CKvlqe4bTVu5HNGrb1,C04EG53Yaw6dgjGT3k,CfQutTEgs3g8sUrsa,Cb2Rv3Wek35VDwxDk 128.2.5.163 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070013
XXXXXXXXXX.XXXXXX CF00uX66iWHtiV1q1,C6Frs83UqNszgcqN15,CkVqlMyWLZSpdNcPa,CsLUyBLEs5x3GKtgk,Cb2Rv3Wek35VDwxDk 128.2.5.159 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070019
XXXXXXXXXX.XXXXXX C6Frs83UqNszgcqN15,CQCAYJ2zCov16vZwf,CgHhMv2Ww0Y4oQNtd,CFTS591Wnlb7gnrpP7,Cil9Tc1rwfQS9uqdsb 128.2.5.155 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070021
XXXXXXXXXX.XXXXXX CoVJDI3K3qTiTnPoV9,ChHNpz2Xf9xMo2lnC4,Ch5tsG3OlOd7l83JFc,CFTS591Wnlb7gnrpP7,C3AXaL2up5k3PR4VW4 128.2.5.151 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070007
XXXXXXXXXX.XXXXXX C2qZRm2yQg9RoQNkVg,CggxJkLPcdPyKjfma,C6tA8aOk3QI9oIaHl,C3AXaL2up5k3PR4VW4,CI5pddk2aeicnmmoj 128.2.5.147 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070009
XXXXXXXXXX.XXXXXX CKpb612OxJundLAeRf,CcwXC81REVUrKprLz,C5OBjqCVHlPAjKQXi,CI5pddk2aeicnmmoj,Cb7w0T1dHZUPXzdgRi 128.2.5.143 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070010
XXXXXXXXXX.XXXXXX COvnS21VmREmS5Xzuf,Cb7w0T1dHZUPXzdgRi,CJmTVn4YcEf19Wo137,Cuhrwt2ypWdmhxNcjb,CpKJJiDUPEBNMGSC 128.2.5.139 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070024
XXXXXXXXXX.XXXXXX C68HZHafWQbOYWkYi,C5II0Z3yZFhDzHSKrl,CQ7b0y4Vd4NVQ3nJRi,CX9xXW3s3cSCaIB9a2,CpKJJiDUPEBNMGSC 128.2.5.135 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070055
XXXXXXXXXX.XXXXXX CUTgljebkkh2Ydhzi,C1alUz23K74AR4WZUc,CX9xXW3s3cSCaIB9a2,CuIjKg2hEOBmXsIvx4,CsnMLaDyNeIqxq6i2 128.2.5.131 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070029
XXXXXXXXXX.XXXXXX C1alUz23K74AR4WZUc,CjsoT83JnYI2Be2f8j,C9ywcdnOP5TLfD97e,C7aJ8S1bYoBzPdxRDb,CTISqXQMVxGJCVG2i 128.2.5.127 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070045
XXXXXXXXXX.XXXXXX CjsoT83JnYI2Be2f8j,CL7JR54e4lOc3aUAph,CohWkh4QvZcB1WXOVe,CS9xQJ3Jly032E9jC2,CPOg0SZxpoHbNzpG5 128.2.5.123 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070022
XXXXXXXXXX.XXXXXX CIWOQa2vaf6TxyZ2Jg,CqyxRG6TRKYW41Zz5,CPEPje2CwXXxGGPo27,CgYh1L1mwsOxSqVBu9,CPOg0SZxpoHbNzpG5 128.2.5.119 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070009
XXXXXXXXXX.XXXXXX CqyxRG6TRKYW41Zz5,CalQkN3MoYim6AEEe4,C823dt2fd3qQ26XyU,C3HR3r12iwKiqXa9c,CzZuKd2XEy2jlcWqT6 128.2.5.115 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070012
XXXXXXXXXX.XXXXXX CceZRf3q969iOibom4,CVgpXQ1plHZSjZoGq9,Cr5ot64fYu8c0wBtik,CPnPwW1vseaFvOVKZc,CzZuKd2XEy2jlcWqT6 128.2.5.111 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070022
XXXXXXXXXX.XXXXXX CceZRf3q969iOibom4,CeYlkM3WxZVUmujyB9,CkgPZ03tcwpxYjnOSc,Cfv1oI1ypkphPOMD7g,C8yjkq23bmUk9MkLf 128.2.5.107 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070013
XXXXXXXXXX.XXXXXX CjTrQkID6Z2SNK3ha,CA4o9G1CB2Af4WWhCf,C8yjkq23bmUk9MkLf,CevQX3116xo72LIoK9,ChN5cQ1faCW2xBl8Ki 128.2.5.103 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070021
XXXXXXXXXX.XXXXXX CPjxvb4XleEtywR72,CjqWgiHlaYFi9YImg,CA4o9G1CB2Af4WWhCf,Cf8FAq4I77xaBMSVT9,C7XVqL2qUJ1enNZYag 128.2.5.99 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070007
XXXXXXXXXX.XXXXXX CjqWgiHlaYFi9YImg,CAy1xs4SqOffMYYoi6,CbIFhV2t1dFcA47mxb,C3sUxYJbMLLrlkY2l,C1uJul2gbxeDRNFura 128.2.5.95 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070007
XXXXXXXXXX.XXXXXX CwkPvf43XtOGn09xUb,Cz7T4t4CVp8k2htbIk,Cqn0E64YUKHGEJtXE9,C3sUxYJbMLLrlkY2l,CQKymemsGWxk8qNhi 128.2.5.91 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070023
XXXXXXXXXX.XXXXXX Cq5Tn24Flxl5ykcPB4,Cx1J5T2RlUHdnWX4P7,C4DpKm2ihMjo33xAK9,CBMc5Bq8xeq3TqHyl,CQKymemsGWxk8qNhi 128.2.5.87 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070006
XXXXXXXXXX.XXXXXX CauDdy1kS45qWx7Jaf,CwalhH1EmkTCp6Z5oj,CoBPIr1bmfwOHYS8k7,CBMc5Bq8xeq3TqHyl,CeivHI16nJNE1XoDn8 128.2.5.83 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070017
XXXXXXXXXX.XXXXXX COzc1t4726TvteJAq9,CdHHGD21PDk8qHCNZi,CeivHI16nJNE1XoDn8,Cwks1t1XCX1VVKWlui,CySyNg2Q7X5Wig9qXc 128.2.5.79 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070018
XXXXXXXXXX.XXXXXX CytmUVLD1AW7Bjdda,CSqd0W3t872JJDPQR7,CyAz9V2XDShWvc9X85,CdHHGD21PDk8qHCNZi,C9mSwv1EoAGeQwdxia 128.2.5.75 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070018
XXXXXXXXXX.XXXXXX CSqd0W3t872JJDPQR7,CCOssQ1lVW9L4luov7,CHxNzE4i1HGC9aNQb8,CBdUFS64H8SD3CRc7,CXmENaHXj6AAZ6z67 128.2.5.71 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070012
XXXXXXXXXX.XXXXXX CCOssQ1lVW9L4luov7,CH4Zqaz7LIoXnVdx6,CmYN6N1hsT2MgdKQo9,CCwJVWbbaSCkRe2K9,CkH9U915OzOOjvkSJi 128.2.5.67 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070016
XXXXXXXXXX.XXXXXX CUN1fq1Nh9yg0qjEZk,CTy7qulV8eG6LkeUd,C3JRhD4EKTLL9ETgB6,CCwJVWbbaSCkRe2K9,CRGnRy2aYiKuVFnIG 128.2.5.63 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070010
XXXXXXXXXX.XXXXXX CUN1fq1Nh9yg0qjEZk,CsTLYp3UVyKHvvF8jl,Cy1IPuLzKTRb2fGF8,C2sbOw4qh4NrDdHRH2,COJL3m2IFflzZ1Cvdk 128.2.5.59 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070007
XXXXXXXXXX.XXXXXX CYXkGL3OwfyucBURVl,CfyyuF35s6IHIKaPy1,C6lrWz3udBitB6moKf,CAR8U13yNQoRQJZLcd,COJL3m2IFflzZ1Cvdk 128.2.5.55 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070021
XXXXXXXXXX.XXXXXX CnB5fj2ShUFnGngqf8,CJBk991FDSqc8wRBK1,CeoHSa1uBAQlDI3FEe,C6lrWz3udBitB6moKf,C850go2IsfiAcSGCfc 128.2.5.51 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070023
XXXXXXXXXX.XXXXXX CRM6Kv2JvySZyj1qrl,CiZMlr41UYw4zUSiH7,ChDijs42aziwiDYP4c,Car6PO34Q2yGqFhtw8,C850go2IsfiAcSGCfc 128.2.5.47 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070010
XXXXXXXXXX.XXXXXX C45NxP1qI6S5UMi6Ta,CwUICHbZAZuWABr9,Car6PO34Q2yGqFhtw8,CLvoof1o65FluhXQI6,C73cNq1ss4gZpfV8Jj 128.2.5.43 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070014
XXXXXXXXXX.XXXXXX CaEkUY1AI0qcJSl8Cd,CBkOwg2KK7rXFXUTmd,CwP7As3BK8V5lwj7D8,CWnddL27sIwroPwU4h,C73cNq1ss4gZpfV8Jj 128.2.5.39 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070010
XXXXXXXXXX.XXXXXX CBkOwg2KK7rXFXUTmd,C0u03i3hv4B4fSd7zg,CITjhO2n7PZKsy3Mw4,Ci0XPI2JfTjInNGHJ7,CvRIiA3mohju9nTku6 128.2.5.35 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070018
XXXXXXXXXX.XXXXXX CUAWQS1YtxjDhtxxte,Cgcc4N2eKsv3m3nA87,CvRIiA3mohju9nTku6,CylDMs45x5z5lRx9se,CWT4zv7sNwj1cnBeb 128.2.5.31 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070010
XXXXXXXXXX.XXXXXX CT4t8k1zeBe7ZRUBg5,CylDMs45x5z5lRx9se,CZvB3g1drtq6h6KP8,CQHUiY2AW9ZT2iB0x8,CBeoy737B8VrP0iSS6 128.2.5.27 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070011
XXXXXXXXXX.XXXXXX Cs4vHa2laJaNpjym2a,CmVWUQ1Zj8v9tk8Tn9,CzcPSa4HIZVpmSAZQ1,CBeoy737B8VrP0iSS6,CYwHEGkAUO1v9YGk8 128.2.5.23 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070017
XXXXXXXXXX.XXXXXX CmVWUQ1Zj8v9tk8Tn9,Cyyy781JVg92X5mDUc,CMU7t24bL4QMZtMO2l,Czv7tI2Aq1yfgdryG,CR7XxA2W5vLwE5KTs 128.2.5.19 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070012
XXXXXXXXXX.XXXXXX CVLeLf3d954JlCj5Ch,CUeKfb4nbjydJsNdId,CmDpIN2aFGjiOMOJWe,CR7XxA2W5vLwE5KTs,C5p9eh4XiSATtqsZi5 128.2.5.15 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070028
XXXXXXXXXX.XXXXXX CUeKfb4nbjydJsNdId,Cekrs3zkM6eSou1mg,CUVPVWOtpPH13Hfck,CfhuF84Ji7AdXxsAA6,CgfSWCkLmMlaKMWUl 128.2.5.11 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070020
XXXXXXXXXX.XXXXXX CpDj0c1fnKaDIGyqma,CRYwli4VJ5IlPTDWIl,CguHTc3ErOLWFoQyBa,CgfSWCkLmMlaKMWUl,CF5tR03Af5y0DJD2he 128.2.5.7 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070009
XXXXXXXXXX.XXXXXX C9xsW63PP2wB8hiDUk,CzWoyC1HE4FO1zdT3a,CbaJQC9l9K3ELB1u1,CF5tR03Af5y0DJD2he,CyVhox28QHRlYRbY9 128.2.5.3 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070009
XXXXXXXXXX.XXXXXX C57jQA4eBlGbOkJ0xc,COlS4I3p8lZG3vxBag,CimLTH3Vi2F5nxs6Bf,Ch4OGK13MCwxE2a1O9,CyVhox28QHRlYRbY9 128.2.4.255 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070010
XXXXXXXXXX.XXXXXX CzTeK32euJBRHTY2z5,CoW1ycpevZQjU9uK,CA1qPq3zXlCZGMTF3d,Ch4OGK13MCwxE2a1O9,ClzajT3YA0FYcHeIsi 128.2.4.251 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK,INFORM,ACK,INFORM,ACK,INFORM 0.070024
XXXXXXXXXX.XXXXXX CoW1ycpevZQjU9uK,C4mAqd3q1os6WQrFGi 128.2.4.250 - 90:b1:1c:99:49:29 - - - - - - - - ACK,INFORM,ACK 0.019997
#close XXXX-XX-XX-XX-XX-XX