Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404067 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404062 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404061 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404064 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404063 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404058 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404057 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404060 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404059 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404054 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404053 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404056 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404055 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404050 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404049 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404052 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404051 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2002400 type=Limit tracking=src count=2 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2002402 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404094 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404093 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404095 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404090 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404089 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404092 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404091 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404086 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404085 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404088 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404087 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404082 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404081 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404084 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404083 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404014 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404013 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404016 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404015 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404010 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404009 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404012 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404011 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404006 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404005 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404008 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404007 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404002 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404001 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404004 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404003 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404000 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404046 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404045 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404048 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404047 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404042 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404041 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404044 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404043 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404038 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404037 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404040 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404039 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404034 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404033 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404036 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404035 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404030 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404029 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404032 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.info dnsmasq[3791]: query[A] www.msftncsi.com from 10.10.10.229 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404031 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404026 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404025 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404028 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404027 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404022 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404021 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404024 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404023 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404018 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404017 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404020 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404019 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403328 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403330 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403329 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403360 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403359 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403362 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403361 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403356 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403355 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403358 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403357 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403352 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403351 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403354 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403353 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403348 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403347 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403350 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403349 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403344 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403343 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403346 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403345 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403340 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403339 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403342 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403341 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403336 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403335 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403338 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403337 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403332 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403331 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403334 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403333 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2011146 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2020240 type=Limit tracking=src count=1 seconds=180 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2018433 type=Limit tracking=src count=1 seconds=300 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2018430 type=Limit tracking=src count=1 seconds=300 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2018432 type=Limit tracking=src count=1 seconds=300 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2018431 type=Limit tracking=src count=1 seconds=300 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2003583 type=Limit tracking=src count=3 seconds=300 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2003585 type=Limit tracking=src count=3 seconds=300 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2018374 type=Limit tracking=src count=1 seconds=120 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2018373 type=Limit tracking=src count=1 seconds=120 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2018372 type=Limit tracking=src count=1 seconds=120 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2018389 type=Limit tracking=src count=1 seconds=120 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2018388 type=Limit tracking=src count=1 seconds=120 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2018382 type=Limit tracking=dst count=1 seconds=120 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2018383 type=Limit tracking=src count=1 seconds=120 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2003566 type=Limit tracking=src count=3 seconds=300 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2018378 type=Limit tracking=src count=1 seconds=120 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2018377 type=Limit tracking=src count=1 seconds=120 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2001872 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2001864 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2001858 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2001855 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2003497 type=Limit tracking=src count=3 seconds=300 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2003493 type=Limit tracking=src count=2 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403456 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403455 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403458 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403457 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403452 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403451 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403454 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403453 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403448 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403447 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403450 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403449 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403444 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2021691 type=Limit tracking=src count=3 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403443 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403446 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403445 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403440 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403439 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403442 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403441 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403436 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403435 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403438 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403437 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403432 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403431 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403434 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403433 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403428 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403427 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403430 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403429 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403476 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403475 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403477 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403472 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403471 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403474 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403473 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403468 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403467 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403470 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403469 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403464 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403463 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403466 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403465 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403460 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403459 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403462 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403461 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403392 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403391 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403394 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403393 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403388 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403387 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403390 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403389 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403384 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403383 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403386 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.info dnsmasq[3791]: forwarded www.msftncsi.com to 192.168.1.1 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403385 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.info dnsmasq[3791]: query[A] www.msftncsi.com from 10.10.10.229 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403380 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403379 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403382 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403381 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403376 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403375 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403378 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403377 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403372 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403371 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403374 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403373 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403368 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403367 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403370 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403369 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403364 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403363 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403366 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403365 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403424 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2000049 type=Limit tracking=dst count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403423 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403426 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403425 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403420 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403419 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403422 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403421 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403416 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403415 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403418 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403417 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403412 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403411 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403414 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403413 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403408 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403407 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403410 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403409 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403404 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403403 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403406 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403405 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403400 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403399 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403402 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403401 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403396 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403395 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403398 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403397 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2000048 type=Limit tracking=dst count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2000031 type=Limit tracking=dst count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2405042 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2405041 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2405044 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2405043 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2405038 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2405037 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2405040 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2405039 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2019922 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2003397 type=Both tracking=src count=1 seconds=300 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2019897 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2405002 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2405001 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2405004 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2405003 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.info dnsmasq[3791]: forwarded www.msftncsi.com to 192.168.1.1 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2405000 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2019950 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2405034 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2405033 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2405036 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2405035 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2405030 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2405029 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2405032 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2405031 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2405026 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2405025 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2405028 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2405027 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2405022 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500061 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2405021 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500060 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2405024 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500063 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2405023 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500062 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2405018 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500057 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2405017 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500056 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2405020 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500059 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2405019 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500058 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2405014 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500053 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2405013 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500052 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2405016 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500055 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2405015 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500054 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2405010 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500049 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2405009 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2003384 type=Limit tracking=src count=1 seconds=300 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500048 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2405012 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2003387 type=Limit tracking=src count=5 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500051 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2405011 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500050 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2405006 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500045 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2405005 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500044 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2405008 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500047 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2405007 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500046 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500041 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500040 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500043 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500042 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500037 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500036 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500039 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500038 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500033 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500032 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500035 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500034 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2003281 type=Both tracking=src count=1 seconds=900 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500073 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2003280 type=Both tracking=src count=1 seconds=900 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500072 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500075 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500074 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2003277 type=Both tracking=src count=1 seconds=900 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500069 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2003276 type=Both tracking=src count=1 seconds=900 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500068 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403325 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2003279 type=Both tracking=src count=1 seconds=900 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500071 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403324 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2003278 type=Both tracking=src count=1 seconds=900 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500070 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403327 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2003273 type=Both tracking=src count=1 seconds=900 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500065 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403326 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2003272 type=Both tracking=src count=1 seconds=900 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500064 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403321 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2003275 type=Both tracking=src count=1 seconds=900 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500067 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403320 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2003274 type=Both tracking=src count=1 seconds=900 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500066 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403323 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2003269 type=Both tracking=src count=1 seconds=900 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403322 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2003268 type=Both tracking=src count=1 seconds=900 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403317 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2003271 type=Both tracking=src count=1 seconds=900 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403316 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2003270 type=Both tracking=src count=1 seconds=900 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403319 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403318 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403313 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2003267 type=Both tracking=src count=1 seconds=900 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403312 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2003266 type=Both tracking=src count=1 seconds=900 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403315 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2003261 type=Both tracking=src count=1 seconds=900 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403314 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2003260 type=Both tracking=src count=1 seconds=900 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403309 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2003263 type=Both tracking=src count=1 seconds=900 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403308 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.info dnsmasq[3791]: reply www.msftncsi.com is Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2003262 type=Both tracking=src count=1 seconds=900 Mon Mar 14 18:44:35 2016 daemon.info dnsmasq[3791]: reply www.msftncsi.com.edgesuite.net is Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403311 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.info dnsmasq[3791]: reply a1961.g2.akamai.net is 23.77.233.35 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403310 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.info dnsmasq[3791]: reply a1961.g2.akamai.net is 23.77.232.91 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500029 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500028 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500031 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500030 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500025 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500024 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500027 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500026 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500021 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500020 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500023 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500022 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500017 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500016 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500019 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500018 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500013 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500012 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500015 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500014 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500009 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500008 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500011 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500010 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500005 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500004 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500007 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2018090 type=Limit tracking=src count=1 seconds=300 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500006 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500001 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500000 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500003 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2500002 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2018088 type=Limit tracking=src count=1 seconds=300 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2003257 type=Both tracking=src count=2 seconds=900 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2003256 type=Both tracking=src count=2 seconds=900 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403305 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2003259 type=Both tracking=src count=1 seconds=900 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403304 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2003258 type=Both tracking=src count=1 seconds=900 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403307 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403306 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403301 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2003255 type=Both tracking=src count=1 seconds=900 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403300 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2003254 type=Both tracking=src count=1 seconds=900 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403303 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2403302 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2001562 type=Limit tracking=src count=2 seconds=300 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2021444 type=Both tracking=src count=10 seconds=120 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2021443 type=Both tracking=src count=10 seconds=120 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2001564 type=Limit tracking=src count=5 seconds=300 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2019778 type=Both tracking=dst count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2021410 type=Both tracking=src count=10 seconds=120 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2021409 type=Both tracking=src count=10 seconds=120 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2001315 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2001316 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2019418 type=Both tracking=src count=50 seconds=300 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2008549 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2021574 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2021573 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2021575 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2021572 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2000929 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404205 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404204 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404207 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404206 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404201 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404200 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404203 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404202 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2021331 type=Both tracking=src count=10 seconds=120 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2021330 type=Both tracking=src count=10 seconds=120 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2021333 type=Both tracking=src count=10 seconds=120 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2021332 type=Both tracking=src count=10 seconds=120 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2021327 type=Both tracking=src count=10 seconds=120 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2021326 type=Limit tracking=src count=3 seconds=60 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2021329 type=Both tracking=src count=10 seconds=120 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2021328 type=Both tracking=src count=10 seconds=120 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404097 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2404096 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=1 sig-id=2008085 type=Limit tracking=src count=2 seconds=300 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: +-----------------------[suppression]------------------------------------------ Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=129 sig-id=12 tracking=none Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: | gen-id=129 sig-id=20 tracking=none Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: ------------------------------------------------------------------------------- Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: Rule application order: activation->dynamic->pass->drop->sdrop->reject->alert->log Mon Mar 14 18:44:35 2016 daemon.info dnsmasq[3791]: reply www.msftncsi.com is Mon Mar 14 18:44:35 2016 daemon.info dnsmasq[3791]: reply www.msftncsi.com.edgesuite.net is Mon Mar 14 18:44:35 2016 daemon.info dnsmasq[3791]: reply a1961.g2.akamai.net is 23.77.233.35 Mon Mar 14 18:44:35 2016 daemon.info dnsmasq[3791]: reply a1961.g2.akamai.net is 23.77.232.91 Mon Mar 14 18:44:35 2016 daemon.info dnsmasq[3791]: query[AAAA] bn2wns1.wns.windows.com from 10.10.10.223 Mon Mar 14 18:44:35 2016 daemon.info dnsmasq[3791]: cached bn2wns1.wns.windows.com is 2a01:111:f004:20::101 Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: Verifying Preprocessor Configurations! Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: WARNING: flowbits key 'ET.http.binary' is checked but not ever set. Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: WARNING: flowbits key 'ET.BotccIP' is set but not ever checked. Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: WARNING: flowbits key 'ET.CottonCastle.Exploit' is set but not ever checked. Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: WARNING: flowbits key 'et.MS.XMLHTTP.no.exe.request' is checked but not ever set. Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: WARNING: flowbits key 'et.WinHttpRequest' is checked but not ever set. Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: WARNING: flowbits key 'ET.wininet.UA' is checked but not ever set. Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: WARNING: flowbits key 'ET.DshieldIP' is set but not ever checked. Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: WARNING: flowbits key 'FlimKit.SWF.Redirect' is checked but not ever set. Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: WARNING: flowbits key 'et.http.PK' is checked but not ever set. Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: WARNING: flowbits key 'ET.pdf.in.http' is checked but not ever set. Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: WARNING: flowbits key 'et.JavaArchiveOrClass' is checked but not ever set. Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: WARNING: flowbits key 'ET.CompIP' is set but not ever checked. Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: WARNING: flowbits key 'ET.http.javaclient.SakuraPorts' is checked but not ever set. Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: WARNING: flowbits key 'et.MS.XMLHTTP.ip.request' is checked but not ever set. Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: WARNING: flowbits key 'et.MCOFF' is checked but not ever set. Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: WARNING: flowbits key 'et.DocVBAProject' is set but not ever checked. Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: WARNING: flowbits key 'ET.http.javaclient.vulnerable' is checked but not ever set. Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: WARNING: flowbits key 'ET.ZoneAlarm.Site.Download' is checked but not ever set. Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: WARNING: flowbits key 'ET.http.rtf.download' is set but not ever checked. Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: WARNING: flowbits key 'ET.Adobe.Site.Download' is checked but not ever set. Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: WARNING: flowbits key 'ETPRO.RTF' is set but not ever checked. Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: WARNING: flowbits key 'ET.Evil' is set but not ever checked. Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: WARNING: flowbits key 'ET.JS.Obfus.Func' is checked but not ever set. Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: WARNING: flowbits key 'ET.http.javaclient' is checked but not ever set. Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: WARNING: flowbits key 'AnglerEK' is set but not ever checked. Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: WARNING: flowbits key 'NuclearEK' is set but not ever checked. Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: WARNING: flowbits key 'SunDown.EK' is set but not ever checked. Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: WARNING: flowbits key 'EXE2' is set but not ever checked. Mon Mar 14 18:44:35 2016 daemon.notice snort[3511]: 77 out of 1024 flowbits in use. Mon Mar 14 18:44:36 2016 daemon.info dnsmasq[3791]: query[AAAA] www.google.com from 10.10.10.223 Mon Mar 14 18:44:36 2016 daemon.info dnsmasq[3791]: forwarded www.google.com to 192.168.1.1 Mon Mar 14 18:44:36 2016 daemon.info dnsmasq[3791]: query[A] www.google.com from 10.10.10.223 Mon Mar 14 18:44:36 2016 daemon.info dnsmasq[3791]: forwarded www.google.com to 192.168.1.1 Mon Mar 14 18:44:36 2016 daemon.info dnsmasq[3791]: reply www.google.com is 2607:f8b0:400c:c06::6a Mon Mar 14 18:44:36 2016 kern.info kernel: [ 99.282352] br-lan: port 2(eth2) entered forwarding state Mon Mar 14 18:44:36 2016 daemon.info dnsmasq[3791]: reply www.google.com is 74.125.141.104 Mon Mar 14 18:44:36 2016 daemon.info dnsmasq[3791]: reply www.google.com is 74.125.141.147 Mon Mar 14 18:44:36 2016 daemon.info dnsmasq[3791]: reply www.google.com is 74.125.141.106 Mon Mar 14 18:44:36 2016 daemon.info dnsmasq[3791]: reply www.google.com is 74.125.141.99 Mon Mar 14 18:44:36 2016 daemon.info dnsmasq[3791]: reply www.google.com is 74.125.141.103 Mon Mar 14 18:44:36 2016 daemon.info dnsmasq[3791]: reply www.google.com is 74.125.141.105 Mon Mar 14 18:44:36 2016 daemon.info dnsmasq[3791]: query[A] blocklist.addons.mozilla.org from 10.10.10.223 Mon Mar 14 18:44:36 2016 daemon.info dnsmasq[3791]: forwarded blocklist.addons.mozilla.org to 192.168.1.1 Mon Mar 14 18:44:36 2016 daemon.info dnsmasq[3791]: exiting on receipt of SIGTERM Mon Mar 14 18:44:43 2016 daemon.info dnsmasq[4004]: started, version 2.73rc7 cachesize 150 Mon Mar 14 18:44:43 2016 daemon.info dnsmasq[4004]: compile time options: IPv6 GNU-getopt no-DBus no-i18n no-IDN DHCP no-DHCPv6 no-Lua TFTP no-conntrack no-ipset no-auth no-DNSSEC loop-detect inotify Mon Mar 14 18:44:43 2016 daemon.info dnsmasq[4004]: DNS service limited to local subnets Mon Mar 14 18:44:43 2016 daemon.info dnsmasq-dhcp[4004]: DHCP, IP range 10.10.10.100 -- 10.10.10.254, lease time 12h Mon Mar 14 18:44:43 2016 daemon.info dnsmasq[4004]: using local addresses only for domain lan Mon Mar 14 18:44:43 2016 daemon.info dnsmasq[4004]: reading /tmp/resolv.conf.auto Mon Mar 14 18:44:43 2016 daemon.info dnsmasq[4004]: using local addresses only for domain lan Mon Mar 14 18:44:43 2016 daemon.info dnsmasq[4004]: using nameserver 192.168.1.1#53 Mon Mar 14 18:44:43 2016 daemon.info dnsmasq[4004]: read /etc/hosts - 1 addresses Mon Mar 14 18:44:43 2016 daemon.info dnsmasq[4004]: read /tmp/hosts/dhcp - 1 addresses Mon Mar 14 18:44:43 2016 daemon.info dnsmasq-dhcp[4004]: read /etc/ethers - 0 addresses Mon Mar 14 18:44:44 2016 daemon.info dnsmasq[4004]: query[A] clients2.google.com from 10.10.10.228 Mon Mar 14 18:44:44 2016 daemon.info dnsmasq[4004]: forwarded clients2.google.com to 192.168.1.1 Mon Mar 14 18:44:44 2016 daemon.info dnsmasq[4004]: query[A] clients2.google.com from 10.10.10.228 Mon Mar 14 18:44:44 2016 daemon.info dnsmasq[4004]: forwarded clients2.google.com to 192.168.1.1 Mon Mar 14 18:44:44 2016 daemon.info dnsmasq[4004]: query[A] clients2.google.com from 10.10.10.229 Mon Mar 14 18:44:44 2016 daemon.info dnsmasq[4004]: forwarded clients2.google.com to 192.168.1.1 Mon Mar 14 18:44:44 2016 daemon.info dnsmasq[4004]: query[A] clients2.google.com from 10.10.10.229 Mon Mar 14 18:44:44 2016 daemon.info dnsmasq[4004]: forwarded clients2.google.com to 192.168.1.1 Mon Mar 14 18:44:44 2016 daemon.info dnsmasq[4004]: query[A] mail.google.com from 10.10.10.228 Mon Mar 14 18:44:44 2016 daemon.info dnsmasq[4004]: forwarded mail.google.com to 192.168.1.1 Mon Mar 14 18:44:44 2016 daemon.info dnsmasq[4004]: query[A] mail.google.com from 10.10.10.228 Mon Mar 14 18:44:44 2016 daemon.info dnsmasq[4004]: forwarded mail.google.com to 192.168.1.1 Mon Mar 14 18:44:44 2016 daemon.info dnsmasq[4004]: query[A] mail.google.com from 10.10.10.229 Mon Mar 14 18:44:44 2016 daemon.info dnsmasq[4004]: forwarded mail.google.com to 192.168.1.1 Mon Mar 14 18:44:44 2016 daemon.info dnsmasq[4004]: query[A] mail.google.com from 10.10.10.229 Mon Mar 14 18:44:44 2016 daemon.info dnsmasq[4004]: forwarded mail.google.com to 192.168.1.1 Mon Mar 14 18:44:44 2016 daemon.info dnsmasq[4004]: reply clients2.google.com is Mon Mar 14 18:44:44 2016 daemon.info dnsmasq[4004]: reply clients.l.google.com is 216.58.216.238 Mon Mar 14 18:44:44 2016 daemon.info dnsmasq[4004]: reply clients2.google.com is Mon Mar 14 18:44:44 2016 daemon.info dnsmasq[4004]: reply clients.l.google.com is 216.58.216.238 Mon Mar 14 18:44:44 2016 daemon.info dnsmasq[4004]: reply clients2.google.com is Mon Mar 14 18:44:44 2016 daemon.info dnsmasq[4004]: reply clients.l.google.com is 216.58.216.238 Mon Mar 14 18:44:44 2016 daemon.info dnsmasq[4004]: reply clients2.google.com is Mon Mar 14 18:44:44 2016 daemon.info dnsmasq[4004]: reply clients.l.google.com is 216.58.216.238 Mon Mar 14 18:44:44 2016 daemon.info dnsmasq[4004]: reply mail.google.com is Mon Mar 14 18:44:44 2016 daemon.info dnsmasq[4004]: reply googlemail.l.google.com is 216.58.216.229 Mon Mar 14 18:44:44 2016 daemon.info dnsmasq[4004]: reply mail.google.com is Mon Mar 14 18:44:44 2016 daemon.info dnsmasq[4004]: reply googlemail.l.google.com is 216.58.216.229 Mon Mar 14 18:44:44 2016 daemon.info dnsmasq[4004]: reply mail.google.com is Mon Mar 14 18:44:44 2016 daemon.info dnsmasq[4004]: reply googlemail.l.google.com is 216.58.216.229 Mon Mar 14 18:44:44 2016 daemon.info dnsmasq[4004]: reply mail.google.com is Mon Mar 14 18:44:44 2016 daemon.info dnsmasq[4004]: reply googlemail.l.google.com is 216.58.216.229 Mon Mar 14 18:44:44 2016 daemon.info dnsmasq[4004]: query[A] plus.google.com from 10.10.10.223 Mon Mar 14 18:44:44 2016 daemon.info dnsmasq[4004]: forwarded plus.google.com to 192.168.1.1 Mon Mar 14 18:44:44 2016 daemon.info dnsmasq[4004]: query[AAAA] plus.google.com from 10.10.10.223 Mon Mar 14 18:44:44 2016 daemon.info dnsmasq[4004]: forwarded plus.google.com to 192.168.1.1 Mon Mar 14 18:44:44 2016 daemon.info dnsmasq[4004]: query[A] 9.client-channel.google.com from 10.10.10.223 Mon Mar 14 18:44:44 2016 daemon.info dnsmasq[4004]: forwarded 9.client-channel.google.com to 192.168.1.1 Mon Mar 14 18:44:44 2016 daemon.info dnsmasq[4004]: query[AAAA] 9.client-channel.google.com from 10.10.10.223 Mon Mar 14 18:44:44 2016 daemon.info dnsmasq[4004]: forwarded 9.client-channel.google.com to 192.168.1.1 Mon Mar 14 18:44:44 2016 daemon.info dnsmasq[4004]: reply plus.google.com is 216.58.216.238 Mon Mar 14 18:44:44 2016 daemon.info dnsmasq[4004]: reply plus.google.com is 2607:f8b0:4009:809::200e Mon Mar 14 18:44:44 2016 daemon.info dnsmasq[4004]: reply 9.client-channel.google.com is 74.125.207.189 Mon Mar 14 18:44:44 2016 daemon.info dnsmasq[4004]: reply 9.client-channel.google.com is 2607:f8b0:4001:c07::bd Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: query[A] 5-courier.push.apple.com from 10.10.10.223 Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: forwarded 5-courier.push.apple.com to 192.168.1.1 Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: reply 5-courier.push.apple.com is Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: reply 5.courier-push-apple.com.akadns.net is Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: reply us-courier.push-apple.com.akadns.net is 17.143.161.165 Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: reply us-courier.push-apple.com.akadns.net is 17.143.160.230 Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: reply us-courier.push-apple.com.akadns.net is 17.143.164.97 Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: reply us-courier.push-apple.com.akadns.net is 17.143.162.145 Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: reply us-courier.push-apple.com.akadns.net is 17.143.161.32 Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: reply us-courier.push-apple.com.akadns.net is 17.143.162.25 Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: reply us-courier.push-apple.com.akadns.net is 17.143.161.85 Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: reply us-courier.push-apple.com.akadns.net is 17.143.160.33 Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: query[AAAA] us-courier.push-apple.com.akadns.net from 10.10.10.223 Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: forwarded us-courier.push-apple.com.akadns.net to 192.168.1.1 Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: query[AAAA] www.microsoft.com from 10.10.10.228 Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: forwarded www.microsoft.com to 192.168.1.1 Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: query[AAAA] www.microsoft.com from 10.10.10.228 Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: forwarded www.microsoft.com to 192.168.1.1 Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: query[A] www.microsoft.com from 10.10.10.228 Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: forwarded www.microsoft.com to 192.168.1.1 Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: query[A] www.microsoft.com from 10.10.10.228 Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: forwarded www.microsoft.com to 192.168.1.1 Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: query[AAAA] www.microsoft.com from 10.10.10.229 Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: forwarded www.microsoft.com to 192.168.1.1 Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: query[A] www.microsoft.com from 10.10.10.229 Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: forwarded www.microsoft.com to 192.168.1.1 Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: query[A] www.microsoft.com from 10.10.10.229 Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: forwarded www.microsoft.com to 192.168.1.1 Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: query[AAAA] www.microsoft.com from 10.10.10.229 Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: forwarded www.microsoft.com to 192.168.1.1 Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: reply www.microsoft.com is Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: reply www.microsoft.com-c.edgekey.net is Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: reply www.microsoft.com-c.edgekey.net.globalredir.akadns.net is Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: reply e10088.dspb.akamaiedge.net is 2600:1404:e:193::2768 Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: reply e10088.dspb.akamaiedge.net is 2600:1404:e:182::2768 Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: reply www.microsoft.com is Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: reply www.microsoft.com-c.edgekey.net is Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: reply www.microsoft.com-c.edgekey.net.globalredir.akadns.net is Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: reply e10088.dspb.akamaiedge.net is 2600:1404:e:193::2768 Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: reply e10088.dspb.akamaiedge.net is 2600:1404:e:182::2768 Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: reply www.microsoft.com is Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: reply www.microsoft.com-c.edgekey.net is Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: reply www.microsoft.com-c.edgekey.net.globalredir.akadns.net is Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: reply e10088.dspb.akamaiedge.net is 2600:1404:e:193::2768 Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: reply e10088.dspb.akamaiedge.net is 2600:1404:e:182::2768 Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: reply www.microsoft.com is Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: reply www.microsoft.com-c.edgekey.net is Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: reply www.microsoft.com-c.edgekey.net.globalredir.akadns.net is Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: reply e10088.dspb.akamaiedge.net is 2600:1404:e:193::2768 Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: reply e10088.dspb.akamaiedge.net is 2600:1404:e:182::2768 Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: reply www.microsoft.com is Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: reply www.microsoft.com-c.edgekey.net is Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: reply www.microsoft.com-c.edgekey.net.globalredir.akadns.net is Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: reply e10088.dspb.akamaiedge.net is 23.12.250.144 Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: reply www.microsoft.com is Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: reply www.microsoft.com-c.edgekey.net is Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: reply www.microsoft.com-c.edgekey.net.globalredir.akadns.net is Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: reply e10088.dspb.akamaiedge.net is 23.12.250.144 Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: reply www.microsoft.com is Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: reply www.microsoft.com-c.edgekey.net is Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: reply www.microsoft.com-c.edgekey.net.globalredir.akadns.net is Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: reply e10088.dspb.akamaiedge.net is 23.12.250.144 Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: query[AAAA] www.microsoft.com from 10.10.10.228 Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: cached www.microsoft.com is Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: cached www.microsoft.com-c.edgekey.net is Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: cached www.microsoft.com-c.edgekey.net.globalredir.akadns.net is Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: cached e10088.dspb.akamaiedge.net is 2600:1404:e:182::2768 Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: cached e10088.dspb.akamaiedge.net is 2600:1404:e:193::2768 Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: reply www.microsoft.com is Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: reply www.microsoft.com-c.edgekey.net is Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: reply www.microsoft.com-c.edgekey.net.globalredir.akadns.net is Mon Mar 14 18:44:45 2016 daemon.info dnsmasq[4004]: reply e10088.dspb.akamaiedge.net is 23.12.250.144 Mon Mar 14 18:44:47 2016 daemon.info dnsmasq[4004]: query[A] www.msftncsi.com from 10.10.10.229 Mon Mar 14 18:44:47 2016 daemon.info dnsmasq[4004]: forwarded www.msftncsi.com to 192.168.1.1 Mon Mar 14 18:44:47 2016 daemon.info dnsmasq[4004]: query[AAAA] www.msftncsi.com from 10.10.10.229 Mon Mar 14 18:44:47 2016 daemon.info dnsmasq[4004]: forwarded www.msftncsi.com to 192.168.1.1 Mon Mar 14 18:44:47 2016 daemon.info dnsmasq[4004]: reply www.msftncsi.com is Mon Mar 14 18:44:47 2016 daemon.info dnsmasq[4004]: reply www.msftncsi.com.edgesuite.net is Mon Mar 14 18:44:47 2016 daemon.info dnsmasq[4004]: reply a1961.g2.akamai.net is 23.77.233.35 Mon Mar 14 18:44:47 2016 daemon.info dnsmasq[4004]: reply a1961.g2.akamai.net is 23.77.232.91 Mon Mar 14 18:44:47 2016 daemon.info dnsmasq[4004]: reply www.msftncsi.com is Mon Mar 14 18:44:47 2016 daemon.info dnsmasq[4004]: reply www.msftncsi.com.edgesuite.net is Mon Mar 14 18:44:47 2016 daemon.info dnsmasq[4004]: reply a1961.g2.akamai.net is NODATA-IPv6 Mon Mar 14 18:44:49 2016 daemon.info dnsmasq[4004]: query[A] blocklist.addons.mozilla.org from 10.10.10.223 Mon Mar 14 18:44:49 2016 daemon.info dnsmasq[4004]: forwarded blocklist.addons.mozilla.org to 192.168.1.1 Mon Mar 14 18:44:49 2016 daemon.info dnsmasq[4004]: reply blocklist.addons.mozilla.org is Mon Mar 14 18:44:49 2016 daemon.info dnsmasq[4004]: reply versioncheck.prod.mozaws.net is 54.186.236.53 Mon Mar 14 18:44:50 2016 daemon.info dnsmasq[4004]: query[A] skydrive.wns.windows.com from 10.10.10.228 Mon Mar 14 18:44:50 2016 daemon.info dnsmasq[4004]: forwarded skydrive.wns.windows.com to 192.168.1.1 Mon Mar 14 18:44:50 2016 daemon.info dnsmasq[4004]: query[AAAA] skydrive.wns.windows.com from 10.10.10.228 Mon Mar 14 18:44:50 2016 daemon.info dnsmasq[4004]: forwarded skydrive.wns.windows.com to 192.168.1.1 Mon Mar 14 18:44:50 2016 daemon.info dnsmasq[4004]: query[A] skydrive.wns.windows.com from 10.10.10.229 Mon Mar 14 18:44:50 2016 daemon.info dnsmasq[4004]: forwarded skydrive.wns.windows.com to 192.168.1.1 Mon Mar 14 18:44:50 2016 daemon.info dnsmasq[4004]: query[AAAA] skydrive.wns.windows.com from 10.10.10.229 Mon Mar 14 18:44:50 2016 daemon.info dnsmasq[4004]: forwarded skydrive.wns.windows.com to 192.168.1.1 Mon Mar 14 18:44:50 2016 daemon.info dnsmasq[4004]: reply skydrive.wns.windows.com is Mon Mar 14 18:44:50 2016 daemon.info dnsmasq[4004]: reply client.wns.windows.com is Mon Mar 14 18:44:50 2016 daemon.info dnsmasq[4004]: reply wns.notify.windows.com.akadns.net is Mon Mar 14 18:44:50 2016 daemon.info dnsmasq[4004]: reply americas2.notify.windows.com.akadns.net is Mon Mar 14 18:44:50 2016 daemon.info dnsmasq[4004]: reply bn2.wns.notify.windows.com.akadns.net is Mon Mar 14 18:44:50 2016 daemon.info dnsmasq[4004]: reply bn2wns1.wns.windows.com is 131.253.34.230 Mon Mar 14 18:44:50 2016 daemon.info dnsmasq[4004]: reply skydrive.wns.windows.com is Mon Mar 14 18:44:50 2016 daemon.info dnsmasq[4004]: reply client.wns.windows.com is Mon Mar 14 18:44:50 2016 daemon.info dnsmasq[4004]: reply wns.notify.windows.com.akadns.net is Mon Mar 14 18:44:50 2016 daemon.info dnsmasq[4004]: reply americas2.notify.windows.com.akadns.net is Mon Mar 14 18:44:50 2016 daemon.info dnsmasq[4004]: reply bn2.wns.notify.windows.com.akadns.net is Mon Mar 14 18:44:50 2016 daemon.info dnsmasq[4004]: reply bn2wns1.wns.windows.com is 2a01:111:f004:20::101 Mon Mar 14 18:44:50 2016 daemon.info dnsmasq[4004]: reply skydrive.wns.windows.com is Mon Mar 14 18:44:50 2016 daemon.info dnsmasq[4004]: reply client.wns.windows.com is Mon Mar 14 18:44:50 2016 daemon.info dnsmasq[4004]: reply wns.notify.windows.com.akadns.net is Mon Mar 14 18:44:50 2016 daemon.info dnsmasq[4004]: reply americas2.notify.windows.com.akadns.net is Mon Mar 14 18:44:50 2016 daemon.info dnsmasq[4004]: reply bn2.wns.notify.windows.com.akadns.net is Mon Mar 14 18:44:50 2016 daemon.info dnsmasq[4004]: reply bn2wns1.wns.windows.com is 131.253.34.230 Mon Mar 14 18:44:50 2016 daemon.info dnsmasq[4004]: reply skydrive.wns.windows.com is Mon Mar 14 18:44:50 2016 daemon.info dnsmasq[4004]: reply client.wns.windows.com is Mon Mar 14 18:44:50 2016 daemon.info dnsmasq[4004]: reply wns.notify.windows.com.akadns.net is Mon Mar 14 18:44:50 2016 daemon.info dnsmasq[4004]: reply americas2.notify.windows.com.akadns.net is Mon Mar 14 18:44:50 2016 daemon.info dnsmasq[4004]: reply bn2.wns.notify.windows.com.akadns.net is Mon Mar 14 18:44:50 2016 daemon.info dnsmasq[4004]: reply bn2wns1.wns.windows.com is 2a01:111:f004:20::101 Mon Mar 14 18:44:52 2016 daemon.info dnsmasq[4004]: query[AAAA] odc.officeapps.live.com from 10.10.10.223 Mon Mar 14 18:44:52 2016 daemon.info dnsmasq[4004]: forwarded odc.officeapps.live.com to 192.168.1.1 Mon Mar 14 18:44:52 2016 daemon.info dnsmasq[4004]: query[A] odc.officeapps.live.com from 10.10.10.223 Mon Mar 14 18:44:52 2016 daemon.info dnsmasq[4004]: forwarded odc.officeapps.live.com to 192.168.1.1 Mon Mar 14 18:44:52 2016 daemon.info dnsmasq[4004]: query[AAAA] 41-courier.push.apple.com from 10.10.10.211 Mon Mar 14 18:44:52 2016 daemon.info dnsmasq[4004]: forwarded 41-courier.push.apple.com to 192.168.1.1 Mon Mar 14 18:44:52 2016 daemon.info dnsmasq[4004]: query[A] 41-courier.push.apple.com from 10.10.10.211 Mon Mar 14 18:44:52 2016 daemon.info dnsmasq[4004]: forwarded 41-courier.push.apple.com to 192.168.1.1 Mon Mar 14 18:44:52 2016 daemon.info dnsmasq[4004]: reply odc.officeapps.live.com is Mon Mar 14 18:44:52 2016 daemon.info dnsmasq[4004]: reply prod.odcsm.live.com.akadns.net is Mon Mar 14 18:44:52 2016 daemon.info dnsmasq[4004]: reply ncus-odc.officeapps.live.com is Mon Mar 14 18:44:52 2016 daemon.info dnsmasq[4004]: reply osiprod-ncus01-odcsm.cloudapp.net is 23.96.219.115 Mon Mar 14 18:44:52 2016 daemon.info dnsmasq[4004]: reply 41-courier.push.apple.com is Mon Mar 14 18:44:52 2016 daemon.info dnsmasq[4004]: reply 41.courier-push-apple.com.akadns.net is Mon Mar 14 18:44:52 2016 daemon.info dnsmasq[4004]: reply us-courier.push-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 18:44:52 2016 daemon.info dnsmasq[4004]: query[AAAA] us-courier.push-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 18:44:52 2016 daemon.info dnsmasq[4004]: cached us-courier.push-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 18:44:52 2016 daemon.info dnsmasq[4004]: reply 41-courier.push.apple.com is Mon Mar 14 18:44:52 2016 daemon.info dnsmasq[4004]: reply 41.courier-push-apple.com.akadns.net is Mon Mar 14 18:44:52 2016 daemon.info dnsmasq[4004]: reply us-courier.push-apple.com.akadns.net is 17.110.226.145 Mon Mar 14 18:44:52 2016 daemon.info dnsmasq[4004]: reply us-courier.push-apple.com.akadns.net is 17.110.229.202 Mon Mar 14 18:44:52 2016 daemon.info dnsmasq[4004]: reply us-courier.push-apple.com.akadns.net is 17.110.226.138 Mon Mar 14 18:44:52 2016 daemon.info dnsmasq[4004]: reply us-courier.push-apple.com.akadns.net is 17.110.226.205 Mon Mar 14 18:44:52 2016 daemon.info dnsmasq[4004]: reply us-courier.push-apple.com.akadns.net is 17.110.227.78 Mon Mar 14 18:44:52 2016 daemon.info dnsmasq[4004]: reply us-courier.push-apple.com.akadns.net is 17.110.229.142 Mon Mar 14 18:44:52 2016 daemon.info dnsmasq[4004]: reply us-courier.push-apple.com.akadns.net is 17.110.229.206 Mon Mar 14 18:44:52 2016 daemon.info dnsmasq[4004]: reply us-courier.push-apple.com.akadns.net is 17.110.226.209 Mon Mar 14 18:44:52 2016 daemon.info dnsmasq[4004]: query[A] us-courier.push-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 18:44:52 2016 daemon.info dnsmasq[4004]: cached us-courier.push-apple.com.akadns.net is 17.110.226.209 Mon Mar 14 18:44:52 2016 daemon.info dnsmasq[4004]: cached us-courier.push-apple.com.akadns.net is 17.110.229.206 Mon Mar 14 18:44:52 2016 daemon.info dnsmasq[4004]: cached us-courier.push-apple.com.akadns.net is 17.110.229.142 Mon Mar 14 18:44:52 2016 daemon.info dnsmasq[4004]: cached us-courier.push-apple.com.akadns.net is 17.110.227.78 Mon Mar 14 18:44:52 2016 daemon.info dnsmasq[4004]: cached us-courier.push-apple.com.akadns.net is 17.110.226.205 Mon Mar 14 18:44:52 2016 daemon.info dnsmasq[4004]: cached us-courier.push-apple.com.akadns.net is 17.110.226.138 Mon Mar 14 18:44:52 2016 daemon.info dnsmasq[4004]: cached us-courier.push-apple.com.akadns.net is 17.110.229.202 Mon Mar 14 18:44:52 2016 daemon.info dnsmasq[4004]: cached us-courier.push-apple.com.akadns.net is 17.110.226.145 Mon Mar 14 18:44:52 2016 daemon.info dnsmasq[4004]: reply odc.officeapps.live.com is Mon Mar 14 18:44:52 2016 daemon.info dnsmasq[4004]: reply prod.odcsm.live.com.akadns.net is Mon Mar 14 18:44:52 2016 daemon.info dnsmasq[4004]: reply ncus-odc.officeapps.live.com is Mon Mar 14 18:44:52 2016 daemon.info dnsmasq[4004]: reply osiprod-ncus01-odcsm.cloudapp.net is NODATA-IPv6 Mon Mar 14 18:44:52 2016 daemon.info dnsmasq[4004]: query[AAAA] app.procentive.com from 10.10.10.223 Mon Mar 14 18:44:52 2016 daemon.info dnsmasq[4004]: forwarded app.procentive.com to 192.168.1.1 Mon Mar 14 18:44:52 2016 daemon.info dnsmasq[4004]: query[A] app.procentive.com from 10.10.10.223 Mon Mar 14 18:44:52 2016 daemon.info dnsmasq[4004]: forwarded app.procentive.com to 192.168.1.1 Mon Mar 14 18:44:52 2016 daemon.info dnsmasq[4004]: reply app.procentive.com is 66.179.249.115 Mon Mar 14 18:44:53 2016 daemon.info dnsmasq[4004]: query[AAAA] osiprod-ncus01-odcsm.cloudapp.net from 10.10.10.223 Mon Mar 14 18:44:53 2016 daemon.info dnsmasq[4004]: cached osiprod-ncus01-odcsm.cloudapp.net is NODATA-IPv6 Mon Mar 14 18:44:53 2016 daemon.info dnsmasq[4004]: query[A] www.google.com from 10.10.10.228 Mon Mar 14 18:44:53 2016 daemon.info dnsmasq[4004]: forwarded www.google.com to 192.168.1.1 Mon Mar 14 18:44:53 2016 daemon.info dnsmasq[4004]: query[A] www.google.com from 10.10.10.229 Mon Mar 14 18:44:53 2016 daemon.info dnsmasq[4004]: forwarded www.google.com to 192.168.1.1 Mon Mar 14 18:44:53 2016 daemon.info dnsmasq[4004]: reply www.google.com is 74.125.141.104 Mon Mar 14 18:44:53 2016 daemon.info dnsmasq[4004]: reply www.google.com is 74.125.141.147 Mon Mar 14 18:44:53 2016 daemon.info dnsmasq[4004]: reply www.google.com is 74.125.141.106 Mon Mar 14 18:44:53 2016 daemon.info dnsmasq[4004]: reply www.google.com is 74.125.141.99 Mon Mar 14 18:44:53 2016 daemon.info dnsmasq[4004]: reply www.google.com is 74.125.141.103 Mon Mar 14 18:44:53 2016 daemon.info dnsmasq[4004]: reply www.google.com is 74.125.141.105 Mon Mar 14 18:44:53 2016 daemon.info dnsmasq[4004]: reply www.google.com is 74.125.141.104 Mon Mar 14 18:44:53 2016 daemon.info dnsmasq[4004]: reply www.google.com is 74.125.141.147 Mon Mar 14 18:44:53 2016 daemon.info dnsmasq[4004]: reply www.google.com is 74.125.141.106 Mon Mar 14 18:44:53 2016 daemon.info dnsmasq[4004]: reply www.google.com is 74.125.141.99 Mon Mar 14 18:44:53 2016 daemon.info dnsmasq[4004]: reply www.google.com is 74.125.141.103 Mon Mar 14 18:44:53 2016 daemon.info dnsmasq[4004]: reply www.google.com is 74.125.141.105 Mon Mar 14 18:44:54 2016 daemon.info dnsmasq[4004]: query[A] init-p01st.push.apple.com from 10.10.10.223 Mon Mar 14 18:44:54 2016 daemon.info dnsmasq[4004]: forwarded init-p01st.push.apple.com to 192.168.1.1 Mon Mar 14 18:44:54 2016 daemon.info dnsmasq[4004]: query[AAAA] init-p01st.push.apple.com from 10.10.10.223 Mon Mar 14 18:44:54 2016 daemon.info dnsmasq[4004]: forwarded init-p01st.push.apple.com to 192.168.1.1 Mon Mar 14 18:44:54 2016 daemon.info dnsmasq[4004]: reply init-p01st.push.apple.com is Mon Mar 14 18:44:54 2016 daemon.info dnsmasq[4004]: reply init-p01st.push.apple.com.edgesuite.net is Mon Mar 14 18:44:54 2016 daemon.info dnsmasq[4004]: reply a1441.g4.akamai.net is 23.77.232.155 Mon Mar 14 18:44:54 2016 daemon.info dnsmasq[4004]: reply a1441.g4.akamai.net is 23.77.232.170 Mon Mar 14 18:44:55 2016 daemon.info dnsmasq[4004]: reply init-p01st.push.apple.com is Mon Mar 14 18:44:55 2016 daemon.info dnsmasq[4004]: reply init-p01st.push.apple.com.edgesuite.net is Mon Mar 14 18:44:55 2016 daemon.info dnsmasq[4004]: reply a1441.g4.akamai.net is NODATA-IPv6 Mon Mar 14 18:44:55 2016 daemon.info dnsmasq[4004]: query[AAAA] a1441.g4.akamai.net from 10.10.10.223 Mon Mar 14 18:44:55 2016 daemon.info dnsmasq[4004]: cached a1441.g4.akamai.net is NODATA-IPv6 Mon Mar 14 18:45:01 2016 daemon.info dnsmasq[4004]: query[A] clients4.google.com from 10.10.10.223 Mon Mar 14 18:45:01 2016 daemon.info dnsmasq[4004]: forwarded clients4.google.com to 192.168.1.1 Mon Mar 14 18:45:01 2016 daemon.info dnsmasq[4004]: reply clients4.google.com is Mon Mar 14 18:45:01 2016 daemon.info dnsmasq[4004]: reply clients.l.google.com is 216.58.216.238 Mon Mar 14 18:45:03 2016 daemon.info dnsmasq[4004]: query[A] play.google.com from 10.10.10.228 Mon Mar 14 18:45:03 2016 daemon.info dnsmasq[4004]: forwarded play.google.com to 192.168.1.1 Mon Mar 14 18:45:03 2016 daemon.info dnsmasq[4004]: query[A] play.google.com from 10.10.10.229 Mon Mar 14 18:45:03 2016 daemon.info dnsmasq[4004]: forwarded play.google.com to 192.168.1.1 Mon Mar 14 18:45:03 2016 daemon.info dnsmasq[4004]: reply play.google.com is Mon Mar 14 18:45:03 2016 daemon.info dnsmasq[4004]: reply play.l.google.com is 216.58.216.238 Mon Mar 14 18:45:03 2016 daemon.info dnsmasq[4004]: reply play.google.com is Mon Mar 14 18:45:03 2016 daemon.info dnsmasq[4004]: reply play.l.google.com is 216.58.216.238 Mon Mar 14 18:45:06 2016 daemon.info dnsmasq[4004]: query[A] crl.microsoft.com from 10.10.10.228 Mon Mar 14 18:45:06 2016 daemon.info dnsmasq[4004]: forwarded crl.microsoft.com to 192.168.1.1 Mon Mar 14 18:45:06 2016 daemon.info dnsmasq[4004]: query[AAAA] crl.microsoft.com from 10.10.10.228 Mon Mar 14 18:45:06 2016 daemon.info dnsmasq[4004]: forwarded crl.microsoft.com to 192.168.1.1 Mon Mar 14 18:45:06 2016 daemon.info dnsmasq[4004]: query[A] crl.microsoft.com from 10.10.10.229 Mon Mar 14 18:45:06 2016 daemon.info dnsmasq[4004]: forwarded crl.microsoft.com to 192.168.1.1 Mon Mar 14 18:45:06 2016 daemon.info dnsmasq[4004]: query[AAAA] crl.microsoft.com from 10.10.10.229 Mon Mar 14 18:45:06 2016 daemon.info dnsmasq[4004]: forwarded crl.microsoft.com to 192.168.1.1 Mon Mar 14 18:45:06 2016 daemon.info dnsmasq[4004]: reply crl.microsoft.com is Mon Mar 14 18:45:06 2016 daemon.info dnsmasq[4004]: reply crl.www.ms.akadns.net is Mon Mar 14 18:45:06 2016 daemon.info dnsmasq[4004]: reply a1363.dscg.akamai.net is 23.77.232.169 Mon Mar 14 18:45:06 2016 daemon.info dnsmasq[4004]: reply a1363.dscg.akamai.net is 23.77.232.155 Mon Mar 14 18:45:06 2016 daemon.info dnsmasq[4004]: reply crl.microsoft.com is Mon Mar 14 18:45:06 2016 daemon.info dnsmasq[4004]: reply crl.www.ms.akadns.net is Mon Mar 14 18:45:06 2016 daemon.info dnsmasq[4004]: reply a1363.dscg.akamai.net is 23.77.232.169 Mon Mar 14 18:45:06 2016 daemon.info dnsmasq[4004]: reply a1363.dscg.akamai.net is 23.77.232.155 Mon Mar 14 18:45:06 2016 daemon.info dnsmasq[4004]: reply crl.microsoft.com is Mon Mar 14 18:45:06 2016 daemon.info dnsmasq[4004]: reply crl.www.ms.akadns.net is Mon Mar 14 18:45:06 2016 daemon.info dnsmasq[4004]: reply a1363.dscg.akamai.net is 2600:1404:e::174d:e923 Mon Mar 14 18:45:06 2016 daemon.info dnsmasq[4004]: reply a1363.dscg.akamai.net is 2600:1404:e::174d:e861 Mon Mar 14 18:45:06 2016 daemon.info dnsmasq[4004]: reply crl.microsoft.com is Mon Mar 14 18:45:06 2016 daemon.info dnsmasq[4004]: reply crl.www.ms.akadns.net is Mon Mar 14 18:45:06 2016 daemon.info dnsmasq[4004]: reply a1363.dscg.akamai.net is 2600:1404:e::174d:e923 Mon Mar 14 18:45:06 2016 daemon.info dnsmasq[4004]: reply a1363.dscg.akamai.net is 2600:1404:e::174d:e861 Mon Mar 14 18:45:07 2016 daemon.info dnsmasq[4004]: query[A] a1441.g4.akamai.net from 10.10.10.223 Mon Mar 14 18:45:07 2016 daemon.info dnsmasq[4004]: forwarded a1441.g4.akamai.net to 192.168.1.1 Mon Mar 14 18:45:07 2016 daemon.info dnsmasq[4004]: reply a1441.g4.akamai.net is 23.77.232.170 Mon Mar 14 18:45:07 2016 daemon.info dnsmasq[4004]: reply a1441.g4.akamai.net is 23.77.232.155 Mon Mar 14 18:45:10 2016 daemon.emerg procd: rm: can't remove '/etc/ITUS_DNS.tmp': No such file or directory Mon Mar 14 18:45:11 2016 daemon.info dnsmasq[4004]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 18:45:11 2016 daemon.info dnsmasq[4004]: forwarded skydocs.skyprod.akadns.net to 192.168.1.1 Mon Mar 14 18:45:14 2016 daemon.info dnsmasq[4004]: query[AAAA] 28-courier.push.apple.com from 10.10.10.223 Mon Mar 14 18:45:14 2016 daemon.info dnsmasq[4004]: forwarded 28-courier.push.apple.com to 192.168.1.1 Mon Mar 14 18:45:14 2016 daemon.info dnsmasq[4004]: query[A] 28-courier.push.apple.com from 10.10.10.223 Mon Mar 14 18:45:14 2016 daemon.info dnsmasq[4004]: forwarded 28-courier.push.apple.com to 192.168.1.1 Mon Mar 14 18:45:14 2016 daemon.info dnsmasq[4004]: reply 28-courier.push.apple.com is Mon Mar 14 18:45:14 2016 daemon.info dnsmasq[4004]: reply 28.courier-push-apple.com.akadns.net is Mon Mar 14 18:45:14 2016 daemon.info dnsmasq[4004]: reply us-courier.push-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 18:45:14 2016 daemon.info dnsmasq[4004]: reply 28-courier.push.apple.com is Mon Mar 14 18:45:14 2016 daemon.info dnsmasq[4004]: reply 28.courier-push-apple.com.akadns.net is Mon Mar 14 18:45:14 2016 daemon.info dnsmasq[4004]: reply us-courier.push-apple.com.akadns.net is 17.143.163.221 Mon Mar 14 18:45:14 2016 daemon.info dnsmasq[4004]: reply us-courier.push-apple.com.akadns.net is 17.143.161.83 Mon Mar 14 18:45:14 2016 daemon.info dnsmasq[4004]: reply us-courier.push-apple.com.akadns.net is 17.143.162.225 Mon Mar 14 18:45:14 2016 daemon.info dnsmasq[4004]: reply us-courier.push-apple.com.akadns.net is 17.143.161.92 Mon Mar 14 18:45:14 2016 daemon.info dnsmasq[4004]: reply us-courier.push-apple.com.akadns.net is 17.143.160.24 Mon Mar 14 18:45:14 2016 daemon.info dnsmasq[4004]: reply us-courier.push-apple.com.akadns.net is 17.143.164.81 Mon Mar 14 18:45:14 2016 daemon.info dnsmasq[4004]: reply us-courier.push-apple.com.akadns.net is 17.143.160.159 Mon Mar 14 18:45:14 2016 daemon.info dnsmasq[4004]: reply us-courier.push-apple.com.akadns.net is 17.143.162.17 Mon Mar 14 18:45:16 2016 daemon.info dnsmasq[4004]: query[A] yourhost.example.com from 127.0.0.1 Mon Mar 14 18:45:16 2016 daemon.info dnsmasq[4004]: forwarded yourhost.example.com to 192.168.1.1 Mon Mar 14 18:45:16 2016 daemon.info dnsmasq[4004]: reply yourhost.example.com is 198.105.244.63 Mon Mar 14 18:45:16 2016 daemon.info dnsmasq[4004]: reply yourhost.example.com is 198.105.254.63 Mon Mar 14 18:45:16 2016 daemon.info dnsmasq[4004]: query[AAAA] lp-push-server-825.lastpass.com from 10.10.10.223 Mon Mar 14 18:45:16 2016 daemon.info dnsmasq[4004]: forwarded lp-push-server-825.lastpass.com to 192.168.1.1 Mon Mar 14 18:45:17 2016 daemon.info dnsmasq[4004]: query[AAAA] yourhost.example.com from 127.0.0.1 Mon Mar 14 18:45:17 2016 daemon.info dnsmasq[4004]: forwarded yourhost.example.com to 192.168.1.1 Mon Mar 14 18:45:19 2016 daemon.info dnsmasq[4004]: query[AAAA] api.smoot-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 18:45:19 2016 daemon.info dnsmasq[4004]: forwarded api.smoot-apple.com.akadns.net to 192.168.1.1 Mon Mar 14 18:45:19 2016 daemon.info dnsmasq[4004]: query[AAAA] www.apple.com.edgekey.net.globalredir.akadns.net from 10.10.10.211 Mon Mar 14 18:45:19 2016 daemon.info dnsmasq[4004]: forwarded www.apple.com.edgekey.net.globalredir.akadns.net to 192.168.1.1 Mon Mar 14 18:45:19 2016 daemon.info dnsmasq[4004]: query[A] www.apple.com.edgekey.net.globalredir.akadns.net from 10.10.10.211 Mon Mar 14 18:45:19 2016 daemon.info dnsmasq[4004]: forwarded www.apple.com.edgekey.net.globalredir.akadns.net to 192.168.1.1 Mon Mar 14 18:45:19 2016 daemon.info dnsmasq[4004]: reply www.apple.com.edgekey.net.globalredir.akadns.net is Mon Mar 14 18:45:19 2016 daemon.info dnsmasq[4004]: reply e6858.dscc.akamaiedge.net is 2600:1404:e:18d::1aca Mon Mar 14 18:45:19 2016 daemon.info dnsmasq[4004]: reply e6858.dscc.akamaiedge.net is 2600:1404:e:182::1aca Mon Mar 14 18:45:19 2016 daemon.info dnsmasq[4004]: reply www.apple.com.edgekey.net.globalredir.akadns.net is Mon Mar 14 18:45:19 2016 daemon.info dnsmasq[4004]: reply e6858.dscc.akamaiedge.net is 23.12.245.148 Mon Mar 14 18:45:20 2016 daemon.info dnsmasq[4004]: query[A] e6858.dscc.akamaiedge.net from 10.10.10.211 Mon Mar 14 18:45:20 2016 daemon.info dnsmasq[4004]: cached e6858.dscc.akamaiedge.net is 23.12.245.148 Mon Mar 14 18:45:21 2016 daemon.info dnsmasq[4004]: query[A] yourhost.example.com from 127.0.0.1 Mon Mar 14 18:45:21 2016 daemon.info dnsmasq[4004]: cached yourhost.example.com is 198.105.254.63 Mon Mar 14 18:45:21 2016 daemon.info dnsmasq[4004]: cached yourhost.example.com is 198.105.244.63 Mon Mar 14 18:45:21 2016 daemon.info dnsmasq[4004]: query[AAAA] yourhost.example.com from 127.0.0.1 Mon Mar 14 18:45:21 2016 daemon.info dnsmasq[4004]: forwarded yourhost.example.com to 192.168.1.1 Mon Mar 14 18:45:26 2016 daemon.info dnsmasq[4004]: query[A] a1441.g4.akamai.net from 10.10.10.223 Mon Mar 14 18:45:26 2016 daemon.info dnsmasq[4004]: forwarded a1441.g4.akamai.net to 192.168.1.1 Mon Mar 14 18:45:26 2016 daemon.info dnsmasq[4004]: reply a1441.g4.akamai.net is 23.77.232.170 Mon Mar 14 18:45:26 2016 daemon.info dnsmasq[4004]: reply a1441.g4.akamai.net is 23.77.232.155 Mon Mar 14 18:45:26 2016 daemon.info dnsmasq[4004]: query[A] yourhost.example.com from 127.0.0.1 Mon Mar 14 18:45:26 2016 daemon.info dnsmasq[4004]: forwarded yourhost.example.com to 192.168.1.1 Mon Mar 14 18:45:26 2016 daemon.info dnsmasq[4004]: reply yourhost.example.com is 198.105.244.63 Mon Mar 14 18:45:26 2016 daemon.info dnsmasq[4004]: reply yourhost.example.com is 198.105.254.63 Mon Mar 14 18:45:26 2016 daemon.info dnsmasq[4004]: query[AAAA] yourhost.example.com from 127.0.0.1 Mon Mar 14 18:45:26 2016 daemon.info dnsmasq[4004]: forwarded yourhost.example.com to 192.168.1.1 Mon Mar 14 18:45:29 2016 daemon.info dnsmasq[4004]: query[A] www.msftncsi.com from 10.10.10.229 Mon Mar 14 18:45:29 2016 daemon.info dnsmasq[4004]: cached www.msftncsi.com is Mon Mar 14 18:45:29 2016 daemon.info dnsmasq[4004]: cached www.msftncsi.com.edgesuite.net is Mon Mar 14 18:45:29 2016 daemon.info dnsmasq[4004]: forwarded www.msftncsi.com to 192.168.1.1 Mon Mar 14 18:45:29 2016 daemon.info dnsmasq[4004]: query[AAAA] www.msftncsi.com from 10.10.10.229 Mon Mar 14 18:45:29 2016 daemon.info dnsmasq[4004]: cached www.msftncsi.com is Mon Mar 14 18:45:29 2016 daemon.info dnsmasq[4004]: cached www.msftncsi.com.edgesuite.net is Mon Mar 14 18:45:29 2016 daemon.info dnsmasq[4004]: cached a1961.g2.akamai.net is NODATA-IPv6 Mon Mar 14 18:45:29 2016 daemon.info dnsmasq[4004]: reply www.msftncsi.com is Mon Mar 14 18:45:29 2016 daemon.info dnsmasq[4004]: reply www.msftncsi.com.edgesuite.net is Mon Mar 14 18:45:29 2016 daemon.info dnsmasq[4004]: reply a1961.g2.akamai.net is 23.77.233.35 Mon Mar 14 18:45:29 2016 daemon.info dnsmasq[4004]: reply a1961.g2.akamai.net is 23.77.232.91 Mon Mar 14 18:45:31 2016 daemon.info dnsmasq[4004]: query[A] beacons.gvt2.com from 10.10.10.228 Mon Mar 14 18:45:31 2016 daemon.info dnsmasq[4004]: forwarded beacons.gvt2.com to 192.168.1.1 Mon Mar 14 18:45:31 2016 daemon.info dnsmasq[4004]: query[A] beacons.gvt2.com from 10.10.10.229 Mon Mar 14 18:45:31 2016 daemon.info dnsmasq[4004]: forwarded beacons.gvt2.com to 192.168.1.1 Mon Mar 14 18:45:31 2016 daemon.info dnsmasq[4004]: reply beacons.gvt2.com is 74.125.207.94 Mon Mar 14 18:45:31 2016 daemon.info dnsmasq[4004]: reply beacons.gvt2.com is 74.125.207.94 Mon Mar 14 18:45:31 2016 daemon.info dnsmasq[4004]: query[A] yourhost.example.com from 127.0.0.1 Mon Mar 14 18:45:31 2016 daemon.info dnsmasq[4004]: forwarded yourhost.example.com to 192.168.1.1 Mon Mar 14 18:45:31 2016 daemon.info dnsmasq[4004]: reply yourhost.example.com is 198.105.244.63 Mon Mar 14 18:45:31 2016 daemon.info dnsmasq[4004]: reply yourhost.example.com is 198.105.254.63 Mon Mar 14 18:45:31 2016 daemon.info dnsmasq[4004]: query[AAAA] yourhost.example.com from 127.0.0.1 Mon Mar 14 18:45:31 2016 daemon.info dnsmasq[4004]: forwarded yourhost.example.com to 192.168.1.1 Mon Mar 14 18:45:36 2016 daemon.info dnsmasq[4004]: query[A] yourhost.example.com from 127.0.0.1 Mon Mar 14 18:45:36 2016 daemon.info dnsmasq[4004]: cached yourhost.example.com is 198.105.254.63 Mon Mar 14 18:45:36 2016 daemon.info dnsmasq[4004]: cached yourhost.example.com is 198.105.244.63 Mon Mar 14 18:45:36 2016 daemon.info dnsmasq[4004]: query[AAAA] yourhost.example.com from 127.0.0.1 Mon Mar 14 18:45:36 2016 daemon.info dnsmasq[4004]: forwarded yourhost.example.com to 192.168.1.1 Mon Mar 14 18:45:37 2016 daemon.info dnsmasq[4004]: query[A] osiprod-ncus01-odcsm.cloudapp.net from 10.10.10.223 Mon Mar 14 18:45:37 2016 daemon.info dnsmasq[4004]: forwarded osiprod-ncus01-odcsm.cloudapp.net to 192.168.1.1 Mon Mar 14 18:45:37 2016 daemon.info dnsmasq[4004]: reply osiprod-ncus01-odcsm.cloudapp.net is 23.96.219.115 Mon Mar 14 18:45:38 2016 daemon.info dnsmasq[4004]: query[A] a1441.g4.akamai.net from 10.10.10.223 Mon Mar 14 18:45:38 2016 daemon.info dnsmasq[4004]: forwarded a1441.g4.akamai.net to 192.168.1.1 Mon Mar 14 18:45:38 2016 daemon.info dnsmasq[4004]: reply a1441.g4.akamai.net is 23.77.232.155 Mon Mar 14 18:45:38 2016 daemon.info dnsmasq[4004]: reply a1441.g4.akamai.net is 23.77.232.170 Mon Mar 14 18:45:41 2016 daemon.info dnsmasq[4004]: query[A] yourhost.example.com from 127.0.0.1 Mon Mar 14 18:45:41 2016 daemon.info dnsmasq[4004]: forwarded yourhost.example.com to 192.168.1.1 Mon Mar 14 18:45:41 2016 daemon.info dnsmasq[4004]: reply yourhost.example.com is 198.105.244.63 Mon Mar 14 18:45:41 2016 daemon.info dnsmasq[4004]: reply yourhost.example.com is 198.105.254.63 Mon Mar 14 18:45:41 2016 daemon.info dnsmasq[4004]: query[AAAA] yourhost.example.com from 127.0.0.1 Mon Mar 14 18:45:41 2016 daemon.info dnsmasq[4004]: forwarded yourhost.example.com to 192.168.1.1 Mon Mar 14 18:45:46 2016 daemon.info dnsmasq[4004]: query[AAAA] 4-courier.push.apple.com from 10.10.10.223 Mon Mar 14 18:45:46 2016 daemon.info dnsmasq[4004]: forwarded 4-courier.push.apple.com to 192.168.1.1 Mon Mar 14 18:45:46 2016 daemon.info dnsmasq[4004]: query[A] 4-courier.push.apple.com from 10.10.10.223 Mon Mar 14 18:45:46 2016 daemon.info dnsmasq[4004]: forwarded 4-courier.push.apple.com to 192.168.1.1 Mon Mar 14 18:45:46 2016 daemon.info dnsmasq[4004]: reply 4-courier.push.apple.com is Mon Mar 14 18:45:46 2016 daemon.info dnsmasq[4004]: reply 4.courier-push-apple.com.akadns.net is Mon Mar 14 18:45:46 2016 daemon.info dnsmasq[4004]: reply us-courier.push-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 18:45:46 2016 daemon.info dnsmasq[4004]: reply 4-courier.push.apple.com is Mon Mar 14 18:45:46 2016 daemon.info dnsmasq[4004]: reply 4.courier-push-apple.com.akadns.net is Mon Mar 14 18:45:46 2016 daemon.info dnsmasq[4004]: reply us-courier.push-apple.com.akadns.net is 17.143.163.147 Mon Mar 14 18:45:46 2016 daemon.info dnsmasq[4004]: reply us-courier.push-apple.com.akadns.net is 17.143.162.159 Mon Mar 14 18:45:46 2016 daemon.info dnsmasq[4004]: reply us-courier.push-apple.com.akadns.net is 17.143.160.86 Mon Mar 14 18:45:46 2016 daemon.info dnsmasq[4004]: reply us-courier.push-apple.com.akadns.net is 17.143.161.81 Mon Mar 14 18:45:46 2016 daemon.info dnsmasq[4004]: reply us-courier.push-apple.com.akadns.net is 17.143.161.228 Mon Mar 14 18:45:46 2016 daemon.info dnsmasq[4004]: reply us-courier.push-apple.com.akadns.net is 17.143.163.34 Mon Mar 14 18:45:46 2016 daemon.info dnsmasq[4004]: reply us-courier.push-apple.com.akadns.net is 17.143.162.148 Mon Mar 14 18:45:46 2016 daemon.info dnsmasq[4004]: reply us-courier.push-apple.com.akadns.net is 17.143.162.31 Mon Mar 14 18:45:46 2016 daemon.info dnsmasq[4004]: query[AAAA] us-courier.push-apple.com.akadns.net from 10.10.10.223 Mon Mar 14 18:45:46 2016 daemon.info dnsmasq[4004]: cached us-courier.push-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 18:45:46 2016 daemon.info dnsmasq[4004]: query[A] us-courier.push-apple.com.akadns.net from 10.10.10.223 Mon Mar 14 18:45:46 2016 daemon.info dnsmasq[4004]: cached us-courier.push-apple.com.akadns.net is 17.143.162.31 Mon Mar 14 18:45:46 2016 daemon.info dnsmasq[4004]: cached us-courier.push-apple.com.akadns.net is 17.143.162.148 Mon Mar 14 18:45:46 2016 daemon.info dnsmasq[4004]: cached us-courier.push-apple.com.akadns.net is 17.143.163.34 Mon Mar 14 18:45:46 2016 daemon.info dnsmasq[4004]: cached us-courier.push-apple.com.akadns.net is 17.143.161.228 Mon Mar 14 18:45:46 2016 daemon.info dnsmasq[4004]: cached us-courier.push-apple.com.akadns.net is 17.143.161.81 Mon Mar 14 18:45:46 2016 daemon.info dnsmasq[4004]: cached us-courier.push-apple.com.akadns.net is 17.143.160.86 Mon Mar 14 18:45:46 2016 daemon.info dnsmasq[4004]: cached us-courier.push-apple.com.akadns.net is 17.143.162.159 Mon Mar 14 18:45:46 2016 daemon.info dnsmasq[4004]: cached us-courier.push-apple.com.akadns.net is 17.143.163.147 Mon Mar 14 18:45:48 2016 daemon.info dnsmasq[4004]: query[A] pki.google.com from 10.10.10.228 Mon Mar 14 18:45:48 2016 daemon.info dnsmasq[4004]: forwarded pki.google.com to 192.168.1.1 Mon Mar 14 18:45:48 2016 daemon.info dnsmasq[4004]: query[AAAA] pki.google.com from 10.10.10.228 Mon Mar 14 18:45:48 2016 daemon.info dnsmasq[4004]: forwarded pki.google.com to 192.168.1.1 Mon Mar 14 18:45:48 2016 daemon.info dnsmasq[4004]: query[A] pki.google.com from 10.10.10.229 Mon Mar 14 18:45:48 2016 daemon.info dnsmasq[4004]: forwarded pki.google.com to 192.168.1.1 Mon Mar 14 18:45:48 2016 daemon.info dnsmasq[4004]: query[AAAA] pki.google.com from 10.10.10.229 Mon Mar 14 18:45:48 2016 daemon.info dnsmasq[4004]: forwarded pki.google.com to 192.168.1.1 Mon Mar 14 18:45:48 2016 daemon.info dnsmasq[4004]: reply pki.google.com is Mon Mar 14 18:45:48 2016 daemon.info dnsmasq[4004]: reply www3.l.google.com is 216.58.216.238 Mon Mar 14 18:45:48 2016 daemon.info dnsmasq[4004]: reply pki.google.com is Mon Mar 14 18:45:48 2016 daemon.info dnsmasq[4004]: reply www3.l.google.com is 216.58.216.238 Mon Mar 14 18:45:48 2016 daemon.info dnsmasq[4004]: reply pki.google.com is Mon Mar 14 18:45:48 2016 daemon.info dnsmasq[4004]: reply www3.l.google.com is 2607:f8b0:4009:809::200e Mon Mar 14 18:45:48 2016 daemon.info dnsmasq[4004]: reply pki.google.com is Mon Mar 14 18:45:48 2016 daemon.info dnsmasq[4004]: reply www3.l.google.com is 2607:f8b0:4009:809::200e Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: [ Port Based Pattern Matching Memory ] Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: +- [ Aho-Corasick Summary ] ------------------------------------- Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: | Storage Format : Full-Q Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: | Finite Automaton : DFA Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: | Alphabet Size : 256 Chars Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: | Sizeof State : Variable (1,2,4 bytes) Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: | Instances : 382 Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: | 1 byte states : 286 Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: | 2 byte states : 96 Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: | 4 byte states : 0 Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: | Characters : 248692 Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: | States : 188352 Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: | Transitions : 9181587 Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: | State Density : 19.0% Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: | Patterns : 21541 Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: | Match States : 17872 Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: | Memory (MB) : 96.51 Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: | Patterns : 2.12 Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: | Match Lists : 3.86 Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: | DFA Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: | 1 byte states : 3.90 Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: | 2 byte states : 86.43 Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: | 4 byte states : 0.00 Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: +---------------------------------------------------------------- Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: [ Number of patterns truncated to 20 bytes: 3287 ] Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: nfq DAQ configured to inline. Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: Initializing daemon mode Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: Daemon initialized, signaled parent pid: 1 Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: Reload thread starting... Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: Reload thread started, thread 0xfff112f210 (4649) Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: Checking PID path... Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: PID path stat checked out ok, PID path set to /var/run/ Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: Writing PID "3491" to file "/var/run//snort_.pid" Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: --== Initialization Complete ==-- Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: ,,_ -*> Snort! <*- Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: o" )~ Version 2.9.7.2 GRE (Build 177) Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: '''' By Martin Roesch & The Snort Team: http://www.snort.org/contact#team Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: Copyright (C) 2014 Cisco and/or its affiliates. All rights reserved. Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: Copyright (C) 1998-2013 Sourcefire, Inc., et al. Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: Using libpcap version 1.5.3 Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: Using PCRE version: 8.36 2014-09-26 Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: Using ZLIB version: 1.2.8 Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: Rules Engine: SF_SNORT_DETECTION_ENGINE Version 2.4 Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: Preprocessor Object: SF_GTP Version 1.1 Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: Preprocessor Object: SF_SSH Version 1.1 Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: Preprocessor Object: SF_MODBUS Version 1.1 Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: Preprocessor Object: SF_REPUTATION Version 1.1 Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: Preprocessor Object: SF_DNS Version 1.1 Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: Preprocessor Object: SF_DCERPC2 Version 1.0 Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: Preprocessor Object: SF_IMAP Version 1.0 Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: Preprocessor Object: SF_SDF Version 1.1 Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: Preprocessor Object: SF_POP Version 1.0 Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: Preprocessor Object: SF_SMTP Version 1.1 Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: Preprocessor Object: SF_FTPTELNET Version 1.2 Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: Preprocessor Object: SF_SIP Version 1.1 Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: Preprocessor Object: SF_DNP3 Version 1.1 Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: Preprocessor Object: SF_SSLPP Version 1.1 Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: Commencing packet processing (pid=3491) Mon Mar 14 18:45:49 2016 daemon.notice snort[3491]: Decoding Raw IP4 Mon Mar 14 18:45:51 2016 daemon.info dnsmasq[4004]: query[A] BN3SCH020011855.wns.windows.com from 10.10.10.228 Mon Mar 14 18:45:51 2016 daemon.info dnsmasq[4004]: forwarded BN3SCH020011855.wns.windows.com to 192.168.1.1 Mon Mar 14 18:45:51 2016 daemon.info dnsmasq[4004]: query[AAAA] BN3SCH020011855.wns.windows.com from 10.10.10.228 Mon Mar 14 18:45:51 2016 daemon.info dnsmasq[4004]: forwarded BN3SCH020011855.wns.windows.com to 192.168.1.1 Mon Mar 14 18:45:51 2016 daemon.info dnsmasq[4004]: query[A] BN3SCH020011855.wns.windows.com from 10.10.10.229 Mon Mar 14 18:45:51 2016 daemon.info dnsmasq[4004]: forwarded BN3SCH020011855.wns.windows.com to 192.168.1.1 Mon Mar 14 18:45:51 2016 daemon.info dnsmasq[4004]: query[AAAA] BN3SCH020011855.wns.windows.com from 10.10.10.229 Mon Mar 14 18:45:51 2016 daemon.info dnsmasq[4004]: forwarded BN3SCH020011855.wns.windows.com to 192.168.1.1 Mon Mar 14 18:45:51 2016 daemon.info dnsmasq[4004]: reply BN3SCH020011855.wns.windows.com is 65.52.108.198 Mon Mar 14 18:45:51 2016 daemon.info dnsmasq[4004]: reply BN3SCH020011855.wns.windows.com is 65.52.108.198 Mon Mar 14 18:45:53 2016 daemon.info dnsmasq[4004]: query[A] beacons2.gvt2.com from 10.10.10.228 Mon Mar 14 18:45:53 2016 daemon.info dnsmasq[4004]: forwarded beacons2.gvt2.com to 192.168.1.1 Mon Mar 14 18:45:53 2016 daemon.info dnsmasq[4004]: query[A] beacons2.gvt2.com from 10.10.10.229 Mon Mar 14 18:45:53 2016 daemon.info dnsmasq[4004]: forwarded beacons2.gvt2.com to 192.168.1.1 Mon Mar 14 18:45:53 2016 daemon.info dnsmasq[4004]: query[A] s-usc1c-nss-124.firebaseio.com from 10.10.10.228 Mon Mar 14 18:45:53 2016 daemon.info dnsmasq[4004]: forwarded s-usc1c-nss-124.firebaseio.com to 192.168.1.1 Mon Mar 14 18:45:53 2016 daemon.info dnsmasq[4004]: query[A] s-usc1c-nss-124.firebaseio.com from 10.10.10.229 Mon Mar 14 18:45:53 2016 daemon.info dnsmasq[4004]: forwarded s-usc1c-nss-124.firebaseio.com to 192.168.1.1 Mon Mar 14 18:45:53 2016 daemon.info dnsmasq[4004]: reply beacons2.gvt2.com is 216.58.197.227 Mon Mar 14 18:45:53 2016 daemon.info dnsmasq[4004]: reply beacons2.gvt2.com is 216.58.197.227 Mon Mar 14 18:45:53 2016 daemon.info dnsmasq[4004]: reply s-usc1c-nss-124.firebaseio.com is 130.211.187.108 Mon Mar 14 18:45:53 2016 daemon.info dnsmasq[4004]: reply s-usc1c-nss-124.firebaseio.com is 130.211.187.108 Mon Mar 14 18:45:55 2016 daemon.info dnsmasq[4004]: query[A] clients6.google.com from 10.10.10.223 Mon Mar 14 18:45:55 2016 daemon.info dnsmasq[4004]: forwarded clients6.google.com to 192.168.1.1 Mon Mar 14 18:45:55 2016 daemon.info dnsmasq[4004]: query[AAAA] clients6.google.com from 10.10.10.223 Mon Mar 14 18:45:55 2016 daemon.info dnsmasq[4004]: forwarded clients6.google.com to 192.168.1.1 Mon Mar 14 18:45:55 2016 daemon.info dnsmasq[4004]: reply clients6.google.com is Mon Mar 14 18:45:55 2016 daemon.info dnsmasq[4004]: reply clients.l.google.com is 216.58.216.238 Mon Mar 14 18:45:55 2016 daemon.info dnsmasq[4004]: reply clients6.google.com is Mon Mar 14 18:45:55 2016 daemon.info dnsmasq[4004]: reply clients.l.google.com is 2607:f8b0:4009:809::200e Mon Mar 14 18:45:56 2016 daemon.info dnsmasq[4004]: query[A] mail.google.com from 10.10.10.228 Mon Mar 14 18:45:56 2016 daemon.info dnsmasq[4004]: cached mail.google.com is Mon Mar 14 18:45:56 2016 daemon.info dnsmasq[4004]: forwarded mail.google.com to 192.168.1.1 Mon Mar 14 18:45:56 2016 daemon.info dnsmasq[4004]: query[A] mail.google.com from 10.10.10.229 Mon Mar 14 18:45:56 2016 daemon.info dnsmasq[4004]: forwarded mail.google.com to 192.168.1.1 Mon Mar 14 18:45:56 2016 daemon.info dnsmasq[4004]: reply mail.google.com is Mon Mar 14 18:45:56 2016 daemon.info dnsmasq[4004]: reply googlemail.l.google.com is 216.58.216.229 Mon Mar 14 18:45:56 2016 daemon.info dnsmasq[4004]: reply mail.google.com is Mon Mar 14 18:45:56 2016 daemon.info dnsmasq[4004]: reply googlemail.l.google.com is 216.58.216.229 Mon Mar 14 18:45:56 2016 daemon.info dnsmasq[4004]: query[AAAA] e6858.dscc.akamaiedge.net from 10.10.10.211 Mon Mar 14 18:45:56 2016 daemon.info dnsmasq[4004]: forwarded e6858.dscc.akamaiedge.net to 192.168.1.1 Mon Mar 14 18:45:56 2016 daemon.info dnsmasq[4004]: query[A] e6858.dscc.akamaiedge.net from 10.10.10.211 Mon Mar 14 18:45:56 2016 daemon.info dnsmasq[4004]: forwarded e6858.dscc.akamaiedge.net to 192.168.1.1 Mon Mar 14 18:45:56 2016 daemon.info dnsmasq[4004]: reply e6858.dscc.akamaiedge.net is 23.12.245.148 Mon Mar 14 18:45:56 2016 daemon.info dnsmasq[4004]: reply e6858.dscc.akamaiedge.net is 2600:1404:e:18d::1aca Mon Mar 14 18:45:56 2016 daemon.info dnsmasq[4004]: reply e6858.dscc.akamaiedge.net is 2600:1404:e:182::1aca Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: query[AAAA] api.smoot-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: forwarded api.smoot-apple.com.akadns.net to 192.168.1.1 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: query[A] api.smoot-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: forwarded api.smoot-apple.com.akadns.net to 192.168.1.1 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: query[AAAA] r3.sn-81fpgxaxnn-vgqe.googlevideo.com from 10.10.10.211 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: forwarded r3.sn-81fpgxaxnn-vgqe.googlevideo.com to 192.168.1.1 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: query[A] r3.sn-81fpgxaxnn-vgqe.googlevideo.com from 10.10.10.211 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: forwarded r3.sn-81fpgxaxnn-vgqe.googlevideo.com to 192.168.1.1 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: query[AAAA] guzzoni.apple.com from 10.10.10.211 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: forwarded guzzoni.apple.com to 192.168.1.1 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: query[A] guzzoni.apple.com from 10.10.10.211 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: forwarded guzzoni.apple.com to 192.168.1.1 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: query[AAAA] apple.com from 10.10.10.211 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: forwarded apple.com to 192.168.1.1 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: query[A] apple.com from 10.10.10.211 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: forwarded apple.com to 192.168.1.1 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: query[AAAA] p44-keyvalueservice-current.edge.icloud.apple-dns.net from 10.10.10.211 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: forwarded p44-keyvalueservice-current.edge.icloud.apple-dns.net to 192.168.1.1 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: reply r3.sn-81fpgxaxnn-vgqe.googlevideo.com is 2600:805:110::e Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: query[A] p44-keyvalueservice-current.edge.icloud.apple-dns.net from 10.10.10.211 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: forwarded p44-keyvalueservice-current.edge.icloud.apple-dns.net to 192.168.1.1 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: reply apple.com is 17.172.224.47 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: reply apple.com is 17.178.96.59 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: reply apple.com is 17.142.160.59 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: reply api.smoot-apple.com.akadns.net is 17.249.73.246 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: reply r3.sn-81fpgxaxnn-vgqe.googlevideo.com is 63.84.3.14 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: reply guzzoni.apple.com is Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: reply origin.guzzoni-apple.com.akadns.net is Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: reply st14p02sa.guzzoni-apple.com.akadns.net is 17.174.2.5 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: reply p44-keyvalueservice-current.edge.icloud.apple-dns.net is 17.248.139.46 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: reply guzzoni.apple.com is Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: reply origin.guzzoni-apple.com.akadns.net is Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: reply st14p02sa.guzzoni-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: query[AAAA] osiprod-ncus01-odcsm.cloudapp.net from 10.10.10.223 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: forwarded osiprod-ncus01-odcsm.cloudapp.net to 192.168.1.1 Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: [ Port Based Pattern Matching Memory ] Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: +- [ Aho-Corasick Summary ] ------------------------------------- Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: | Storage Format : Full-Q Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: | Finite Automaton : DFA Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: | Alphabet Size : 256 Chars Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: | Sizeof State : Variable (1,2,4 bytes) Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: | Instances : 382 Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: | 1 byte states : 286 Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: | 2 byte states : 96 Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: | 4 byte states : 0 Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: | Characters : 248692 Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: | States : 188352 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: query[AAAA] st14p02sa.guzzoni-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: cached st14p02sa.guzzoni-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: | Transitions : 9181587 Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: | State Density : 19.0% Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: | Patterns : 21541 Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: | Match States : 17872 Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: | Memory (MB) : 96.51 Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: | Patterns : 2.12 Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: | Match Lists : 3.86 Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: | DFA Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: | 1 byte states : 3.90 Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: | 2 byte states : 86.43 Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: | 4 byte states : 0.00 Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: +---------------------------------------------------------------- Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: [ Number of patterns truncated to 20 bytes: 3287 ] Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: nfq DAQ configured to inline. Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: Initializing daemon mode Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: Daemon initialized, signaled parent pid: 1 Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: Reload thread starting... Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: Reload thread started, thread 0xfff3a4f210 (4814) Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: Checking PID path... Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: PID path stat checked out ok, PID path set to /var/snort/ Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: Writing PID "3511" to file "/var/snort//snort_.pid" Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: --== Initialization Complete ==-- Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: ,,_ -*> Snort! <*- Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: o" )~ Version 2.9.7.2 GRE (Build 177) Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: '''' By Martin Roesch & The Snort Team: http://www.snort.org/contact#team Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: Copyright (C) 2014 Cisco and/or its affiliates. All rights reserved. Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: Copyright (C) 1998-2013 Sourcefire, Inc., et al. Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: Using libpcap version 1.5.3 Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: Using PCRE version: 8.36 2014-09-26 Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: Using ZLIB version: 1.2.8 Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: Rules Engine: SF_SNORT_DETECTION_ENGINE Version 2.4 Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: Preprocessor Object: SF_GTP Version 1.1 Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: Preprocessor Object: SF_SSH Version 1.1 Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: Preprocessor Object: SF_MODBUS Version 1.1 Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: Preprocessor Object: SF_REPUTATION Version 1.1 Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: Preprocessor Object: SF_DNS Version 1.1 Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: Preprocessor Object: SF_DCERPC2 Version 1.0 Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: Preprocessor Object: SF_IMAP Version 1.0 Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: Preprocessor Object: SF_SDF Version 1.1 Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: Preprocessor Object: SF_POP Version 1.0 Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: Preprocessor Object: SF_SMTP Version 1.1 Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: Preprocessor Object: SF_FTPTELNET Version 1.2 Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: Preprocessor Object: SF_SIP Version 1.1 Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: Preprocessor Object: SF_DNP3 Version 1.1 Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: Preprocessor Object: SF_SSLPP Version 1.1 Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: Commencing packet processing (pid=3511) Mon Mar 14 18:45:57 2016 daemon.notice snort[3511]: Decoding Raw IP4 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: query[A] crl.microsoft.com from 10.10.10.228 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: forwarded crl.microsoft.com to 192.168.1.1 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: query[AAAA] crl.microsoft.com from 10.10.10.228 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: forwarded crl.microsoft.com to 192.168.1.1 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: query[A] crl.microsoft.com from 10.10.10.229 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: forwarded crl.microsoft.com to 192.168.1.1 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: query[AAAA] crl.microsoft.com from 10.10.10.229 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: forwarded crl.microsoft.com to 192.168.1.1 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: reply crl.microsoft.com is Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: reply crl.www.ms.akadns.net is Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: reply a1363.dscg.akamai.net is 23.77.232.155 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: reply a1363.dscg.akamai.net is 23.77.232.169 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: reply crl.microsoft.com is Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: reply crl.www.ms.akadns.net is Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: reply a1363.dscg.akamai.net is 2600:1404:e::174d:e861 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: reply a1363.dscg.akamai.net is 2600:1404:e::174d:e923 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: reply crl.microsoft.com is Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: reply crl.www.ms.akadns.net is Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: reply a1363.dscg.akamai.net is 23.77.232.155 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: reply a1363.dscg.akamai.net is 23.77.232.169 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: reply crl.microsoft.com is Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: reply crl.www.ms.akadns.net is Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: reply a1363.dscg.akamai.net is 2600:1404:e::174d:e861 Mon Mar 14 18:45:57 2016 daemon.info dnsmasq[4004]: reply a1363.dscg.akamai.net is 2600:1404:e::174d:e923 Mon Mar 14 18:45:57 2016 daemon.err snort[3511]: *** Caught Term-Signal Mon Mar 14 18:45:57 2016 daemon.err snort[3491]: *** Caught Term-Signal Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: =============================================================================== Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Run time for packet processing was 9.12039 seconds Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Snort processed 206 packets. Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Snort ran for 0 days 0 hours 0 minutes 9 seconds Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Pkts/sec: 22 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: =============================================================================== Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Memory usage summary: Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Total non-mmapped bytes (arena): 144271392 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Bytes in mapped regions (hblkhd): 18939904 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Total allocated space (uordblks): 136387104 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Total free space (fordblks): 7884288 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Topmost releasable block (keepcost): 3840 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: =============================================================================== Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Packet I/O Totals: Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Received: 206 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Analyzed: 206 (100.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Dropped: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Filtered: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Outstanding: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Injected: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: =============================================================================== Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Breakdown by protocol (includes rebuilt packets): Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Eth: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: VLAN: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: IP4: 211 (100.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Frag: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: ICMP: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: UDP: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: TCP: 211 (100.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: IP6: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: IP6 Ext: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: IP6 Opts: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Frag6: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: ICMP6: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: UDP6: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: TCP6: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Teredo: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: ICMP-IP: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: IP4/IP4: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: IP4/IP6: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: IP6/IP4: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: IP6/IP6: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: GRE: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: GRE Eth: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: GRE VLAN: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: GRE IP4: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: GRE IP6: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: GRE IP6 Ext: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: GRE PPTP: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: GRE ARP: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: GRE IPX: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: GRE Loop: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: MPLS: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: ARP: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: IPX: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Eth Loop: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Eth Disc: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: IP4 Disc: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: IP6 Disc: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: TCP Disc: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: UDP Disc: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: ICMP Disc: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: All Discard: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Other: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Bad Chk Sum: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Bad TTL: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: S5 G 1: 2 ( 0.948%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: S5 G 2: 3 ( 1.422%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Total: 211 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: =============================================================================== Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Action Stats: Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Alerts: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Logged: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Passed: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Limits: Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Match: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Queue: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Log: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Event: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Alert: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Verdicts: Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Allow: 109 ( 52.913%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Block: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Replace: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Whitelist: 97 ( 47.087%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Blacklist: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Ignore: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Retry: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: =============================================================================== Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Normalizer statistics: Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: ip4::trim: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Would ip4::trim: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: ip4::tos: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Would ip4::tos: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: ip4::df: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Would ip4::df: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: ip4::rf: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Would ip4::rf: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: ip4::ttl: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Would ip4::ttl: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: ip4::opts: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Would ip4::opts: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: icmp4::echo: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Would icmp4::echo: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: ip6::ttl: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Would ip6::ttl: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: ip6::opts: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Would ip6::opts: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: icmp6::echo: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Would icmp6::echo: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: tcp::syn_opt: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Would tcp::syn_opt: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: tcp::opt: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Would tcp::opt: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: tcp::pad: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Would tcp::pad: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: tcp::rsv: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Would tcp::rsv: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: tcp::ns: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Would tcp::ns: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: tcp::urp: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Would tcp::urp: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: tcp::ecn_pkt: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Would tcp::ecn_pkt: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: tcp::ts_ecr: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Would tcp::ts_ecr: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: tcp::req_urg: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Would tcp::req_urg: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: tcp::req_pay: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Would tcp::req_pay: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: tcp::req_urp: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Would tcp::req_urp: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: tcp::ecn_ssn: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Would tcp::ecn_ssn: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: tcp::ts_nop: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Would tcp::ts_nop: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: tcp::ips_data: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Would tcp::ips_data: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: tcp::block: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Would tcp::block: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: tcp::trim_syn: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Would tcp::trim_syn: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: tcp::trim_rst: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Would tcp::trim_rst: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: tcp::trim_win: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Would tcp::trim_win: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: tcp::trim_mss: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Would tcp::trim_mss: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: =============================================================================== Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Frag3 statistics: Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Total Fragments: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Frags Reassembled: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Discards: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Memory Faults: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Timeouts: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Overlaps: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Anomalies: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Alerts: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Drops: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: FragTrackers Added: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: FragTrackers Dumped: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: FragTrackers Auto Freed: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Frag Nodes Inserted: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Frag Nodes Deleted: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: =============================================================================== Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: =============================================================================== Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Stream statistics: Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Total sessions: 17 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: TCP sessions: 17 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: UDP sessions: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: ICMP sessions: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: IP sessions: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: TCP Prunes: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: UDP Prunes: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: ICMP Prunes: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: IP Prunes: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: TCP StreamTrackers Created: 17 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: TCP StreamTrackers Deleted: 17 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: TCP Timeouts: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: TCP Overlaps: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: TCP Segments Queued: 56 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: TCP Segments Released: 56 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: TCP Rebuilt Packets: 39 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: TCP Segments Used: 48 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: TCP Discards: 1 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: TCP Gaps: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: UDP Sessions Created: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: UDP Sessions Deleted: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: UDP Timeouts: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: UDP Discards: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Events: 1 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Internal Events: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: TCP Port Filter Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Filtered: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Inspected: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Tracked: 206 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: UDP Port Filter Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Filtered: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Inspected: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Tracked: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: =============================================================================== Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: HTTP Inspect - encodings (Note: stream-reassembled packets included): Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: POST methods: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: GET methods: 1 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: HTTP Request Headers extracted: 1 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: HTTP Request Cookies extracted: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Post parameters extracted: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: HTTP response Headers extracted: 2 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: HTTP Response Cookies extracted: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Unicode: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Double unicode: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Non-ASCII representable: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Directory traversals: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Extra slashes ("//"): 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Self-referencing paths ("./"): 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: HTTP Response Gzip packets extracted: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Gzip Compressed Data Processed: n/a Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Gzip Decompressed Data Processed: n/a Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Total packets processed: 6 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: =============================================================================== Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: dcerpc2 Preprocessor Statistics Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Total sessions: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: =============================================================================== Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: SSL Preprocessor: Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: SSL packets decoded: 89 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Client Hello: 12 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Server Hello: 12 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Certificate: 12 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Server Done: 32 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Client Key Exchange: 10 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Server Key Exchange: 8 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Change Cipher: 24 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Finished: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Client Application: 17 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Server Application: 6 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Alert: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Unrecognized records: 25 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Completed handshakes: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Bad handshakes: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Sessions ignored: 5 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Detection disabled: 1 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: =============================================================================== Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: SIP Preprocessor Statistics Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: Total sessions: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3491]: =============================================================================== Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: =============================================================================== Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Run time for packet processing was 1.2637 seconds Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Snort processed 12 packets. Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Snort ran for 0 days 0 hours 0 minutes 1 seconds Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Pkts/sec: 12 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: =============================================================================== Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Memory usage summary: Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Total non-mmapped bytes (arena): 144402464 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Bytes in mapped regions (hblkhd): 18939904 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Total allocated space (uordblks): 136388496 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Total free space (fordblks): 8013968 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Topmost releasable block (keepcost): 133376 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: =============================================================================== Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Packet I/O Totals: Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Received: 12 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Analyzed: 12 (100.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Dropped: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Filtered: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Outstanding: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Injected: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: =============================================================================== Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Breakdown by protocol (includes rebuilt packets): Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Eth: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: VLAN: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: IP4: 14 (100.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Frag: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: ICMP: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: UDP: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: TCP: 14 (100.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: IP6: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: IP6 Ext: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: IP6 Opts: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Frag6: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: ICMP6: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: UDP6: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: TCP6: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Teredo: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: ICMP-IP: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: IP4/IP4: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: IP4/IP6: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: IP6/IP4: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: IP6/IP6: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: GRE: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: GRE Eth: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: GRE VLAN: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: GRE IP4: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: GRE IP6: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: GRE IP6 Ext: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: GRE PPTP: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: GRE ARP: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: GRE IPX: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: GRE Loop: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: MPLS: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: ARP: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: IPX: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Eth Loop: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Eth Disc: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: IP4 Disc: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: IP6 Disc: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: TCP Disc: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: UDP Disc: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: ICMP Disc: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: All Discard: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Other: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Bad Chk Sum: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Bad TTL: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: S5 G 1: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: S5 G 2: 2 ( 14.286%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Total: 14 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: =============================================================================== Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Action Stats: Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Alerts: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Logged: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Passed: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Limits: Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Match: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Queue: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Log: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Event: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Alert: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Verdicts: Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Allow: 12 (100.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Block: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Replace: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Whitelist: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Blacklist: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Ignore: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Retry: 0 ( 0.000%) Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: =============================================================================== Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Normalizer statistics: Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: ip4::trim: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Would ip4::trim: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: ip4::tos: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Would ip4::tos: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: ip4::df: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Would ip4::df: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: ip4::rf: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Would ip4::rf: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: ip4::ttl: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Would ip4::ttl: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: ip4::opts: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Would ip4::opts: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: icmp4::echo: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Would icmp4::echo: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: ip6::ttl: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Would ip6::ttl: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: ip6::opts: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Would ip6::opts: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: icmp6::echo: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Would icmp6::echo: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: tcp::syn_opt: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Would tcp::syn_opt: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: tcp::opt: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Would tcp::opt: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: tcp::pad: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Would tcp::pad: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: tcp::rsv: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Would tcp::rsv: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: tcp::ns: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Would tcp::ns: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: tcp::urp: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Would tcp::urp: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: tcp::ecn_pkt: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Would tcp::ecn_pkt: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: tcp::ts_ecr: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Would tcp::ts_ecr: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: tcp::req_urg: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Would tcp::req_urg: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: tcp::req_pay: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Would tcp::req_pay: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: tcp::req_urp: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Would tcp::req_urp: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: tcp::ecn_ssn: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Would tcp::ecn_ssn: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: tcp::ts_nop: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Would tcp::ts_nop: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: tcp::ips_data: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Would tcp::ips_data: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: tcp::block: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Would tcp::block: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: tcp::trim_syn: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Would tcp::trim_syn: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: tcp::trim_rst: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Would tcp::trim_rst: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: tcp::trim_win: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Would tcp::trim_win: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: tcp::trim_mss: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Would tcp::trim_mss: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: =============================================================================== Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Frag3 statistics: Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Total Fragments: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Frags Reassembled: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Discards: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Memory Faults: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Timeouts: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Overlaps: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Anomalies: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Alerts: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Drops: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: FragTrackers Added: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: FragTrackers Dumped: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: FragTrackers Auto Freed: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Frag Nodes Inserted: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Frag Nodes Deleted: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: =============================================================================== Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: =============================================================================== Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Stream statistics: Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Total sessions: 2 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: TCP sessions: 2 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: UDP sessions: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: ICMP sessions: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: IP sessions: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: TCP Prunes: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: UDP Prunes: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: ICMP Prunes: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: IP Prunes: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: TCP StreamTrackers Created: 2 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: TCP StreamTrackers Deleted: 2 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: TCP Timeouts: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: TCP Overlaps: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: TCP Segments Queued: 6 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: TCP Segments Released: 6 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: TCP Rebuilt Packets: 6 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: TCP Segments Used: 4 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: TCP Discards: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: TCP Gaps: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: UDP Sessions Created: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: UDP Sessions Deleted: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: UDP Timeouts: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: UDP Discards: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Events: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Internal Events: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: TCP Port Filter Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Filtered: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Inspected: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Tracked: 12 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: UDP Port Filter Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Filtered: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Inspected: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Tracked: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: =============================================================================== Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: HTTP Inspect - encodings (Note: stream-reassembled packets included): Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: POST methods: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: GET methods: 4 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: HTTP Request Headers extracted: 4 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: HTTP Request Cookies extracted: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Post parameters extracted: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: HTTP response Headers extracted: 2 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: HTTP Response Cookies extracted: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Unicode: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Double unicode: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Non-ASCII representable: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Directory traversals: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Extra slashes ("//"): 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Self-referencing paths ("./"): 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: HTTP Response Gzip packets extracted: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Gzip Compressed Data Processed: n/a Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Gzip Decompressed Data Processed: n/a Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Total packets processed: 12 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: =============================================================================== Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: dcerpc2 Preprocessor Statistics Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Total sessions: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: =============================================================================== Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: =============================================================================== Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: SIP Preprocessor Statistics Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: Total sessions: 0 Mon Mar 14 18:45:58 2016 daemon.notice snort[3511]: =============================================================================== Mon Mar 14 18:45:59 2016 daemon.notice snort[3491]: Snort exiting Mon Mar 14 18:45:59 2016 daemon.notice snort[3511]: Snort exiting Mon Mar 14 18:45:59 2016 daemon.info dnsmasq[4004]: query[A] lh6.googleusercontent.com from 10.10.10.228 Mon Mar 14 18:45:59 2016 daemon.info dnsmasq[4004]: forwarded lh6.googleusercontent.com to 192.168.1.1 Mon Mar 14 18:45:59 2016 daemon.info dnsmasq[4004]: query[A] lh6.googleusercontent.com from 10.10.10.229 Mon Mar 14 18:45:59 2016 daemon.info dnsmasq[4004]: forwarded lh6.googleusercontent.com to 192.168.1.1 Mon Mar 14 18:45:59 2016 daemon.info dnsmasq[4004]: reply lh6.googleusercontent.com is Mon Mar 14 18:45:59 2016 daemon.info dnsmasq[4004]: reply googlehosted.l.googleusercontent.com is 74.125.207.132 Mon Mar 14 18:45:59 2016 daemon.info dnsmasq[4004]: reply lh6.googleusercontent.com is Mon Mar 14 18:45:59 2016 daemon.info dnsmasq[4004]: reply googlehosted.l.googleusercontent.com is 74.125.207.132 Mon Mar 14 18:45:59 2016 daemon.info dnsmasq[4004]: query[A] mail-attachment.googleusercontent.com from 10.10.10.228 Mon Mar 14 18:45:59 2016 daemon.info dnsmasq[4004]: forwarded mail-attachment.googleusercontent.com to 192.168.1.1 Mon Mar 14 18:45:59 2016 daemon.info dnsmasq[4004]: query[A] mail-attachment.googleusercontent.com from 10.10.10.229 Mon Mar 14 18:45:59 2016 daemon.info dnsmasq[4004]: forwarded mail-attachment.googleusercontent.com to 192.168.1.1 Mon Mar 14 18:45:59 2016 daemon.info dnsmasq[4004]: reply mail-attachment.googleusercontent.com is Mon Mar 14 18:45:59 2016 daemon.info dnsmasq[4004]: reply googlehosted.l.googleusercontent.com is 74.125.207.132 Mon Mar 14 18:45:59 2016 daemon.info dnsmasq[4004]: reply mail-attachment.googleusercontent.com is Mon Mar 14 18:45:59 2016 daemon.info dnsmasq[4004]: reply googlehosted.l.googleusercontent.com is 74.125.207.132 Mon Mar 14 18:45:59 2016 daemon.info dnsmasq[4004]: query[A] clients2.google.com from 10.10.10.228 Mon Mar 14 18:45:59 2016 daemon.info dnsmasq[4004]: forwarded clients2.google.com to 192.168.1.1 Mon Mar 14 18:45:59 2016 daemon.info dnsmasq[4004]: query[A] clients2.google.com from 10.10.10.229 Mon Mar 14 18:45:59 2016 daemon.info dnsmasq[4004]: forwarded clients2.google.com to 192.168.1.1 Mon Mar 14 18:45:59 2016 daemon.info dnsmasq[4004]: reply clients2.google.com is Mon Mar 14 18:45:59 2016 daemon.info dnsmasq[4004]: reply clients.l.google.com is 216.58.216.238 Mon Mar 14 18:45:59 2016 daemon.info dnsmasq[4004]: reply clients2.google.com is Mon Mar 14 18:45:59 2016 daemon.info dnsmasq[4004]: reply clients.l.google.com is 216.58.216.238 Mon Mar 14 18:45:59 2016 daemon.info dnsmasq[4004]: query[A] clients5.google.com from 10.10.10.228 Mon Mar 14 18:45:59 2016 daemon.info dnsmasq[4004]: forwarded clients5.google.com to 192.168.1.1 Mon Mar 14 18:45:59 2016 daemon.info dnsmasq[4004]: query[A] clients5.google.com from 10.10.10.229 Mon Mar 14 18:45:59 2016 daemon.info dnsmasq[4004]: forwarded clients5.google.com to 192.168.1.1 Mon Mar 14 18:45:59 2016 daemon.info dnsmasq[4004]: query[A] plus.google.com from 10.10.10.228 Mon Mar 14 18:45:59 2016 daemon.info dnsmasq[4004]: cached plus.google.com is 216.58.216.238 Mon Mar 14 18:45:59 2016 daemon.info dnsmasq[4004]: query[A] plus.google.com from 10.10.10.229 Mon Mar 14 18:45:59 2016 daemon.info dnsmasq[4004]: cached plus.google.com is 216.58.216.238 Mon Mar 14 18:45:59 2016 daemon.info dnsmasq[4004]: reply clients5.google.com is Mon Mar 14 18:45:59 2016 daemon.info dnsmasq[4004]: reply clients.l.google.com is 216.58.216.238 Mon Mar 14 18:45:59 2016 daemon.info dnsmasq[4004]: reply clients5.google.com is Mon Mar 14 18:45:59 2016 daemon.info dnsmasq[4004]: reply clients.l.google.com is 216.58.216.238 Mon Mar 14 18:45:59 2016 daemon.info dnsmasq[4004]: query[A] chatenabled.mail.google.com from 10.10.10.228 Mon Mar 14 18:45:59 2016 daemon.info dnsmasq[4004]: forwarded chatenabled.mail.google.com to 192.168.1.1 Mon Mar 14 18:45:59 2016 daemon.info dnsmasq[4004]: query[A] chatenabled.mail.google.com from 10.10.10.229 Mon Mar 14 18:45:59 2016 daemon.info dnsmasq[4004]: forwarded chatenabled.mail.google.com to 192.168.1.1 Mon Mar 14 18:45:59 2016 daemon.info dnsmasq[4004]: reply chatenabled.mail.google.com is Mon Mar 14 18:45:59 2016 daemon.info dnsmasq[4004]: reply b.googlemail.l.google.com is 216.58.216.231 Mon Mar 14 18:45:59 2016 daemon.info dnsmasq[4004]: reply chatenabled.mail.google.com is Mon Mar 14 18:45:59 2016 daemon.info dnsmasq[4004]: reply b.googlemail.l.google.com is 216.58.216.231 Mon Mar 14 18:46:00 2016 daemon.err uhttpd[3285]: sh: can't kill pid 4845: No such process Mon Mar 14 18:46:00 2016 daemon.info dnsmasq[4004]: query[A] apis.google.com from 10.10.10.228 Mon Mar 14 18:46:00 2016 daemon.info dnsmasq[4004]: forwarded apis.google.com to 192.168.1.1 Mon Mar 14 18:46:00 2016 daemon.info dnsmasq[4004]: query[A] apis.google.com from 10.10.10.229 Mon Mar 14 18:46:00 2016 daemon.info dnsmasq[4004]: forwarded apis.google.com to 192.168.1.1 Mon Mar 14 18:46:00 2016 daemon.info dnsmasq[4004]: reply apis.google.com is Mon Mar 14 18:46:00 2016 daemon.info dnsmasq[4004]: reply plus.l.google.com is 216.58.216.238 Mon Mar 14 18:46:00 2016 daemon.info dnsmasq[4004]: reply apis.google.com is Mon Mar 14 18:46:00 2016 daemon.info dnsmasq[4004]: reply plus.l.google.com is 216.58.216.238 Mon Mar 14 18:46:00 2016 daemon.info dnsmasq[4004]: query[A] clients6.google.com from 10.10.10.228 Mon Mar 14 18:46:00 2016 daemon.info dnsmasq[4004]: cached clients6.google.com is Mon Mar 14 18:46:00 2016 daemon.info dnsmasq[4004]: cached clients.l.google.com is 216.58.216.238 Mon Mar 14 18:46:00 2016 daemon.info dnsmasq[4004]: query[A] clients6.google.com from 10.10.10.229 Mon Mar 14 18:46:00 2016 daemon.info dnsmasq[4004]: cached clients6.google.com is Mon Mar 14 18:46:00 2016 daemon.info dnsmasq[4004]: cached clients.l.google.com is 216.58.216.238 Mon Mar 14 18:46:01 2016 daemon.info dnsmasq[4004]: query[AAAA] outlook.office365.com from 10.10.10.143 Mon Mar 14 18:46:01 2016 daemon.info dnsmasq[4004]: forwarded outlook.office365.com to 192.168.1.1 Mon Mar 14 18:46:01 2016 daemon.info dnsmasq[4004]: query[A] outlook.office365.com from 10.10.10.143 Mon Mar 14 18:46:01 2016 daemon.info dnsmasq[4004]: forwarded outlook.office365.com to 192.168.1.1 Mon Mar 14 18:46:01 2016 daemon.info dnsmasq[4004]: reply outlook.office365.com is Mon Mar 14 18:46:01 2016 daemon.info dnsmasq[4004]: reply lb.geo.office365.com is Mon Mar 14 18:46:01 2016 daemon.info dnsmasq[4004]: reply outlook.office365.com.g.office365.com is Mon Mar 14 18:46:01 2016 daemon.info dnsmasq[4004]: reply outlook-namcentral2.office365.com is 2a01:111:f400:7021::2 Mon Mar 14 18:46:01 2016 daemon.info dnsmasq[4004]: reply outlook-namcentral2.office365.com is 2a01:111:f400:5173::2 Mon Mar 14 18:46:01 2016 daemon.info dnsmasq[4004]: reply outlook-namcentral2.office365.com is 2a01:111:f400:2cd5::2 Mon Mar 14 18:46:01 2016 daemon.info dnsmasq[4004]: reply outlook-namcentral2.office365.com is 2a01:111:f400:2dc5::2 Mon Mar 14 18:46:01 2016 daemon.info dnsmasq[4004]: reply outlook-namcentral2.office365.com is 2a01:111:f400:2cd4::2 Mon Mar 14 18:46:01 2016 daemon.info dnsmasq[4004]: reply outlook-namcentral2.office365.com is 2a01:111:f400:53e3::2 Mon Mar 14 18:46:01 2016 daemon.info dnsmasq[4004]: reply outlook-namcentral2.office365.com is 2a01:111:f400:2d75::2 Mon Mar 14 18:46:01 2016 daemon.info dnsmasq[4004]: reply outlook.office365.com is Mon Mar 14 18:46:01 2016 daemon.info dnsmasq[4004]: reply lb.geo.office365.com is Mon Mar 14 18:46:01 2016 daemon.info dnsmasq[4004]: reply outlook.office365.com.g.office365.com is Mon Mar 14 18:46:01 2016 daemon.info dnsmasq[4004]: reply outlook-namcentral2.office365.com is 40.96.0.114 Mon Mar 14 18:46:01 2016 daemon.info dnsmasq[4004]: reply outlook-namcentral2.office365.com is 132.245.36.50 Mon Mar 14 18:46:01 2016 daemon.info dnsmasq[4004]: reply outlook-namcentral2.office365.com is 132.245.247.210 Mon Mar 14 18:46:01 2016 daemon.info dnsmasq[4004]: reply outlook-namcentral2.office365.com is 132.245.247.194 Mon Mar 14 18:46:01 2016 daemon.info dnsmasq[4004]: reply outlook-namcentral2.office365.com is 132.245.75.98 Mon Mar 14 18:46:01 2016 daemon.info dnsmasq[4004]: reply outlook-namcentral2.office365.com is 132.245.253.114 Mon Mar 14 18:46:01 2016 daemon.info dnsmasq[4004]: reply outlook-namcentral2.office365.com is 132.245.79.194 Mon Mar 14 18:46:01 2016 daemon.info dnsmasq[4004]: query[A] outlook-namcentral2.office365.com from 10.10.10.143 Mon Mar 14 18:46:01 2016 daemon.info dnsmasq[4004]: cached outlook-namcentral2.office365.com is 132.245.79.194 Mon Mar 14 18:46:01 2016 daemon.info dnsmasq[4004]: cached outlook-namcentral2.office365.com is 132.245.253.114 Mon Mar 14 18:46:01 2016 daemon.info dnsmasq[4004]: cached outlook-namcentral2.office365.com is 132.245.75.98 Mon Mar 14 18:46:01 2016 daemon.info dnsmasq[4004]: cached outlook-namcentral2.office365.com is 132.245.247.194 Mon Mar 14 18:46:01 2016 daemon.info dnsmasq[4004]: cached outlook-namcentral2.office365.com is 132.245.247.210 Mon Mar 14 18:46:01 2016 daemon.info dnsmasq[4004]: cached outlook-namcentral2.office365.com is 132.245.36.50 Mon Mar 14 18:46:01 2016 daemon.info dnsmasq[4004]: cached outlook-namcentral2.office365.com is 40.96.0.114 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: query[A] itus.accessinnov.com from 10.10.10.228 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: forwarded itus.accessinnov.com to 192.168.1.1 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: query[A] itus.accessinnov.com from 10.10.10.229 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: forwarded itus.accessinnov.com to 192.168.1.1 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply itus.accessinnov.com is 104.28.28.59 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply itus.accessinnov.com is 104.28.29.59 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply itus.accessinnov.com is 104.28.28.59 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply itus.accessinnov.com is 104.28.29.59 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: query[A] cdn.content.prod.cms.msn.com from 10.10.10.228 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: forwarded cdn.content.prod.cms.msn.com to 192.168.1.1 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: query[AAAA] cdn.content.prod.cms.msn.com from 10.10.10.228 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: forwarded cdn.content.prod.cms.msn.com to 192.168.1.1 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: query[A] service.weather.microsoft.com from 10.10.10.228 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: forwarded service.weather.microsoft.com to 192.168.1.1 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: query[AAAA] service.weather.microsoft.com from 10.10.10.228 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: forwarded service.weather.microsoft.com to 192.168.1.1 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: query[A] tile-service.weather.microsoft.com from 10.10.10.228 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: forwarded tile-service.weather.microsoft.com to 192.168.1.1 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: query[AAAA] tile-service.weather.microsoft.com from 10.10.10.228 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: forwarded tile-service.weather.microsoft.com to 192.168.1.1 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: query[A] cdn.content.prod.cms.msn.com from 10.10.10.229 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: forwarded cdn.content.prod.cms.msn.com to 192.168.1.1 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: query[AAAA] cdn.content.prod.cms.msn.com from 10.10.10.229 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: forwarded cdn.content.prod.cms.msn.com to 192.168.1.1 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: query[A] service.weather.microsoft.com from 10.10.10.229 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: forwarded service.weather.microsoft.com to 192.168.1.1 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: query[AAAA] service.weather.microsoft.com from 10.10.10.229 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: forwarded service.weather.microsoft.com to 192.168.1.1 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: query[A] tile-service.weather.microsoft.com from 10.10.10.229 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: forwarded tile-service.weather.microsoft.com to 192.168.1.1 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: query[AAAA] tile-service.weather.microsoft.com from 10.10.10.229 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: forwarded tile-service.weather.microsoft.com to 192.168.1.1 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: query[A] win10.ipv6.microsoft.com from 10.10.10.228 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: forwarded win10.ipv6.microsoft.com to 192.168.1.1 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: query[A] win10.ipv6.microsoft.com from 10.10.10.229 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: forwarded win10.ipv6.microsoft.com to 192.168.1.1 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: query[A] skydrive.wns.windows.com from 10.10.10.228 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: cached skydrive.wns.windows.com is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: cached client.wns.windows.com is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: forwarded skydrive.wns.windows.com to 192.168.1.1 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: query[AAAA] skydrive.wns.windows.com from 10.10.10.228 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: cached skydrive.wns.windows.com is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: forwarded skydrive.wns.windows.com to 192.168.1.1 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: query[A] skydrive.wns.windows.com from 10.10.10.229 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: forwarded skydrive.wns.windows.com to 192.168.1.1 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: query[AAAA] skydrive.wns.windows.com from 10.10.10.229 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: forwarded skydrive.wns.windows.com to 192.168.1.1 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply cdn.content.prod.cms.msn.com is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply cdn.content.prod.cms.msn.com.edgesuite.net is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply a1784.g2.akamai.net is 23.77.233.33 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply a1784.g2.akamai.net is 23.77.232.114 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply service.weather.microsoft.com is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply wildcard.weather.microsoft.com.edgekey.net is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply e7070.g.akamaiedge.net is NODATA-IPv6 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply tile-service.weather.microsoft.com is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply wildcard.weather.microsoft.com.edgekey.net is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply e7070.g.akamaiedge.net is NODATA-IPv6 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply cdn.content.prod.cms.msn.com is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply cdn.content.prod.cms.msn.com.edgesuite.net is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply a1784.g2.akamai.net is 23.77.233.33 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply a1784.g2.akamai.net is 23.77.232.114 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply service.weather.microsoft.com is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply wildcard.weather.microsoft.com.edgekey.net is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply e7070.g.akamaiedge.net is NODATA-IPv6 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply tile-service.weather.microsoft.com is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply wildcard.weather.microsoft.com.edgekey.net is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply e7070.g.akamaiedge.net is NODATA-IPv6 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply cdn.content.prod.cms.msn.com is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply cdn.content.prod.cms.msn.com.edgesuite.net is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply a1784.g2.akamai.net is NODATA-IPv6 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply service.weather.microsoft.com is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply wildcard.weather.microsoft.com.edgekey.net is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply e7070.g.akamaiedge.net is 23.211.177.174 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply tile-service.weather.microsoft.com is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply wildcard.weather.microsoft.com.edgekey.net is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply e7070.g.akamaiedge.net is 23.211.177.174 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply cdn.content.prod.cms.msn.com is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply cdn.content.prod.cms.msn.com.edgesuite.net is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply a1784.g2.akamai.net is NODATA-IPv6 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply service.weather.microsoft.com is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply wildcard.weather.microsoft.com.edgekey.net is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply e7070.g.akamaiedge.net is 23.211.177.174 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply tile-service.weather.microsoft.com is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply wildcard.weather.microsoft.com.edgekey.net is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply e7070.g.akamaiedge.net is 23.211.177.174 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply win10.ipv6.microsoft.com is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply win10.ipv6.microsoft.com.nsatc.net is 157.56.106.184 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply win10.ipv6.microsoft.com is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply win10.ipv6.microsoft.com.nsatc.net is 157.56.106.184 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: query[A] wpad.lan from 10.10.10.228 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: config wpad.lan is NXDOMAIN Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: query[AAAA] wpad.lan from 10.10.10.228 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: config wpad.lan is NXDOMAIN Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply skydrive.wns.windows.com is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply client.wns.windows.com is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply wns.notify.windows.com.akadns.net is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply americas2.notify.windows.com.akadns.net is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply bn2.wns.notify.windows.com.akadns.net is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply bn2wns1.wns.windows.com is 131.253.34.230 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply skydrive.wns.windows.com is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply client.wns.windows.com is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply wns.notify.windows.com.akadns.net is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply americas2.notify.windows.com.akadns.net is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply bn2.wns.notify.windows.com.akadns.net is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply bn2wns1.wns.windows.com is 2a01:111:f004:20::101 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply skydrive.wns.windows.com is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply client.wns.windows.com is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply wns.notify.windows.com.akadns.net is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply americas2.notify.windows.com.akadns.net is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply bn2.wns.notify.windows.com.akadns.net is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply bn2wns1.wns.windows.com is 131.253.34.230 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply skydrive.wns.windows.com is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply client.wns.windows.com is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply wns.notify.windows.com.akadns.net is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply americas2.notify.windows.com.akadns.net is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply bn2.wns.notify.windows.com.akadns.net is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply bn2wns1.wns.windows.com is 2a01:111:f004:20::101 Mon Mar 14 18:46:02 2016 kern.info kernel: [ 185.399944] nf_conntrack: automatic helper assignment is deprecated and it will be removed soon. Use the iptables CT target to attach helpers instead. Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: query[A] wpad.lan from 10.10.10.229 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: config wpad.lan is NXDOMAIN Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: query[AAAA] wpad.lan from 10.10.10.229 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: config wpad.lan is NXDOMAIN Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: query[A] dm2306.storage.live.com from 10.10.10.228 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: forwarded dm2306.storage.live.com to 192.168.1.1 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: query[AAAA] dm2306.storage.live.com from 10.10.10.228 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: forwarded dm2306.storage.live.com to 192.168.1.1 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: query[A] dm2306.storage.live.com from 10.10.10.229 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: forwarded dm2306.storage.live.com to 192.168.1.1 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: query[AAAA] dm2306.storage.live.com from 10.10.10.229 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: forwarded dm2306.storage.live.com to 192.168.1.1 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply dm2306.storage.live.com is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply dm2306geo.storage.skyprod.akadns.net is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply dm2306-storage-live-com.a-0011.a-msedge.net is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply a-0011.a-msedge.net is 204.79.197.213 Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply dm2306.storage.live.com is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply dm2306geo.storage.skyprod.akadns.net is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply dm2306-storage-live-com.a-0011.a-msedge.net is Mon Mar 14 18:46:02 2016 daemon.info dnsmasq[4004]: reply a-0011.a-msedge.net is 204.79.197.213 Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: reply dm2306.storage.live.com is Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: reply dm2306geo.storage.skyprod.akadns.net is Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: reply dm2306-storage-live-com.a-0011.a-msedge.net is Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: reply a-0011.a-msedge.net is NODATA-IPv6 Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: reply dm2306.storage.live.com is Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: reply dm2306geo.storage.skyprod.akadns.net is Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: reply dm2306-storage-live-com.a-0011.a-msedge.net is Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: reply a-0011.a-msedge.net is NODATA-IPv6 Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: query[A] BN3SCH020010632.wns.windows.com from 10.10.10.228 Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: forwarded BN3SCH020010632.wns.windows.com to 192.168.1.1 Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: query[AAAA] BN3SCH020010632.wns.windows.com from 10.10.10.228 Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: forwarded BN3SCH020010632.wns.windows.com to 192.168.1.1 Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: query[A] BN3SCH020010632.wns.windows.com from 10.10.10.229 Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: forwarded BN3SCH020010632.wns.windows.com to 192.168.1.1 Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: query[AAAA] BN3SCH020010632.wns.windows.com from 10.10.10.229 Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: forwarded BN3SCH020010632.wns.windows.com to 192.168.1.1 Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: reply BN3SCH020010632.wns.windows.com is 131.253.34.250 Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: reply BN3SCH020010632.wns.windows.com is 131.253.34.250 Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: query[A] device.ra.live.com from 10.10.10.228 Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: forwarded device.ra.live.com to 192.168.1.1 Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: query[AAAA] device.ra.live.com from 10.10.10.228 Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: forwarded device.ra.live.com to 192.168.1.1 Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: query[A] device.ra.live.com from 10.10.10.229 Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: forwarded device.ra.live.com to 192.168.1.1 Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: query[AAAA] device.ra.live.com from 10.10.10.229 Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: forwarded device.ra.live.com to 192.168.1.1 Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: query[A] href.li from 10.10.10.228 Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: forwarded href.li to 192.168.1.1 Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: query[A] href.li from 10.10.10.229 Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: forwarded href.li to 192.168.1.1 Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: reply device.ra.live.com is Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: reply device.ra.live.com.akadns.net is 131.253.14.68 Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: reply device.ra.live.com is Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: reply device.ra.live.com.akadns.net is 131.253.14.68 Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: reply href.li is 192.0.78.27 Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: reply href.li is 192.0.78.26 Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: reply href.li is 192.0.78.27 Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: reply href.li is 192.0.78.26 Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: reply device.ra.live.com is Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: reply device.ra.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: reply device.ra.live.com is Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: reply device.ra.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: query[A] www.super-resume.com from 10.10.10.228 Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: config www.super-resume.com is 10.10.10.11 Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: query[A] www.super-resume.com from 10.10.10.229 Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: config www.super-resume.com is 10.10.10.11 Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: query[A] www.gravatar.com from 10.10.10.228 Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: forwarded www.gravatar.com to 192.168.1.1 Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: query[A] www.gravatar.com from 10.10.10.229 Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: forwarded www.gravatar.com to 192.168.1.1 Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: reply www.gravatar.com is Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: reply cs91.wac.edgecastcdn.net is 72.21.91.121 Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: reply www.gravatar.com is Mon Mar 14 18:46:03 2016 daemon.info dnsmasq[4004]: reply cs91.wac.edgecastcdn.net is 72.21.91.121 Mon Mar 14 18:46:07 2016 daemon.info dnsmasq[4004]: query[A] www.microsoft.com from 10.10.10.228 Mon Mar 14 18:46:07 2016 daemon.info dnsmasq[4004]: forwarded www.microsoft.com to 192.168.1.1 Mon Mar 14 18:46:07 2016 daemon.info dnsmasq[4004]: query[AAAA] www.microsoft.com from 10.10.10.228 Mon Mar 14 18:46:07 2016 daemon.info dnsmasq[4004]: forwarded www.microsoft.com to 192.168.1.1 Mon Mar 14 18:46:07 2016 daemon.info dnsmasq[4004]: query[A] www.microsoft.com from 10.10.10.229 Mon Mar 14 18:46:07 2016 daemon.info dnsmasq[4004]: forwarded www.microsoft.com to 192.168.1.1 Mon Mar 14 18:46:07 2016 daemon.info dnsmasq[4004]: query[AAAA] www.microsoft.com from 10.10.10.229 Mon Mar 14 18:46:07 2016 daemon.info dnsmasq[4004]: forwarded www.microsoft.com to 192.168.1.1 Mon Mar 14 18:46:07 2016 daemon.info dnsmasq[4004]: reply www.microsoft.com is Mon Mar 14 18:46:07 2016 daemon.info dnsmasq[4004]: reply www.microsoft.com-c.edgekey.net is Mon Mar 14 18:46:07 2016 daemon.info dnsmasq[4004]: reply www.microsoft.com-c.edgekey.net.globalredir.akadns.net is Mon Mar 14 18:46:07 2016 daemon.info dnsmasq[4004]: reply e10088.dspb.akamaiedge.net is 23.12.250.144 Mon Mar 14 18:46:07 2016 daemon.info dnsmasq[4004]: reply www.microsoft.com is Mon Mar 14 18:46:07 2016 daemon.info dnsmasq[4004]: reply www.microsoft.com-c.edgekey.net is Mon Mar 14 18:46:07 2016 daemon.info dnsmasq[4004]: reply www.microsoft.com-c.edgekey.net.globalredir.akadns.net is Mon Mar 14 18:46:07 2016 daemon.info dnsmasq[4004]: reply e10088.dspb.akamaiedge.net is 23.12.250.144 Mon Mar 14 18:46:07 2016 daemon.info dnsmasq[4004]: reply www.microsoft.com is Mon Mar 14 18:46:07 2016 daemon.info dnsmasq[4004]: reply www.microsoft.com-c.edgekey.net is Mon Mar 14 18:46:07 2016 daemon.info dnsmasq[4004]: reply www.microsoft.com-c.edgekey.net.globalredir.akadns.net is Mon Mar 14 18:46:07 2016 daemon.info dnsmasq[4004]: reply e10088.dspb.akamaiedge.net is 2600:1404:e:182::2768 Mon Mar 14 18:46:07 2016 daemon.info dnsmasq[4004]: reply e10088.dspb.akamaiedge.net is 2600:1404:e:193::2768 Mon Mar 14 18:46:07 2016 daemon.info dnsmasq[4004]: reply www.microsoft.com is Mon Mar 14 18:46:07 2016 daemon.info dnsmasq[4004]: reply www.microsoft.com-c.edgekey.net is Mon Mar 14 18:46:07 2016 daemon.info dnsmasq[4004]: reply www.microsoft.com-c.edgekey.net.globalredir.akadns.net is Mon Mar 14 18:46:07 2016 daemon.info dnsmasq[4004]: reply e10088.dspb.akamaiedge.net is 2600:1404:e:182::2768 Mon Mar 14 18:46:07 2016 daemon.info dnsmasq[4004]: reply e10088.dspb.akamaiedge.net is 2600:1404:e:193::2768 Mon Mar 14 18:46:10 2016 kern.debug kernel: [ 193.147021] Port 2 receive error code 10, packet dropped Mon Mar 14 18:46:10 2016 kern.debug kernel: [ 193.147035] Port 2 receive error code 10, packet dropped Mon Mar 14 18:46:10 2016 kern.debug kernel: [ 193.147064] Port 2 receive error code 10, packet dropped Mon Mar 14 18:46:15 2016 authpriv.info dropbear[5032]: Child connection from 10.10.10.228:62635 Mon Mar 14 18:46:16 2016 authpriv.notice dropbear[5032]: Password auth succeeded for 'root' from 10.10.10.228:62635 Mon Mar 14 18:46:16 2016 daemon.info dnsmasq[4004]: query[A] mybookworld.lan from 10.10.10.228 Mon Mar 14 18:46:16 2016 daemon.info dnsmasq[4004]: config mybookworld.lan is NXDOMAIN Mon Mar 14 18:46:16 2016 daemon.info dnsmasq[4004]: query[AAAA] mybookworld.lan from 10.10.10.228 Mon Mar 14 18:46:16 2016 daemon.info dnsmasq[4004]: config mybookworld.lan is NXDOMAIN Mon Mar 14 18:46:16 2016 daemon.info dnsmasq[4004]: query[A] mybookworld.lan from 10.10.10.229 Mon Mar 14 18:46:16 2016 daemon.info dnsmasq[4004]: config mybookworld.lan is NXDOMAIN Mon Mar 14 18:46:16 2016 daemon.info dnsmasq[4004]: query[AAAA] mybookworld.lan from 10.10.10.229 Mon Mar 14 18:46:16 2016 daemon.info dnsmasq[4004]: config mybookworld.lan is NXDOMAIN Mon Mar 14 18:46:18 2016 daemon.info dnsmasq[4004]: query[A] clients4.google.com from 10.10.10.228 Mon Mar 14 18:46:18 2016 daemon.info dnsmasq[4004]: forwarded clients4.google.com to 192.168.1.1 Mon Mar 14 18:46:18 2016 daemon.info dnsmasq[4004]: query[A] clients4.google.com from 10.10.10.229 Mon Mar 14 18:46:18 2016 daemon.info dnsmasq[4004]: forwarded clients4.google.com to 192.168.1.1 Mon Mar 14 18:46:18 2016 daemon.info dnsmasq[4004]: reply clients4.google.com is Mon Mar 14 18:46:18 2016 daemon.info dnsmasq[4004]: reply clients.l.google.com is 216.58.216.238 Mon Mar 14 18:46:18 2016 daemon.info dnsmasq[4004]: reply clients4.google.com is Mon Mar 14 18:46:18 2016 daemon.info dnsmasq[4004]: reply clients.l.google.com is 216.58.216.238 Mon Mar 14 18:46:22 2016 daemon.info dnsmasq[4004]: query[AAAA] dm2306.storage.live.com from 10.10.10.228 Mon Mar 14 18:46:22 2016 daemon.info dnsmasq[4004]: cached dm2306.storage.live.com is Mon Mar 14 18:46:22 2016 daemon.info dnsmasq[4004]: cached dm2306geo.storage.skyprod.akadns.net is Mon Mar 14 18:46:22 2016 daemon.info dnsmasq[4004]: cached dm2306-storage-live-com.a-0011.a-msedge.net is Mon Mar 14 18:46:22 2016 daemon.info dnsmasq[4004]: cached a-0011.a-msedge.net is NODATA-IPv6 Mon Mar 14 18:46:22 2016 daemon.info dnsmasq[4004]: query[A] dm2306.storage.live.com from 10.10.10.229 Mon Mar 14 18:46:22 2016 daemon.info dnsmasq[4004]: cached dm2306.storage.live.com is Mon Mar 14 18:46:22 2016 daemon.info dnsmasq[4004]: cached dm2306geo.storage.skyprod.akadns.net is Mon Mar 14 18:46:22 2016 daemon.info dnsmasq[4004]: cached dm2306-storage-live-com.a-0011.a-msedge.net is Mon Mar 14 18:46:22 2016 daemon.info dnsmasq[4004]: cached a-0011.a-msedge.net is 204.79.197.213 Mon Mar 14 18:46:22 2016 daemon.info dnsmasq[4004]: query[AAAA] dm2306.storage.live.com from 10.10.10.229 Mon Mar 14 18:46:22 2016 daemon.info dnsmasq[4004]: cached dm2306.storage.live.com is Mon Mar 14 18:46:22 2016 daemon.info dnsmasq[4004]: cached dm2306geo.storage.skyprod.akadns.net is Mon Mar 14 18:46:22 2016 daemon.info dnsmasq[4004]: cached dm2306-storage-live-com.a-0011.a-msedge.net is Mon Mar 14 18:46:22 2016 daemon.info dnsmasq[4004]: cached a-0011.a-msedge.net is NODATA-IPv6 Mon Mar 14 18:46:22 2016 user.notice firewall: Reloading firewall due to ifup of wan (eth0) Mon Mar 14 18:46:41 2016 daemon.notice netifd: Interface 'blockdomain' is now down Mon Mar 14 18:46:41 2016 daemon.notice netifd: Interface 'blockdomain' is setting up now Mon Mar 14 18:46:41 2016 daemon.notice netifd: Interface 'blockdomain' is now up Mon Mar 14 18:46:43 2016 daemon.info dnsmasq[4004]: exiting on receipt of SIGTERM Mon Mar 14 18:46:49 2016 user.notice ddns-scripts[5430]: myddns_ipv4: PID '5430' started at 2016-03-14 18:46 Mon Mar 14 18:46:50 2016 user.warn ddns-scripts[5430]: myddns_ipv4: Service section disabled! - TERMINATE Mon Mar 14 18:46:50 2016 user.warn ddns-scripts[5430]: myddns_ipv4: PID '5430' exit WITH ERROR '1' at 2016-03-14 18:46 Mon Mar 14 18:46:50 2016 daemon.info dnsmasq[5396]: started, version 2.73rc7 cachesize 150 Mon Mar 14 18:46:50 2016 daemon.info dnsmasq[5396]: compile time options: IPv6 GNU-getopt no-DBus no-i18n no-IDN DHCP no-DHCPv6 no-Lua TFTP no-conntrack no-ipset no-auth no-DNSSEC loop-detect inotify Mon Mar 14 18:46:50 2016 daemon.info dnsmasq[5396]: DNS service limited to local subnets Mon Mar 14 18:46:50 2016 daemon.info dnsmasq-dhcp[5396]: DHCP, IP range 10.10.10.100 -- 10.10.10.254, lease time 12h Mon Mar 14 18:46:50 2016 daemon.info dnsmasq[5396]: using local addresses only for domain lan Mon Mar 14 18:46:50 2016 daemon.info dnsmasq[5396]: reading /tmp/resolv.conf.auto Mon Mar 14 18:46:50 2016 daemon.info dnsmasq[5396]: using local addresses only for domain lan Mon Mar 14 18:46:50 2016 daemon.info dnsmasq[5396]: using nameserver 192.168.1.1#53 Mon Mar 14 18:46:50 2016 daemon.info dnsmasq[5396]: read /etc/hosts - 1 addresses Mon Mar 14 18:46:50 2016 daemon.info dnsmasq[5396]: read /tmp/hosts/dhcp - 1 addresses Mon Mar 14 18:46:50 2016 daemon.info dnsmasq-dhcp[5396]: read /etc/ethers - 0 addresses Mon Mar 14 18:46:50 2016 daemon.info dnsmasq[5396]: query[A] dns.msftncsi.com from 10.10.10.228 Mon Mar 14 18:46:50 2016 daemon.info dnsmasq[5396]: forwarded dns.msftncsi.com to 192.168.1.1 Mon Mar 14 18:46:50 2016 daemon.info dnsmasq[5396]: query[A] dns.msftncsi.com from 10.10.10.228 Mon Mar 14 18:46:50 2016 daemon.info dnsmasq[5396]: forwarded dns.msftncsi.com to 192.168.1.1 Mon Mar 14 18:46:50 2016 daemon.info dnsmasq[5396]: reply dns.msftncsi.com is 131.107.255.255 Mon Mar 14 18:46:50 2016 daemon.info dnsmasq[5396]: reply dns.msftncsi.com is 131.107.255.255 Mon Mar 14 18:46:59 2016 user.notice update_webfilter: updated dnsmasq blacklist Mon Mar 14 18:46:59 2016 user.notice update_webfilter: updated network.interface.blockdomain: 10.10.10.11 Mon Mar 14 18:46:59 2016 user.notice update_webfilter: updated firewall.@redirect[0].Itusfilter: 10.10.10.11 Mon Mar 14 18:46:59 2016 user.notice update_webfilter: updated firewall.@redirect[1]dns-traffic-to-shield: 10.10.10.11 Mon Mar 14 18:46:59 2016 user.notice update_webfilter: updated uhttpd.Itusfilter Mon Mar 14 18:47:01 2016 kern.notice kernel: [ 244.312168] eth0: Link down Mon Mar 14 18:47:02 2016 daemon.notice netifd: Network device 'eth0' link is down Mon Mar 14 18:47:02 2016 daemon.notice netifd: Interface 'wan' has link connectivity loss Mon Mar 14 18:47:02 2016 daemon.notice netifd: wan (3853): Received SIGTERM Mon Mar 14 18:47:05 2016 kern.notice kernel: [ 248.282103] eth2: Link down Mon Mar 14 18:47:05 2016 daemon.notice netifd: Network device 'eth0' link is up Mon Mar 14 18:47:05 2016 daemon.notice netifd: Interface 'wan' has link connectivity Mon Mar 14 18:47:05 2016 daemon.notice netifd: Interface 'wan' is setting up now Mon Mar 14 18:47:05 2016 kern.notice kernel: [ 248.322693] eth0: 1000 Mbps Full duplex, port 0 Mon Mar 14 18:47:05 2016 daemon.notice netifd: wan (5620): udhcpc (v1.23.2) started Mon Mar 14 18:47:05 2016 daemon.notice netifd: wan (5620): Sending discover... Mon Mar 14 18:47:05 2016 daemon.notice netifd: wan (5620): Sending select for 192.168.1.11... Mon Mar 14 18:47:06 2016 daemon.notice netifd: wan (5620): Lease of 192.168.1.11 obtained, lease time 86400 Mon Mar 14 18:47:06 2016 daemon.notice netifd: Interface 'wan' is now up Mon Mar 14 18:47:06 2016 daemon.warn dnsmasq[5396]: no servers found in /tmp/resolv.conf.auto, will retry Mon Mar 14 18:47:06 2016 daemon.info dnsmasq[5396]: reading /tmp/resolv.conf.auto Mon Mar 14 18:47:06 2016 daemon.info dnsmasq[5396]: using local addresses only for domain lan Mon Mar 14 18:47:06 2016 daemon.info dnsmasq[5396]: using nameserver 192.168.1.1#53 Mon Mar 14 18:47:06 2016 daemon.notice netifd: Network device 'eth2' link is down Mon Mar 14 18:47:06 2016 kern.info kernel: [ 249.322445] br-lan: port 2(eth2) entered disabled state Mon Mar 14 18:47:06 2016 user.notice firewall: Reloading firewall due to ifup of wan (eth0) Mon Mar 14 18:47:06 2016 user.notice root: NTP 0.us.pool.ntp.org failed. Mon Mar 14 18:47:07 2016 daemon.info dnsmasq[5396]: query[A] 0.us.pool.ntp.org from 127.0.0.1 Mon Mar 14 18:47:07 2016 daemon.info dnsmasq[5396]: forwarded 0.us.pool.ntp.org to 192.168.1.1 Mon Mar 14 18:47:07 2016 daemon.info dnsmasq[5396]: reply 0.us.pool.ntp.org is 67.18.187.111 Mon Mar 14 18:47:07 2016 daemon.info dnsmasq[5396]: reply 0.us.pool.ntp.org is 138.236.128.36 Mon Mar 14 18:47:07 2016 daemon.info dnsmasq[5396]: reply 0.us.pool.ntp.org is 64.6.144.6 Mon Mar 14 18:47:07 2016 daemon.info dnsmasq[5396]: reply 0.us.pool.ntp.org is 204.2.134.163 Mon Mar 14 18:48:26 2016 user.notice root: Successful NTP clock adjust (0.us.pool.ntp.org). Mon Mar 14 18:48:26 2016 daemon.info procd: - init complete - Mon Mar 14 18:48:27 2016 daemon.notice netifd: Bridge 'br-lan' link is down Mon Mar 14 18:48:27 2016 daemon.notice netifd: Interface 'lan' has link connectivity loss Mon Mar 14 18:48:27 2016 daemon.notice netifd: Interface 'blockdomain' has link connectivity loss Mon Mar 14 18:48:28 2016 daemon.notice netifd: Network device 'eth2' link is up Mon Mar 14 18:48:28 2016 daemon.notice netifd: Bridge 'br-lan' link is up Mon Mar 14 18:48:28 2016 daemon.notice netifd: Interface 'lan' has link connectivity Mon Mar 14 18:48:28 2016 daemon.notice netifd: Interface 'blockdomain' has link connectivity Mon Mar 14 18:48:28 2016 kern.notice kernel: [ 251.292385] eth2: 1000 Mbps Full duplex, port 2 Mon Mar 14 18:48:28 2016 kern.info kernel: [ 251.292421] br-lan: port 2(eth2) entered forwarding state Mon Mar 14 18:48:28 2016 kern.info kernel: [ 251.292455] br-lan: port 2(eth2) entered forwarding state Mon Mar 14 18:48:30 2016 kern.info kernel: [ 253.292330] br-lan: port 2(eth2) entered forwarding state Mon Mar 14 18:48:33 2016 daemon.info dnsmasq[5396]: query[A] p25-quota.icloud.com from 10.10.10.228 Mon Mar 14 18:48:33 2016 daemon.info dnsmasq[5396]: forwarded p25-quota.icloud.com to 192.168.1.1 Mon Mar 14 18:48:33 2016 daemon.info dnsmasq[5396]: query[AAAA] p25-quota.icloud.com from 10.10.10.228 Mon Mar 14 18:48:33 2016 daemon.info dnsmasq[5396]: forwarded p25-quota.icloud.com to 192.168.1.1 Mon Mar 14 18:48:33 2016 daemon.info dnsmasq[5396]: query[A] p25-quota.icloud.com from 10.10.10.229 Mon Mar 14 18:48:33 2016 daemon.info dnsmasq[5396]: forwarded p25-quota.icloud.com to 192.168.1.1 Mon Mar 14 18:48:33 2016 daemon.info dnsmasq[5396]: reply p25-quota.icloud.com is Mon Mar 14 18:48:33 2016 daemon.info dnsmasq[5396]: reply p25-quota-current.edge.icloud.apple-dns.net is 17.248.128.209 Mon Mar 14 18:48:33 2016 daemon.info dnsmasq[5396]: reply p25-quota.icloud.com is Mon Mar 14 18:48:33 2016 daemon.info dnsmasq[5396]: reply p25-quota-current.edge.icloud.apple-dns.net is NODATA-IPv6 Mon Mar 14 18:48:33 2016 daemon.info dnsmasq[5396]: query[AAAA] p25-quota.icloud.com from 10.10.10.229 Mon Mar 14 18:48:33 2016 daemon.info dnsmasq[5396]: cached p25-quota.icloud.com is Mon Mar 14 18:48:33 2016 daemon.info dnsmasq[5396]: cached p25-quota-current.edge.icloud.apple-dns.net is NODATA-IPv6 Mon Mar 14 18:48:33 2016 daemon.info dnsmasq[5396]: reply p25-quota.icloud.com is Mon Mar 14 18:48:33 2016 daemon.info dnsmasq[5396]: reply p25-quota-current.edge.icloud.apple-dns.net is 17.248.128.209 Mon Mar 14 18:48:36 2016 daemon.info dnsmasq[5396]: query[A] dns.msftncsi.com from 10.10.10.228 Mon Mar 14 18:48:36 2016 daemon.info dnsmasq[5396]: forwarded dns.msftncsi.com to 192.168.1.1 Mon Mar 14 18:48:36 2016 daemon.info dnsmasq[5396]: reply dns.msftncsi.com is 131.107.255.255 Mon Mar 14 18:48:50 2016 daemon.info dnsmasq[5396]: query[A] skydrive.wns.windows.com from 10.10.10.228 Mon Mar 14 18:48:50 2016 daemon.info dnsmasq[5396]: forwarded skydrive.wns.windows.com to 192.168.1.1 Mon Mar 14 18:48:50 2016 daemon.info dnsmasq[5396]: query[AAAA] skydrive.wns.windows.com from 10.10.10.228 Mon Mar 14 18:48:50 2016 daemon.info dnsmasq[5396]: forwarded skydrive.wns.windows.com to 192.168.1.1 Mon Mar 14 18:48:50 2016 daemon.info dnsmasq[5396]: query[A] skydrive.wns.windows.com from 10.10.10.229 Mon Mar 14 18:48:50 2016 daemon.info dnsmasq[5396]: forwarded skydrive.wns.windows.com to 192.168.1.1 Mon Mar 14 18:48:50 2016 daemon.info dnsmasq[5396]: reply skydrive.wns.windows.com is Mon Mar 14 18:48:50 2016 daemon.info dnsmasq[5396]: reply client.wns.windows.com is Mon Mar 14 18:48:50 2016 daemon.info dnsmasq[5396]: reply wns.notify.windows.com.akadns.net is Mon Mar 14 18:48:50 2016 daemon.info dnsmasq[5396]: reply americas2.notify.windows.com.akadns.net is Mon Mar 14 18:48:50 2016 daemon.info dnsmasq[5396]: reply bn2.wns.notify.windows.com.akadns.net is Mon Mar 14 18:48:50 2016 daemon.info dnsmasq[5396]: reply bn2wns1.wns.windows.com is 131.253.34.230 Mon Mar 14 18:48:50 2016 daemon.info dnsmasq[5396]: query[AAAA] skydrive.wns.windows.com from 10.10.10.229 Mon Mar 14 18:48:50 2016 daemon.info dnsmasq[5396]: cached skydrive.wns.windows.com is Mon Mar 14 18:48:50 2016 daemon.info dnsmasq[5396]: cached client.wns.windows.com is Mon Mar 14 18:48:50 2016 daemon.info dnsmasq[5396]: cached wns.notify.windows.com.akadns.net is Mon Mar 14 18:48:50 2016 daemon.info dnsmasq[5396]: cached americas2.notify.windows.com.akadns.net is Mon Mar 14 18:48:50 2016 daemon.info dnsmasq[5396]: cached bn2.wns.notify.windows.com.akadns.net is Mon Mar 14 18:48:50 2016 daemon.info dnsmasq[5396]: forwarded skydrive.wns.windows.com to 192.168.1.1 Mon Mar 14 18:48:50 2016 daemon.info dnsmasq[5396]: reply skydrive.wns.windows.com is Mon Mar 14 18:48:50 2016 daemon.info dnsmasq[5396]: reply client.wns.windows.com is Mon Mar 14 18:48:50 2016 daemon.info dnsmasq[5396]: reply wns.notify.windows.com.akadns.net is Mon Mar 14 18:48:50 2016 daemon.info dnsmasq[5396]: reply americas2.notify.windows.com.akadns.net is Mon Mar 14 18:48:50 2016 daemon.info dnsmasq[5396]: reply bn2.wns.notify.windows.com.akadns.net is Mon Mar 14 18:48:50 2016 daemon.info dnsmasq[5396]: reply bn2wns1.wns.windows.com is 2a01:111:f004:20::101 Mon Mar 14 18:48:50 2016 daemon.info dnsmasq[5396]: reply skydrive.wns.windows.com is Mon Mar 14 18:48:50 2016 daemon.info dnsmasq[5396]: reply client.wns.windows.com is Mon Mar 14 18:48:50 2016 daemon.info dnsmasq[5396]: reply wns.notify.windows.com.akadns.net is Mon Mar 14 18:48:50 2016 daemon.info dnsmasq[5396]: reply americas2.notify.windows.com.akadns.net is Mon Mar 14 18:48:50 2016 daemon.info dnsmasq[5396]: reply bn2.wns.notify.windows.com.akadns.net is Mon Mar 14 18:48:50 2016 daemon.info dnsmasq[5396]: reply bn2wns1.wns.windows.com is 131.253.34.230 Mon Mar 14 18:48:50 2016 daemon.info dnsmasq[5396]: reply skydrive.wns.windows.com is Mon Mar 14 18:48:50 2016 daemon.info dnsmasq[5396]: reply client.wns.windows.com is Mon Mar 14 18:48:50 2016 daemon.info dnsmasq[5396]: reply wns.notify.windows.com.akadns.net is Mon Mar 14 18:48:50 2016 daemon.info dnsmasq[5396]: reply americas2.notify.windows.com.akadns.net is Mon Mar 14 18:48:50 2016 daemon.info dnsmasq[5396]: reply bn2.wns.notify.windows.com.akadns.net is Mon Mar 14 18:48:50 2016 daemon.info dnsmasq[5396]: reply bn2wns1.wns.windows.com is 2a01:111:f004:20::101 Mon Mar 14 18:48:59 2016 daemon.info dnsmasq[5396]: query[A] play.google.com from 10.10.10.228 Mon Mar 14 18:49:00 2016 daemon.info dnsmasq[5396]: forwarded play.google.com to 192.168.1.1 Mon Mar 14 18:49:00 2016 daemon.info dnsmasq[5396]: query[A] play.google.com from 10.10.10.229 Mon Mar 14 18:49:00 2016 daemon.info dnsmasq[5396]: forwarded play.google.com to 192.168.1.1 Mon Mar 14 18:49:00 2016 daemon.info dnsmasq[5396]: reply play.google.com is Mon Mar 14 18:49:00 2016 daemon.info dnsmasq[5396]: reply play.l.google.com is 216.58.216.238 Mon Mar 14 18:49:00 2016 daemon.info dnsmasq[5396]: reply play.google.com is Mon Mar 14 18:49:00 2016 daemon.info dnsmasq[5396]: reply play.l.google.com is 216.58.216.238 Mon Mar 14 18:49:06 2016 daemon.info dnsmasq[5396]: query[A] dns.msftncsi.com from 10.10.10.228 Mon Mar 14 18:49:06 2016 daemon.info dnsmasq[5396]: forwarded dns.msftncsi.com to 192.168.1.1 Mon Mar 14 18:49:06 2016 daemon.info dnsmasq[5396]: reply dns.msftncsi.com is 131.107.255.255 Mon Mar 14 18:49:07 2016 user.notice ddns-scripts[5851]: myddns_ipv4: PID '5851' started at 2016-03-14 18:49 Mon Mar 14 18:49:07 2016 user.warn ddns-scripts[5851]: myddns_ipv4: Service section disabled! - TERMINATE Mon Mar 14 18:49:07 2016 user.warn ddns-scripts[5851]: myddns_ipv4: PID '5851' exit WITH ERROR '1' at 2016-03-14 18:49 Mon Mar 14 18:49:08 2016 daemon.err uhttpd[5311]: sh: can't kill pid 6089: No such process Mon Mar 14 18:49:08 2016 daemon.err uhttpd[5311]: Command failed: Not found Mon Mar 14 18:50:00 2016 cron.info crond[3202]: USER root pid 6097 cmd /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Mon Mar 14 18:50:00 2016 daemon.info dnsmasq[5396]: query[A] 0.us.pool.ntp.org from 127.0.0.1 Mon Mar 14 18:50:00 2016 daemon.info dnsmasq[5396]: forwarded 0.us.pool.ntp.org to 192.168.1.1 Mon Mar 14 18:50:00 2016 daemon.info dnsmasq[5396]: reply 0.us.pool.ntp.org is 67.18.187.111 Mon Mar 14 18:50:00 2016 daemon.info dnsmasq[5396]: reply 0.us.pool.ntp.org is 138.236.128.36 Mon Mar 14 18:50:00 2016 daemon.info dnsmasq[5396]: reply 0.us.pool.ntp.org is 64.6.144.6 Mon Mar 14 18:50:00 2016 daemon.info dnsmasq[5396]: reply 0.us.pool.ntp.org is 204.2.134.163 Mon Mar 14 18:50:04 2016 daemon.info dnsmasq[5396]: query[A] skydrive.wns.windows.com from 10.10.10.228 Mon Mar 14 18:50:04 2016 daemon.info dnsmasq[5396]: cached skydrive.wns.windows.com is Mon Mar 14 18:50:04 2016 daemon.info dnsmasq[5396]: cached client.wns.windows.com is Mon Mar 14 18:50:04 2016 daemon.info dnsmasq[5396]: forwarded skydrive.wns.windows.com to 192.168.1.1 Mon Mar 14 18:50:04 2016 daemon.info dnsmasq[5396]: query[AAAA] skydrive.wns.windows.com from 10.10.10.228 Mon Mar 14 18:50:04 2016 daemon.info dnsmasq[5396]: cached skydrive.wns.windows.com is Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: forwarded skydrive.wns.windows.com to 192.168.1.1 Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: query[A] skydrive.wns.windows.com from 10.10.10.229 Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: forwarded skydrive.wns.windows.com to 192.168.1.1 Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: query[AAAA] skydrive.wns.windows.com from 10.10.10.229 Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: forwarded skydrive.wns.windows.com to 192.168.1.1 Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: reply skydrive.wns.windows.com is Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: reply client.wns.windows.com is Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: reply wns.notify.windows.com.akadns.net is Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: reply americas2.notify.windows.com.akadns.net is Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: reply bn2.wns.notify.windows.com.akadns.net is Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: reply bn2wns1.wns.windows.com is 131.253.34.230 Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: reply skydrive.wns.windows.com is Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: reply client.wns.windows.com is Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: reply wns.notify.windows.com.akadns.net is Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: reply americas2.notify.windows.com.akadns.net is Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: reply bn2.wns.notify.windows.com.akadns.net is Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: reply bn2wns1.wns.windows.com is 2a01:111:f004:20::101 Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: reply skydrive.wns.windows.com is Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: reply client.wns.windows.com is Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: reply wns.notify.windows.com.akadns.net is Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: reply americas2.notify.windows.com.akadns.net is Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: reply bn2.wns.notify.windows.com.akadns.net is Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: reply bn2wns1.wns.windows.com is 131.253.34.230 Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: reply skydrive.wns.windows.com is Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: reply client.wns.windows.com is Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: reply wns.notify.windows.com.akadns.net is Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: reply americas2.notify.windows.com.akadns.net is Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: reply bn2.wns.notify.windows.com.akadns.net is Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: reply bn2wns1.wns.windows.com is 2a01:111:f004:20::101 Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: query[A] BN3SCH020011550.wns.windows.com from 10.10.10.228 Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: forwarded BN3SCH020011550.wns.windows.com to 192.168.1.1 Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: query[AAAA] BN3SCH020011550.wns.windows.com from 10.10.10.228 Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: forwarded BN3SCH020011550.wns.windows.com to 192.168.1.1 Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: query[A] BN3SCH020011550.wns.windows.com from 10.10.10.229 Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: forwarded BN3SCH020011550.wns.windows.com to 192.168.1.1 Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: reply BN3SCH020011550.wns.windows.com is 65.52.108.190 Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: query[AAAA] BN3SCH020011550.wns.windows.com from 10.10.10.229 Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: forwarded BN3SCH020011550.wns.windows.com to 192.168.1.1 Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: reply BN3SCH020011550.wns.windows.com is 65.52.108.190 Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: query[A] device.ra.live.com from 10.10.10.228 Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: forwarded device.ra.live.com to 192.168.1.1 Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: query[AAAA] device.ra.live.com from 10.10.10.228 Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: forwarded device.ra.live.com to 192.168.1.1 Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: query[A] device.ra.live.com from 10.10.10.229 Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: forwarded device.ra.live.com to 192.168.1.1 Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: reply device.ra.live.com is Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: reply device.ra.live.com.akadns.net is 131.253.14.68 Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: reply device.ra.live.com is Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: reply device.ra.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: query[AAAA] device.ra.live.com from 10.10.10.229 Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: cached device.ra.live.com is Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: cached device.ra.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: reply device.ra.live.com is Mon Mar 14 18:50:05 2016 daemon.info dnsmasq[5396]: reply device.ra.live.com.akadns.net is 131.253.14.68 Mon Mar 14 18:50:06 2016 daemon.info dnsmasq[5396]: query[A] mtalk.google.com from 10.10.10.228 Mon Mar 14 18:50:06 2016 daemon.info dnsmasq[5396]: forwarded mtalk.google.com to 192.168.1.1 Mon Mar 14 18:50:06 2016 daemon.info dnsmasq[5396]: query[A] mtalk.google.com from 10.10.10.229 Mon Mar 14 18:50:06 2016 daemon.info dnsmasq[5396]: forwarded mtalk.google.com to 192.168.1.1 Mon Mar 14 18:50:06 2016 daemon.info dnsmasq[5396]: reply mtalk.google.com is Mon Mar 14 18:50:06 2016 daemon.info dnsmasq[5396]: reply mobile-gtalk.l.google.com is 74.125.129.188 Mon Mar 14 18:50:06 2016 daemon.info dnsmasq[5396]: reply mtalk.google.com is Mon Mar 14 18:50:06 2016 daemon.info dnsmasq[5396]: reply mobile-gtalk.l.google.com is 74.125.129.188 Mon Mar 14 18:50:54 2016 daemon.info dnsmasq[5396]: query[A] ssw.live.com from 10.10.10.228 Mon Mar 14 18:50:54 2016 daemon.info dnsmasq[5396]: forwarded ssw.live.com to 192.168.1.1 Mon Mar 14 18:50:54 2016 daemon.info dnsmasq[5396]: query[AAAA] ssw.live.com from 10.10.10.228 Mon Mar 14 18:50:54 2016 daemon.info dnsmasq[5396]: forwarded ssw.live.com to 192.168.1.1 Mon Mar 14 18:50:54 2016 daemon.info dnsmasq[5396]: reply ssw.live.com is Mon Mar 14 18:50:54 2016 daemon.info dnsmasq[5396]: reply ssw.live.com.nsatc.net is 207.46.101.29 Mon Mar 14 18:50:54 2016 daemon.info dnsmasq[5396]: query[A] ssw.live.com from 10.10.10.229 Mon Mar 14 18:50:54 2016 daemon.info dnsmasq[5396]: cached ssw.live.com is Mon Mar 14 18:50:54 2016 daemon.info dnsmasq[5396]: cached ssw.live.com.nsatc.net is 207.46.101.29 Mon Mar 14 18:50:54 2016 daemon.info dnsmasq[5396]: query[AAAA] ssw.live.com from 10.10.10.229 Mon Mar 14 18:50:54 2016 daemon.info dnsmasq[5396]: cached ssw.live.com is Mon Mar 14 18:50:54 2016 daemon.info dnsmasq[5396]: forwarded ssw.live.com to 192.168.1.1 Mon Mar 14 18:50:54 2016 daemon.info dnsmasq[5396]: reply ssw.live.com is Mon Mar 14 18:50:54 2016 daemon.info dnsmasq[5396]: reply ssw.live.com.nsatc.net is NODATA-IPv6 Mon Mar 14 18:50:54 2016 daemon.info dnsmasq[5396]: reply ssw.live.com is Mon Mar 14 18:50:54 2016 daemon.info dnsmasq[5396]: reply ssw.live.com.nsatc.net is NODATA-IPv6 Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: query[A] nexus.officeapps.live.com from 10.10.10.228 Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: forwarded nexus.officeapps.live.com to 192.168.1.1 Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: query[AAAA] nexus.officeapps.live.com from 10.10.10.228 Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: forwarded nexus.officeapps.live.com to 192.168.1.1 Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: reply nexus.officeapps.live.com is Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: reply prod-w.nexus.live.com.akadns.net is 191.236.155.80 Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: query[A] nexus.officeapps.live.com from 10.10.10.229 Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: cached nexus.officeapps.live.com is Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: cached prod-w.nexus.live.com.akadns.net is 191.236.155.80 Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: query[AAAA] nexus.officeapps.live.com from 10.10.10.229 Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: cached nexus.officeapps.live.com is Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: forwarded nexus.officeapps.live.com to 192.168.1.1 Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: reply nexus.officeapps.live.com is Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: reply prod-w.nexus.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: reply nexus.officeapps.live.com is Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: reply prod-w.nexus.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: query[A] d.docs.live.net from 10.10.10.228 Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: forwarded d.docs.live.net to 192.168.1.1 Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: query[AAAA] d.docs.live.net from 10.10.10.228 Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: forwarded d.docs.live.net to 192.168.1.1 Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: reply d.docs.live.net is Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: reply skydocs.skyprod.akadns.net is 134.170.108.96 Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: query[A] d.docs.live.net from 10.10.10.229 Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: cached d.docs.live.net is Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is 134.170.108.96 Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: query[AAAA] d.docs.live.net from 10.10.10.229 Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: cached d.docs.live.net is Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: forwarded d.docs.live.net to 192.168.1.1 Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: reply d.docs.live.net is Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: reply skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: reply d.docs.live.net is Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: reply skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: query[AAAA] nexus.officeapps.live.com from 10.10.10.228 Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: cached nexus.officeapps.live.com is Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: cached prod-w.nexus.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: query[A] nexus.officeapps.live.com from 10.10.10.229 Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: cached nexus.officeapps.live.com is Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: cached prod-w.nexus.live.com.akadns.net is 191.236.155.80 Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: query[AAAA] nexus.officeapps.live.com from 10.10.10.229 Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: cached nexus.officeapps.live.com is Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: cached prod-w.nexus.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: query[A] login.live.com from 10.10.10.228 Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: forwarded login.live.com to 192.168.1.1 Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: query[AAAA] login.live.com from 10.10.10.228 Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: forwarded login.live.com to 192.168.1.1 Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: query[A] login.live.com from 10.10.10.229 Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: forwarded login.live.com to 192.168.1.1 Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: reply login.live.com is Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: reply login.live.com.nsatc.net is 131.253.61.80 Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: reply login.live.com.nsatc.net is 131.253.61.82 Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: reply login.live.com.nsatc.net is 131.253.61.96 Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: reply login.live.com.nsatc.net is 131.253.61.100 Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: query[AAAA] login.live.com from 10.10.10.229 Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: cached login.live.com is Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: forwarded login.live.com to 192.168.1.1 Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: reply login.live.com is Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: reply login.live.com.nsatc.net is NODATA-IPv6 Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: reply login.live.com is Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: reply login.live.com.nsatc.net is 131.253.61.80 Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: reply login.live.com.nsatc.net is 131.253.61.82 Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: reply login.live.com.nsatc.net is 131.253.61.96 Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: reply login.live.com.nsatc.net is 131.253.61.100 Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: reply login.live.com is Mon Mar 14 18:50:55 2016 daemon.info dnsmasq[5396]: reply login.live.com.nsatc.net is NODATA-IPv6 Mon Mar 14 18:50:56 2016 daemon.info dnsmasq[5396]: query[AAAA] d.docs.live.net from 10.10.10.228 Mon Mar 14 18:50:56 2016 daemon.info dnsmasq[5396]: cached d.docs.live.net is Mon Mar 14 18:50:56 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 18:50:56 2016 daemon.info dnsmasq[5396]: query[A] d.docs.live.net from 10.10.10.229 Mon Mar 14 18:50:56 2016 daemon.info dnsmasq[5396]: cached d.docs.live.net is Mon Mar 14 18:50:56 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is 134.170.108.96 Mon Mar 14 18:50:56 2016 daemon.info dnsmasq[5396]: query[AAAA] d.docs.live.net from 10.10.10.229 Mon Mar 14 18:50:56 2016 daemon.info dnsmasq[5396]: cached d.docs.live.net is Mon Mar 14 18:50:56 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 18:50:56 2016 daemon.info dnsmasq[5396]: query[A] nexusrules.officeapps.live.com from 10.10.10.228 Mon Mar 14 18:50:56 2016 daemon.info dnsmasq[5396]: forwarded nexusrules.officeapps.live.com to 192.168.1.1 Mon Mar 14 18:50:56 2016 daemon.info dnsmasq[5396]: query[AAAA] nexusrules.officeapps.live.com from 10.10.10.228 Mon Mar 14 18:50:56 2016 daemon.info dnsmasq[5396]: forwarded nexusrules.officeapps.live.com to 192.168.1.1 Mon Mar 14 18:50:56 2016 daemon.info dnsmasq[5396]: query[A] nexusrules.officeapps.live.com from 10.10.10.229 Mon Mar 14 18:50:56 2016 daemon.info dnsmasq[5396]: forwarded nexusrules.officeapps.live.com to 192.168.1.1 Mon Mar 14 18:50:56 2016 daemon.info dnsmasq[5396]: reply nexusrules.officeapps.live.com is Mon Mar 14 18:50:56 2016 daemon.info dnsmasq[5396]: reply prod.nexusrules.live.com.akadns.net is 168.63.18.79 Mon Mar 14 18:50:56 2016 daemon.info dnsmasq[5396]: query[AAAA] nexusrules.officeapps.live.com from 10.10.10.229 Mon Mar 14 18:50:56 2016 daemon.info dnsmasq[5396]: cached nexusrules.officeapps.live.com is Mon Mar 14 18:50:56 2016 daemon.info dnsmasq[5396]: forwarded nexusrules.officeapps.live.com to 192.168.1.1 Mon Mar 14 18:50:56 2016 daemon.info dnsmasq[5396]: reply nexusrules.officeapps.live.com is Mon Mar 14 18:50:56 2016 daemon.info dnsmasq[5396]: reply prod.nexusrules.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 18:50:56 2016 daemon.info dnsmasq[5396]: reply nexusrules.officeapps.live.com is Mon Mar 14 18:50:56 2016 daemon.info dnsmasq[5396]: reply prod.nexusrules.live.com.akadns.net is 168.63.18.79 Mon Mar 14 18:50:56 2016 daemon.info dnsmasq[5396]: reply nexusrules.officeapps.live.com is Mon Mar 14 18:50:56 2016 daemon.info dnsmasq[5396]: reply prod.nexusrules.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 18:51:46 2016 daemon.info dnsmasq[5396]: query[A] www.aim.com from 10.10.10.228 Mon Mar 14 18:51:46 2016 daemon.info dnsmasq[5396]: forwarded www.aim.com to 192.168.1.1 Mon Mar 14 18:51:46 2016 daemon.info dnsmasq[5396]: query[AAAA] www.aim.com from 10.10.10.228 Mon Mar 14 18:51:46 2016 daemon.info dnsmasq[5396]: forwarded www.aim.com to 192.168.1.1 Mon Mar 14 18:51:46 2016 daemon.info dnsmasq[5396]: query[A] www.aim.com from 10.10.10.229 Mon Mar 14 18:51:46 2016 daemon.info dnsmasq[5396]: forwarded www.aim.com to 192.168.1.1 Mon Mar 14 18:51:46 2016 daemon.info dnsmasq[5396]: query[AAAA] www.aim.com from 10.10.10.229 Mon Mar 14 18:51:46 2016 daemon.info dnsmasq[5396]: forwarded www.aim.com to 192.168.1.1 Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: query[A] www.aim.com from 10.10.10.228 Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: forwarded www.aim.com to 192.168.1.1 Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: reply www.aim.com is Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: reply www.aim.com.websys.akadns.net is NODATA-IPv6 Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: reply www.aim.com is Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: reply www.aim.com.websys.akadns.net is NODATA-IPv6 Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: query[AAAA] www.aim.com from 10.10.10.228 Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: cached www.aim.com is Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: cached www.aim.com.websys.akadns.net is NODATA-IPv6 Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: reply www.aim.com is Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: reply www.aim.com.websys.akadns.net is 64.12.89.122 Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: reply www.aim.com.websys.akadns.net is 64.12.89.250 Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: reply www.aim.com is Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: reply www.aim.com.websys.akadns.net is 64.12.89.122 Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: reply www.aim.com.websys.akadns.net is 64.12.89.250 Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: reply www.aim.com is Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: reply www.aim.com.websys.akadns.net is 64.12.89.122 Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: reply www.aim.com.websys.akadns.net is 64.12.89.250 Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: query[A] www.aim.com from 10.10.10.229 Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: cached www.aim.com is Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: cached www.aim.com.websys.akadns.net is 64.12.89.250 Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: cached www.aim.com.websys.akadns.net is 64.12.89.122 Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: query[AAAA] www.aim.com from 10.10.10.229 Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: cached www.aim.com is Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: cached www.aim.com.websys.akadns.net is NODATA-IPv6 Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: query[A] bos-l006a.httpssl.oscar.aim.net from 10.10.10.228 Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: forwarded bos-l006a.httpssl.oscar.aim.net to 192.168.1.1 Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: query[A] bos-l006a.httpssl.oscar.aim.net from 10.10.10.229 Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: forwarded bos-l006a.httpssl.oscar.aim.net to 192.168.1.1 Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: reply bos-l006a.httpssl.oscar.aim.net is Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: reply bos-l006a.blue.aol.com is 152.163.29.1 Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: reply bos-l006a.httpssl.oscar.aim.net is Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: reply bos-l006a.blue.aol.com is 152.163.29.1 Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: query[A] bos-l006a.httpssl.oscar.aim.net from 10.10.10.228 Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: cached bos-l006a.httpssl.oscar.aim.net is Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: cached bos-l006a.blue.aol.com is 152.163.29.1 Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: query[AAAA] bos-l006a.httpssl.oscar.aim.net from 10.10.10.228 Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: cached bos-l006a.httpssl.oscar.aim.net is Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: forwarded bos-l006a.httpssl.oscar.aim.net to 192.168.1.1 Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: query[A] bos-l006a.httpssl.oscar.aim.net from 10.10.10.229 Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: cached bos-l006a.httpssl.oscar.aim.net is Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: cached bos-l006a.blue.aol.com is 152.163.29.1 Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: query[AAAA] bos-l006a.httpssl.oscar.aim.net from 10.10.10.229 Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: cached bos-l006a.httpssl.oscar.aim.net is Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: forwarded bos-l006a.httpssl.oscar.aim.net to 192.168.1.1 Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: reply bos-l006a.httpssl.oscar.aim.net is Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: reply bos-l006a.blue.aol.com is NODATA-IPv6 Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: reply bos-l006a.httpssl.oscar.aim.net is Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: reply bos-l006a.blue.aol.com is NODATA-IPv6 Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: query[A] api.aim.net from 10.10.10.228 Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: forwarded api.aim.net to 192.168.1.1 Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: query[AAAA] api.aim.net from 10.10.10.228 Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: forwarded api.aim.net to 192.168.1.1 Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: query[A] api.aim.net from 10.10.10.229 Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: forwarded api.aim.net to 192.168.1.1 Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: reply api.aim.net is Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: reply apiaimnetcs.egslb.aol.com is 149.174.107.113 Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: query[AAAA] api.aim.net from 10.10.10.229 Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: cached api.aim.net is Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: forwarded api.aim.net to 192.168.1.1 Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: reply api.aim.net is Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: reply apiaimnetcs.egslb.aol.com is 149.174.107.113 Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: reply api.aim.net is Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: reply apiaimnetcs.egslb.aol.com is NODATA-IPv6 Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: reply api.aim.net is Mon Mar 14 18:51:47 2016 daemon.info dnsmasq[5396]: reply apiaimnetcs.egslb.aol.com is NODATA-IPv6 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: query[A] s.aolcdn.com from 10.10.10.228 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: forwarded s.aolcdn.com to 192.168.1.1 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: query[AAAA] s.aolcdn.com from 10.10.10.228 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: forwarded s.aolcdn.com to 192.168.1.1 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: query[A] s.aolcdn.com from 10.10.10.229 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: forwarded s.aolcdn.com to 192.168.1.1 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: reply s.aolcdn.com is Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: reply new.s.aolcdn.com.edgekey.net is Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: reply e8991.g.akamaiedge.net is 23.46.208.77 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: query[AAAA] s.aolcdn.com from 10.10.10.229 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: cached s.aolcdn.com is Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: cached new.s.aolcdn.com.edgekey.net is Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: forwarded s.aolcdn.com to 192.168.1.1 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: reply s.aolcdn.com is Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: reply new.s.aolcdn.com.edgekey.net is Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: reply e8991.g.akamaiedge.net is 23.46.208.77 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: query[A] my.screenname.aol.com from 10.10.10.228 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: forwarded my.screenname.aol.com to 192.168.1.1 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: reply s.aolcdn.com is Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: reply new.s.aolcdn.com.edgekey.net is Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: reply e8991.g.akamaiedge.net is NODATA-IPv6 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: reply s.aolcdn.com is Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: reply new.s.aolcdn.com.edgekey.net is Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: reply e8991.g.akamaiedge.net is NODATA-IPv6 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: query[AAAA] my.screenname.aol.com from 10.10.10.228 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: forwarded my.screenname.aol.com to 192.168.1.1 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: reply my.screenname.aol.com is Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: reply my.screenname.aol.com.aol.akadns.net is 149.174.98.5 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: reply my.screenname.aol.com.aol.akadns.net is 149.174.97.5 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: reply my.screenname.aol.com.aol.akadns.net is 64.12.173.133 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: query[A] my.screenname.aol.com from 10.10.10.229 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: cached my.screenname.aol.com is Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: cached my.screenname.aol.com.aol.akadns.net is 64.12.173.133 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: cached my.screenname.aol.com.aol.akadns.net is 149.174.97.5 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: cached my.screenname.aol.com.aol.akadns.net is 149.174.98.5 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: query[AAAA] my.screenname.aol.com from 10.10.10.229 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: cached my.screenname.aol.com is Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: forwarded my.screenname.aol.com to 192.168.1.1 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: reply my.screenname.aol.com is Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: reply my.screenname.aol.com.aol.akadns.net is NODATA-IPv6 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.228 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: reply my.screenname.aol.com is Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: reply my.screenname.aol.com.aol.akadns.net is NODATA-IPv6 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: reply pool5.moatads.com is 54.172.26.13 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: cached pool5.moatads.com is 54.172.26.13 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: reply pool5.moatads.com is NODATA-IPv6 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: query[AAAA] s.aolcdn.com from 10.10.10.228 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: cached s.aolcdn.com is Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: cached new.s.aolcdn.com.edgekey.net is Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: cached e8991.g.akamaiedge.net is NODATA-IPv6 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: reply pool5.moatads.com is NODATA-IPv6 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: query[AAAA] s.aolcdn.com from 10.10.10.229 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: cached s.aolcdn.com is Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: cached new.s.aolcdn.com.edgekey.net is Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: cached e8991.g.akamaiedge.net is NODATA-IPv6 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: query[A] my.screenname.aol.com from 10.10.10.228 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: cached my.screenname.aol.com is Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: cached my.screenname.aol.com.aol.akadns.net is 149.174.98.5 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: cached my.screenname.aol.com.aol.akadns.net is 64.12.173.133 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: cached my.screenname.aol.com.aol.akadns.net is 149.174.97.5 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: query[A] my.screenname.aol.com from 10.10.10.229 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: cached my.screenname.aol.com is Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: cached my.screenname.aol.com.aol.akadns.net is 149.174.97.5 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: cached my.screenname.aol.com.aol.akadns.net is 149.174.98.5 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: cached my.screenname.aol.com.aol.akadns.net is 64.12.173.133 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: query[AAAA] my.screenname.aol.com from 10.10.10.229 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: cached my.screenname.aol.com is Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: cached my.screenname.aol.com.aol.akadns.net is NODATA-IPv6 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.228 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: cached pool5.moatads.com is 54.172.26.13 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: cached pool5.moatads.com is NODATA-IPv6 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: cached pool5.moatads.com is 54.172.26.13 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 18:51:48 2016 daemon.info dnsmasq[5396]: cached pool5.moatads.com is NODATA-IPv6 Mon Mar 14 18:51:56 2016 daemon.info dnsmasq[5396]: query[A] ocsp.entrust.net from 10.10.10.228 Mon Mar 14 18:51:56 2016 daemon.info dnsmasq[5396]: forwarded ocsp.entrust.net to 192.168.1.1 Mon Mar 14 18:51:56 2016 daemon.info dnsmasq[5396]: query[AAAA] ocsp.entrust.net from 10.10.10.228 Mon Mar 14 18:51:56 2016 daemon.info dnsmasq[5396]: forwarded ocsp.entrust.net to 192.168.1.1 Mon Mar 14 18:51:56 2016 daemon.info dnsmasq[5396]: query[A] ocsp.entrust.net from 10.10.10.229 Mon Mar 14 18:51:56 2016 daemon.info dnsmasq[5396]: forwarded ocsp.entrust.net to 192.168.1.1 Mon Mar 14 18:51:56 2016 daemon.info dnsmasq[5396]: reply ocsp.entrust.net is Mon Mar 14 18:51:56 2016 daemon.info dnsmasq[5396]: reply ocsp.entrust.net.edgekey.net is Mon Mar 14 18:51:56 2016 daemon.info dnsmasq[5396]: reply e6913.dscx.akamaiedge.net is 23.211.188.72 Mon Mar 14 18:51:56 2016 daemon.info dnsmasq[5396]: query[AAAA] ocsp.entrust.net from 10.10.10.229 Mon Mar 14 18:51:56 2016 daemon.info dnsmasq[5396]: cached ocsp.entrust.net is Mon Mar 14 18:51:56 2016 daemon.info dnsmasq[5396]: cached ocsp.entrust.net.edgekey.net is Mon Mar 14 18:51:56 2016 daemon.info dnsmasq[5396]: forwarded ocsp.entrust.net to 192.168.1.1 Mon Mar 14 18:51:56 2016 daemon.info dnsmasq[5396]: reply ocsp.entrust.net is Mon Mar 14 18:51:56 2016 daemon.info dnsmasq[5396]: reply ocsp.entrust.net.edgekey.net is Mon Mar 14 18:51:56 2016 daemon.info dnsmasq[5396]: reply e6913.dscx.akamaiedge.net is 2600:1404:e:199::1b01 Mon Mar 14 18:51:56 2016 daemon.info dnsmasq[5396]: reply e6913.dscx.akamaiedge.net is 2600:1404:e:183::1b01 Mon Mar 14 18:51:56 2016 daemon.info dnsmasq[5396]: reply ocsp.entrust.net is Mon Mar 14 18:51:56 2016 daemon.info dnsmasq[5396]: reply ocsp.entrust.net.edgekey.net is Mon Mar 14 18:51:56 2016 daemon.info dnsmasq[5396]: reply e6913.dscx.akamaiedge.net is 23.211.188.72 Mon Mar 14 18:51:56 2016 daemon.info dnsmasq[5396]: reply ocsp.entrust.net is Mon Mar 14 18:51:56 2016 daemon.info dnsmasq[5396]: reply ocsp.entrust.net.edgekey.net is Mon Mar 14 18:51:56 2016 daemon.info dnsmasq[5396]: reply e6913.dscx.akamaiedge.net is 2600:1404:e:199::1b01 Mon Mar 14 18:51:56 2016 daemon.info dnsmasq[5396]: reply e6913.dscx.akamaiedge.net is 2600:1404:e:183::1b01 Mon Mar 14 18:52:08 2016 daemon.info dnsmasq[5396]: query[A] crl.microsoft.com from 10.10.10.228 Mon Mar 14 18:52:08 2016 daemon.info dnsmasq[5396]: forwarded crl.microsoft.com to 192.168.1.1 Mon Mar 14 18:52:08 2016 daemon.info dnsmasq[5396]: query[AAAA] crl.microsoft.com from 10.10.10.228 Mon Mar 14 18:52:08 2016 daemon.info dnsmasq[5396]: forwarded crl.microsoft.com to 192.168.1.1 Mon Mar 14 18:52:08 2016 daemon.info dnsmasq[5396]: query[A] crl.microsoft.com from 10.10.10.229 Mon Mar 14 18:52:08 2016 daemon.info dnsmasq[5396]: forwarded crl.microsoft.com to 192.168.1.1 Mon Mar 14 18:52:08 2016 daemon.info dnsmasq[5396]: reply crl.microsoft.com is Mon Mar 14 18:52:08 2016 daemon.info dnsmasq[5396]: reply crl.www.ms.akadns.net is Mon Mar 14 18:52:08 2016 daemon.info dnsmasq[5396]: reply a1363.dscg.akamai.net is 23.77.232.169 Mon Mar 14 18:52:08 2016 daemon.info dnsmasq[5396]: reply a1363.dscg.akamai.net is 23.77.232.155 Mon Mar 14 18:52:08 2016 daemon.info dnsmasq[5396]: query[AAAA] crl.microsoft.com from 10.10.10.229 Mon Mar 14 18:52:08 2016 daemon.info dnsmasq[5396]: cached crl.microsoft.com is Mon Mar 14 18:52:08 2016 daemon.info dnsmasq[5396]: cached crl.www.ms.akadns.net is Mon Mar 14 18:52:08 2016 daemon.info dnsmasq[5396]: forwarded crl.microsoft.com to 192.168.1.1 Mon Mar 14 18:52:08 2016 daemon.info dnsmasq[5396]: reply crl.microsoft.com is Mon Mar 14 18:52:08 2016 daemon.info dnsmasq[5396]: reply crl.www.ms.akadns.net is Mon Mar 14 18:52:08 2016 daemon.info dnsmasq[5396]: reply a1363.dscg.akamai.net is 2600:1404:e::174d:e861 Mon Mar 14 18:52:08 2016 daemon.info dnsmasq[5396]: reply a1363.dscg.akamai.net is 2600:1404:e::174d:e923 Mon Mar 14 18:52:08 2016 daemon.info dnsmasq[5396]: reply crl.microsoft.com is Mon Mar 14 18:52:08 2016 daemon.info dnsmasq[5396]: reply crl.www.ms.akadns.net is Mon Mar 14 18:52:08 2016 daemon.info dnsmasq[5396]: reply a1363.dscg.akamai.net is 23.77.232.169 Mon Mar 14 18:52:08 2016 daemon.info dnsmasq[5396]: reply a1363.dscg.akamai.net is 23.77.232.155 Mon Mar 14 18:52:08 2016 daemon.info dnsmasq[5396]: reply crl.microsoft.com is Mon Mar 14 18:52:08 2016 daemon.info dnsmasq[5396]: reply crl.www.ms.akadns.net is Mon Mar 14 18:52:08 2016 daemon.info dnsmasq[5396]: reply a1363.dscg.akamai.net is 2600:1404:e::174d:e861 Mon Mar 14 18:52:08 2016 daemon.info dnsmasq[5396]: reply a1363.dscg.akamai.net is 2600:1404:e::174d:e923 Mon Mar 14 18:52:17 2016 daemon.info dnsmasq[5396]: query[AAAA] time.apple.com from 10.10.10.250 Mon Mar 14 18:52:17 2016 daemon.info dnsmasq[5396]: forwarded time.apple.com to 192.168.1.1 Mon Mar 14 18:52:17 2016 daemon.info dnsmasq[5396]: query[A] time.apple.com from 10.10.10.250 Mon Mar 14 18:52:17 2016 daemon.info dnsmasq[5396]: forwarded time.apple.com to 192.168.1.1 Mon Mar 14 18:52:17 2016 daemon.info dnsmasq[5396]: reply time.apple.com is 17.253.38.253 Mon Mar 14 18:52:17 2016 daemon.info dnsmasq[5396]: reply time.apple.com is 17.253.34.253 Mon Mar 14 18:52:17 2016 daemon.info dnsmasq[5396]: reply time.apple.com is 17.253.68.253 Mon Mar 14 18:52:17 2016 daemon.info dnsmasq[5396]: reply time.apple.com is 17.253.52.253 Mon Mar 14 18:52:17 2016 daemon.info dnsmasq[5396]: reply time.apple.com is 17.253.14.253 Mon Mar 14 18:52:17 2016 daemon.info dnsmasq[5396]: reply time.apple.com is 17.253.24.253 Mon Mar 14 18:52:17 2016 daemon.info dnsmasq[5396]: reply time.apple.com is 17.253.54.251 Mon Mar 14 18:52:17 2016 daemon.info dnsmasq[5396]: reply time.apple.com is 17.253.84.253 Mon Mar 14 18:52:17 2016 daemon.info dnsmasq[5396]: reply time.apple.com is 17.253.12.253 Mon Mar 14 18:52:17 2016 daemon.info dnsmasq[5396]: reply time.apple.com is 17.253.2.253 Mon Mar 14 18:52:17 2016 daemon.info dnsmasq[5396]: reply time.apple.com is 17.253.26.253 Mon Mar 14 18:52:17 2016 daemon.info dnsmasq[5396]: reply time.apple.com is 17.253.6.253 Mon Mar 14 18:52:17 2016 daemon.info dnsmasq[5396]: reply time.apple.com is 17.253.4.253 Mon Mar 14 18:52:17 2016 daemon.info dnsmasq[5396]: reply time.apple.com is 17.253.20.253 Mon Mar 14 18:52:17 2016 daemon.info dnsmasq[5396]: query[AAAA] time.apple.com from 10.10.10.250 Mon Mar 14 18:52:17 2016 daemon.info dnsmasq[5396]: forwarded time.apple.com to 192.168.1.1 Mon Mar 14 18:52:17 2016 daemon.info dnsmasq[5396]: query[A] time.apple.com from 10.10.10.250 Mon Mar 14 18:52:17 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.20.253 Mon Mar 14 18:52:17 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.4.253 Mon Mar 14 18:52:17 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.6.253 Mon Mar 14 18:52:17 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.26.253 Mon Mar 14 18:52:17 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.2.253 Mon Mar 14 18:52:17 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.12.253 Mon Mar 14 18:52:17 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.84.253 Mon Mar 14 18:52:17 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.54.251 Mon Mar 14 18:52:17 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.24.253 Mon Mar 14 18:52:17 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.14.253 Mon Mar 14 18:52:17 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.52.253 Mon Mar 14 18:52:17 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.68.253 Mon Mar 14 18:52:17 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.34.253 Mon Mar 14 18:52:17 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.38.253 Mon Mar 14 18:52:23 2016 daemon.info dnsmasq[5396]: query[AAAA] ssw.live.com from 10.10.10.228 Mon Mar 14 18:52:23 2016 daemon.info dnsmasq[5396]: cached ssw.live.com is Mon Mar 14 18:52:23 2016 daemon.info dnsmasq[5396]: cached ssw.live.com.nsatc.net is NODATA-IPv6 Mon Mar 14 18:52:23 2016 daemon.info dnsmasq[5396]: query[A] ssw.live.com from 10.10.10.229 Mon Mar 14 18:52:23 2016 daemon.info dnsmasq[5396]: cached ssw.live.com is Mon Mar 14 18:52:23 2016 daemon.info dnsmasq[5396]: cached ssw.live.com.nsatc.net is 207.46.101.29 Mon Mar 14 18:52:23 2016 daemon.info dnsmasq[5396]: query[AAAA] ssw.live.com from 10.10.10.229 Mon Mar 14 18:52:23 2016 daemon.info dnsmasq[5396]: cached ssw.live.com is Mon Mar 14 18:52:23 2016 daemon.info dnsmasq[5396]: cached ssw.live.com.nsatc.net is NODATA-IPv6 Mon Mar 14 18:52:31 2016 daemon.info dnsmasq[5396]: query[A] chatenabled.mail.google.com from 10.10.10.228 Mon Mar 14 18:52:31 2016 daemon.info dnsmasq[5396]: forwarded chatenabled.mail.google.com to 192.168.1.1 Mon Mar 14 18:52:31 2016 daemon.info dnsmasq[5396]: query[A] chatenabled.mail.google.com from 10.10.10.229 Mon Mar 14 18:52:31 2016 daemon.info dnsmasq[5396]: forwarded chatenabled.mail.google.com to 192.168.1.1 Mon Mar 14 18:52:31 2016 daemon.info dnsmasq[5396]: reply chatenabled.mail.google.com is Mon Mar 14 18:52:31 2016 daemon.info dnsmasq[5396]: reply b.googlemail.l.google.com is 216.58.216.231 Mon Mar 14 18:52:31 2016 daemon.info dnsmasq[5396]: reply chatenabled.mail.google.com is Mon Mar 14 18:52:31 2016 daemon.info dnsmasq[5396]: reply b.googlemail.l.google.com is 216.58.216.231 Mon Mar 14 18:52:35 2016 daemon.info dnsmasq[5396]: query[A] apis.google.com from 10.10.10.228 Mon Mar 14 18:52:35 2016 daemon.info dnsmasq[5396]: forwarded apis.google.com to 192.168.1.1 Mon Mar 14 18:52:35 2016 daemon.info dnsmasq[5396]: query[A] apis.google.com from 10.10.10.229 Mon Mar 14 18:52:35 2016 daemon.info dnsmasq[5396]: forwarded apis.google.com to 192.168.1.1 Mon Mar 14 18:52:35 2016 daemon.info dnsmasq[5396]: reply apis.google.com is Mon Mar 14 18:52:35 2016 daemon.info dnsmasq[5396]: reply plus.l.google.com is 216.58.216.238 Mon Mar 14 18:52:35 2016 daemon.info dnsmasq[5396]: reply apis.google.com is Mon Mar 14 18:52:35 2016 daemon.info dnsmasq[5396]: reply plus.l.google.com is 216.58.216.238 Mon Mar 14 18:52:36 2016 daemon.info dnsmasq[5396]: query[A] clients6.google.com from 10.10.10.228 Mon Mar 14 18:52:36 2016 daemon.info dnsmasq[5396]: forwarded clients6.google.com to 192.168.1.1 Mon Mar 14 18:52:36 2016 daemon.info dnsmasq[5396]: query[A] clients6.google.com from 10.10.10.229 Mon Mar 14 18:52:36 2016 daemon.info dnsmasq[5396]: forwarded clients6.google.com to 192.168.1.1 Mon Mar 14 18:52:36 2016 daemon.info dnsmasq[5396]: query[A] plus.google.com from 10.10.10.228 Mon Mar 14 18:52:36 2016 daemon.info dnsmasq[5396]: forwarded plus.google.com to 192.168.1.1 Mon Mar 14 18:52:36 2016 daemon.info dnsmasq[5396]: reply clients6.google.com is Mon Mar 14 18:52:36 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 216.58.216.238 Mon Mar 14 18:52:36 2016 daemon.info dnsmasq[5396]: reply clients6.google.com is Mon Mar 14 18:52:36 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 216.58.216.238 Mon Mar 14 18:52:36 2016 daemon.info dnsmasq[5396]: query[A] plus.google.com from 10.10.10.229 Mon Mar 14 18:52:36 2016 daemon.info dnsmasq[5396]: forwarded plus.google.com to 192.168.1.1 Mon Mar 14 18:52:36 2016 daemon.info dnsmasq[5396]: reply plus.google.com is 216.58.216.238 Mon Mar 14 18:52:36 2016 daemon.info dnsmasq[5396]: reply plus.google.com is 216.58.216.238 Mon Mar 14 18:52:37 2016 daemon.info dnsmasq[5396]: query[A] clients2.google.com from 10.10.10.228 Mon Mar 14 18:52:37 2016 daemon.info dnsmasq[5396]: forwarded clients2.google.com to 192.168.1.1 Mon Mar 14 18:52:37 2016 daemon.info dnsmasq[5396]: query[A] clients2.google.com from 10.10.10.229 Mon Mar 14 18:52:37 2016 daemon.info dnsmasq[5396]: forwarded clients2.google.com to 192.168.1.1 Mon Mar 14 18:52:37 2016 daemon.info dnsmasq[5396]: reply clients2.google.com is Mon Mar 14 18:52:37 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 216.58.216.238 Mon Mar 14 18:52:37 2016 daemon.info dnsmasq[5396]: reply clients2.google.com is Mon Mar 14 18:52:37 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 216.58.216.238 Mon Mar 14 18:52:39 2016 daemon.info dnsmasq[5396]: query[A] time-ios.apple.com from 10.10.10.212 Mon Mar 14 18:52:39 2016 daemon.info dnsmasq[5396]: forwarded time-ios.apple.com to 192.168.1.1 Mon Mar 14 18:52:39 2016 daemon.info dnsmasq[5396]: query[AAAA] time-ios.apple.com from 10.10.10.212 Mon Mar 14 18:52:39 2016 daemon.info dnsmasq[5396]: forwarded time-ios.apple.com to 192.168.1.1 Mon Mar 14 18:52:39 2016 daemon.info dnsmasq[5396]: reply time-ios.apple.com is Mon Mar 14 18:52:39 2016 daemon.info dnsmasq[5396]: reply time-ios.g.aaplimg.com is NODATA-IPv6 Mon Mar 14 18:52:39 2016 daemon.info dnsmasq[5396]: reply time-ios.apple.com is Mon Mar 14 18:52:39 2016 daemon.info dnsmasq[5396]: reply time-ios.g.aaplimg.com is 17.253.24.253 Mon Mar 14 18:52:39 2016 daemon.info dnsmasq[5396]: reply time-ios.g.aaplimg.com is 17.253.2.253 Mon Mar 14 18:52:39 2016 daemon.info dnsmasq[5396]: reply time-ios.g.aaplimg.com is 17.253.2.125 Mon Mar 14 18:52:39 2016 daemon.info dnsmasq[5396]: query[A] time-ios.g.aaplimg.com from 10.10.10.212 Mon Mar 14 18:52:39 2016 daemon.info dnsmasq[5396]: cached time-ios.g.aaplimg.com is 17.253.2.125 Mon Mar 14 18:52:39 2016 daemon.info dnsmasq[5396]: cached time-ios.g.aaplimg.com is 17.253.2.253 Mon Mar 14 18:52:39 2016 daemon.info dnsmasq[5396]: cached time-ios.g.aaplimg.com is 17.253.24.253 Mon Mar 14 18:52:39 2016 daemon.info dnsmasq[5396]: query[AAAA] time-ios.g.aaplimg.com from 10.10.10.212 Mon Mar 14 18:52:39 2016 daemon.info dnsmasq[5396]: cached time-ios.g.aaplimg.com is NODATA-IPv6 Mon Mar 14 18:52:53 2016 daemon.info dnsmasq[5396]: query[A] settings-win.data.microsoft.com from 10.10.10.228 Mon Mar 14 18:52:53 2016 daemon.info dnsmasq[5396]: forwarded settings-win.data.microsoft.com to 192.168.1.1 Mon Mar 14 18:52:53 2016 daemon.info dnsmasq[5396]: query[AAAA] settings-win.data.microsoft.com from 10.10.10.228 Mon Mar 14 18:52:53 2016 daemon.info dnsmasq[5396]: forwarded settings-win.data.microsoft.com to 192.168.1.1 Mon Mar 14 18:52:53 2016 daemon.info dnsmasq[5396]: query[A] settings-win.data.microsoft.com from 10.10.10.229 Mon Mar 14 18:52:53 2016 daemon.info dnsmasq[5396]: forwarded settings-win.data.microsoft.com to 192.168.1.1 Mon Mar 14 18:52:53 2016 daemon.info dnsmasq[5396]: reply settings-win.data.microsoft.com is Mon Mar 14 18:52:53 2016 daemon.info dnsmasq[5396]: reply settings.data.glbdns2.microsoft.com is Mon Mar 14 18:52:53 2016 daemon.info dnsmasq[5396]: reply onesettings-cy2.metron.live.com.nsatc.net is 64.4.54.253 Mon Mar 14 18:52:53 2016 daemon.info dnsmasq[5396]: query[AAAA] settings-win.data.microsoft.com from 10.10.10.229 Mon Mar 14 18:52:53 2016 daemon.info dnsmasq[5396]: cached settings-win.data.microsoft.com is Mon Mar 14 18:52:53 2016 daemon.info dnsmasq[5396]: cached settings.data.glbdns2.microsoft.com is Mon Mar 14 18:52:53 2016 daemon.info dnsmasq[5396]: forwarded settings-win.data.microsoft.com to 192.168.1.1 Mon Mar 14 18:52:53 2016 daemon.info dnsmasq[5396]: reply settings-win.data.microsoft.com is Mon Mar 14 18:52:53 2016 daemon.info dnsmasq[5396]: reply settings.data.glbdns2.microsoft.com is Mon Mar 14 18:52:53 2016 daemon.info dnsmasq[5396]: reply onesettings-cy2.metron.live.com.nsatc.net is 64.4.54.253 Mon Mar 14 18:52:53 2016 daemon.info dnsmasq[5396]: reply settings-win.data.microsoft.com is Mon Mar 14 18:52:53 2016 daemon.info dnsmasq[5396]: reply settings.data.glbdns2.microsoft.com is Mon Mar 14 18:52:53 2016 daemon.info dnsmasq[5396]: reply onesettings-cy2.metron.live.com.nsatc.net is NODATA-IPv6 Mon Mar 14 18:52:53 2016 daemon.info dnsmasq[5396]: reply settings-win.data.microsoft.com is Mon Mar 14 18:52:53 2016 daemon.info dnsmasq[5396]: reply settings.data.glbdns2.microsoft.com is Mon Mar 14 18:52:53 2016 daemon.info dnsmasq[5396]: reply onesettings-cy2.metron.live.com.nsatc.net is NODATA-IPv6 Mon Mar 14 18:52:53 2016 daemon.info dnsmasq[5396]: query[AAAA] settings-win.data.microsoft.com from 10.10.10.228 Mon Mar 14 18:52:53 2016 daemon.info dnsmasq[5396]: cached settings-win.data.microsoft.com is Mon Mar 14 18:52:53 2016 daemon.info dnsmasq[5396]: cached settings.data.glbdns2.microsoft.com is Mon Mar 14 18:52:53 2016 daemon.info dnsmasq[5396]: cached onesettings-cy2.metron.live.com.nsatc.net is NODATA-IPv6 Mon Mar 14 18:52:53 2016 daemon.info dnsmasq[5396]: query[AAAA] settings-win.data.microsoft.com from 10.10.10.229 Mon Mar 14 18:52:53 2016 daemon.info dnsmasq[5396]: cached settings-win.data.microsoft.com is Mon Mar 14 18:52:53 2016 daemon.info dnsmasq[5396]: cached settings.data.glbdns2.microsoft.com is Mon Mar 14 18:52:53 2016 daemon.info dnsmasq[5396]: cached onesettings-cy2.metron.live.com.nsatc.net is NODATA-IPv6 Mon Mar 14 18:52:59 2016 daemon.info dnsmasq[5396]: query[A] clients4.google.com from 10.10.10.228 Mon Mar 14 18:52:59 2016 daemon.info dnsmasq[5396]: forwarded clients4.google.com to 192.168.1.1 Mon Mar 14 18:52:59 2016 daemon.info dnsmasq[5396]: query[A] clients4.google.com from 10.10.10.229 Mon Mar 14 18:52:59 2016 daemon.info dnsmasq[5396]: forwarded clients4.google.com to 192.168.1.1 Mon Mar 14 18:52:59 2016 daemon.info dnsmasq[5396]: reply clients4.google.com is Mon Mar 14 18:52:59 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 216.58.216.238 Mon Mar 14 18:52:59 2016 daemon.info dnsmasq[5396]: reply clients4.google.com is Mon Mar 14 18:52:59 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 216.58.216.238 Mon Mar 14 18:53:01 2016 daemon.info dnsmasq[5396]: query[A] e6858.dscc.akamaiedge.net from 10.10.10.211 Mon Mar 14 18:53:01 2016 daemon.info dnsmasq[5396]: forwarded e6858.dscc.akamaiedge.net to 192.168.1.1 Mon Mar 14 18:53:01 2016 daemon.info dnsmasq[5396]: reply e6858.dscc.akamaiedge.net is 23.12.245.148 Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: query[AAAA] guzzoni.apple.com from 10.10.10.211 Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: forwarded guzzoni.apple.com to 192.168.1.1 Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: query[AAAA] apple.com from 10.10.10.211 Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: forwarded apple.com to 192.168.1.1 Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: query[A] guzzoni.apple.com from 10.10.10.211 Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: forwarded guzzoni.apple.com to 192.168.1.1 Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: reply guzzoni.apple.com is Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: reply origin.guzzoni-apple.com.akadns.net is Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: reply st14p02sa.guzzoni-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: query[AAAA] api.smoot.apple.com from 10.10.10.211 Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: forwarded api.smoot.apple.com to 192.168.1.1 Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: reply guzzoni.apple.com is Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: reply origin.guzzoni-apple.com.akadns.net is Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: reply st14p02sa.guzzoni-apple.com.akadns.net is 17.174.2.5 Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: query[A] api.smoot.apple.com from 10.10.10.211 Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: forwarded api.smoot.apple.com to 192.168.1.1 Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: reply api.smoot.apple.com is Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: reply api.smoot-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: query[AAAA] r3---sn-81fpgxaxnn-vgqe.googlevideo.com from 10.10.10.211 Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: forwarded r3---sn-81fpgxaxnn-vgqe.googlevideo.com to 192.168.1.1 Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: reply api.smoot.apple.com is Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: reply api.smoot-apple.com.akadns.net is 17.249.73.246 Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: query[A] r3---sn-81fpgxaxnn-vgqe.googlevideo.com from 10.10.10.211 Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: forwarded r3---sn-81fpgxaxnn-vgqe.googlevideo.com to 192.168.1.1 Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: query[AAAA] e6858.dscc.akamaiedge.net from 10.10.10.211 Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: forwarded e6858.dscc.akamaiedge.net to 192.168.1.1 Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: query[AAAA] st14p02sa.guzzoni-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: cached st14p02sa.guzzoni-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: query[A] st14p02sa.guzzoni-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: cached st14p02sa.guzzoni-apple.com.akadns.net is 17.174.2.5 Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: query[AAAA] api.smoot-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: cached api.smoot-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: query[A] api.smoot-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: cached api.smoot-apple.com.akadns.net is 17.249.73.246 Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: reply r3---sn-81fpgxaxnn-vgqe.googlevideo.com is Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: reply r3.sn-81fpgxaxnn-vgqe.googlevideo.com is 2600:805:110::e Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: reply r3---sn-81fpgxaxnn-vgqe.googlevideo.com is Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: reply r3.sn-81fpgxaxnn-vgqe.googlevideo.com is 63.84.3.14 Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: query[DS] com from 10.10.10.223 Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: config com is NODATA Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: reply e6858.dscc.akamaiedge.net is 2600:1404:e:194::1aca Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: reply e6858.dscc.akamaiedge.net is 2600:1404:e:18d::1aca Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: query[PTR] lb._dns-sd._udp.0.10.10.10.in-addr.arpa from 10.10.10.223 Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: forwarded lb._dns-sd._udp.0.10.10.10.in-addr.arpa to 192.168.1.1 Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: query[PTR] lb._dns-sd._udp.lan from 10.10.10.223 Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: config lb._dns-sd._udp.lan is NXDOMAIN Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: query[PTR] 223.10.10.10.in-addr.arpa from 10.10.10.223 Mon Mar 14 18:53:02 2016 daemon.info dnsmasq[5396]: config 10.10.10.223 is NXDOMAIN Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: query[A] 5-courier.sandbox.push.apple.com from 10.10.10.223 Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: forwarded 5-courier.sandbox.push.apple.com to 192.168.1.1 Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: query[A] 18-courier.push.apple.com from 10.10.10.223 Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: forwarded 18-courier.push.apple.com to 192.168.1.1 Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: reply 5-courier.sandbox.push.apple.com is Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: reply 5.courier-sandbox-push-apple.com.akadns.net is 17.172.232.8 Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: reply 5.courier-sandbox-push-apple.com.akadns.net is 17.172.232.9 Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: reply 5.courier-sandbox-push-apple.com.akadns.net is 17.172.238.201 Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: reply 5.courier-sandbox-push-apple.com.akadns.net is 17.172.232.12 Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: reply 5.courier-sandbox-push-apple.com.akadns.net is 17.172.232.11 Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: reply 18-courier.push.apple.com is Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: reply 18.courier-push-apple.com.akadns.net is Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: reply us-courier.push-apple.com.akadns.net is 17.110.229.141 Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: reply us-courier.push-apple.com.akadns.net is 17.110.230.25 Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: reply us-courier.push-apple.com.akadns.net is 17.110.226.210 Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: reply us-courier.push-apple.com.akadns.net is 17.110.225.78 Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: reply us-courier.push-apple.com.akadns.net is 17.110.228.145 Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: reply us-courier.push-apple.com.akadns.net is 17.110.225.77 Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: reply us-courier.push-apple.com.akadns.net is 17.110.226.9 Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: reply us-courier.push-apple.com.akadns.net is 17.110.229.149 Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: query[A] www.apple.com from 10.10.10.223 Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: forwarded www.apple.com to 192.168.1.1 Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: query[A] 1-courier.push.apple.com from 10.10.10.223 Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: forwarded 1-courier.push.apple.com to 192.168.1.1 Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: reply www.apple.com is Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: reply www.apple.com.edgekey.net is Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: reply www.apple.com.edgekey.net.globalredir.akadns.net is Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: reply e6858.dscc.akamaiedge.net is 23.12.245.148 Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: query[A] apple.com from 10.10.10.223 Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: forwarded apple.com to 192.168.1.1 Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: reply 1-courier.push.apple.com is Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: reply 1.courier-push-apple.com.akadns.net is Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: reply us-courier.push-apple.com.akadns.net is 17.110.229.147 Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: reply us-courier.push-apple.com.akadns.net is 17.110.224.18 Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: reply us-courier.push-apple.com.akadns.net is 17.110.225.212 Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: reply us-courier.push-apple.com.akadns.net is 17.110.224.205 Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: reply us-courier.push-apple.com.akadns.net is 17.110.225.86 Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: reply us-courier.push-apple.com.akadns.net is 17.110.224.78 Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: reply us-courier.push-apple.com.akadns.net is 17.110.229.218 Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: reply us-courier.push-apple.com.akadns.net is 17.110.230.25 Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: query[A] login.live.com from 10.10.10.223 Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: cached login.live.com is Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: cached login.live.com.nsatc.net is 131.253.61.100 Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: cached login.live.com.nsatc.net is 131.253.61.96 Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: cached login.live.com.nsatc.net is 131.253.61.82 Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: cached login.live.com.nsatc.net is 131.253.61.80 Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: reply apple.com is 17.172.224.47 Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: reply apple.com is 17.178.96.59 Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: reply apple.com is 17.142.160.59 Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: query[A] 1-courier.sandbox.push.apple.com from 10.10.10.223 Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: forwarded 1-courier.sandbox.push.apple.com to 192.168.1.1 Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: reply 1-courier.sandbox.push.apple.com is Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: reply 1.courier-sandbox-push-apple.com.akadns.net is 17.172.232.12 Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: reply 1.courier-sandbox-push-apple.com.akadns.net is 17.172.232.11 Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: reply 1.courier-sandbox-push-apple.com.akadns.net is 17.172.232.8 Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: reply 1.courier-sandbox-push-apple.com.akadns.net is 17.172.232.9 Mon Mar 14 18:53:03 2016 daemon.info dnsmasq[5396]: reply 1.courier-sandbox-push-apple.com.akadns.net is 17.172.238.201 Mon Mar 14 18:53:04 2016 daemon.info dnsmasq[5396]: query[A] d.docs.live.net from 10.10.10.223 Mon Mar 14 18:53:04 2016 daemon.info dnsmasq[5396]: cached d.docs.live.net is Mon Mar 14 18:53:04 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is 134.170.108.96 Mon Mar 14 18:53:04 2016 daemon.info dnsmasq-dhcp[5396]: DHCPREQUEST(br-lan) 10.10.10.223 a8:66:7f:12:f1:ae Mon Mar 14 18:53:04 2016 daemon.info dnsmasq-dhcp[5396]: DHCPACK(br-lan) 10.10.10.223 a8:66:7f:12:f1:ae MacBook_Denise Mon Mar 14 18:53:04 2016 daemon.info dnsmasq[5396]: query[A] v10.vortex-win.data.microsoft.com from 10.10.10.228 Mon Mar 14 18:53:04 2016 daemon.info dnsmasq[5396]: forwarded v10.vortex-win.data.microsoft.com to 192.168.1.1 Mon Mar 14 18:53:04 2016 daemon.info dnsmasq[5396]: query[AAAA] v10.vortex-win.data.microsoft.com from 10.10.10.228 Mon Mar 14 18:53:04 2016 daemon.info dnsmasq[5396]: forwarded v10.vortex-win.data.microsoft.com to 192.168.1.1 Mon Mar 14 18:53:04 2016 daemon.info dnsmasq[5396]: query[A] v10.vortex-win.data.microsoft.com from 10.10.10.229 Mon Mar 14 18:53:04 2016 daemon.info dnsmasq[5396]: forwarded v10.vortex-win.data.microsoft.com to 192.168.1.1 Mon Mar 14 18:53:05 2016 daemon.info dnsmasq[5396]: reply v10.vortex-win.data.microsoft.com is Mon Mar 14 18:53:05 2016 daemon.info dnsmasq[5396]: reply v10.vortex-win.data.metron.live.com.nsatc.net is Mon Mar 14 18:53:05 2016 daemon.info dnsmasq[5396]: reply vortex.data.glbdns2.microsoft.com is Mon Mar 14 18:53:05 2016 daemon.info dnsmasq[5396]: reply vortex-cy2.metron.live.com.nsatc.net is 64.4.54.254 Mon Mar 14 18:53:05 2016 daemon.info dnsmasq[5396]: query[AAAA] v10.vortex-win.data.microsoft.com from 10.10.10.229 Mon Mar 14 18:53:05 2016 daemon.info dnsmasq[5396]: cached v10.vortex-win.data.microsoft.com is Mon Mar 14 18:53:05 2016 daemon.info dnsmasq[5396]: cached v10.vortex-win.data.metron.live.com.nsatc.net is Mon Mar 14 18:53:05 2016 daemon.info dnsmasq[5396]: cached vortex.data.glbdns2.microsoft.com is Mon Mar 14 18:53:05 2016 daemon.info dnsmasq[5396]: forwarded v10.vortex-win.data.microsoft.com to 192.168.1.1 Mon Mar 14 18:53:05 2016 daemon.info dnsmasq[5396]: reply v10.vortex-win.data.microsoft.com is Mon Mar 14 18:53:05 2016 daemon.info dnsmasq[5396]: reply v10.vortex-win.data.metron.live.com.nsatc.net is Mon Mar 14 18:53:05 2016 daemon.info dnsmasq[5396]: reply vortex.data.glbdns2.microsoft.com is Mon Mar 14 18:53:05 2016 daemon.info dnsmasq[5396]: reply vortex-cy2.metron.live.com.nsatc.net is 64.4.54.254 Mon Mar 14 18:53:05 2016 daemon.info dnsmasq[5396]: reply v10.vortex-win.data.microsoft.com is Mon Mar 14 18:53:05 2016 daemon.info dnsmasq[5396]: reply v10.vortex-win.data.metron.live.com.nsatc.net is Mon Mar 14 18:53:05 2016 daemon.info dnsmasq[5396]: reply vortex.data.glbdns2.microsoft.com is Mon Mar 14 18:53:05 2016 daemon.info dnsmasq[5396]: reply vortex-cy2.metron.live.com.nsatc.net is NODATA-IPv6 Mon Mar 14 18:53:05 2016 daemon.info dnsmasq[5396]: reply v10.vortex-win.data.microsoft.com is Mon Mar 14 18:53:05 2016 daemon.info dnsmasq[5396]: reply v10.vortex-win.data.metron.live.com.nsatc.net is Mon Mar 14 18:53:05 2016 daemon.info dnsmasq[5396]: reply vortex.data.glbdns2.microsoft.com is Mon Mar 14 18:53:05 2016 daemon.info dnsmasq[5396]: reply vortex-cy2.metron.live.com.nsatc.net is NODATA-IPv6 Mon Mar 14 18:53:05 2016 daemon.info dnsmasq[5396]: query[AAAA] v10.vortex-win.data.microsoft.com from 10.10.10.228 Mon Mar 14 18:53:05 2016 daemon.info dnsmasq[5396]: cached v10.vortex-win.data.microsoft.com is Mon Mar 14 18:53:05 2016 daemon.info dnsmasq[5396]: cached v10.vortex-win.data.metron.live.com.nsatc.net is Mon Mar 14 18:53:05 2016 daemon.info dnsmasq[5396]: cached vortex.data.glbdns2.microsoft.com is Mon Mar 14 18:53:05 2016 daemon.info dnsmasq[5396]: cached vortex-cy2.metron.live.com.nsatc.net is NODATA-IPv6 Mon Mar 14 18:53:05 2016 daemon.info dnsmasq[5396]: query[AAAA] v10.vortex-win.data.microsoft.com from 10.10.10.229 Mon Mar 14 18:53:05 2016 daemon.info dnsmasq[5396]: cached v10.vortex-win.data.microsoft.com is Mon Mar 14 18:53:05 2016 daemon.info dnsmasq[5396]: cached v10.vortex-win.data.metron.live.com.nsatc.net is Mon Mar 14 18:53:05 2016 daemon.info dnsmasq[5396]: cached vortex.data.glbdns2.microsoft.com is Mon Mar 14 18:53:05 2016 daemon.info dnsmasq[5396]: cached vortex-cy2.metron.live.com.nsatc.net is NODATA-IPv6 Mon Mar 14 18:53:06 2016 daemon.info dnsmasq[5396]: query[A] p44-caldav.icloud.com from 10.10.10.223 Mon Mar 14 18:53:06 2016 daemon.info dnsmasq[5396]: forwarded p44-caldav.icloud.com to 192.168.1.1 Mon Mar 14 18:53:06 2016 daemon.info dnsmasq[5396]: reply p44-caldav.icloud.com is Mon Mar 14 18:53:06 2016 daemon.info dnsmasq[5396]: reply p44-caldav-current.edge.icloud.apple-dns.net is 17.248.131.173 Mon Mar 14 18:53:07 2016 daemon.info dnsmasq[5396]: query[A] tgbbwur.lan from 10.10.10.223 Mon Mar 14 18:53:07 2016 daemon.info dnsmasq[5396]: config tgbbwur.lan is NXDOMAIN Mon Mar 14 18:53:07 2016 daemon.info dnsmasq[5396]: query[A] uuelycldkr.lan from 10.10.10.223 Mon Mar 14 18:53:07 2016 daemon.info dnsmasq[5396]: config uuelycldkr.lan is NXDOMAIN Mon Mar 14 18:53:07 2016 daemon.info dnsmasq[5396]: query[A] nfohocguxsthiin.lan from 10.10.10.223 Mon Mar 14 18:53:07 2016 daemon.info dnsmasq[5396]: config nfohocguxsthiin.lan is NXDOMAIN Mon Mar 14 18:53:07 2016 daemon.info dnsmasq[5396]: query[PTR] lb._dns-sd._udp.0.10.10.10.in-addr.arpa from 10.10.10.223 Mon Mar 14 18:53:07 2016 daemon.info dnsmasq[5396]: forwarded lb._dns-sd._udp.0.10.10.10.in-addr.arpa to 192.168.1.1 Mon Mar 14 18:53:07 2016 daemon.info dnsmasq[5396]: query[PTR] lb._dns-sd._udp.lan from 10.10.10.223 Mon Mar 14 18:53:07 2016 daemon.info dnsmasq[5396]: config lb._dns-sd._udp.lan is NXDOMAIN Mon Mar 14 18:53:07 2016 daemon.info dnsmasq[5396]: query[A] tgbbwur.lan from 10.10.10.223 Mon Mar 14 18:53:07 2016 daemon.info dnsmasq[5396]: config tgbbwur.lan is NXDOMAIN Mon Mar 14 18:53:07 2016 daemon.info dnsmasq[5396]: query[PTR] 223.10.10.10.in-addr.arpa from 10.10.10.223 Mon Mar 14 18:53:07 2016 daemon.info dnsmasq[5396]: DHCP 10.10.10.223 is MacBook_Denise.lan Mon Mar 14 18:53:07 2016 daemon.info dnsmasq[5396]: query[A] uuelycldkr.lan from 10.10.10.223 Mon Mar 14 18:53:07 2016 daemon.info dnsmasq[5396]: config uuelycldkr.lan is NXDOMAIN Mon Mar 14 18:53:07 2016 daemon.info dnsmasq[5396]: query[A] nfohocguxsthiin.lan from 10.10.10.223 Mon Mar 14 18:53:07 2016 daemon.info dnsmasq[5396]: config nfohocguxsthiin.lan is NXDOMAIN Mon Mar 14 18:53:07 2016 daemon.info dnsmasq[5396]: query[A] www.google.com from 10.10.10.223 Mon Mar 14 18:53:07 2016 daemon.info dnsmasq[5396]: forwarded www.google.com to 192.168.1.1 Mon Mar 14 18:53:08 2016 daemon.info dnsmasq[5396]: reply www.google.com is 74.125.141.99 Mon Mar 14 18:53:08 2016 daemon.info dnsmasq[5396]: reply www.google.com is 74.125.141.147 Mon Mar 14 18:53:08 2016 daemon.info dnsmasq[5396]: reply www.google.com is 74.125.141.106 Mon Mar 14 18:53:08 2016 daemon.info dnsmasq[5396]: reply www.google.com is 74.125.141.105 Mon Mar 14 18:53:08 2016 daemon.info dnsmasq[5396]: reply www.google.com is 74.125.141.103 Mon Mar 14 18:53:08 2016 daemon.info dnsmasq[5396]: reply www.google.com is 74.125.141.104 Mon Mar 14 18:53:13 2016 daemon.info dnsmasq[5396]: query[AAAA] d.docs.live.net from 10.10.10.223 Mon Mar 14 18:53:13 2016 daemon.info dnsmasq[5396]: cached d.docs.live.net is Mon Mar 14 18:53:13 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 18:53:13 2016 daemon.info dnsmasq[5396]: query[A] d.docs.live.net from 10.10.10.223 Mon Mar 14 18:53:13 2016 daemon.info dnsmasq[5396]: cached d.docs.live.net is Mon Mar 14 18:53:13 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is 134.170.108.96 Mon Mar 14 18:53:13 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 18:53:13 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 18:53:14 2016 daemon.info dnsmasq[5396]: query[A] clients6.google.com from 10.10.10.223 Mon Mar 14 18:53:14 2016 daemon.info dnsmasq[5396]: forwarded clients6.google.com to 192.168.1.1 Mon Mar 14 18:53:14 2016 daemon.info dnsmasq[5396]: query[AAAA] clients6.google.com from 10.10.10.223 Mon Mar 14 18:53:14 2016 daemon.info dnsmasq[5396]: forwarded clients6.google.com to 192.168.1.1 Mon Mar 14 18:53:14 2016 daemon.info dnsmasq[5396]: reply clients6.google.com is Mon Mar 14 18:53:14 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 216.58.216.238 Mon Mar 14 18:53:14 2016 daemon.info dnsmasq[5396]: reply clients6.google.com is Mon Mar 14 18:53:14 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 2607:f8b0:4009:809::200e Mon Mar 14 18:53:14 2016 daemon.info dnsmasq[5396]: query[AAAA] clients.l.google.com from 10.10.10.223 Mon Mar 14 18:53:14 2016 daemon.info dnsmasq[5396]: cached clients.l.google.com is 2607:f8b0:4009:809::200e Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: query[A] o.aolcdn.com from 10.10.10.228 Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: forwarded o.aolcdn.com to 192.168.1.1 Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: query[AAAA] o.aolcdn.com from 10.10.10.228 Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: forwarded o.aolcdn.com to 192.168.1.1 Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: query[A] o.aolcdn.com from 10.10.10.229 Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: forwarded o.aolcdn.com to 192.168.1.1 Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: reply o.aolcdn.com is Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: reply o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 23.77.232.155 Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 23.77.232.170 Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: query[AAAA] o.aolcdn.com from 10.10.10.229 Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: cached o.aolcdn.com is Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: cached o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: forwarded o.aolcdn.com to 192.168.1.1 Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: reply o.aolcdn.com is Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: reply o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 2600:1404:e::174d:e91b Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 2600:1404:e::174d:e869 Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: reply o.aolcdn.com is Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: reply o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 23.77.232.155 Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 23.77.232.170 Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: reply o.aolcdn.com is Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: reply o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 2600:1404:e::174d:e91b Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 2600:1404:e::174d:e869 Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.228 Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: reply pool4.moatads.com is 54.209.160.149 Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: reply pool4.moatads.com is 54.209.160.149 Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: reply pool4.moatads.com is NODATA-IPv6 Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: reply pool4.moatads.com is NODATA-IPv6 Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 18:53:18 2016 daemon.info dnsmasq[5396]: cached pool4.moatads.com is NODATA-IPv6 Mon Mar 14 18:53:24 2016 daemon.info dnsmasq[5396]: query[A] clients2.google.com from 10.10.10.223 Mon Mar 14 18:53:24 2016 daemon.info dnsmasq[5396]: forwarded clients2.google.com to 192.168.1.1 Mon Mar 14 18:53:24 2016 daemon.info dnsmasq[5396]: reply clients2.google.com is Mon Mar 14 18:53:24 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 216.58.216.238 Mon Mar 14 18:53:42 2016 daemon.info dnsmasq[5396]: query[A] 9.client-channel.google.com from 10.10.10.223 Mon Mar 14 18:53:42 2016 daemon.info dnsmasq[5396]: forwarded 9.client-channel.google.com to 192.168.1.1 Mon Mar 14 18:53:42 2016 daemon.info dnsmasq[5396]: query[AAAA] 9.client-channel.google.com from 10.10.10.223 Mon Mar 14 18:53:42 2016 daemon.info dnsmasq[5396]: forwarded 9.client-channel.google.com to 192.168.1.1 Mon Mar 14 18:53:42 2016 daemon.info dnsmasq[5396]: reply 9.client-channel.google.com is 74.125.207.189 Mon Mar 14 18:53:42 2016 daemon.info dnsmasq[5396]: reply 9.client-channel.google.com is 2607:f8b0:4001:c07::bd Mon Mar 14 18:53:48 2016 daemon.info dnsmasq[5396]: query[AAAA] nexus.officeapps.live.com from 10.10.10.223 Mon Mar 14 18:53:48 2016 daemon.info dnsmasq[5396]: forwarded nexus.officeapps.live.com to 192.168.1.1 Mon Mar 14 18:53:48 2016 daemon.info dnsmasq[5396]: query[A] nexus.officeapps.live.com from 10.10.10.223 Mon Mar 14 18:53:48 2016 daemon.info dnsmasq[5396]: forwarded nexus.officeapps.live.com to 192.168.1.1 Mon Mar 14 18:53:48 2016 daemon.info dnsmasq[5396]: reply nexus.officeapps.live.com is Mon Mar 14 18:53:48 2016 daemon.info dnsmasq[5396]: reply prod-w.nexus.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 18:53:48 2016 daemon.info dnsmasq[5396]: reply nexus.officeapps.live.com is Mon Mar 14 18:53:48 2016 daemon.info dnsmasq[5396]: reply prod-w.nexus.live.com.akadns.net is 191.238.177.236 Mon Mar 14 18:53:48 2016 daemon.info dnsmasq[5396]: query[AAAA] prod-w.nexus.live.com.akadns.net from 10.10.10.223 Mon Mar 14 18:53:48 2016 daemon.info dnsmasq[5396]: cached prod-w.nexus.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 18:53:48 2016 daemon.info dnsmasq[5396]: query[A] prod-w.nexus.live.com.akadns.net from 10.10.10.223 Mon Mar 14 18:53:48 2016 daemon.info dnsmasq[5396]: cached prod-w.nexus.live.com.akadns.net is 191.238.177.236 Mon Mar 14 18:53:53 2016 daemon.info dnsmasq[5396]: query[A] crl.microsoft.com from 10.10.10.228 Mon Mar 14 18:53:53 2016 daemon.info dnsmasq[5396]: forwarded crl.microsoft.com to 192.168.1.1 Mon Mar 14 18:53:53 2016 daemon.info dnsmasq[5396]: query[AAAA] crl.microsoft.com from 10.10.10.228 Mon Mar 14 18:53:53 2016 daemon.info dnsmasq[5396]: forwarded crl.microsoft.com to 192.168.1.1 Mon Mar 14 18:53:53 2016 daemon.info dnsmasq[5396]: query[A] crl.microsoft.com from 10.10.10.229 Mon Mar 14 18:53:53 2016 daemon.info dnsmasq[5396]: forwarded crl.microsoft.com to 192.168.1.1 Mon Mar 14 18:53:53 2016 daemon.info dnsmasq[5396]: reply crl.microsoft.com is Mon Mar 14 18:53:53 2016 daemon.info dnsmasq[5396]: reply crl.www.ms.akadns.net is Mon Mar 14 18:53:53 2016 daemon.info dnsmasq[5396]: reply a1363.dscg.akamai.net is 23.77.232.169 Mon Mar 14 18:53:53 2016 daemon.info dnsmasq[5396]: reply a1363.dscg.akamai.net is 23.77.232.155 Mon Mar 14 18:53:53 2016 daemon.info dnsmasq[5396]: query[AAAA] crl.microsoft.com from 10.10.10.229 Mon Mar 14 18:53:53 2016 daemon.info dnsmasq[5396]: cached crl.microsoft.com is Mon Mar 14 18:53:53 2016 daemon.info dnsmasq[5396]: cached crl.www.ms.akadns.net is Mon Mar 14 18:53:53 2016 daemon.info dnsmasq[5396]: forwarded crl.microsoft.com to 192.168.1.1 Mon Mar 14 18:53:53 2016 daemon.info dnsmasq[5396]: reply crl.microsoft.com is Mon Mar 14 18:53:53 2016 daemon.info dnsmasq[5396]: reply crl.www.ms.akadns.net is Mon Mar 14 18:53:53 2016 daemon.info dnsmasq[5396]: reply a1363.dscg.akamai.net is 2600:1404:e::174d:e861 Mon Mar 14 18:53:53 2016 daemon.info dnsmasq[5396]: reply a1363.dscg.akamai.net is 2600:1404:e::174d:e923 Mon Mar 14 18:53:53 2016 daemon.info dnsmasq[5396]: reply crl.microsoft.com is Mon Mar 14 18:53:53 2016 daemon.info dnsmasq[5396]: reply crl.www.ms.akadns.net is Mon Mar 14 18:53:53 2016 daemon.info dnsmasq[5396]: reply a1363.dscg.akamai.net is 23.77.232.169 Mon Mar 14 18:53:53 2016 daemon.info dnsmasq[5396]: reply a1363.dscg.akamai.net is 23.77.232.155 Mon Mar 14 18:53:53 2016 daemon.info dnsmasq[5396]: reply crl.microsoft.com is Mon Mar 14 18:53:53 2016 daemon.info dnsmasq[5396]: reply crl.www.ms.akadns.net is Mon Mar 14 18:53:53 2016 daemon.info dnsmasq[5396]: reply a1363.dscg.akamai.net is 2600:1404:e::174d:e861 Mon Mar 14 18:53:53 2016 daemon.info dnsmasq[5396]: reply a1363.dscg.akamai.net is 2600:1404:e::174d:e923 Mon Mar 14 18:53:54 2016 daemon.info dnsmasq-dhcp[5396]: DHCPREQUEST(br-lan) 10.10.10.240 00:26:ab:01:8d:e4 Mon Mar 14 18:53:54 2016 daemon.info dnsmasq-dhcp[5396]: DHCPACK(br-lan) 10.10.10.240 00:26:ab:01:8d:e4 Epson_Printer Mon Mar 14 18:53:54 2016 daemon.info dnsmasq[5396]: query[A] www.microsoft.com from 10.10.10.228 Mon Mar 14 18:53:54 2016 daemon.info dnsmasq[5396]: forwarded www.microsoft.com to 192.168.1.1 Mon Mar 14 18:53:54 2016 daemon.info dnsmasq[5396]: query[AAAA] www.microsoft.com from 10.10.10.228 Mon Mar 14 18:53:54 2016 daemon.info dnsmasq[5396]: forwarded www.microsoft.com to 192.168.1.1 Mon Mar 14 18:53:54 2016 daemon.info dnsmasq[5396]: query[A] www.microsoft.com from 10.10.10.229 Mon Mar 14 18:53:54 2016 daemon.info dnsmasq[5396]: forwarded www.microsoft.com to 192.168.1.1 Mon Mar 14 18:53:54 2016 daemon.info dnsmasq[5396]: reply www.microsoft.com is Mon Mar 14 18:53:54 2016 daemon.info dnsmasq[5396]: reply www.microsoft.com-c.edgekey.net is Mon Mar 14 18:53:54 2016 daemon.info dnsmasq[5396]: reply www.microsoft.com-c.edgekey.net.globalredir.akadns.net is Mon Mar 14 18:53:54 2016 daemon.info dnsmasq[5396]: reply e10088.dspb.akamaiedge.net is 23.12.250.144 Mon Mar 14 18:53:54 2016 daemon.info dnsmasq[5396]: query[AAAA] www.microsoft.com from 10.10.10.229 Mon Mar 14 18:53:54 2016 daemon.info dnsmasq[5396]: cached www.microsoft.com is Mon Mar 14 18:53:54 2016 daemon.info dnsmasq[5396]: cached www.microsoft.com-c.edgekey.net is Mon Mar 14 18:53:54 2016 daemon.info dnsmasq[5396]: cached www.microsoft.com-c.edgekey.net.globalredir.akadns.net is Mon Mar 14 18:53:54 2016 daemon.info dnsmasq[5396]: forwarded www.microsoft.com to 192.168.1.1 Mon Mar 14 18:53:54 2016 daemon.info dnsmasq[5396]: reply www.microsoft.com is Mon Mar 14 18:53:54 2016 daemon.info dnsmasq[5396]: reply www.microsoft.com-c.edgekey.net is Mon Mar 14 18:53:54 2016 daemon.info dnsmasq[5396]: reply www.microsoft.com-c.edgekey.net.globalredir.akadns.net is Mon Mar 14 18:53:54 2016 daemon.info dnsmasq[5396]: reply e10088.dspb.akamaiedge.net is 2600:1404:e:182::2768 Mon Mar 14 18:53:54 2016 daemon.info dnsmasq[5396]: reply e10088.dspb.akamaiedge.net is 2600:1404:e:193::2768 Mon Mar 14 18:53:54 2016 daemon.info dnsmasq[5396]: reply www.microsoft.com is Mon Mar 14 18:53:54 2016 daemon.info dnsmasq[5396]: reply www.microsoft.com-c.edgekey.net is Mon Mar 14 18:53:54 2016 daemon.info dnsmasq[5396]: reply www.microsoft.com-c.edgekey.net.globalredir.akadns.net is Mon Mar 14 18:53:54 2016 daemon.info dnsmasq[5396]: reply e10088.dspb.akamaiedge.net is 23.12.250.144 Mon Mar 14 18:53:54 2016 daemon.info dnsmasq[5396]: reply www.microsoft.com is Mon Mar 14 18:53:54 2016 daemon.info dnsmasq[5396]: reply www.microsoft.com-c.edgekey.net is Mon Mar 14 18:53:54 2016 daemon.info dnsmasq[5396]: reply www.microsoft.com-c.edgekey.net.globalredir.akadns.net is Mon Mar 14 18:53:54 2016 daemon.info dnsmasq[5396]: reply e10088.dspb.akamaiedge.net is 2600:1404:e:182::2768 Mon Mar 14 18:53:54 2016 daemon.info dnsmasq[5396]: reply e10088.dspb.akamaiedge.net is 2600:1404:e:193::2768 Mon Mar 14 18:53:55 2016 daemon.info dnsmasq[5396]: query[A] services.addons.mozilla.org from 10.10.10.223 Mon Mar 14 18:53:55 2016 daemon.info dnsmasq[5396]: forwarded services.addons.mozilla.org to 192.168.1.1 Mon Mar 14 18:53:55 2016 daemon.info dnsmasq[5396]: reply services.addons.mozilla.org is Mon Mar 14 18:53:55 2016 daemon.info dnsmasq[5396]: reply olympia.prod.mozaws.net is 54.69.215.101 Mon Mar 14 18:53:55 2016 daemon.info dnsmasq[5396]: reply olympia.prod.mozaws.net is 52.35.152.158 Mon Mar 14 18:53:55 2016 daemon.info dnsmasq[5396]: reply olympia.prod.mozaws.net is 52.26.69.56 Mon Mar 14 18:53:55 2016 daemon.info dnsmasq[5396]: reply olympia.prod.mozaws.net is 52.24.217.21 Mon Mar 14 18:53:55 2016 daemon.info dnsmasq[5396]: reply olympia.prod.mozaws.net is 54.68.107.68 Mon Mar 14 18:53:55 2016 daemon.info dnsmasq[5396]: reply olympia.prod.mozaws.net is 52.36.148.12 Mon Mar 14 18:53:55 2016 daemon.info dnsmasq[5396]: query[A] ocsp.digicert.com from 10.10.10.223 Mon Mar 14 18:53:55 2016 daemon.info dnsmasq[5396]: forwarded ocsp.digicert.com to 192.168.1.1 Mon Mar 14 18:53:55 2016 daemon.info dnsmasq[5396]: reply ocsp.digicert.com is Mon Mar 14 18:53:55 2016 daemon.info dnsmasq[5396]: reply cs9.wac.phicdn.net is 72.21.91.29 Mon Mar 14 18:53:55 2016 daemon.info dnsmasq[5396]: query[A] versioncheck-bg.addons.mozilla.org from 10.10.10.223 Mon Mar 14 18:53:55 2016 daemon.info dnsmasq[5396]: forwarded versioncheck-bg.addons.mozilla.org to 192.168.1.1 Mon Mar 14 18:53:55 2016 daemon.info dnsmasq[5396]: query[AAAA] versioncheck-bg.addons.mozilla.org from 10.10.10.223 Mon Mar 14 18:53:55 2016 daemon.info dnsmasq[5396]: forwarded versioncheck-bg.addons.mozilla.org to 192.168.1.1 Mon Mar 14 18:53:55 2016 daemon.info dnsmasq[5396]: query[A] www.eff.org from 10.10.10.223 Mon Mar 14 18:53:55 2016 daemon.info dnsmasq[5396]: forwarded www.eff.org to 192.168.1.1 Mon Mar 14 18:53:55 2016 daemon.info dnsmasq[5396]: reply versioncheck-bg.addons.mozilla.org is Mon Mar 14 18:53:55 2016 daemon.info dnsmasq[5396]: reply versioncheck.prod.mozaws.net is 52.88.112.239 Mon Mar 14 18:53:55 2016 daemon.info dnsmasq[5396]: query[AAAA] www.eff.org from 10.10.10.223 Mon Mar 14 18:53:55 2016 daemon.info dnsmasq[5396]: forwarded www.eff.org to 192.168.1.1 Mon Mar 14 18:53:55 2016 daemon.info dnsmasq[5396]: reply www.eff.org is 69.50.225.155 Mon Mar 14 18:53:55 2016 daemon.info dnsmasq[5396]: query[A] aus5.mozilla.org from 10.10.10.223 Mon Mar 14 18:53:55 2016 daemon.info dnsmasq[5396]: forwarded aus5.mozilla.org to 192.168.1.1 Mon Mar 14 18:53:55 2016 daemon.info dnsmasq[5396]: reply www.eff.org is 2607:f258:102:3::2 Mon Mar 14 18:53:55 2016 daemon.info dnsmasq[5396]: reply versioncheck-bg.addons.mozilla.org is Mon Mar 14 18:53:55 2016 daemon.info dnsmasq[5396]: reply versioncheck.prod.mozaws.net is NODATA-IPv6 Mon Mar 14 18:53:55 2016 daemon.info dnsmasq[5396]: reply aus5.mozilla.org is Mon Mar 14 18:53:55 2016 daemon.info dnsmasq[5396]: reply aus5.external.zlb.scl3.mozilla.com is 63.245.213.47 Mon Mar 14 18:53:55 2016 daemon.info dnsmasq[5396]: reply aus5.external.zlb.scl3.mozilla.com is 63.245.213.48 Mon Mar 14 18:53:55 2016 daemon.info dnsmasq[5396]: reply aus5.external.zlb.scl3.mozilla.com is 63.245.213.49 Mon Mar 14 18:53:56 2016 daemon.info dnsmasq[5396]: query[AAAA] versioncheck.prod.mozaws.net from 10.10.10.223 Mon Mar 14 18:53:56 2016 daemon.info dnsmasq[5396]: cached versioncheck.prod.mozaws.net is NODATA-IPv6 Mon Mar 14 18:54:01 2016 daemon.info dnsmasq[5396]: query[A] skydrive.wns.windows.com from 10.10.10.223 Mon Mar 14 18:54:01 2016 daemon.info dnsmasq[5396]: cached skydrive.wns.windows.com is Mon Mar 14 18:54:01 2016 daemon.info dnsmasq[5396]: forwarded skydrive.wns.windows.com to 192.168.1.1 Mon Mar 14 18:54:01 2016 daemon.info dnsmasq[5396]: query[AAAA] skydrive.wns.windows.com from 10.10.10.223 Mon Mar 14 18:54:01 2016 daemon.info dnsmasq[5396]: forwarded skydrive.wns.windows.com to 192.168.1.1 Mon Mar 14 18:54:01 2016 daemon.info dnsmasq[5396]: reply skydrive.wns.windows.com is Mon Mar 14 18:54:01 2016 daemon.info dnsmasq[5396]: reply client.wns.windows.com is Mon Mar 14 18:54:01 2016 daemon.info dnsmasq[5396]: reply wns.notify.windows.com.akadns.net is Mon Mar 14 18:54:01 2016 daemon.info dnsmasq[5396]: reply americas2.notify.windows.com.akadns.net is Mon Mar 14 18:54:01 2016 daemon.info dnsmasq[5396]: reply bn2.wns.notify.windows.com.akadns.net is Mon Mar 14 18:54:01 2016 daemon.info dnsmasq[5396]: reply bn2wns1.wns.windows.com is 131.253.34.230 Mon Mar 14 18:54:01 2016 daemon.info dnsmasq[5396]: reply skydrive.wns.windows.com is Mon Mar 14 18:54:01 2016 daemon.info dnsmasq[5396]: reply client.wns.windows.com is Mon Mar 14 18:54:01 2016 daemon.info dnsmasq[5396]: reply wns.notify.windows.com.akadns.net is Mon Mar 14 18:54:01 2016 daemon.info dnsmasq[5396]: reply americas2.notify.windows.com.akadns.net is Mon Mar 14 18:54:01 2016 daemon.info dnsmasq[5396]: reply bn2.wns.notify.windows.com.akadns.net is Mon Mar 14 18:54:01 2016 daemon.info dnsmasq[5396]: reply bn2wns1.wns.windows.com is 2a01:111:f004:20::101 Mon Mar 14 18:54:01 2016 daemon.info dnsmasq[5396]: query[AAAA] bn2wns1.wns.windows.com from 10.10.10.223 Mon Mar 14 18:54:01 2016 daemon.info dnsmasq[5396]: cached bn2wns1.wns.windows.com is 2a01:111:f004:20::101 Mon Mar 14 18:54:01 2016 daemon.info dnsmasq[5396]: query[PTR] 230.34.253.131.in-addr.arpa from 10.10.10.223 Mon Mar 14 18:54:01 2016 daemon.info dnsmasq[5396]: forwarded 230.34.253.131.in-addr.arpa to 192.168.1.1 Mon Mar 14 18:54:01 2016 daemon.info dnsmasq[5396]: query[PTR] 1.0.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.0.0.f.1.1.1.0.1.0.a.2.ip6.arpa from 10.10.10.223 Mon Mar 14 18:54:01 2016 daemon.info dnsmasq[5396]: forwarded 1.0.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.0.0.f.1.1.1.0.1.0.a.2.ip6.arpa to 192.168.1.1 Mon Mar 14 18:54:01 2016 daemon.info dnsmasq[5396]: reply 2a01:111:f004:20::101 is bn1ab.wns.windows.com Mon Mar 14 18:54:01 2016 daemon.info dnsmasq[5396]: reply 131.253.34.230 is bn2wns1.wns.windows.com Mon Mar 14 18:54:01 2016 daemon.info dnsmasq[5396]: query[A] BN3SCH020010646.wns.windows.com from 10.10.10.223 Mon Mar 14 18:54:01 2016 daemon.info dnsmasq[5396]: forwarded BN3SCH020010646.wns.windows.com to 192.168.1.1 Mon Mar 14 18:54:01 2016 daemon.info dnsmasq[5396]: query[AAAA] BN3SCH020010646.wns.windows.com from 10.10.10.223 Mon Mar 14 18:54:01 2016 daemon.info dnsmasq[5396]: forwarded BN3SCH020010646.wns.windows.com to 192.168.1.1 Mon Mar 14 18:54:01 2016 daemon.info dnsmasq[5396]: reply BN3SCH020010646.wns.windows.com is 65.52.108.182 Mon Mar 14 18:54:01 2016 daemon.info dnsmasq[5396]: query[PTR] 182.108.52.65.in-addr.arpa from 10.10.10.223 Mon Mar 14 18:54:02 2016 daemon.info dnsmasq[5396]: forwarded 182.108.52.65.in-addr.arpa to 192.168.1.1 Mon Mar 14 18:54:02 2016 daemon.info dnsmasq[5396]: reply 65.52.108.182 is msnbot-65-52-108-182.search.msn.com Mon Mar 14 18:54:02 2016 daemon.info dnsmasq[5396]: query[AAAA] dm2306.storage.live.com from 10.10.10.223 Mon Mar 14 18:54:02 2016 daemon.info dnsmasq[5396]: forwarded dm2306.storage.live.com to 192.168.1.1 Mon Mar 14 18:54:02 2016 daemon.info dnsmasq[5396]: query[A] dm2306.storage.live.com from 10.10.10.223 Mon Mar 14 18:54:02 2016 daemon.info dnsmasq[5396]: forwarded dm2306.storage.live.com to 192.168.1.1 Mon Mar 14 18:54:02 2016 daemon.info dnsmasq[5396]: reply dm2306.storage.live.com is Mon Mar 14 18:54:02 2016 daemon.info dnsmasq[5396]: reply dm2306geo.storage.skyprod.akadns.net is Mon Mar 14 18:54:02 2016 daemon.info dnsmasq[5396]: reply dm2306-storage-live-com.a-0011.a-msedge.net is Mon Mar 14 18:54:02 2016 daemon.info dnsmasq[5396]: reply a-0011.a-msedge.net is 204.79.197.213 Mon Mar 14 18:54:02 2016 daemon.info dnsmasq[5396]: reply dm2306.storage.live.com is Mon Mar 14 18:54:02 2016 daemon.info dnsmasq[5396]: reply dm2306geo.storage.skyprod.akadns.net is Mon Mar 14 18:54:02 2016 daemon.info dnsmasq[5396]: reply dm2306-storage-live-com.a-0011.a-msedge.net is Mon Mar 14 18:54:02 2016 daemon.info dnsmasq[5396]: reply a-0011.a-msedge.net is NODATA-IPv6 Mon Mar 14 18:54:02 2016 daemon.info dnsmasq[5396]: query[AAAA] a-0011.a-msedge.net from 10.10.10.223 Mon Mar 14 18:54:02 2016 daemon.info dnsmasq[5396]: cached a-0011.a-msedge.net is NODATA-IPv6 Mon Mar 14 18:54:05 2016 daemon.info dnsmasq[5396]: query[A] play.google.com from 10.10.10.223 Mon Mar 14 18:54:05 2016 daemon.info dnsmasq[5396]: forwarded play.google.com to 192.168.1.1 Mon Mar 14 18:54:05 2016 daemon.info dnsmasq[5396]: query[AAAA] play.google.com from 10.10.10.223 Mon Mar 14 18:54:05 2016 daemon.info dnsmasq[5396]: forwarded play.google.com to 192.168.1.1 Mon Mar 14 18:54:05 2016 daemon.info dnsmasq[5396]: reply play.google.com is Mon Mar 14 18:54:05 2016 daemon.info dnsmasq[5396]: reply play.l.google.com is 216.58.216.238 Mon Mar 14 18:54:05 2016 daemon.info dnsmasq[5396]: reply play.google.com is Mon Mar 14 18:54:05 2016 daemon.info dnsmasq[5396]: reply play.l.google.com is 2607:f8b0:4009:809::200e Mon Mar 14 18:54:05 2016 daemon.info dnsmasq[5396]: query[AAAA] play.l.google.com from 10.10.10.223 Mon Mar 14 18:54:05 2016 daemon.info dnsmasq[5396]: cached play.l.google.com is 2607:f8b0:4009:809::200e Mon Mar 14 18:54:10 2016 daemon.info dnsmasq[5396]: query[PTR] lb._dns-sd._udp.0.10.10.10.in-addr.arpa from 10.10.10.223 Mon Mar 14 18:54:10 2016 daemon.info dnsmasq[5396]: forwarded lb._dns-sd._udp.0.10.10.10.in-addr.arpa to 192.168.1.1 Mon Mar 14 18:54:10 2016 daemon.info dnsmasq[5396]: query[PTR] lb._dns-sd._udp.lan from 10.10.10.223 Mon Mar 14 18:54:10 2016 daemon.info dnsmasq[5396]: config lb._dns-sd._udp.lan is NXDOMAIN Mon Mar 14 18:54:16 2016 daemon.info dnsmasq[5396]: query[A] mail.google.com from 10.10.10.223 Mon Mar 14 18:54:16 2016 daemon.info dnsmasq[5396]: forwarded mail.google.com to 192.168.1.1 Mon Mar 14 18:54:16 2016 daemon.info dnsmasq[5396]: query[AAAA] mail.google.com from 10.10.10.223 Mon Mar 14 18:54:16 2016 daemon.info dnsmasq[5396]: forwarded mail.google.com to 192.168.1.1 Mon Mar 14 18:54:16 2016 daemon.info dnsmasq[5396]: reply mail.google.com is Mon Mar 14 18:54:16 2016 daemon.info dnsmasq[5396]: reply googlemail.l.google.com is 216.58.216.229 Mon Mar 14 18:54:16 2016 daemon.info dnsmasq[5396]: reply mail.google.com is Mon Mar 14 18:54:16 2016 daemon.info dnsmasq[5396]: reply googlemail.l.google.com is 2607:f8b0:4009:809::2005 Mon Mar 14 18:54:17 2016 daemon.info dnsmasq[5396]: query[AAAA] googlemail.l.google.com from 10.10.10.223 Mon Mar 14 18:54:17 2016 daemon.info dnsmasq[5396]: cached googlemail.l.google.com is 2607:f8b0:4009:809::2005 Mon Mar 14 18:54:20 2016 daemon.info dnsmasq[5396]: query[A] app.procentive.com from 10.10.10.223 Mon Mar 14 18:54:20 2016 daemon.info dnsmasq[5396]: forwarded app.procentive.com to 192.168.1.1 Mon Mar 14 18:54:20 2016 daemon.info dnsmasq[5396]: query[AAAA] app.procentive.com from 10.10.10.223 Mon Mar 14 18:54:20 2016 daemon.info dnsmasq[5396]: forwarded app.procentive.com to 192.168.1.1 Mon Mar 14 18:54:20 2016 daemon.info dnsmasq[5396]: reply app.procentive.com is 66.179.249.115 Mon Mar 14 18:54:25 2016 daemon.info dnsmasq[5396]: query[A] e6858.dscc.akamaiedge.net from 10.10.10.211 Mon Mar 14 18:54:25 2016 daemon.info dnsmasq[5396]: forwarded e6858.dscc.akamaiedge.net to 192.168.1.1 Mon Mar 14 18:54:25 2016 daemon.info dnsmasq[5396]: reply e6858.dscc.akamaiedge.net is 23.12.245.148 Mon Mar 14 18:54:26 2016 daemon.info dnsmasq[5396]: query[AAAA] st14p02sa.guzzoni-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 18:54:26 2016 daemon.info dnsmasq[5396]: cached st14p02sa.guzzoni-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 18:54:26 2016 daemon.info dnsmasq[5396]: query[AAAA] api.smoot-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 18:54:26 2016 daemon.info dnsmasq[5396]: cached api.smoot-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 18:54:26 2016 daemon.info dnsmasq[5396]: query[AAAA] apple.com from 10.10.10.211 Mon Mar 14 18:54:26 2016 daemon.info dnsmasq[5396]: forwarded apple.com to 192.168.1.1 Mon Mar 14 18:54:26 2016 daemon.info dnsmasq[5396]: query[AAAA] e6858.dscc.akamaiedge.net from 10.10.10.211 Mon Mar 14 18:54:26 2016 daemon.info dnsmasq[5396]: forwarded e6858.dscc.akamaiedge.net to 192.168.1.1 Mon Mar 14 18:54:26 2016 daemon.info dnsmasq[5396]: query[A] api.smoot-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 18:54:26 2016 daemon.info dnsmasq[5396]: forwarded api.smoot-apple.com.akadns.net to 192.168.1.1 Mon Mar 14 18:54:26 2016 daemon.info dnsmasq[5396]: reply e6858.dscc.akamaiedge.net is 2600:1404:e:194::1aca Mon Mar 14 18:54:26 2016 daemon.info dnsmasq[5396]: reply e6858.dscc.akamaiedge.net is 2600:1404:e:18d::1aca Mon Mar 14 18:54:26 2016 daemon.info dnsmasq[5396]: reply api.smoot-apple.com.akadns.net is 17.249.73.246 Mon Mar 14 18:54:27 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 18:54:27 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 18:54:27 2016 daemon.info dnsmasq[5396]: query[A] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 18:54:27 2016 daemon.info dnsmasq[5396]: forwarded skydocs.skyprod.akadns.net to 192.168.1.1 Mon Mar 14 18:54:27 2016 daemon.info dnsmasq[5396]: reply skydocs.skyprod.akadns.net is 134.170.104.40 Mon Mar 14 18:54:28 2016 daemon.info dnsmasq[5396]: query[A] apple.com from 10.10.10.211 Mon Mar 14 18:54:28 2016 daemon.info dnsmasq[5396]: forwarded apple.com to 192.168.1.1 Mon Mar 14 18:54:28 2016 daemon.info dnsmasq[5396]: reply apple.com is 17.178.96.59 Mon Mar 14 18:54:28 2016 daemon.info dnsmasq[5396]: reply apple.com is 17.142.160.59 Mon Mar 14 18:54:28 2016 daemon.info dnsmasq[5396]: reply apple.com is 17.172.224.47 Mon Mar 14 18:54:35 2016 daemon.info dnsmasq[5396]: query[A] plus.google.com from 10.10.10.228 Mon Mar 14 18:54:35 2016 daemon.info dnsmasq[5396]: forwarded plus.google.com to 192.168.1.1 Mon Mar 14 18:54:35 2016 daemon.info dnsmasq[5396]: query[A] plus.google.com from 10.10.10.229 Mon Mar 14 18:54:35 2016 daemon.info dnsmasq[5396]: forwarded plus.google.com to 192.168.1.1 Mon Mar 14 18:54:35 2016 daemon.info dnsmasq[5396]: reply plus.google.com is 216.58.216.238 Mon Mar 14 18:54:35 2016 daemon.info dnsmasq[5396]: reply plus.google.com is 216.58.216.238 Mon Mar 14 18:54:35 2016 daemon.info dnsmasq[5396]: query[A] www.google-analytics.com from 10.10.10.228 Mon Mar 14 18:54:35 2016 daemon.info dnsmasq[5396]: forwarded www.google-analytics.com to 192.168.1.1 Mon Mar 14 18:54:35 2016 daemon.info dnsmasq[5396]: query[A] www.google-analytics.com from 10.10.10.229 Mon Mar 14 18:54:35 2016 daemon.info dnsmasq[5396]: forwarded www.google-analytics.com to 192.168.1.1 Mon Mar 14 18:54:35 2016 daemon.info dnsmasq[5396]: reply www.google-analytics.com is Mon Mar 14 18:54:35 2016 daemon.info dnsmasq[5396]: reply www-google-analytics.l.google.com is 216.58.216.238 Mon Mar 14 18:54:35 2016 daemon.info dnsmasq[5396]: reply www.google-analytics.com is Mon Mar 14 18:54:35 2016 daemon.info dnsmasq[5396]: reply www-google-analytics.l.google.com is 216.58.216.238 Mon Mar 14 18:54:37 2016 daemon.info dnsmasq[5396]: query[A] webhook.logentries.com from 10.10.10.228 Mon Mar 14 18:54:37 2016 daemon.info dnsmasq[5396]: forwarded webhook.logentries.com to 192.168.1.1 Mon Mar 14 18:54:37 2016 daemon.info dnsmasq[5396]: query[A] webhook.logentries.com from 10.10.10.229 Mon Mar 14 18:54:37 2016 daemon.info dnsmasq[5396]: forwarded webhook.logentries.com to 192.168.1.1 Mon Mar 14 18:54:37 2016 daemon.info dnsmasq[5396]: reply webhook.logentries.com is 54.246.209.52 Mon Mar 14 18:54:37 2016 daemon.info dnsmasq[5396]: reply webhook.logentries.com is 54.229.19.14 Mon Mar 14 18:54:37 2016 daemon.info dnsmasq[5396]: reply webhook.logentries.com is 52.30.224.210 Mon Mar 14 18:54:37 2016 daemon.info dnsmasq[5396]: reply webhook.logentries.com is 54.246.209.52 Mon Mar 14 18:54:37 2016 daemon.info dnsmasq[5396]: reply webhook.logentries.com is 54.229.19.14 Mon Mar 14 18:54:37 2016 daemon.info dnsmasq[5396]: reply webhook.logentries.com is 52.30.224.210 Mon Mar 14 18:54:37 2016 daemon.info dnsmasq[5396]: query[AAAA] calendar.google.com from 10.10.10.223 Mon Mar 14 18:54:37 2016 daemon.info dnsmasq[5396]: forwarded calendar.google.com to 192.168.1.1 Mon Mar 14 18:54:37 2016 daemon.info dnsmasq[5396]: query[A] calendar.google.com from 10.10.10.223 Mon Mar 14 18:54:38 2016 daemon.info dnsmasq[5396]: forwarded calendar.google.com to 192.168.1.1 Mon Mar 14 18:54:38 2016 daemon.info dnsmasq[5396]: reply calendar.google.com is Mon Mar 14 18:54:38 2016 daemon.info dnsmasq[5396]: reply www3.l.google.com is 2607:f8b0:4009:809::200e Mon Mar 14 18:54:38 2016 daemon.info dnsmasq[5396]: reply calendar.google.com is Mon Mar 14 18:54:38 2016 daemon.info dnsmasq[5396]: reply www3.l.google.com is 216.58.216.238 Mon Mar 14 18:54:38 2016 daemon.info dnsmasq[5396]: query[A] www3.l.google.com from 10.10.10.223 Mon Mar 14 18:54:38 2016 daemon.info dnsmasq[5396]: cached www3.l.google.com is 216.58.216.238 Mon Mar 14 18:54:42 2016 daemon.info dnsmasq[5396]: query[AAAA] imap.gmail.com from 10.10.10.143 Mon Mar 14 18:54:42 2016 daemon.info dnsmasq[5396]: forwarded imap.gmail.com to 192.168.1.1 Mon Mar 14 18:54:42 2016 daemon.info dnsmasq[5396]: query[A] imap.gmail.com from 10.10.10.143 Mon Mar 14 18:54:42 2016 daemon.info dnsmasq[5396]: forwarded imap.gmail.com to 192.168.1.1 Mon Mar 14 18:54:42 2016 daemon.info dnsmasq[5396]: reply imap.gmail.com is Mon Mar 14 18:54:42 2016 daemon.info dnsmasq[5396]: reply gmail-imap.l.google.com is 2607:f8b0:4001:c15::6c Mon Mar 14 18:54:42 2016 daemon.info dnsmasq[5396]: reply imap.gmail.com is Mon Mar 14 18:54:42 2016 daemon.info dnsmasq[5396]: reply gmail-imap.l.google.com is 173.194.197.108 Mon Mar 14 18:54:42 2016 daemon.info dnsmasq[5396]: reply gmail-imap.l.google.com is 173.194.197.109 Mon Mar 14 18:54:42 2016 daemon.info dnsmasq[5396]: query[A] docs.google.com from 10.10.10.228 Mon Mar 14 18:54:42 2016 daemon.info dnsmasq[5396]: forwarded docs.google.com to 192.168.1.1 Mon Mar 14 18:54:42 2016 daemon.info dnsmasq[5396]: query[A] docs.google.com from 10.10.10.229 Mon Mar 14 18:54:42 2016 daemon.info dnsmasq[5396]: forwarded docs.google.com to 192.168.1.1 Mon Mar 14 18:54:42 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 216.58.216.110 Mon Mar 14 18:54:42 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 216.58.216.110 Mon Mar 14 18:54:42 2016 daemon.info dnsmasq[5396]: query[A] gmail-imap.l.google.com from 10.10.10.143 Mon Mar 14 18:54:42 2016 daemon.info dnsmasq[5396]: cached gmail-imap.l.google.com is 173.194.197.109 Mon Mar 14 18:54:42 2016 daemon.info dnsmasq[5396]: cached gmail-imap.l.google.com is 173.194.197.108 Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: query[A] o.aolcdn.com from 10.10.10.228 Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: cached o.aolcdn.com is Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: forwarded o.aolcdn.com to 192.168.1.1 Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: query[AAAA] o.aolcdn.com from 10.10.10.228 Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: forwarded o.aolcdn.com to 192.168.1.1 Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: query[A] o.aolcdn.com from 10.10.10.229 Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: forwarded o.aolcdn.com to 192.168.1.1 Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: reply o.aolcdn.com is Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: reply o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 23.77.232.170 Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 23.77.232.155 Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: query[AAAA] o.aolcdn.com from 10.10.10.229 Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: cached o.aolcdn.com is Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: cached o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: forwarded o.aolcdn.com to 192.168.1.1 Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: reply o.aolcdn.com is Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: reply o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 2600:1404:e::174d:e91b Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 2600:1404:e::174d:e869 Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: reply o.aolcdn.com is Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: reply o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 23.77.232.170 Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 23.77.232.155 Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.228 Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: reply o.aolcdn.com is Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: reply o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 2600:1404:e::174d:e91b Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 2600:1404:e::174d:e869 Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: cached pool4.moatads.com is NODATA-IPv6 Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: reply pool4.moatads.com is 52.91.242.5 Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: cached pool4.moatads.com is NODATA-IPv6 Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: reply pool4.moatads.com is 52.91.242.5 Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.228 Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: cached pool4.moatads.com is 52.91.242.5 Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: cached pool4.moatads.com is NODATA-IPv6 Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: cached pool4.moatads.com is NODATA-IPv6 Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 18:54:48 2016 daemon.info dnsmasq[5396]: cached pool4.moatads.com is 52.91.242.5 Mon Mar 14 18:55:05 2016 daemon.info dnsmasq[5396]: query[A] lastpass.com from 10.10.10.223 Mon Mar 14 18:55:05 2016 daemon.info dnsmasq[5396]: forwarded lastpass.com to 192.168.1.1 Mon Mar 14 18:55:05 2016 daemon.info dnsmasq[5396]: reply lastpass.com is 38.127.167.48 Mon Mar 14 18:55:05 2016 daemon.info dnsmasq[5396]: reply lastpass.com is 128.121.22.176 Mon Mar 14 18:55:08 2016 daemon.info dnsmasq[5396]: query[A] ssl.gstatic.com from 10.10.10.228 Mon Mar 14 18:55:08 2016 daemon.info dnsmasq[5396]: forwarded ssl.gstatic.com to 192.168.1.1 Mon Mar 14 18:55:08 2016 daemon.info dnsmasq[5396]: query[A] ssl.gstatic.com from 10.10.10.229 Mon Mar 14 18:55:08 2016 daemon.info dnsmasq[5396]: forwarded ssl.gstatic.com to 192.168.1.1 Mon Mar 14 18:55:08 2016 daemon.info dnsmasq[5396]: reply ssl.gstatic.com is 216.58.216.227 Mon Mar 14 18:55:08 2016 daemon.info dnsmasq[5396]: reply ssl.gstatic.com is 216.58.216.227 Mon Mar 14 18:55:29 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 18:55:29 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 18:55:36 2016 daemon.info dnsmasq[5396]: query[A] storage.browserapps.amazon.com from 10.10.10.223 Mon Mar 14 18:55:36 2016 daemon.info dnsmasq[5396]: forwarded storage.browserapps.amazon.com to 192.168.1.1 Mon Mar 14 18:55:36 2016 daemon.info dnsmasq[5396]: query[A] reporter.browserapps.amazon.com from 10.10.10.223 Mon Mar 14 18:55:36 2016 daemon.info dnsmasq[5396]: forwarded reporter.browserapps.amazon.com to 192.168.1.1 Mon Mar 14 18:55:36 2016 daemon.info dnsmasq[5396]: query[A] dossier.browserapps.amazon.com from 10.10.10.223 Mon Mar 14 18:55:37 2016 daemon.info dnsmasq[5396]: forwarded dossier.browserapps.amazon.com to 192.168.1.1 Mon Mar 14 18:55:37 2016 daemon.info dnsmasq[5396]: query[A] identity.browserapps.amazon.com from 10.10.10.223 Mon Mar 14 18:55:37 2016 daemon.info dnsmasq[5396]: forwarded identity.browserapps.amazon.com to 192.168.1.1 Mon Mar 14 18:55:37 2016 daemon.info dnsmasq[5396]: reply storage.browserapps.amazon.com is Mon Mar 14 18:55:37 2016 daemon.info dnsmasq[5396]: reply identity.browserapps.amazon.com is 54.239.21.125 Mon Mar 14 18:55:37 2016 daemon.info dnsmasq[5396]: reply reporter.browserapps.amazon.com is Mon Mar 14 18:55:37 2016 daemon.info dnsmasq[5396]: reply identity.browserapps.amazon.com is 54.239.21.125 Mon Mar 14 18:55:37 2016 daemon.info dnsmasq[5396]: reply dossier.browserapps.amazon.com is Mon Mar 14 18:55:37 2016 daemon.info dnsmasq[5396]: reply identity.browserapps.amazon.com is 54.239.21.125 Mon Mar 14 18:55:37 2016 daemon.info dnsmasq[5396]: reply identity.browserapps.amazon.com is 54.239.21.125 Mon Mar 14 18:55:59 2016 daemon.info dnsmasq[5396]: query[A] sqm.microsoft.com from 10.10.10.228 Mon Mar 14 18:55:59 2016 daemon.info dnsmasq[5396]: forwarded sqm.microsoft.com to 192.168.1.1 Mon Mar 14 18:55:59 2016 daemon.info dnsmasq[5396]: query[AAAA] sqm.microsoft.com from 10.10.10.228 Mon Mar 14 18:55:59 2016 daemon.info dnsmasq[5396]: forwarded sqm.microsoft.com to 192.168.1.1 Mon Mar 14 18:55:59 2016 daemon.info dnsmasq[5396]: query[A] sqm.microsoft.com from 10.10.10.229 Mon Mar 14 18:55:59 2016 daemon.info dnsmasq[5396]: forwarded sqm.microsoft.com to 192.168.1.1 Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: reply sqm.microsoft.com is Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: reply sqmfe.glbdns2.microsoft.com is 65.55.44.82 Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: query[AAAA] sqm.microsoft.com from 10.10.10.229 Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: cached sqm.microsoft.com is Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: forwarded sqm.microsoft.com to 192.168.1.1 Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: reply sqm.microsoft.com is Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: reply sqmfe.glbdns2.microsoft.com is 65.55.44.82 Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: query[AAAA] time.apple.com from 10.10.10.172 Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: forwarded time.apple.com to 192.168.1.1 Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: query[AAAA] sqm.microsoft.com from 10.10.10.228 Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: cached sqm.microsoft.com is Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: forwarded sqm.microsoft.com to 192.168.1.1 Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: query[AAAA] sqm.microsoft.com from 10.10.10.229 Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: cached sqm.microsoft.com is Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: forwarded sqm.microsoft.com to 192.168.1.1 Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: reply sqm.microsoft.com is Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: reply sqmfe.glbdns2.microsoft.com is NODATA-IPv6 Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: reply sqm.microsoft.com is Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: reply sqmfe.glbdns2.microsoft.com is NODATA-IPv6 Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: reply sqm.microsoft.com is Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: reply sqmfe.glbdns2.microsoft.com is NODATA-IPv6 Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: query[A] time.apple.com from 10.10.10.172 Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.38.253 Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.20.253 Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.4.253 Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.6.253 Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.26.253 Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.2.253 Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.12.253 Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.84.253 Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.54.251 Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.24.253 Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.14.253 Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.52.253 Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.68.253 Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.34.253 Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: reply sqm.microsoft.com is Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: reply sqmfe.glbdns2.microsoft.com is NODATA-IPv6 Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: query[AAAA] time.apple.com from 10.10.10.172 Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: forwarded time.apple.com to 192.168.1.1 Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: query[A] time.apple.com from 10.10.10.172 Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.34.253 Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.38.253 Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.20.253 Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.4.253 Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.6.253 Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.26.253 Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.2.253 Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.12.253 Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.84.253 Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.54.251 Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.24.253 Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.14.253 Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.52.253 Mon Mar 14 18:56:00 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.68.253 Mon Mar 14 18:56:06 2016 daemon.info dnsmasq[5396]: query[A] fls-na.amazon.com from 10.10.10.223 Mon Mar 14 18:56:07 2016 daemon.info dnsmasq[5396]: forwarded fls-na.amazon.com to 192.168.1.1 Mon Mar 14 18:56:07 2016 daemon.info dnsmasq[5396]: reply fls-na.amazon.com is 54.239.22.5 Mon Mar 14 18:56:18 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.228 Mon Mar 14 18:56:18 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 18:56:18 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 18:56:18 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 18:56:18 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 18:56:18 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 18:56:18 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 18:56:18 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 18:56:18 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 18:56:18 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 18:56:18 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 18:56:18 2016 daemon.info dnsmasq[5396]: reply pool4.moatads.com is 54.174.72.87 Mon Mar 14 18:56:18 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 18:56:18 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 18:56:18 2016 daemon.info dnsmasq[5396]: reply pool4.moatads.com is NODATA-IPv6 Mon Mar 14 18:56:18 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 18:56:18 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 18:56:18 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 18:56:18 2016 daemon.info dnsmasq[5396]: cached pool4.moatads.com is NODATA-IPv6 Mon Mar 14 18:56:18 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 18:56:18 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 18:56:18 2016 daemon.info dnsmasq[5396]: reply pool4.moatads.com is 54.174.72.87 Mon Mar 14 18:56:29 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 18:56:29 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 18:56:47 2016 daemon.info dnsmasq[5396]: query[AAAA] app.procentive.com from 10.10.10.223 Mon Mar 14 18:56:47 2016 daemon.info dnsmasq[5396]: forwarded app.procentive.com to 192.168.1.1 Mon Mar 14 18:56:50 2016 daemon.info dnsmasq[5396]: query[A] pollserver.lastpass.com from 10.10.10.228 Mon Mar 14 18:56:50 2016 daemon.info dnsmasq[5396]: forwarded pollserver.lastpass.com to 192.168.1.1 Mon Mar 14 18:56:50 2016 daemon.info dnsmasq[5396]: query[A] pollserver.lastpass.com from 10.10.10.229 Mon Mar 14 18:56:50 2016 daemon.info dnsmasq[5396]: forwarded pollserver.lastpass.com to 192.168.1.1 Mon Mar 14 18:56:50 2016 daemon.info dnsmasq[5396]: reply pollserver.lastpass.com is 38.127.167.50 Mon Mar 14 18:56:50 2016 daemon.info dnsmasq[5396]: reply pollserver.lastpass.com is 128.121.22.133 Mon Mar 14 18:56:50 2016 daemon.info dnsmasq[5396]: reply pollserver.lastpass.com is 38.127.167.50 Mon Mar 14 18:56:50 2016 daemon.info dnsmasq[5396]: reply pollserver.lastpass.com is 128.121.22.133 Mon Mar 14 18:56:52 2016 daemon.info dnsmasq[5396]: query[PTR] lb._dns-sd._udp.0.10.10.10.in-addr.arpa from 10.10.10.223 Mon Mar 14 18:56:52 2016 daemon.info dnsmasq[5396]: forwarded lb._dns-sd._udp.0.10.10.10.in-addr.arpa to 192.168.1.1 Mon Mar 14 18:56:52 2016 daemon.info dnsmasq[5396]: query[PTR] lb._dns-sd._udp.lan from 10.10.10.223 Mon Mar 14 18:56:52 2016 daemon.info dnsmasq[5396]: config lb._dns-sd._udp.lan is NXDOMAIN Mon Mar 14 18:56:54 2016 daemon.info dnsmasq[5396]: query[A] nexus.officeapps.live.com from 10.10.10.228 Mon Mar 14 18:56:54 2016 daemon.info dnsmasq[5396]: cached nexus.officeapps.live.com is Mon Mar 14 18:56:54 2016 daemon.info dnsmasq[5396]: cached prod-w.nexus.live.com.akadns.net is 191.238.177.236 Mon Mar 14 18:56:54 2016 daemon.info dnsmasq[5396]: query[AAAA] nexus.officeapps.live.com from 10.10.10.228 Mon Mar 14 18:56:54 2016 daemon.info dnsmasq[5396]: cached nexus.officeapps.live.com is Mon Mar 14 18:56:54 2016 daemon.info dnsmasq[5396]: cached prod-w.nexus.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 18:56:54 2016 daemon.info dnsmasq[5396]: query[A] nexus.officeapps.live.com from 10.10.10.229 Mon Mar 14 18:56:54 2016 daemon.info dnsmasq[5396]: cached nexus.officeapps.live.com is Mon Mar 14 18:56:54 2016 daemon.info dnsmasq[5396]: cached prod-w.nexus.live.com.akadns.net is 191.238.177.236 Mon Mar 14 18:56:54 2016 daemon.info dnsmasq[5396]: query[AAAA] nexus.officeapps.live.com from 10.10.10.229 Mon Mar 14 18:56:54 2016 daemon.info dnsmasq[5396]: cached nexus.officeapps.live.com is Mon Mar 14 18:56:54 2016 daemon.info dnsmasq[5396]: cached prod-w.nexus.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 18:57:31 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 18:57:31 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 18:57:43 2016 daemon.info dnsmasq[5396]: query[A] chatenabled.mail.google.com from 10.10.10.228 Mon Mar 14 18:57:43 2016 daemon.info dnsmasq[5396]: cached chatenabled.mail.google.com is Mon Mar 14 18:57:43 2016 daemon.info dnsmasq[5396]: forwarded chatenabled.mail.google.com to 192.168.1.1 Mon Mar 14 18:57:43 2016 daemon.info dnsmasq[5396]: query[A] chatenabled.mail.google.com from 10.10.10.229 Mon Mar 14 18:57:43 2016 daemon.info dnsmasq[5396]: forwarded chatenabled.mail.google.com to 192.168.1.1 Mon Mar 14 18:57:43 2016 daemon.info dnsmasq[5396]: reply chatenabled.mail.google.com is Mon Mar 14 18:57:43 2016 daemon.info dnsmasq[5396]: reply b.googlemail.l.google.com is 216.58.216.231 Mon Mar 14 18:57:43 2016 daemon.info dnsmasq[5396]: reply chatenabled.mail.google.com is Mon Mar 14 18:57:43 2016 daemon.info dnsmasq[5396]: reply b.googlemail.l.google.com is 216.58.216.231 Mon Mar 14 18:57:48 2016 daemon.info dnsmasq[5396]: query[A] o.aolcdn.com from 10.10.10.228 Mon Mar 14 18:57:48 2016 daemon.info dnsmasq[5396]: forwarded o.aolcdn.com to 192.168.1.1 Mon Mar 14 18:57:48 2016 daemon.info dnsmasq[5396]: query[AAAA] o.aolcdn.com from 10.10.10.228 Mon Mar 14 18:57:48 2016 daemon.info dnsmasq[5396]: forwarded o.aolcdn.com to 192.168.1.1 Mon Mar 14 18:57:48 2016 daemon.info dnsmasq[5396]: query[A] o.aolcdn.com from 10.10.10.229 Mon Mar 14 18:57:48 2016 daemon.info dnsmasq[5396]: forwarded o.aolcdn.com to 192.168.1.1 Mon Mar 14 18:57:48 2016 daemon.info dnsmasq[5396]: query[AAAA] o.aolcdn.com from 10.10.10.229 Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: forwarded o.aolcdn.com to 192.168.1.1 Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: reply o.aolcdn.com is Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: reply o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 23.77.232.155 Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 23.77.232.170 Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: reply o.aolcdn.com is Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: reply o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 2600:1404:e::174d:e91b Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 2600:1404:e::174d:e869 Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: reply o.aolcdn.com is Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: reply o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 23.77.232.155 Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 23.77.232.170 Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.228 Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: reply o.aolcdn.com is Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: reply o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 2600:1404:e::174d:e91b Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 2600:1404:e::174d:e869 Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: reply pool1.moatads.com is 52.91.79.116 Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: cached pool1.moatads.com is 52.91.79.116 Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: reply pool1.moatads.com is NODATA-IPv6 Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: cached pool1.moatads.com is NODATA-IPv6 Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: reply pool1.moatads.com is NODATA-IPv6 Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.228 Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: cached pool1.moatads.com is 52.91.79.116 Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: cached pool1.moatads.com is 52.91.79.116 Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: cached pool1.moatads.com is NODATA-IPv6 Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: cached pool1.moatads.com is NODATA-IPv6 Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: cached pool1.moatads.com is 52.91.79.116 Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 18:57:49 2016 daemon.info dnsmasq[5396]: cached pool1.moatads.com is NODATA-IPv6 Mon Mar 14 18:58:21 2016 daemon.info dnsmasq[5396]: query[AAAA] app.procentive.com from 10.10.10.223 Mon Mar 14 18:58:21 2016 daemon.info dnsmasq[5396]: forwarded app.procentive.com to 192.168.1.1 Mon Mar 14 18:58:23 2016 daemon.info dnsmasq[5396]: query[A] 9.client-channel.google.com from 10.10.10.223 Mon Mar 14 18:58:23 2016 daemon.info dnsmasq[5396]: forwarded 9.client-channel.google.com to 192.168.1.1 Mon Mar 14 18:58:23 2016 daemon.info dnsmasq[5396]: query[AAAA] 9.client-channel.google.com from 10.10.10.223 Mon Mar 14 18:58:23 2016 daemon.info dnsmasq[5396]: forwarded 9.client-channel.google.com to 192.168.1.1 Mon Mar 14 18:58:23 2016 daemon.info dnsmasq[5396]: reply 9.client-channel.google.com is 74.125.207.189 Mon Mar 14 18:58:23 2016 daemon.info dnsmasq[5396]: reply 9.client-channel.google.com is 2607:f8b0:4001:c07::bd Mon Mar 14 18:58:32 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 18:58:32 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 18:58:33 2016 daemon.info dnsmasq[5396]: query[A] plus.google.com from 10.10.10.228 Mon Mar 14 18:58:33 2016 daemon.info dnsmasq[5396]: forwarded plus.google.com to 192.168.1.1 Mon Mar 14 18:58:33 2016 daemon.info dnsmasq[5396]: query[A] plus.google.com from 10.10.10.229 Mon Mar 14 18:58:33 2016 daemon.info dnsmasq[5396]: forwarded plus.google.com to 192.168.1.1 Mon Mar 14 18:58:33 2016 daemon.info dnsmasq[5396]: reply plus.google.com is 216.58.216.238 Mon Mar 14 18:58:33 2016 daemon.info dnsmasq[5396]: reply plus.google.com is 216.58.216.238 Mon Mar 14 18:58:33 2016 daemon.info dnsmasq[5396]: query[A] clients2.google.com from 10.10.10.228 Mon Mar 14 18:58:33 2016 daemon.info dnsmasq[5396]: forwarded clients2.google.com to 192.168.1.1 Mon Mar 14 18:58:33 2016 daemon.info dnsmasq[5396]: query[A] clients2.google.com from 10.10.10.229 Mon Mar 14 18:58:33 2016 daemon.info dnsmasq[5396]: forwarded clients2.google.com to 192.168.1.1 Mon Mar 14 18:58:33 2016 daemon.info dnsmasq[5396]: reply clients2.google.com is Mon Mar 14 18:58:33 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 216.58.216.238 Mon Mar 14 18:58:33 2016 daemon.info dnsmasq[5396]: reply clients2.google.com is Mon Mar 14 18:58:33 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 216.58.216.238 Mon Mar 14 18:58:33 2016 daemon.info dnsmasq[5396]: query[A] p25-quota.icloud.com from 10.10.10.228 Mon Mar 14 18:58:33 2016 daemon.info dnsmasq[5396]: forwarded p25-quota.icloud.com to 192.168.1.1 Mon Mar 14 18:58:33 2016 daemon.info dnsmasq[5396]: query[AAAA] p25-quota.icloud.com from 10.10.10.228 Mon Mar 14 18:58:33 2016 daemon.info dnsmasq[5396]: forwarded p25-quota.icloud.com to 192.168.1.1 Mon Mar 14 18:58:33 2016 daemon.info dnsmasq[5396]: query[A] p25-quota.icloud.com from 10.10.10.229 Mon Mar 14 18:58:33 2016 daemon.info dnsmasq[5396]: forwarded p25-quota.icloud.com to 192.168.1.1 Mon Mar 14 18:58:33 2016 daemon.info dnsmasq[5396]: reply p25-quota.icloud.com is Mon Mar 14 18:58:33 2016 daemon.info dnsmasq[5396]: reply p25-quota-current.edge.icloud.apple-dns.net is 17.248.129.176 Mon Mar 14 18:58:33 2016 daemon.info dnsmasq[5396]: query[AAAA] p25-quota.icloud.com from 10.10.10.229 Mon Mar 14 18:58:33 2016 daemon.info dnsmasq[5396]: cached p25-quota.icloud.com is Mon Mar 14 18:58:33 2016 daemon.info dnsmasq[5396]: forwarded p25-quota.icloud.com to 192.168.1.1 Mon Mar 14 18:58:33 2016 daemon.info dnsmasq[5396]: reply p25-quota.icloud.com is Mon Mar 14 18:58:33 2016 daemon.info dnsmasq[5396]: reply p25-quota-current.edge.icloud.apple-dns.net is NODATA-IPv6 Mon Mar 14 18:58:33 2016 daemon.info dnsmasq[5396]: reply p25-quota.icloud.com is Mon Mar 14 18:58:33 2016 daemon.info dnsmasq[5396]: reply p25-quota-current.edge.icloud.apple-dns.net is 17.248.129.176 Mon Mar 14 18:58:33 2016 daemon.info dnsmasq[5396]: reply p25-quota.icloud.com is Mon Mar 14 18:58:33 2016 daemon.info dnsmasq[5396]: reply p25-quota-current.edge.icloud.apple-dns.net is NODATA-IPv6 Mon Mar 14 18:59:02 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 18:59:02 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 18:59:02 2016 daemon.info dnsmasq[5396]: query[A] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 18:59:02 2016 daemon.info dnsmasq[5396]: forwarded skydocs.skyprod.akadns.net to 192.168.1.1 Mon Mar 14 18:59:03 2016 daemon.info dnsmasq[5396]: reply skydocs.skyprod.akadns.net is 134.170.104.176 Mon Mar 14 18:59:16 2016 daemon.info dnsmasq[5396]: query[A] mail.google.com from 10.10.10.228 Mon Mar 14 18:59:16 2016 daemon.info dnsmasq[5396]: cached mail.google.com is Mon Mar 14 18:59:16 2016 daemon.info dnsmasq[5396]: forwarded mail.google.com to 192.168.1.1 Mon Mar 14 18:59:16 2016 daemon.info dnsmasq[5396]: query[A] mail.google.com from 10.10.10.229 Mon Mar 14 18:59:16 2016 daemon.info dnsmasq[5396]: forwarded mail.google.com to 192.168.1.1 Mon Mar 14 18:59:16 2016 daemon.info dnsmasq[5396]: query[A] beacons5.gvt3.com from 10.10.10.228 Mon Mar 14 18:59:16 2016 daemon.info dnsmasq[5396]: forwarded beacons5.gvt3.com to 192.168.1.1 Mon Mar 14 18:59:16 2016 daemon.info dnsmasq[5396]: reply mail.google.com is Mon Mar 14 18:59:16 2016 daemon.info dnsmasq[5396]: reply googlemail.l.google.com is 216.58.216.229 Mon Mar 14 18:59:16 2016 daemon.info dnsmasq[5396]: reply mail.google.com is Mon Mar 14 18:59:16 2016 daemon.info dnsmasq[5396]: reply googlemail.l.google.com is 216.58.216.229 Mon Mar 14 18:59:16 2016 daemon.info dnsmasq[5396]: query[A] beacons5.gvt3.com from 10.10.10.229 Mon Mar 14 18:59:16 2016 daemon.info dnsmasq[5396]: forwarded beacons5.gvt3.com to 192.168.1.1 Mon Mar 14 18:59:16 2016 daemon.info dnsmasq[5396]: reply beacons5.gvt3.com is 104.237.191.1 Mon Mar 14 18:59:16 2016 daemon.info dnsmasq[5396]: reply beacons5.gvt3.com is 104.237.191.1 Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: query[A] o.aolcdn.com from 10.10.10.228 Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: cached o.aolcdn.com is Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: cached o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: forwarded o.aolcdn.com to 192.168.1.1 Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: query[AAAA] o.aolcdn.com from 10.10.10.228 Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: cached o.aolcdn.com is Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: forwarded o.aolcdn.com to 192.168.1.1 Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: query[A] o.aolcdn.com from 10.10.10.229 Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: forwarded o.aolcdn.com to 192.168.1.1 Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: reply o.aolcdn.com is Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: reply o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 23.77.232.155 Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 23.77.232.170 Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: query[AAAA] o.aolcdn.com from 10.10.10.229 Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: cached o.aolcdn.com is Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: cached o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: forwarded o.aolcdn.com to 192.168.1.1 Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: reply o.aolcdn.com is Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: reply o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 2600:1404:e::174d:e869 Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 2600:1404:e::174d:e91b Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: reply o.aolcdn.com is Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: reply o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 23.77.232.155 Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 23.77.232.170 Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.228 Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: reply o.aolcdn.com is Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: reply o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 2600:1404:e::174d:e869 Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 2600:1404:e::174d:e91b Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: reply pool2.moatads.com is 54.209.159.153 Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: cached pool2.moatads.com is 54.209.159.153 Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: reply pool2.moatads.com is NODATA-IPv6 Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.228 Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: cached pool2.moatads.com is 54.209.159.153 Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: reply pool2.moatads.com is NODATA-IPv6 Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: cached pool2.moatads.com is NODATA-IPv6 Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: cached pool2.moatads.com is NODATA-IPv6 Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: cached pool2.moatads.com is 54.209.159.153 Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: cached pool2.moatads.com is NODATA-IPv6 Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: cached pool2.moatads.com is 54.209.159.153 Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 18:59:19 2016 daemon.info dnsmasq[5396]: cached pool2.moatads.com is NODATA-IPv6 Mon Mar 14 18:59:53 2016 daemon.info dnsmasq[5396]: query[AAAA] nexus.officeapps.live.com from 10.10.10.223 Mon Mar 14 18:59:53 2016 daemon.info dnsmasq[5396]: forwarded nexus.officeapps.live.com to 192.168.1.1 Mon Mar 14 18:59:53 2016 daemon.info dnsmasq[5396]: query[A] nexus.officeapps.live.com from 10.10.10.223 Mon Mar 14 18:59:53 2016 daemon.info dnsmasq[5396]: forwarded nexus.officeapps.live.com to 192.168.1.1 Mon Mar 14 18:59:53 2016 daemon.info dnsmasq[5396]: reply nexus.officeapps.live.com is Mon Mar 14 18:59:53 2016 daemon.info dnsmasq[5396]: reply prod-w.nexus.live.com.akadns.net is 104.210.40.87 Mon Mar 14 18:59:53 2016 daemon.info dnsmasq[5396]: reply nexus.officeapps.live.com is Mon Mar 14 18:59:53 2016 daemon.info dnsmasq[5396]: reply prod-w.nexus.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 18:59:53 2016 daemon.info dnsmasq[5396]: query[AAAA] prod-w.nexus.live.com.akadns.net from 10.10.10.223 Mon Mar 14 18:59:53 2016 daemon.info dnsmasq[5396]: cached prod-w.nexus.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 18:59:54 2016 daemon.info dnsmasq[5396]: query[AAAA] nexusrules.officeapps.live.com from 10.10.10.223 Mon Mar 14 18:59:54 2016 daemon.info dnsmasq[5396]: cached nexusrules.officeapps.live.com is Mon Mar 14 18:59:54 2016 daemon.info dnsmasq[5396]: cached prod.nexusrules.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 18:59:54 2016 daemon.info dnsmasq[5396]: query[A] nexusrules.officeapps.live.com from 10.10.10.223 Mon Mar 14 18:59:54 2016 daemon.info dnsmasq[5396]: cached nexusrules.officeapps.live.com is Mon Mar 14 18:59:54 2016 daemon.info dnsmasq[5396]: forwarded nexusrules.officeapps.live.com to 192.168.1.1 Mon Mar 14 18:59:54 2016 daemon.info dnsmasq[5396]: query[AAAA] prod.nexusrules.live.com.akadns.net from 10.10.10.223 Mon Mar 14 18:59:54 2016 daemon.info dnsmasq[5396]: cached prod.nexusrules.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 18:59:54 2016 daemon.info dnsmasq[5396]: query[A] prod.nexusrules.live.com.akadns.net from 10.10.10.223 Mon Mar 14 18:59:54 2016 daemon.info dnsmasq[5396]: forwarded prod.nexusrules.live.com.akadns.net to 192.168.1.1 Mon Mar 14 18:59:54 2016 daemon.info dnsmasq[5396]: reply nexusrules.officeapps.live.com is Mon Mar 14 18:59:54 2016 daemon.info dnsmasq[5396]: reply prod.nexusrules.live.com.akadns.net is 23.99.109.44 Mon Mar 14 18:59:54 2016 daemon.info dnsmasq[5396]: reply prod.nexusrules.live.com.akadns.net is 23.99.109.44 Mon Mar 14 19:00:00 2016 cron.info crond[3202]: USER root pid 6106 cmd /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Mon Mar 14 19:00:00 2016 daemon.info dnsmasq[5396]: query[A] 0.us.pool.ntp.org from 127.0.0.1 Mon Mar 14 19:00:00 2016 daemon.info dnsmasq[5396]: forwarded 0.us.pool.ntp.org to 192.168.1.1 Mon Mar 14 19:00:00 2016 daemon.info dnsmasq[5396]: reply 0.us.pool.ntp.org is 74.123.28.4 Mon Mar 14 19:00:00 2016 daemon.info dnsmasq[5396]: reply 0.us.pool.ntp.org is 209.244.0.3 Mon Mar 14 19:00:00 2016 daemon.info dnsmasq[5396]: reply 0.us.pool.ntp.org is 4.53.160.75 Mon Mar 14 19:00:00 2016 daemon.info dnsmasq[5396]: reply 0.us.pool.ntp.org is 104.156.99.30 Mon Mar 14 19:00:04 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:00:04 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:00:14 2016 daemon.info dnsmasq[5396]: query[A] ubp-common-us-prod.s3.amazonaws.com from 10.10.10.223 Mon Mar 14 19:00:14 2016 daemon.info dnsmasq[5396]: forwarded ubp-common-us-prod.s3.amazonaws.com to 192.168.1.1 Mon Mar 14 19:00:14 2016 daemon.info dnsmasq[5396]: reply ubp-common-us-prod.s3.amazonaws.com is Mon Mar 14 19:00:14 2016 daemon.info dnsmasq[5396]: reply s3-us-west-2-w.amazonaws.com is 54.231.168.178 Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: query[A] livetileedge.dsx.mp.microsoft.com from 10.10.10.228 Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: forwarded livetileedge.dsx.mp.microsoft.com to 192.168.1.1 Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: query[AAAA] livetileedge.dsx.mp.microsoft.com from 10.10.10.228 Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: forwarded livetileedge.dsx.mp.microsoft.com to 192.168.1.1 Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: query[A] livetileedge.dsx.mp.microsoft.com from 10.10.10.229 Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: forwarded livetileedge.dsx.mp.microsoft.com to 192.168.1.1 Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: reply livetileedge.dsx.mp.microsoft.com is Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: reply livetileedge.dsx.mp.microsoft.com.akadns.net is Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: reply livetileedge.dsx.mp.microsoft.com.edgekey.net is Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: reply e1898.b.akamaiedge.net is 23.12.245.46 Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: query[AAAA] livetileedge.dsx.mp.microsoft.com from 10.10.10.229 Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: cached livetileedge.dsx.mp.microsoft.com is Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: cached livetileedge.dsx.mp.microsoft.com.akadns.net is Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: cached livetileedge.dsx.mp.microsoft.com.edgekey.net is Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: forwarded livetileedge.dsx.mp.microsoft.com to 192.168.1.1 Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: reply livetileedge.dsx.mp.microsoft.com is Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: reply livetileedge.dsx.mp.microsoft.com.akadns.net is Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: reply livetileedge.dsx.mp.microsoft.com.edgekey.net is Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: reply e1898.b.akamaiedge.net is 23.12.245.46 Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: reply livetileedge.dsx.mp.microsoft.com is Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: reply livetileedge.dsx.mp.microsoft.com.akadns.net is Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: reply livetileedge.dsx.mp.microsoft.com.edgekey.net is Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: reply e1898.b.akamaiedge.net is NODATA-IPv6 Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: reply livetileedge.dsx.mp.microsoft.com is Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: reply livetileedge.dsx.mp.microsoft.com.akadns.net is Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: reply livetileedge.dsx.mp.microsoft.com.edgekey.net is Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: reply e1898.b.akamaiedge.net is NODATA-IPv6 Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: query[AAAA] livetileedge.dsx.mp.microsoft.com from 10.10.10.228 Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: cached livetileedge.dsx.mp.microsoft.com is Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: cached livetileedge.dsx.mp.microsoft.com.akadns.net is Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: cached livetileedge.dsx.mp.microsoft.com.edgekey.net is Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: cached e1898.b.akamaiedge.net is NODATA-IPv6 Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: query[A] dm2306.storage.live.com from 10.10.10.228 Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: forwarded dm2306.storage.live.com to 192.168.1.1 Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: query[AAAA] dm2306.storage.live.com from 10.10.10.228 Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: forwarded dm2306.storage.live.com to 192.168.1.1 Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: query[A] dm2306.storage.live.com from 10.10.10.229 Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: forwarded dm2306.storage.live.com to 192.168.1.1 Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: query[AAAA] dm2306.storage.live.com from 10.10.10.229 Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: forwarded dm2306.storage.live.com to 192.168.1.1 Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: reply dm2306.storage.live.com is Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: reply dm2306geo.storage.skyprod.akadns.net is Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: reply dm2306-storage-live-com.a-0011.a-msedge.net is Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: reply a-0011.a-msedge.net is 204.79.197.213 Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: reply dm2306.storage.live.com is Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: reply dm2306geo.storage.skyprod.akadns.net is Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: reply dm2306-storage-live-com.a-0011.a-msedge.net is Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: reply a-0011.a-msedge.net is 204.79.197.213 Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: reply dm2306.storage.live.com is Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: reply dm2306geo.storage.skyprod.akadns.net is Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: reply dm2306-storage-live-com.a-0011.a-msedge.net is Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: reply a-0011.a-msedge.net is NODATA-IPv6 Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: reply dm2306.storage.live.com is Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: reply dm2306geo.storage.skyprod.akadns.net is Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: reply dm2306-storage-live-com.a-0011.a-msedge.net is Mon Mar 14 19:00:23 2016 daemon.info dnsmasq[5396]: reply a-0011.a-msedge.net is NODATA-IPv6 Mon Mar 14 19:00:35 2016 daemon.info dnsmasq[5396]: query[A] clients4.google.com from 10.10.10.228 Mon Mar 14 19:00:35 2016 daemon.info dnsmasq[5396]: forwarded clients4.google.com to 192.168.1.1 Mon Mar 14 19:00:35 2016 daemon.info dnsmasq[5396]: query[A] clients4.google.com from 10.10.10.229 Mon Mar 14 19:00:36 2016 daemon.info dnsmasq[5396]: forwarded clients4.google.com to 192.168.1.1 Mon Mar 14 19:00:36 2016 daemon.info dnsmasq[5396]: reply clients4.google.com is Mon Mar 14 19:00:36 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 216.58.216.238 Mon Mar 14 19:00:36 2016 daemon.info dnsmasq[5396]: reply clients4.google.com is Mon Mar 14 19:00:36 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 216.58.216.238 Mon Mar 14 19:00:40 2016 daemon.info dnsmasq[5396]: query[A] clients6.google.com from 10.10.10.223 Mon Mar 14 19:00:40 2016 daemon.info dnsmasq[5396]: forwarded clients6.google.com to 192.168.1.1 Mon Mar 14 19:00:40 2016 daemon.info dnsmasq[5396]: query[AAAA] clients6.google.com from 10.10.10.223 Mon Mar 14 19:00:40 2016 daemon.info dnsmasq[5396]: forwarded clients6.google.com to 192.168.1.1 Mon Mar 14 19:00:40 2016 daemon.info dnsmasq[5396]: reply clients6.google.com is Mon Mar 14 19:00:40 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 216.58.216.238 Mon Mar 14 19:00:40 2016 daemon.info dnsmasq[5396]: reply clients6.google.com is Mon Mar 14 19:00:40 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 2607:f8b0:4009:809::200e Mon Mar 14 19:00:40 2016 daemon.info dnsmasq[5396]: query[AAAA] clients.l.google.com from 10.10.10.223 Mon Mar 14 19:00:40 2016 daemon.info dnsmasq[5396]: cached clients.l.google.com is 2607:f8b0:4009:809::200e Mon Mar 14 19:00:48 2016 daemon.info dnsmasq[5396]: query[A] isatap.lan from 10.10.10.228 Mon Mar 14 19:00:48 2016 daemon.info dnsmasq[5396]: config isatap.lan is NXDOMAIN Mon Mar 14 19:00:48 2016 daemon.info dnsmasq[5396]: query[A] isatap.lan from 10.10.10.229 Mon Mar 14 19:00:48 2016 daemon.info dnsmasq[5396]: config isatap.lan is NXDOMAIN Mon Mar 14 19:00:48 2016 daemon.info dnsmasq[5396]: query[AAAA] app.procentive.com from 10.10.10.223 Mon Mar 14 19:00:48 2016 daemon.info dnsmasq[5396]: forwarded app.procentive.com to 192.168.1.1 Mon Mar 14 19:01:05 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:01:05 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:01:26 2016 daemon.info dnsmasq[5396]: query[A] storage.browserapps.amazon.com from 10.10.10.223 Mon Mar 14 19:01:26 2016 daemon.info dnsmasq[5396]: forwarded storage.browserapps.amazon.com to 192.168.1.1 Mon Mar 14 19:01:26 2016 daemon.info dnsmasq[5396]: query[A] reporter.browserapps.amazon.com from 10.10.10.223 Mon Mar 14 19:01:27 2016 daemon.info dnsmasq[5396]: forwarded reporter.browserapps.amazon.com to 192.168.1.1 Mon Mar 14 19:01:27 2016 daemon.info dnsmasq[5396]: query[A] dossier.browserapps.amazon.com from 10.10.10.223 Mon Mar 14 19:01:27 2016 daemon.info dnsmasq[5396]: forwarded dossier.browserapps.amazon.com to 192.168.1.1 Mon Mar 14 19:01:27 2016 daemon.info dnsmasq[5396]: reply storage.browserapps.amazon.com is Mon Mar 14 19:01:27 2016 daemon.info dnsmasq[5396]: reply identity.browserapps.amazon.com is 54.239.21.139 Mon Mar 14 19:01:27 2016 daemon.info dnsmasq[5396]: query[A] identity.browserapps.amazon.com from 10.10.10.223 Mon Mar 14 19:01:27 2016 daemon.info dnsmasq[5396]: cached identity.browserapps.amazon.com is 54.239.21.139 Mon Mar 14 19:01:27 2016 daemon.info dnsmasq[5396]: reply reporter.browserapps.amazon.com is Mon Mar 14 19:01:27 2016 daemon.info dnsmasq[5396]: reply identity.browserapps.amazon.com is 54.239.21.139 Mon Mar 14 19:01:27 2016 daemon.info dnsmasq[5396]: reply dossier.browserapps.amazon.com is Mon Mar 14 19:01:27 2016 daemon.info dnsmasq[5396]: reply identity.browserapps.amazon.com is 54.239.21.139 Mon Mar 14 19:01:28 2016 daemon.info dnsmasq[5396]: query[AAAA] officeclient.microsoft.com from 10.10.10.223 Mon Mar 14 19:01:28 2016 daemon.info dnsmasq[5396]: forwarded officeclient.microsoft.com to 192.168.1.1 Mon Mar 14 19:01:28 2016 daemon.info dnsmasq[5396]: query[A] officeclient.microsoft.com from 10.10.10.223 Mon Mar 14 19:01:28 2016 daemon.info dnsmasq[5396]: forwarded officeclient.microsoft.com to 192.168.1.1 Mon Mar 14 19:01:28 2016 daemon.info dnsmasq[5396]: reply officeclient.microsoft.com is Mon Mar 14 19:01:28 2016 daemon.info dnsmasq[5396]: reply prod.configsvc.live.com.akadns.net is Mon Mar 14 19:01:28 2016 daemon.info dnsmasq[5396]: reply wus-config.officeapps.live.com is Mon Mar 14 19:01:28 2016 daemon.info dnsmasq[5396]: reply osiprod-wus-snow-000.cloudapp.net is 40.83.182.229 Mon Mar 14 19:01:28 2016 daemon.info dnsmasq[5396]: reply officeclient.microsoft.com is Mon Mar 14 19:01:28 2016 daemon.info dnsmasq[5396]: reply prod.configsvc.live.com.akadns.net is Mon Mar 14 19:01:28 2016 daemon.info dnsmasq[5396]: reply wus-config.officeapps.live.com is Mon Mar 14 19:01:28 2016 daemon.info dnsmasq[5396]: reply osiprod-wus-snow-000.cloudapp.net is NODATA-IPv6 Mon Mar 14 19:01:28 2016 daemon.info dnsmasq[5396]: query[AAAA] prod-w.nexus.live.com.akadns.net from 10.10.10.223 Mon Mar 14 19:01:28 2016 daemon.info dnsmasq[5396]: cached prod-w.nexus.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:01:28 2016 daemon.info dnsmasq[5396]: query[AAAA] osiprod-wus-snow-000.cloudapp.net from 10.10.10.223 Mon Mar 14 19:01:28 2016 daemon.info dnsmasq[5396]: cached osiprod-wus-snow-000.cloudapp.net is NODATA-IPv6 Mon Mar 14 19:01:51 2016 daemon.info dnsmasq[5396]: query[A] safebrowsing.google.com from 10.10.10.228 Mon Mar 14 19:01:51 2016 daemon.info dnsmasq[5396]: forwarded safebrowsing.google.com to 192.168.1.1 Mon Mar 14 19:01:51 2016 daemon.info dnsmasq[5396]: query[A] safebrowsing.google.com from 10.10.10.229 Mon Mar 14 19:01:51 2016 daemon.info dnsmasq[5396]: forwarded safebrowsing.google.com to 192.168.1.1 Mon Mar 14 19:01:51 2016 daemon.info dnsmasq[5396]: reply safebrowsing.google.com is Mon Mar 14 19:01:51 2016 daemon.info dnsmasq[5396]: reply sb.l.google.com is 216.58.192.206 Mon Mar 14 19:01:51 2016 daemon.info dnsmasq[5396]: reply safebrowsing.google.com is Mon Mar 14 19:01:51 2016 daemon.info dnsmasq[5396]: reply sb.l.google.com is 216.58.192.206 Mon Mar 14 19:01:51 2016 daemon.info dnsmasq[5396]: query[A] safebrowsing-cache.google.com from 10.10.10.228 Mon Mar 14 19:01:51 2016 daemon.info dnsmasq[5396]: forwarded safebrowsing-cache.google.com to 192.168.1.1 Mon Mar 14 19:01:51 2016 daemon.info dnsmasq[5396]: query[A] safebrowsing-cache.google.com from 10.10.10.229 Mon Mar 14 19:01:51 2016 daemon.info dnsmasq[5396]: forwarded safebrowsing-cache.google.com to 192.168.1.1 Mon Mar 14 19:01:51 2016 daemon.info dnsmasq[5396]: reply safebrowsing-cache.google.com is Mon Mar 14 19:01:51 2016 daemon.info dnsmasq[5396]: reply safebrowsing.cache.l.google.com is 216.58.216.238 Mon Mar 14 19:01:51 2016 daemon.info dnsmasq[5396]: reply safebrowsing-cache.google.com is Mon Mar 14 19:01:51 2016 daemon.info dnsmasq[5396]: reply safebrowsing.cache.l.google.com is 216.58.216.238 Mon Mar 14 19:01:57 2016 daemon.info dnsmasq[5396]: query[A] fls-na.amazon.com from 10.10.10.223 Mon Mar 14 19:01:57 2016 daemon.info dnsmasq[5396]: forwarded fls-na.amazon.com to 192.168.1.1 Mon Mar 14 19:01:57 2016 daemon.info dnsmasq[5396]: reply fls-na.amazon.com is 54.239.26.242 Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: query[AAAA] outlook.office365.com from 10.10.10.143 Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: forwarded outlook.office365.com to 192.168.1.1 Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: reply outlook.office365.com is Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: reply lb.geo.office365.com is Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: reply outlook.office365.com.glbdns2.microsoft.com is Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: reply outlook-namnorth2.office365.com is 2a01:111:f400:2d39::2 Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: reply outlook-namnorth2.office365.com is 2a01:111:f400:527d::2 Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: reply outlook-namnorth2.office365.com is 2a01:111:f400:5014::2 Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: reply outlook-namnorth2.office365.com is 2a01:111:f400:50be::2 Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: reply outlook-namnorth2.office365.com is 2a01:111:f400:4c62::2 Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: reply outlook-namnorth2.office365.com is 2a01:111:f400:5241::2 Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: reply outlook-namnorth2.office365.com is 2a01:111:f400:4c1f::2 Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: reply outlook-namnorth2.office365.com is 2a01:111:f400:53d7::2 Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: reply outlook-namnorth2.office365.com is 2a01:111:f400:f3b7::2 Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: reply outlook-namnorth2.office365.com is 2a01:111:f400:5255::2 Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: query[A] outlook.office365.com from 10.10.10.143 Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: cached outlook.office365.com is Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: cached lb.geo.office365.com is Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: cached outlook.office365.com.glbdns2.microsoft.com is Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: forwarded outlook.office365.com to 192.168.1.1 Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: query[A] time-ios.apple.com from 10.10.10.143 Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: forwarded time-ios.apple.com to 192.168.1.1 Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: query[AAAA] time-ios.apple.com from 10.10.10.143 Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: forwarded time-ios.apple.com to 192.168.1.1 Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: reply outlook.office365.com is Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: reply lb.geo.office365.com is Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: reply outlook.office365.com.glbdns2.microsoft.com is Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: reply outlook-namnorth2.office365.com is 132.245.58.82 Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: reply outlook-namnorth2.office365.com is 132.245.250.146 Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: reply outlook-namnorth2.office365.com is 132.245.45.34 Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: reply outlook-namnorth2.office365.com is 132.245.47.114 Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: reply outlook-namnorth2.office365.com is 132.245.59.50 Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: reply outlook-namnorth2.office365.com is 132.245.75.18 Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: reply outlook-namnorth2.office365.com is 132.245.22.242 Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: reply outlook-namnorth2.office365.com is 132.245.25.2 Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: reply outlook-namnorth2.office365.com is 132.245.62.194 Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: reply outlook-namnorth2.office365.com is 132.245.44.2 Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: reply time-ios.apple.com is Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: reply time-ios.g.aaplimg.com is 17.253.2.253 Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: reply time-ios.g.aaplimg.com is 17.253.2.125 Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: reply time-ios.g.aaplimg.com is 17.253.24.253 Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: reply time-ios.apple.com is Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: reply time-ios.g.aaplimg.com is NODATA-IPv6 Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: query[A] outlook-namnorth2.office365.com from 10.10.10.143 Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: cached outlook-namnorth2.office365.com is 132.245.44.2 Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: cached outlook-namnorth2.office365.com is 132.245.62.194 Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: cached outlook-namnorth2.office365.com is 132.245.25.2 Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: cached outlook-namnorth2.office365.com is 132.245.22.242 Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: cached outlook-namnorth2.office365.com is 132.245.75.18 Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: cached outlook-namnorth2.office365.com is 132.245.59.50 Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: cached outlook-namnorth2.office365.com is 132.245.47.114 Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: cached outlook-namnorth2.office365.com is 132.245.45.34 Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: cached outlook-namnorth2.office365.com is 132.245.250.146 Mon Mar 14 19:02:05 2016 daemon.info dnsmasq[5396]: cached outlook-namnorth2.office365.com is 132.245.58.82 Mon Mar 14 19:02:06 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:02:06 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:02:09 2016 daemon.info dnsmasq[5396]: query[A] clients4.google.com from 10.10.10.223 Mon Mar 14 19:02:09 2016 daemon.info dnsmasq[5396]: forwarded clients4.google.com to 192.168.1.1 Mon Mar 14 19:02:09 2016 daemon.info dnsmasq[5396]: query[AAAA] clients4.google.com from 10.10.10.223 Mon Mar 14 19:02:09 2016 daemon.info dnsmasq[5396]: forwarded clients4.google.com to 192.168.1.1 Mon Mar 14 19:02:09 2016 daemon.info dnsmasq[5396]: reply clients4.google.com is Mon Mar 14 19:02:09 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 216.58.216.238 Mon Mar 14 19:02:09 2016 daemon.info dnsmasq[5396]: reply clients4.google.com is Mon Mar 14 19:02:09 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 2607:f8b0:4009:809::200e Mon Mar 14 19:02:10 2016 daemon.info dnsmasq[5396]: query[AAAA] clients.l.google.com from 10.10.10.223 Mon Mar 14 19:02:10 2016 daemon.info dnsmasq[5396]: cached clients.l.google.com is 2607:f8b0:4009:809::200e Mon Mar 14 19:02:19 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:02:19 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:02:19 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:02:19 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:02:19 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:02:19 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:02:19 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:02:19 2016 daemon.info dnsmasq[5396]: cached pool2.moatads.com is NODATA-IPv6 Mon Mar 14 19:02:19 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:02:19 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:02:19 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:02:19 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:02:19 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:02:19 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:02:19 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:02:19 2016 daemon.info dnsmasq[5396]: cached pool2.moatads.com is NODATA-IPv6 Mon Mar 14 19:02:19 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:02:19 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:02:19 2016 daemon.info dnsmasq[5396]: reply pool2.moatads.com is 54.210.102.140 Mon Mar 14 19:02:19 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:02:19 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:02:19 2016 daemon.info dnsmasq[5396]: reply pool2.moatads.com is 54.210.102.140 Mon Mar 14 19:02:21 2016 daemon.info dnsmasq[5396]: query[AAAA] app.procentive.com from 10.10.10.223 Mon Mar 14 19:02:21 2016 daemon.info dnsmasq[5396]: forwarded app.procentive.com to 192.168.1.1 Mon Mar 14 19:02:28 2016 daemon.info dnsmasq[5396]: query[A] 9.client-channel.google.com from 10.10.10.223 Mon Mar 14 19:02:28 2016 daemon.info dnsmasq[5396]: forwarded 9.client-channel.google.com to 192.168.1.1 Mon Mar 14 19:02:28 2016 daemon.info dnsmasq[5396]: query[AAAA] 9.client-channel.google.com from 10.10.10.223 Mon Mar 14 19:02:28 2016 daemon.info dnsmasq[5396]: forwarded 9.client-channel.google.com to 192.168.1.1 Mon Mar 14 19:02:28 2016 daemon.info dnsmasq[5396]: reply 9.client-channel.google.com is 74.125.207.189 Mon Mar 14 19:02:28 2016 daemon.info dnsmasq[5396]: reply 9.client-channel.google.com is 2607:f8b0:4001:c07::bd Mon Mar 14 19:02:53 2016 daemon.info dnsmasq[5396]: query[A] mail.google.com from 10.10.10.228 Mon Mar 14 19:02:53 2016 daemon.info dnsmasq[5396]: forwarded mail.google.com to 192.168.1.1 Mon Mar 14 19:02:53 2016 daemon.info dnsmasq[5396]: query[A] mail.google.com from 10.10.10.229 Mon Mar 14 19:02:53 2016 daemon.info dnsmasq[5396]: forwarded mail.google.com to 192.168.1.1 Mon Mar 14 19:02:53 2016 daemon.info dnsmasq[5396]: reply mail.google.com is Mon Mar 14 19:02:53 2016 daemon.info dnsmasq[5396]: reply googlemail.l.google.com is 216.58.216.229 Mon Mar 14 19:02:53 2016 daemon.info dnsmasq[5396]: reply mail.google.com is Mon Mar 14 19:02:53 2016 daemon.info dnsmasq[5396]: reply googlemail.l.google.com is 216.58.216.229 Mon Mar 14 19:02:54 2016 daemon.info dnsmasq[5396]: query[A] chatenabled.mail.google.com from 10.10.10.228 Mon Mar 14 19:02:54 2016 daemon.info dnsmasq[5396]: forwarded chatenabled.mail.google.com to 192.168.1.1 Mon Mar 14 19:02:54 2016 daemon.info dnsmasq[5396]: query[A] chatenabled.mail.google.com from 10.10.10.229 Mon Mar 14 19:02:54 2016 daemon.info dnsmasq[5396]: forwarded chatenabled.mail.google.com to 192.168.1.1 Mon Mar 14 19:02:54 2016 daemon.info dnsmasq[5396]: reply chatenabled.mail.google.com is Mon Mar 14 19:02:54 2016 daemon.info dnsmasq[5396]: reply b.googlemail.l.google.com is 216.58.216.231 Mon Mar 14 19:02:54 2016 daemon.info dnsmasq[5396]: reply chatenabled.mail.google.com is Mon Mar 14 19:02:54 2016 daemon.info dnsmasq[5396]: reply b.googlemail.l.google.com is 216.58.216.231 Mon Mar 14 19:03:05 2016 daemon.info dnsmasq[5396]: query[A] play.google.com from 10.10.10.223 Mon Mar 14 19:03:05 2016 daemon.info dnsmasq[5396]: forwarded play.google.com to 192.168.1.1 Mon Mar 14 19:03:05 2016 daemon.info dnsmasq[5396]: query[AAAA] play.google.com from 10.10.10.223 Mon Mar 14 19:03:05 2016 daemon.info dnsmasq[5396]: forwarded play.google.com to 192.168.1.1 Mon Mar 14 19:03:05 2016 daemon.info dnsmasq[5396]: reply play.google.com is Mon Mar 14 19:03:05 2016 daemon.info dnsmasq[5396]: reply play.l.google.com is 216.58.216.238 Mon Mar 14 19:03:05 2016 daemon.info dnsmasq[5396]: reply play.google.com is Mon Mar 14 19:03:05 2016 daemon.info dnsmasq[5396]: reply play.l.google.com is 2607:f8b0:4009:809::200e Mon Mar 14 19:03:06 2016 daemon.info dnsmasq[5396]: query[AAAA] play.l.google.com from 10.10.10.223 Mon Mar 14 19:03:06 2016 daemon.info dnsmasq[5396]: cached play.l.google.com is 2607:f8b0:4009:809::200e Mon Mar 14 19:03:07 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:03:07 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:03:35 2016 daemon.info dnsmasq[5396]: query[PTR] lb._dns-sd._udp.0.10.10.10.in-addr.arpa from 10.10.10.223 Mon Mar 14 19:03:35 2016 daemon.info dnsmasq[5396]: forwarded lb._dns-sd._udp.0.10.10.10.in-addr.arpa to 192.168.1.1 Mon Mar 14 19:03:35 2016 daemon.info dnsmasq[5396]: query[PTR] lb._dns-sd._udp.lan from 10.10.10.223 Mon Mar 14 19:03:35 2016 daemon.info dnsmasq[5396]: config lb._dns-sd._udp.lan is NXDOMAIN Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: query[A] o.aolcdn.com from 10.10.10.228 Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: forwarded o.aolcdn.com to 192.168.1.1 Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: query[AAAA] o.aolcdn.com from 10.10.10.228 Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: forwarded o.aolcdn.com to 192.168.1.1 Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: query[A] o.aolcdn.com from 10.10.10.229 Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: forwarded o.aolcdn.com to 192.168.1.1 Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: reply o.aolcdn.com is Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: reply o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 23.77.232.155 Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 23.77.232.170 Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: query[AAAA] o.aolcdn.com from 10.10.10.229 Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: cached o.aolcdn.com is Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: cached o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: forwarded o.aolcdn.com to 192.168.1.1 Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: reply o.aolcdn.com is Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: reply o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 2600:1404:e::174d:e91b Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 2600:1404:e::174d:e869 Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: reply o.aolcdn.com is Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: reply o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 23.77.232.155 Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 23.77.232.170 Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: reply o.aolcdn.com is Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: reply o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 2600:1404:e::174d:e91b Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 2600:1404:e::174d:e869 Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: reply pool2.moatads.com is 52.91.145.90 Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: cached pool2.moatads.com is 52.91.145.90 Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: reply pool2.moatads.com is NODATA-IPv6 Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: cached pool2.moatads.com is NODATA-IPv6 Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: cached pool2.moatads.com is 52.91.145.90 Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: cached pool2.moatads.com is NODATA-IPv6 Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: cached pool2.moatads.com is 52.91.145.90 Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:03:49 2016 daemon.info dnsmasq[5396]: cached pool2.moatads.com is NODATA-IPv6 Mon Mar 14 19:04:08 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:04:08 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:04:08 2016 daemon.info dnsmasq[5396]: query[A] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:04:08 2016 daemon.info dnsmasq[5396]: forwarded skydocs.skyprod.akadns.net to 192.168.1.1 Mon Mar 14 19:04:08 2016 daemon.info dnsmasq[5396]: reply skydocs.skyprod.akadns.net is 134.170.109.72 Mon Mar 14 19:04:18 2016 daemon.info dnsmasq[5396]: query[A] googlemail.l.google.com from 10.10.10.223 Mon Mar 14 19:04:18 2016 daemon.info dnsmasq[5396]: cached googlemail.l.google.com is 216.58.216.229 Mon Mar 14 19:04:18 2016 daemon.info dnsmasq[5396]: query[AAAA] googlemail.l.google.com from 10.10.10.223 Mon Mar 14 19:04:18 2016 daemon.info dnsmasq[5396]: forwarded googlemail.l.google.com to 192.168.1.1 Mon Mar 14 19:04:18 2016 daemon.info dnsmasq[5396]: reply googlemail.l.google.com is 2607:f8b0:4009:809::2005 Mon Mar 14 19:04:38 2016 daemon.info dnsmasq[5396]: query[AAAA] d.docs.live.net from 10.10.10.223 Mon Mar 14 19:04:38 2016 daemon.info dnsmasq[5396]: forwarded d.docs.live.net to 192.168.1.1 Mon Mar 14 19:04:38 2016 daemon.info dnsmasq[5396]: query[A] d.docs.live.net from 10.10.10.223 Mon Mar 14 19:04:38 2016 daemon.info dnsmasq[5396]: forwarded d.docs.live.net to 192.168.1.1 Mon Mar 14 19:04:38 2016 daemon.info dnsmasq[5396]: reply d.docs.live.net is Mon Mar 14 19:04:38 2016 daemon.info dnsmasq[5396]: reply skydocs.skyprod.akadns.net is 134.170.109.72 Mon Mar 14 19:04:39 2016 daemon.info dnsmasq[5396]: reply d.docs.live.net is Mon Mar 14 19:04:39 2016 daemon.info dnsmasq[5396]: reply skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:04:49 2016 daemon.info dnsmasq[5396]: query[AAAA] app.procentive.com from 10.10.10.223 Mon Mar 14 19:04:50 2016 daemon.info dnsmasq[5396]: forwarded app.procentive.com to 192.168.1.1 Mon Mar 14 19:05:03 2016 daemon.info dnsmasq[5396]: query[A] plus.google.com from 10.10.10.223 Mon Mar 14 19:05:03 2016 daemon.info dnsmasq[5396]: forwarded plus.google.com to 192.168.1.1 Mon Mar 14 19:05:03 2016 daemon.info dnsmasq[5396]: reply plus.google.com is 216.58.216.238 Mon Mar 14 19:05:04 2016 daemon.info dnsmasq[5396]: query[A] www.google-analytics.com from 10.10.10.223 Mon Mar 14 19:05:04 2016 daemon.info dnsmasq[5396]: forwarded www.google-analytics.com to 192.168.1.1 Mon Mar 14 19:05:04 2016 daemon.info dnsmasq[5396]: reply www.google-analytics.com is Mon Mar 14 19:05:04 2016 daemon.info dnsmasq[5396]: reply www-google-analytics.l.google.com is 216.58.216.238 Mon Mar 14 19:05:09 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:05:09 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:05:16 2016 daemon.info dnsmasq[5396]: query[A] clients2.google.com from 10.10.10.228 Mon Mar 14 19:05:16 2016 daemon.info dnsmasq[5396]: forwarded clients2.google.com to 192.168.1.1 Mon Mar 14 19:05:16 2016 daemon.info dnsmasq[5396]: query[A] clients2.google.com from 10.10.10.229 Mon Mar 14 19:05:16 2016 daemon.info dnsmasq[5396]: forwarded clients2.google.com to 192.168.1.1 Mon Mar 14 19:05:16 2016 daemon.info dnsmasq[5396]: reply clients2.google.com is Mon Mar 14 19:05:16 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 216.58.216.238 Mon Mar 14 19:05:16 2016 daemon.info dnsmasq[5396]: reply clients2.google.com is Mon Mar 14 19:05:16 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 216.58.216.238 Mon Mar 14 19:05:43 2016 daemon.info dnsmasq[5396]: query[A] plus.google.com from 10.10.10.223 Mon Mar 14 19:05:43 2016 daemon.info dnsmasq[5396]: cached plus.google.com is 216.58.216.238 Mon Mar 14 19:05:43 2016 daemon.info dnsmasq[5396]: query[AAAA] plus.google.com from 10.10.10.223 Mon Mar 14 19:05:43 2016 daemon.info dnsmasq[5396]: forwarded plus.google.com to 192.168.1.1 Mon Mar 14 19:05:43 2016 daemon.info dnsmasq[5396]: reply plus.google.com is 2607:f8b0:4009:809::200e Mon Mar 14 19:05:43 2016 daemon.info dnsmasq[5396]: query[A] apis.google.com from 10.10.10.223 Mon Mar 14 19:05:43 2016 daemon.info dnsmasq[5396]: forwarded apis.google.com to 192.168.1.1 Mon Mar 14 19:05:43 2016 daemon.info dnsmasq[5396]: query[AAAA] apis.google.com from 10.10.10.223 Mon Mar 14 19:05:43 2016 daemon.info dnsmasq[5396]: forwarded apis.google.com to 192.168.1.1 Mon Mar 14 19:05:43 2016 daemon.info dnsmasq[5396]: reply apis.google.com is Mon Mar 14 19:05:43 2016 daemon.info dnsmasq[5396]: reply plus.l.google.com is 216.58.216.238 Mon Mar 14 19:05:43 2016 daemon.info dnsmasq[5396]: reply apis.google.com is Mon Mar 14 19:05:43 2016 daemon.info dnsmasq[5396]: reply plus.l.google.com is 2607:f8b0:4009:809::200e Mon Mar 14 19:05:44 2016 daemon.info dnsmasq[5396]: query[AAAA] plus.l.google.com from 10.10.10.223 Mon Mar 14 19:05:44 2016 daemon.info dnsmasq[5396]: cached plus.l.google.com is 2607:f8b0:4009:809::200e Mon Mar 14 19:05:47 2016 daemon.info dnsmasq[5396]: query[AAAA] ssw.live.com from 10.10.10.223 Mon Mar 14 19:05:47 2016 daemon.info dnsmasq[5396]: forwarded ssw.live.com to 192.168.1.1 Mon Mar 14 19:05:47 2016 daemon.info dnsmasq[5396]: query[A] ssw.live.com from 10.10.10.223 Mon Mar 14 19:05:47 2016 daemon.info dnsmasq[5396]: forwarded ssw.live.com to 192.168.1.1 Mon Mar 14 19:05:47 2016 daemon.info dnsmasq[5396]: reply ssw.live.com is Mon Mar 14 19:05:47 2016 daemon.info dnsmasq[5396]: reply ssw.live.com.nsatc.net is 207.46.101.29 Mon Mar 14 19:05:47 2016 daemon.info dnsmasq[5396]: reply ssw.live.com is Mon Mar 14 19:05:47 2016 daemon.info dnsmasq[5396]: reply ssw.live.com.nsatc.net is NODATA-IPv6 Mon Mar 14 19:05:48 2016 daemon.info dnsmasq[5396]: query[AAAA] ssw.live.com.nsatc.net from 10.10.10.223 Mon Mar 14 19:05:48 2016 daemon.info dnsmasq[5396]: cached ssw.live.com.nsatc.net is NODATA-IPv6 Mon Mar 14 19:06:01 2016 daemon.info dnsmasq[5396]: query[AAAA] nexus.officeapps.live.com from 10.10.10.223 Mon Mar 14 19:06:01 2016 daemon.info dnsmasq[5396]: forwarded nexus.officeapps.live.com to 192.168.1.1 Mon Mar 14 19:06:01 2016 daemon.info dnsmasq[5396]: query[A] nexus.officeapps.live.com from 10.10.10.223 Mon Mar 14 19:06:01 2016 daemon.info dnsmasq[5396]: forwarded nexus.officeapps.live.com to 192.168.1.1 Mon Mar 14 19:06:01 2016 daemon.info dnsmasq[5396]: reply nexus.officeapps.live.com is Mon Mar 14 19:06:01 2016 daemon.info dnsmasq[5396]: reply prod-w.nexus.live.com.akadns.net is 40.76.12.4 Mon Mar 14 19:06:01 2016 daemon.info dnsmasq[5396]: reply nexus.officeapps.live.com is Mon Mar 14 19:06:01 2016 daemon.info dnsmasq[5396]: reply prod-w.nexus.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:06:02 2016 daemon.info dnsmasq[5396]: query[AAAA] prod-w.nexus.live.com.akadns.net from 10.10.10.223 Mon Mar 14 19:06:02 2016 daemon.info dnsmasq[5396]: cached prod-w.nexus.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:06:09 2016 daemon.info dnsmasq[5396]: query[A] clients2.google.com from 10.10.10.223 Mon Mar 14 19:06:09 2016 daemon.info dnsmasq[5396]: cached clients2.google.com is Mon Mar 14 19:06:09 2016 daemon.info dnsmasq[5396]: cached clients.l.google.com is 216.58.216.238 Mon Mar 14 19:06:10 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:06:10 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:06:22 2016 daemon.info dnsmasq[5396]: query[AAAA] app.procentive.com from 10.10.10.223 Mon Mar 14 19:06:22 2016 daemon.info dnsmasq[5396]: forwarded app.procentive.com to 192.168.1.1 Mon Mar 14 19:06:25 2016 daemon.info dnsmasq[5396]: query[A] 9.client-channel.google.com from 10.10.10.223 Mon Mar 14 19:06:25 2016 daemon.info dnsmasq[5396]: forwarded 9.client-channel.google.com to 192.168.1.1 Mon Mar 14 19:06:25 2016 daemon.info dnsmasq[5396]: reply 9.client-channel.google.com is 74.125.207.189 Mon Mar 14 19:06:41 2016 daemon.info dnsmasq[5396]: query[A] time-ios.apple.com from 10.10.10.216 Mon Mar 14 19:06:41 2016 daemon.info dnsmasq[5396]: cached time-ios.apple.com is Mon Mar 14 19:06:41 2016 daemon.info dnsmasq[5396]: forwarded time-ios.apple.com to 192.168.1.1 Mon Mar 14 19:06:41 2016 daemon.info dnsmasq[5396]: query[AAAA] time-ios.apple.com from 10.10.10.216 Mon Mar 14 19:06:41 2016 daemon.info dnsmasq[5396]: cached time-ios.apple.com is Mon Mar 14 19:06:41 2016 daemon.info dnsmasq[5396]: cached time-ios.g.aaplimg.com is NODATA-IPv6 Mon Mar 14 19:06:41 2016 daemon.info dnsmasq[5396]: query[A] time-ios.g.aaplimg.com from 10.10.10.216 Mon Mar 14 19:06:41 2016 daemon.info dnsmasq[5396]: forwarded time-ios.g.aaplimg.com to 192.168.1.1 Mon Mar 14 19:06:41 2016 daemon.info dnsmasq[5396]: query[AAAA] time-ios.g.aaplimg.com from 10.10.10.216 Mon Mar 14 19:06:41 2016 daemon.info dnsmasq[5396]: cached time-ios.g.aaplimg.com is NODATA-IPv6 Mon Mar 14 19:06:41 2016 daemon.info dnsmasq[5396]: reply time-ios.apple.com is Mon Mar 14 19:06:41 2016 daemon.info dnsmasq[5396]: reply time-ios.g.aaplimg.com is 17.253.2.125 Mon Mar 14 19:06:41 2016 daemon.info dnsmasq[5396]: reply time-ios.g.aaplimg.com is 17.253.24.253 Mon Mar 14 19:06:41 2016 daemon.info dnsmasq[5396]: reply time-ios.g.aaplimg.com is 17.253.2.253 Mon Mar 14 19:06:41 2016 daemon.info dnsmasq[5396]: reply time-ios.g.aaplimg.com is 17.253.2.125 Mon Mar 14 19:06:41 2016 daemon.info dnsmasq[5396]: reply time-ios.g.aaplimg.com is 17.253.24.253 Mon Mar 14 19:06:41 2016 daemon.info dnsmasq[5396]: reply time-ios.g.aaplimg.com is 17.253.2.253 Mon Mar 14 19:06:41 2016 daemon.info dnsmasq[5396]: query[AAAA] init.itunes.apple.com from 10.10.10.216 Mon Mar 14 19:06:41 2016 daemon.info dnsmasq[5396]: forwarded init.itunes.apple.com to 192.168.1.1 Mon Mar 14 19:06:41 2016 daemon.info dnsmasq[5396]: query[A] init.itunes.apple.com from 10.10.10.216 Mon Mar 14 19:06:41 2016 daemon.info dnsmasq[5396]: forwarded init.itunes.apple.com to 192.168.1.1 Mon Mar 14 19:06:41 2016 daemon.info dnsmasq[5396]: reply init.itunes.apple.com is Mon Mar 14 19:06:41 2016 daemon.info dnsmasq[5396]: reply init-cdn.itunes-apple.com.akadns.net is Mon Mar 14 19:06:41 2016 daemon.info dnsmasq[5396]: reply itunes.apple.com.edgekey.net is Mon Mar 14 19:06:41 2016 daemon.info dnsmasq[5396]: reply e673.e9.akamaiedge.net is 23.12.242.217 Mon Mar 14 19:06:41 2016 daemon.info dnsmasq[5396]: reply init.itunes.apple.com is Mon Mar 14 19:06:41 2016 daemon.info dnsmasq[5396]: reply init-cdn.itunes-apple.com.akadns.net is Mon Mar 14 19:06:41 2016 daemon.info dnsmasq[5396]: reply itunes.apple.com.edgekey.net is Mon Mar 14 19:06:41 2016 daemon.info dnsmasq[5396]: reply e673.e9.akamaiedge.net is NODATA-IPv6 Mon Mar 14 19:06:42 2016 daemon.info dnsmasq[5396]: query[AAAA] e673.e9.akamaiedge.net from 10.10.10.216 Mon Mar 14 19:06:42 2016 daemon.info dnsmasq[5396]: cached e673.e9.akamaiedge.net is NODATA-IPv6 Mon Mar 14 19:06:42 2016 daemon.info dnsmasq[5396]: query[AAAA] xp.apple.com from 10.10.10.216 Mon Mar 14 19:06:42 2016 daemon.info dnsmasq[5396]: forwarded xp.apple.com to 192.168.1.1 Mon Mar 14 19:06:42 2016 daemon.info dnsmasq[5396]: query[AAAA] partiality.itunes.apple.com from 10.10.10.216 Mon Mar 14 19:06:42 2016 daemon.info dnsmasq[5396]: forwarded partiality.itunes.apple.com to 192.168.1.1 Mon Mar 14 19:06:42 2016 daemon.info dnsmasq[5396]: query[A] xp.apple.com from 10.10.10.216 Mon Mar 14 19:06:42 2016 daemon.info dnsmasq[5396]: forwarded xp.apple.com to 192.168.1.1 Mon Mar 14 19:06:42 2016 daemon.info dnsmasq[5396]: reply xp.apple.com is Mon Mar 14 19:06:42 2016 daemon.info dnsmasq[5396]: reply mzuserxp.itunes-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:06:42 2016 daemon.info dnsmasq[5396]: query[A] partiality.itunes.apple.com from 10.10.10.216 Mon Mar 14 19:06:42 2016 daemon.info dnsmasq[5396]: forwarded partiality.itunes.apple.com to 192.168.1.1 Mon Mar 14 19:06:42 2016 daemon.info dnsmasq[5396]: reply xp.apple.com is Mon Mar 14 19:06:42 2016 daemon.info dnsmasq[5396]: reply mzuserxp.itunes-apple.com.akadns.net is 17.154.66.110 Mon Mar 14 19:06:42 2016 daemon.info dnsmasq[5396]: reply mzuserxp.itunes-apple.com.akadns.net is 17.154.66.109 Mon Mar 14 19:06:42 2016 daemon.info dnsmasq[5396]: reply mzuserxp.itunes-apple.com.akadns.net is 17.154.65.207 Mon Mar 14 19:06:42 2016 daemon.info dnsmasq[5396]: reply mzuserxp.itunes-apple.com.akadns.net is 17.154.65.206 Mon Mar 14 19:06:42 2016 daemon.info dnsmasq[5396]: reply mzuserxp.itunes-apple.com.akadns.net is 17.154.66.111 Mon Mar 14 19:06:42 2016 daemon.info dnsmasq[5396]: reply mzuserxp.itunes-apple.com.akadns.net is 17.154.66.108 Mon Mar 14 19:06:42 2016 daemon.info dnsmasq[5396]: reply partiality.itunes.apple.com is Mon Mar 14 19:06:42 2016 daemon.info dnsmasq[5396]: reply partiality.itunes-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:06:42 2016 daemon.info dnsmasq[5396]: reply partiality.itunes.apple.com is Mon Mar 14 19:06:42 2016 daemon.info dnsmasq[5396]: reply partiality.itunes-apple.com.akadns.net is 17.173.66.75 Mon Mar 14 19:06:42 2016 daemon.info dnsmasq[5396]: reply partiality.itunes-apple.com.akadns.net is 17.173.66.73 Mon Mar 14 19:06:42 2016 daemon.info dnsmasq[5396]: reply partiality.itunes-apple.com.akadns.net is 17.173.66.74 Mon Mar 14 19:06:43 2016 daemon.info dnsmasq[5396]: query[AAAA] mzuserxp.itunes-apple.com.akadns.net from 10.10.10.216 Mon Mar 14 19:06:43 2016 daemon.info dnsmasq[5396]: cached mzuserxp.itunes-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:06:43 2016 daemon.info dnsmasq[5396]: query[AAAA] partiality.itunes-apple.com.akadns.net from 10.10.10.216 Mon Mar 14 19:06:43 2016 daemon.info dnsmasq[5396]: cached partiality.itunes-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:06:43 2016 daemon.info dnsmasq[5396]: query[AAAA] radio-services.itunes.apple.com from 10.10.10.216 Mon Mar 14 19:06:43 2016 daemon.info dnsmasq[5396]: forwarded radio-services.itunes.apple.com to 192.168.1.1 Mon Mar 14 19:06:43 2016 daemon.info dnsmasq[5396]: query[A] radio-services.itunes.apple.com from 10.10.10.216 Mon Mar 14 19:06:43 2016 daemon.info dnsmasq[5396]: forwarded radio-services.itunes.apple.com to 192.168.1.1 Mon Mar 14 19:06:43 2016 daemon.info dnsmasq[5396]: query[AAAA] iadsdk.apple.com from 10.10.10.216 Mon Mar 14 19:06:43 2016 daemon.info dnsmasq[5396]: forwarded iadsdk.apple.com to 192.168.1.1 Mon Mar 14 19:06:43 2016 daemon.info dnsmasq[5396]: query[A] iadsdk.apple.com from 10.10.10.216 Mon Mar 14 19:06:43 2016 daemon.info dnsmasq[5396]: forwarded iadsdk.apple.com to 192.168.1.1 Mon Mar 14 19:06:43 2016 daemon.info dnsmasq[5396]: reply radio-services.itunes.apple.com is Mon Mar 14 19:06:43 2016 daemon.info dnsmasq[5396]: reply radio.itunes.apple.com.edgekey.net is Mon Mar 14 19:06:43 2016 daemon.info dnsmasq[5396]: reply e7542.e9.akamaiedge.net is 23.211.186.161 Mon Mar 14 19:06:43 2016 daemon.info dnsmasq[5396]: reply radio-services.itunes.apple.com is Mon Mar 14 19:06:43 2016 daemon.info dnsmasq[5396]: reply radio.itunes.apple.com.edgekey.net is Mon Mar 14 19:06:43 2016 daemon.info dnsmasq[5396]: reply e7542.e9.akamaiedge.net is NODATA-IPv6 Mon Mar 14 19:06:43 2016 daemon.info dnsmasq[5396]: reply iadsdk.apple.com is Mon Mar 14 19:06:43 2016 daemon.info dnsmasq[5396]: reply iadsdk.apple.com.edgekey.net is Mon Mar 14 19:06:43 2016 daemon.info dnsmasq[5396]: reply e4805.a.akamaiedge.net is NODATA-IPv6 Mon Mar 14 19:06:43 2016 daemon.info dnsmasq[5396]: reply iadsdk.apple.com is Mon Mar 14 19:06:43 2016 daemon.info dnsmasq[5396]: reply iadsdk.apple.com.edgekey.net is Mon Mar 14 19:06:43 2016 daemon.info dnsmasq[5396]: reply e4805.a.akamaiedge.net is 23.14.55.120 Mon Mar 14 19:06:43 2016 daemon.info dnsmasq[5396]: query[AAAA] e4805.a.akamaiedge.net from 10.10.10.216 Mon Mar 14 19:06:43 2016 daemon.info dnsmasq[5396]: cached e4805.a.akamaiedge.net is NODATA-IPv6 Mon Mar 14 19:06:43 2016 daemon.info dnsmasq[5396]: query[A] e4805.a.akamaiedge.net from 10.10.10.216 Mon Mar 14 19:06:43 2016 daemon.info dnsmasq[5396]: cached e4805.a.akamaiedge.net is 23.14.55.120 Mon Mar 14 19:06:43 2016 daemon.info dnsmasq[5396]: query[AAAA] e7542.e9.akamaiedge.net from 10.10.10.216 Mon Mar 14 19:06:43 2016 daemon.info dnsmasq[5396]: cached e7542.e9.akamaiedge.net is NODATA-IPv6 Mon Mar 14 19:06:49 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:06:49 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:06:49 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:06:49 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:06:49 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:06:50 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:06:50 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:06:50 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:06:50 2016 daemon.info dnsmasq[5396]: reply pool5.moatads.com is 54.208.105.236 Mon Mar 14 19:06:50 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:06:50 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:06:50 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:06:50 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:06:50 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:06:50 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:06:50 2016 daemon.info dnsmasq[5396]: reply pool5.moatads.com is 54.208.105.236 Mon Mar 14 19:06:50 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:06:50 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:06:50 2016 daemon.info dnsmasq[5396]: reply pool5.moatads.com is NODATA-IPv6 Mon Mar 14 19:06:50 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:06:50 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:06:50 2016 daemon.info dnsmasq[5396]: reply pool5.moatads.com is NODATA-IPv6 Mon Mar 14 19:06:50 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:06:50 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:06:50 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:06:50 2016 daemon.info dnsmasq[5396]: cached pool5.moatads.com is NODATA-IPv6 Mon Mar 14 19:07:12 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:07:12 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:07:13 2016 daemon.info dnsmasq[5396]: query[A] clients2.google.com from 10.10.10.223 Mon Mar 14 19:07:13 2016 daemon.info dnsmasq[5396]: forwarded clients2.google.com to 192.168.1.1 Mon Mar 14 19:07:13 2016 daemon.info dnsmasq[5396]: reply clients2.google.com is Mon Mar 14 19:07:13 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 216.58.216.110 Mon Mar 14 19:07:15 2016 daemon.info dnsmasq[5396]: query[A] safebrowsing.google.com from 10.10.10.223 Mon Mar 14 19:07:15 2016 daemon.info dnsmasq[5396]: forwarded safebrowsing.google.com to 192.168.1.1 Mon Mar 14 19:07:15 2016 daemon.info dnsmasq[5396]: reply safebrowsing.google.com is Mon Mar 14 19:07:15 2016 daemon.info dnsmasq[5396]: reply sb.l.google.com is 216.58.192.206 Mon Mar 14 19:07:15 2016 daemon.info dnsmasq[5396]: query[A] safebrowsing-cache.google.com from 10.10.10.223 Mon Mar 14 19:07:15 2016 daemon.info dnsmasq[5396]: forwarded safebrowsing-cache.google.com to 192.168.1.1 Mon Mar 14 19:07:15 2016 daemon.info dnsmasq[5396]: reply safebrowsing-cache.google.com is Mon Mar 14 19:07:15 2016 daemon.info dnsmasq[5396]: reply safebrowsing.cache.l.google.com is 216.58.216.238 Mon Mar 14 19:07:51 2016 daemon.info dnsmasq[5396]: query[AAAA] origin.guzzoni-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 19:07:51 2016 daemon.info dnsmasq[5396]: forwarded origin.guzzoni-apple.com.akadns.net to 192.168.1.1 Mon Mar 14 19:07:51 2016 daemon.info dnsmasq[5396]: query[A] origin.guzzoni-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 19:07:51 2016 daemon.info dnsmasq[5396]: forwarded origin.guzzoni-apple.com.akadns.net to 192.168.1.1 Mon Mar 14 19:07:51 2016 daemon.info dnsmasq[5396]: query[AAAA] api.smoot-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 19:07:51 2016 daemon.info dnsmasq[5396]: cached api.smoot-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:07:51 2016 daemon.info dnsmasq[5396]: reply origin.guzzoni-apple.com.akadns.net is Mon Mar 14 19:07:51 2016 daemon.info dnsmasq[5396]: reply st14p02sa.guzzoni-apple.com.akadns.net is 17.174.2.5 Mon Mar 14 19:07:51 2016 daemon.info dnsmasq[5396]: reply origin.guzzoni-apple.com.akadns.net is Mon Mar 14 19:07:51 2016 daemon.info dnsmasq[5396]: reply st14p02sa.guzzoni-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:07:51 2016 daemon.info dnsmasq[5396]: query[AAAA] www.apple.com.edgekey.net.globalredir.akadns.net from 10.10.10.211 Mon Mar 14 19:07:51 2016 daemon.info dnsmasq[5396]: forwarded www.apple.com.edgekey.net.globalredir.akadns.net to 192.168.1.1 Mon Mar 14 19:07:51 2016 daemon.info dnsmasq[5396]: query[A] www.apple.com.edgekey.net.globalredir.akadns.net from 10.10.10.211 Mon Mar 14 19:07:51 2016 daemon.info dnsmasq[5396]: forwarded www.apple.com.edgekey.net.globalredir.akadns.net to 192.168.1.1 Mon Mar 14 19:07:51 2016 daemon.info dnsmasq[5396]: query[AAAA] apple.com from 10.10.10.211 Mon Mar 14 19:07:51 2016 daemon.info dnsmasq[5396]: forwarded apple.com to 192.168.1.1 Mon Mar 14 19:07:51 2016 daemon.info dnsmasq[5396]: reply www.apple.com.edgekey.net.globalredir.akadns.net is Mon Mar 14 19:07:51 2016 daemon.info dnsmasq[5396]: reply e6858.dscc.akamaiedge.net is 2600:1404:e:18d::1aca Mon Mar 14 19:07:51 2016 daemon.info dnsmasq[5396]: reply e6858.dscc.akamaiedge.net is 2600:1404:e:194::1aca Mon Mar 14 19:07:51 2016 daemon.info dnsmasq[5396]: reply www.apple.com.edgekey.net.globalredir.akadns.net is Mon Mar 14 19:07:51 2016 daemon.info dnsmasq[5396]: reply e6858.dscc.akamaiedge.net is 23.12.245.148 Mon Mar 14 19:07:51 2016 daemon.info dnsmasq[5396]: query[AAAA] st14p02sa.guzzoni-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 19:07:51 2016 daemon.info dnsmasq[5396]: cached st14p02sa.guzzoni-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:07:52 2016 daemon.info dnsmasq[5396]: query[A] api.smoot-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 19:07:52 2016 daemon.info dnsmasq[5396]: forwarded api.smoot-apple.com.akadns.net to 192.168.1.1 Mon Mar 14 19:07:52 2016 daemon.info dnsmasq[5396]: reply api.smoot-apple.com.akadns.net is 17.249.73.246 Mon Mar 14 19:07:53 2016 daemon.info dnsmasq[5396]: query[A] settings-win.data.microsoft.com from 10.10.10.228 Mon Mar 14 19:07:53 2016 daemon.info dnsmasq[5396]: forwarded settings-win.data.microsoft.com to 192.168.1.1 Mon Mar 14 19:07:53 2016 daemon.info dnsmasq[5396]: query[AAAA] settings-win.data.microsoft.com from 10.10.10.228 Mon Mar 14 19:07:53 2016 daemon.info dnsmasq[5396]: forwarded settings-win.data.microsoft.com to 192.168.1.1 Mon Mar 14 19:07:53 2016 daemon.info dnsmasq[5396]: query[A] settings-win.data.microsoft.com from 10.10.10.229 Mon Mar 14 19:07:53 2016 daemon.info dnsmasq[5396]: forwarded settings-win.data.microsoft.com to 192.168.1.1 Mon Mar 14 19:07:53 2016 daemon.info dnsmasq[5396]: reply settings-win.data.microsoft.com is Mon Mar 14 19:07:53 2016 daemon.info dnsmasq[5396]: reply settings.data.glbdns2.microsoft.com is Mon Mar 14 19:07:53 2016 daemon.info dnsmasq[5396]: reply onesettings-cy2.metron.live.com.nsatc.net is 64.4.54.253 Mon Mar 14 19:07:53 2016 daemon.info dnsmasq[5396]: query[AAAA] settings-win.data.microsoft.com from 10.10.10.229 Mon Mar 14 19:07:53 2016 daemon.info dnsmasq[5396]: cached settings-win.data.microsoft.com is Mon Mar 14 19:07:53 2016 daemon.info dnsmasq[5396]: cached settings.data.glbdns2.microsoft.com is Mon Mar 14 19:07:53 2016 daemon.info dnsmasq[5396]: forwarded settings-win.data.microsoft.com to 192.168.1.1 Mon Mar 14 19:07:53 2016 daemon.info dnsmasq[5396]: reply settings-win.data.microsoft.com is Mon Mar 14 19:07:53 2016 daemon.info dnsmasq[5396]: reply settings.data.glbdns2.microsoft.com is Mon Mar 14 19:07:53 2016 daemon.info dnsmasq[5396]: reply onesettings-cy2.metron.live.com.nsatc.net is 64.4.54.253 Mon Mar 14 19:07:53 2016 daemon.info dnsmasq[5396]: reply settings-win.data.microsoft.com is Mon Mar 14 19:07:53 2016 daemon.info dnsmasq[5396]: reply settings.data.glbdns2.microsoft.com is Mon Mar 14 19:07:53 2016 daemon.info dnsmasq[5396]: reply onesettings-cy2.metron.live.com.nsatc.net is NODATA-IPv6 Mon Mar 14 19:07:53 2016 daemon.info dnsmasq[5396]: reply settings-win.data.microsoft.com is Mon Mar 14 19:07:53 2016 daemon.info dnsmasq[5396]: reply settings.data.glbdns2.microsoft.com is Mon Mar 14 19:07:53 2016 daemon.info dnsmasq[5396]: reply onesettings-cy2.metron.live.com.nsatc.net is NODATA-IPv6 Mon Mar 14 19:07:53 2016 daemon.info dnsmasq[5396]: query[AAAA] settings-win.data.microsoft.com from 10.10.10.228 Mon Mar 14 19:07:53 2016 daemon.info dnsmasq[5396]: cached settings-win.data.microsoft.com is Mon Mar 14 19:07:53 2016 daemon.info dnsmasq[5396]: cached settings.data.glbdns2.microsoft.com is Mon Mar 14 19:07:53 2016 daemon.info dnsmasq[5396]: cached onesettings-cy2.metron.live.com.nsatc.net is NODATA-IPv6 Mon Mar 14 19:08:00 2016 daemon.info dnsmasq[5396]: query[A] clients4.google.com from 10.10.10.228 Mon Mar 14 19:08:00 2016 daemon.info dnsmasq[5396]: forwarded clients4.google.com to 192.168.1.1 Mon Mar 14 19:08:00 2016 daemon.info dnsmasq[5396]: query[A] clients4.google.com from 10.10.10.229 Mon Mar 14 19:08:00 2016 daemon.info dnsmasq[5396]: forwarded clients4.google.com to 192.168.1.1 Mon Mar 14 19:08:00 2016 daemon.info dnsmasq[5396]: reply clients4.google.com is Mon Mar 14 19:08:00 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 216.58.216.110 Mon Mar 14 19:08:00 2016 daemon.info dnsmasq[5396]: reply clients4.google.com is Mon Mar 14 19:08:00 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 216.58.216.110 Mon Mar 14 19:08:01 2016 daemon.info dnsmasq[5396]: query[A] shavar.services.mozilla.com from 10.10.10.223 Mon Mar 14 19:08:01 2016 daemon.info dnsmasq[5396]: forwarded shavar.services.mozilla.com to 192.168.1.1 Mon Mar 14 19:08:01 2016 daemon.info dnsmasq[5396]: reply shavar.services.mozilla.com is Mon Mar 14 19:08:01 2016 daemon.info dnsmasq[5396]: reply shavar.prod.mozaws.net is 52.89.156.147 Mon Mar 14 19:08:01 2016 daemon.info dnsmasq[5396]: reply shavar.prod.mozaws.net is 52.36.105.160 Mon Mar 14 19:08:01 2016 daemon.info dnsmasq[5396]: reply shavar.prod.mozaws.net is 52.25.175.6 Mon Mar 14 19:08:01 2016 daemon.info dnsmasq[5396]: reply shavar.prod.mozaws.net is 54.186.218.125 Mon Mar 14 19:08:01 2016 daemon.info dnsmasq[5396]: reply shavar.prod.mozaws.net is 52.11.125.28 Mon Mar 14 19:08:01 2016 daemon.info dnsmasq[5396]: reply shavar.prod.mozaws.net is 54.201.205.104 Mon Mar 14 19:08:05 2016 daemon.info dnsmasq[5396]: query[A] chatenabled.mail.google.com from 10.10.10.228 Mon Mar 14 19:08:05 2016 daemon.info dnsmasq[5396]: forwarded chatenabled.mail.google.com to 192.168.1.1 Mon Mar 14 19:08:05 2016 daemon.info dnsmasq[5396]: query[A] chatenabled.mail.google.com from 10.10.10.229 Mon Mar 14 19:08:05 2016 daemon.info dnsmasq[5396]: forwarded chatenabled.mail.google.com to 192.168.1.1 Mon Mar 14 19:08:05 2016 daemon.info dnsmasq[5396]: reply chatenabled.mail.google.com is Mon Mar 14 19:08:05 2016 daemon.info dnsmasq[5396]: reply b.googlemail.l.google.com is 216.58.216.231 Mon Mar 14 19:08:05 2016 daemon.info dnsmasq[5396]: reply chatenabled.mail.google.com is Mon Mar 14 19:08:05 2016 daemon.info dnsmasq[5396]: reply b.googlemail.l.google.com is 216.58.216.231 Mon Mar 14 19:08:06 2016 daemon.info dnsmasq[5396]: query[A] v10.vortex-win.data.microsoft.com from 10.10.10.228 Mon Mar 14 19:08:06 2016 daemon.info dnsmasq[5396]: forwarded v10.vortex-win.data.microsoft.com to 192.168.1.1 Mon Mar 14 19:08:06 2016 daemon.info dnsmasq[5396]: query[AAAA] v10.vortex-win.data.microsoft.com from 10.10.10.228 Mon Mar 14 19:08:06 2016 daemon.info dnsmasq[5396]: forwarded v10.vortex-win.data.microsoft.com to 192.168.1.1 Mon Mar 14 19:08:06 2016 daemon.info dnsmasq[5396]: query[A] v10.vortex-win.data.microsoft.com from 10.10.10.229 Mon Mar 14 19:08:06 2016 daemon.info dnsmasq[5396]: forwarded v10.vortex-win.data.microsoft.com to 192.168.1.1 Mon Mar 14 19:08:06 2016 daemon.info dnsmasq[5396]: query[AAAA] v10.vortex-win.data.microsoft.com from 10.10.10.229 Mon Mar 14 19:08:06 2016 daemon.info dnsmasq[5396]: forwarded v10.vortex-win.data.microsoft.com to 192.168.1.1 Mon Mar 14 19:08:06 2016 daemon.info dnsmasq[5396]: reply v10.vortex-win.data.microsoft.com is Mon Mar 14 19:08:06 2016 daemon.info dnsmasq[5396]: reply v10.vortex-win.data.metron.live.com.nsatc.net is Mon Mar 14 19:08:06 2016 daemon.info dnsmasq[5396]: reply vortex.data.glbdns2.microsoft.com is Mon Mar 14 19:08:06 2016 daemon.info dnsmasq[5396]: reply vortex-cy2.metron.live.com.nsatc.net is 64.4.54.254 Mon Mar 14 19:08:06 2016 daemon.info dnsmasq[5396]: reply v10.vortex-win.data.microsoft.com is Mon Mar 14 19:08:06 2016 daemon.info dnsmasq[5396]: reply v10.vortex-win.data.metron.live.com.nsatc.net is Mon Mar 14 19:08:06 2016 daemon.info dnsmasq[5396]: reply vortex.data.glbdns2.microsoft.com is Mon Mar 14 19:08:06 2016 daemon.info dnsmasq[5396]: reply vortex-cy2.metron.live.com.nsatc.net is 64.4.54.254 Mon Mar 14 19:08:06 2016 daemon.info dnsmasq[5396]: reply v10.vortex-win.data.microsoft.com is Mon Mar 14 19:08:06 2016 daemon.info dnsmasq[5396]: reply v10.vortex-win.data.metron.live.com.nsatc.net is Mon Mar 14 19:08:06 2016 daemon.info dnsmasq[5396]: reply vortex.data.glbdns2.microsoft.com is Mon Mar 14 19:08:06 2016 daemon.info dnsmasq[5396]: reply vortex-cy2.metron.live.com.nsatc.net is NODATA-IPv6 Mon Mar 14 19:08:06 2016 daemon.info dnsmasq[5396]: reply v10.vortex-win.data.microsoft.com is Mon Mar 14 19:08:06 2016 daemon.info dnsmasq[5396]: reply v10.vortex-win.data.metron.live.com.nsatc.net is Mon Mar 14 19:08:06 2016 daemon.info dnsmasq[5396]: reply vortex.data.glbdns2.microsoft.com is Mon Mar 14 19:08:06 2016 daemon.info dnsmasq[5396]: reply vortex-cy2.metron.live.com.nsatc.net is NODATA-IPv6 Mon Mar 14 19:08:13 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:08:13 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: query[A] o.aolcdn.com from 10.10.10.228 Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: forwarded o.aolcdn.com to 192.168.1.1 Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: query[AAAA] o.aolcdn.com from 10.10.10.228 Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: forwarded o.aolcdn.com to 192.168.1.1 Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: query[A] o.aolcdn.com from 10.10.10.229 Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: forwarded o.aolcdn.com to 192.168.1.1 Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: reply o.aolcdn.com is Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: reply o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 23.77.232.155 Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 23.77.232.170 Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: query[AAAA] o.aolcdn.com from 10.10.10.229 Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: cached o.aolcdn.com is Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: cached o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: forwarded o.aolcdn.com to 192.168.1.1 Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: reply o.aolcdn.com is Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: reply o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 2600:1404:e::174d:e91b Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 2600:1404:e::174d:e869 Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: reply o.aolcdn.com is Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: reply o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 23.77.232.155 Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 23.77.232.170 Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: reply o.aolcdn.com is Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: reply o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 2600:1404:e::174d:e91b Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 2600:1404:e::174d:e869 Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: cached pool5.moatads.com is NODATA-IPv6 Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: reply pool5.moatads.com is 54.174.72.87 Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: cached pool5.moatads.com is NODATA-IPv6 Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: reply pool5.moatads.com is 54.174.72.87 Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: cached pool5.moatads.com is 54.174.72.87 Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: cached pool5.moatads.com is NODATA-IPv6 Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: cached pool5.moatads.com is 54.174.72.87 Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:08:20 2016 daemon.info dnsmasq[5396]: cached pool5.moatads.com is NODATA-IPv6 Mon Mar 14 19:08:33 2016 daemon.info dnsmasq[5396]: query[A] p25-quota.icloud.com from 10.10.10.228 Mon Mar 14 19:08:33 2016 daemon.info dnsmasq[5396]: cached p25-quota.icloud.com is Mon Mar 14 19:08:33 2016 daemon.info dnsmasq[5396]: forwarded p25-quota.icloud.com to 192.168.1.1 Mon Mar 14 19:08:33 2016 daemon.info dnsmasq[5396]: query[AAAA] p25-quota.icloud.com from 10.10.10.228 Mon Mar 14 19:08:33 2016 daemon.info dnsmasq[5396]: cached p25-quota.icloud.com is Mon Mar 14 19:08:33 2016 daemon.info dnsmasq[5396]: cached p25-quota-current.edge.icloud.apple-dns.net is NODATA-IPv6 Mon Mar 14 19:08:33 2016 daemon.info dnsmasq[5396]: query[A] p25-quota.icloud.com from 10.10.10.229 Mon Mar 14 19:08:33 2016 daemon.info dnsmasq[5396]: cached p25-quota.icloud.com is Mon Mar 14 19:08:33 2016 daemon.info dnsmasq[5396]: forwarded p25-quota.icloud.com to 192.168.1.1 Mon Mar 14 19:08:33 2016 daemon.info dnsmasq[5396]: query[AAAA] p25-quota.icloud.com from 10.10.10.229 Mon Mar 14 19:08:33 2016 daemon.info dnsmasq[5396]: cached p25-quota.icloud.com is Mon Mar 14 19:08:33 2016 daemon.info dnsmasq[5396]: cached p25-quota-current.edge.icloud.apple-dns.net is NODATA-IPv6 Mon Mar 14 19:08:33 2016 daemon.info dnsmasq[5396]: reply p25-quota.icloud.com is Mon Mar 14 19:08:33 2016 daemon.info dnsmasq[5396]: reply p25-quota-current.edge.icloud.apple-dns.net is 17.248.128.243 Mon Mar 14 19:08:33 2016 daemon.info dnsmasq[5396]: reply p25-quota.icloud.com is Mon Mar 14 19:08:33 2016 daemon.info dnsmasq[5396]: reply p25-quota-current.edge.icloud.apple-dns.net is 17.248.128.243 Mon Mar 14 19:08:49 2016 daemon.info dnsmasq[5396]: query[A] wpad.lan from 10.10.10.228 Mon Mar 14 19:08:49 2016 daemon.info dnsmasq[5396]: config wpad.lan is NXDOMAIN Mon Mar 14 19:08:49 2016 daemon.info dnsmasq[5396]: query[AAAA] wpad.lan from 10.10.10.228 Mon Mar 14 19:08:49 2016 daemon.info dnsmasq[5396]: config wpad.lan is NXDOMAIN Mon Mar 14 19:08:49 2016 daemon.info dnsmasq[5396]: query[A] wpad.lan from 10.10.10.229 Mon Mar 14 19:08:49 2016 daemon.info dnsmasq[5396]: config wpad.lan is NXDOMAIN Mon Mar 14 19:08:49 2016 daemon.info dnsmasq[5396]: query[AAAA] wpad.lan from 10.10.10.229 Mon Mar 14 19:08:49 2016 daemon.info dnsmasq[5396]: config wpad.lan is NXDOMAIN Mon Mar 14 19:08:51 2016 daemon.info dnsmasq[5396]: query[AAAA] app.procentive.com from 10.10.10.223 Mon Mar 14 19:08:51 2016 daemon.info dnsmasq[5396]: forwarded app.procentive.com to 192.168.1.1 Mon Mar 14 19:09:22 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:09:22 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:09:22 2016 daemon.info dnsmasq[5396]: query[A] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:09:22 2016 daemon.info dnsmasq[5396]: forwarded skydocs.skyprod.akadns.net to 192.168.1.1 Mon Mar 14 19:09:22 2016 daemon.info dnsmasq[5396]: reply skydocs.skyprod.akadns.net is 134.170.108.24 Mon Mar 14 19:09:35 2016 daemon.info dnsmasq[5396]: query[A] plus.google.com from 10.10.10.228 Mon Mar 14 19:09:35 2016 daemon.info dnsmasq[5396]: forwarded plus.google.com to 192.168.1.1 Mon Mar 14 19:09:35 2016 daemon.info dnsmasq[5396]: query[A] plus.google.com from 10.10.10.229 Mon Mar 14 19:09:35 2016 daemon.info dnsmasq[5396]: forwarded plus.google.com to 192.168.1.1 Mon Mar 14 19:09:35 2016 daemon.info dnsmasq[5396]: reply plus.google.com is 216.58.216.238 Mon Mar 14 19:09:35 2016 daemon.info dnsmasq[5396]: reply plus.google.com is 216.58.216.238 Mon Mar 14 19:09:35 2016 daemon.info dnsmasq[5396]: query[A] clients2.google.com from 10.10.10.228 Mon Mar 14 19:09:35 2016 daemon.info dnsmasq[5396]: forwarded clients2.google.com to 192.168.1.1 Mon Mar 14 19:09:35 2016 daemon.info dnsmasq[5396]: query[A] clients2.google.com from 10.10.10.229 Mon Mar 14 19:09:35 2016 daemon.info dnsmasq[5396]: forwarded clients2.google.com to 192.168.1.1 Mon Mar 14 19:09:35 2016 daemon.info dnsmasq[5396]: reply clients2.google.com is Mon Mar 14 19:09:35 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 216.58.216.110 Mon Mar 14 19:09:35 2016 daemon.info dnsmasq[5396]: reply clients2.google.com is Mon Mar 14 19:09:35 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 216.58.216.110 Mon Mar 14 19:09:35 2016 daemon.info dnsmasq[5396]: query[A] www.google-analytics.com from 10.10.10.228 Mon Mar 14 19:09:35 2016 daemon.info dnsmasq[5396]: cached www.google-analytics.com is Mon Mar 14 19:09:35 2016 daemon.info dnsmasq[5396]: forwarded www.google-analytics.com to 192.168.1.1 Mon Mar 14 19:09:35 2016 daemon.info dnsmasq[5396]: query[A] www.google-analytics.com from 10.10.10.229 Mon Mar 14 19:09:35 2016 daemon.info dnsmasq[5396]: forwarded www.google-analytics.com to 192.168.1.1 Mon Mar 14 19:09:35 2016 daemon.info dnsmasq[5396]: reply www.google-analytics.com is Mon Mar 14 19:09:35 2016 daemon.info dnsmasq[5396]: reply www-google-analytics.l.google.com is 216.58.216.238 Mon Mar 14 19:09:35 2016 daemon.info dnsmasq[5396]: reply www.google-analytics.com is Mon Mar 14 19:09:35 2016 daemon.info dnsmasq[5396]: reply www-google-analytics.l.google.com is 216.58.216.238 Mon Mar 14 19:09:38 2016 daemon.info dnsmasq[5396]: query[A] webhook.logentries.com from 10.10.10.228 Mon Mar 14 19:09:38 2016 daemon.info dnsmasq[5396]: forwarded webhook.logentries.com to 192.168.1.1 Mon Mar 14 19:09:38 2016 daemon.info dnsmasq[5396]: query[A] webhook.logentries.com from 10.10.10.229 Mon Mar 14 19:09:38 2016 daemon.info dnsmasq[5396]: forwarded webhook.logentries.com to 192.168.1.1 Mon Mar 14 19:09:38 2016 daemon.info dnsmasq[5396]: reply webhook.logentries.com is 52.30.224.210 Mon Mar 14 19:09:38 2016 daemon.info dnsmasq[5396]: reply webhook.logentries.com is 54.246.209.52 Mon Mar 14 19:09:38 2016 daemon.info dnsmasq[5396]: reply webhook.logentries.com is 54.229.19.14 Mon Mar 14 19:09:38 2016 daemon.info dnsmasq[5396]: reply webhook.logentries.com is 52.30.224.210 Mon Mar 14 19:09:38 2016 daemon.info dnsmasq[5396]: reply webhook.logentries.com is 54.246.209.52 Mon Mar 14 19:09:38 2016 daemon.info dnsmasq[5396]: reply webhook.logentries.com is 54.229.19.14 Mon Mar 14 19:09:43 2016 daemon.info dnsmasq[5396]: query[A] docs.google.com from 10.10.10.228 Mon Mar 14 19:09:43 2016 daemon.info dnsmasq[5396]: forwarded docs.google.com to 192.168.1.1 Mon Mar 14 19:09:43 2016 daemon.info dnsmasq[5396]: query[A] docs.google.com from 10.10.10.229 Mon Mar 14 19:09:43 2016 daemon.info dnsmasq[5396]: forwarded docs.google.com to 192.168.1.1 Mon Mar 14 19:09:43 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 173.194.192.138 Mon Mar 14 19:09:43 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 173.194.192.113 Mon Mar 14 19:09:43 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 173.194.192.139 Mon Mar 14 19:09:43 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 173.194.192.100 Mon Mar 14 19:09:43 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 173.194.192.102 Mon Mar 14 19:09:43 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 173.194.192.101 Mon Mar 14 19:09:43 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 173.194.192.138 Mon Mar 14 19:09:43 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 173.194.192.113 Mon Mar 14 19:09:43 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 173.194.192.139 Mon Mar 14 19:09:43 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 173.194.192.100 Mon Mar 14 19:09:43 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 173.194.192.102 Mon Mar 14 19:09:43 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 173.194.192.101 Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: query[A] o.aolcdn.com from 10.10.10.228 Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: cached o.aolcdn.com is Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: cached o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: forwarded o.aolcdn.com to 192.168.1.1 Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: query[AAAA] o.aolcdn.com from 10.10.10.228 Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: cached o.aolcdn.com is Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: forwarded o.aolcdn.com to 192.168.1.1 Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: query[A] o.aolcdn.com from 10.10.10.229 Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: forwarded o.aolcdn.com to 192.168.1.1 Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: query[AAAA] o.aolcdn.com from 10.10.10.229 Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: forwarded o.aolcdn.com to 192.168.1.1 Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: reply o.aolcdn.com is Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: reply o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 23.77.232.155 Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 23.77.232.170 Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: reply o.aolcdn.com is Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: reply o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 23.77.232.155 Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 23.77.232.170 Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: reply o.aolcdn.com is Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: reply o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 2600:1404:e::174d:e91b Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 2600:1404:e::174d:e869 Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: reply o.aolcdn.com is Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: reply o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 2600:1404:e::174d:e91b Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 2600:1404:e::174d:e869 Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: reply pool4.moatads.com is 54.152.112.109 Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: reply pool4.moatads.com is 54.152.112.109 Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: reply pool2.moatads.com is NODATA-IPv6 Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:09:50 2016 daemon.info dnsmasq[5396]: reply pool2.moatads.com is NODATA-IPv6 Mon Mar 14 19:10:00 2016 cron.info crond[3202]: USER root pid 6108 cmd /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Mon Mar 14 19:10:00 2016 daemon.info dnsmasq[5396]: query[A] 0.us.pool.ntp.org from 127.0.0.1 Mon Mar 14 19:10:00 2016 daemon.info dnsmasq[5396]: forwarded 0.us.pool.ntp.org to 192.168.1.1 Mon Mar 14 19:10:00 2016 daemon.info dnsmasq[5396]: reply 0.us.pool.ntp.org is 64.6.144.6 Mon Mar 14 19:10:00 2016 daemon.info dnsmasq[5396]: reply 0.us.pool.ntp.org is 74.120.8.2 Mon Mar 14 19:10:00 2016 daemon.info dnsmasq[5396]: reply 0.us.pool.ntp.org is 198.60.22.240 Mon Mar 14 19:10:00 2016 daemon.info dnsmasq[5396]: reply 0.us.pool.ntp.org is 208.53.158.34 Mon Mar 14 19:10:05 2016 daemon.info dnsmasq[5396]: query[A] lastpass.com from 10.10.10.223 Mon Mar 14 19:10:05 2016 daemon.info dnsmasq[5396]: forwarded lastpass.com to 192.168.1.1 Mon Mar 14 19:10:05 2016 daemon.info dnsmasq[5396]: reply lastpass.com is 38.127.167.48 Mon Mar 14 19:10:05 2016 daemon.info dnsmasq[5396]: reply lastpass.com is 128.121.22.176 Mon Mar 14 19:10:08 2016 daemon.info dnsmasq[5396]: query[AAAA] 9.client-channel.google.com from 10.10.10.223 Mon Mar 14 19:10:08 2016 daemon.info dnsmasq[5396]: forwarded 9.client-channel.google.com to 192.168.1.1 Mon Mar 14 19:10:08 2016 daemon.info dnsmasq[5396]: reply 9.client-channel.google.com is 2607:f8b0:4001:c07::bd Mon Mar 14 19:10:08 2016 daemon.info dnsmasq[5396]: query[A] ssl.gstatic.com from 10.10.10.228 Mon Mar 14 19:10:08 2016 daemon.info dnsmasq[5396]: forwarded ssl.gstatic.com to 192.168.1.1 Mon Mar 14 19:10:08 2016 daemon.info dnsmasq[5396]: query[A] ssl.gstatic.com from 10.10.10.229 Mon Mar 14 19:10:08 2016 daemon.info dnsmasq[5396]: forwarded ssl.gstatic.com to 192.168.1.1 Mon Mar 14 19:10:08 2016 daemon.info dnsmasq[5396]: reply ssl.gstatic.com is 216.58.216.227 Mon Mar 14 19:10:08 2016 daemon.info dnsmasq[5396]: reply ssl.gstatic.com is 216.58.216.227 Mon Mar 14 19:10:14 2016 daemon.info dnsmasq[5396]: query[A] ubp-common-us-prod.s3.amazonaws.com from 10.10.10.223 Mon Mar 14 19:10:14 2016 daemon.info dnsmasq[5396]: forwarded ubp-common-us-prod.s3.amazonaws.com to 192.168.1.1 Mon Mar 14 19:10:14 2016 daemon.info dnsmasq[5396]: reply ubp-common-us-prod.s3.amazonaws.com is Mon Mar 14 19:10:14 2016 daemon.info dnsmasq[5396]: reply s3-us-west-2-w.amazonaws.com is 54.231.184.170 Mon Mar 14 19:10:18 2016 daemon.info dnsmasq[5396]: query[AAAA] google.com from 10.10.10.223 Mon Mar 14 19:10:18 2016 daemon.info dnsmasq[5396]: forwarded google.com to 192.168.1.1 Mon Mar 14 19:10:18 2016 daemon.info dnsmasq[5396]: query[A] google.com from 10.10.10.223 Mon Mar 14 19:10:18 2016 daemon.info dnsmasq[5396]: forwarded google.com to 192.168.1.1 Mon Mar 14 19:10:18 2016 daemon.info dnsmasq[5396]: reply google.com is 2607:f8b0:4009:80b::200e Mon Mar 14 19:10:18 2016 daemon.info dnsmasq[5396]: reply google.com is 173.194.197.102 Mon Mar 14 19:10:18 2016 daemon.info dnsmasq[5396]: reply google.com is 173.194.197.138 Mon Mar 14 19:10:18 2016 daemon.info dnsmasq[5396]: reply google.com is 173.194.197.100 Mon Mar 14 19:10:18 2016 daemon.info dnsmasq[5396]: reply google.com is 173.194.197.101 Mon Mar 14 19:10:18 2016 daemon.info dnsmasq[5396]: reply google.com is 173.194.197.113 Mon Mar 14 19:10:18 2016 daemon.info dnsmasq[5396]: reply google.com is 173.194.197.139 Mon Mar 14 19:10:18 2016 daemon.info dnsmasq[5396]: query[A] p44-contacts.icloud.com from 10.10.10.223 Mon Mar 14 19:10:18 2016 daemon.info dnsmasq[5396]: forwarded p44-contacts.icloud.com to 192.168.1.1 Mon Mar 14 19:10:18 2016 daemon.info dnsmasq[5396]: query[AAAA] p44-contacts.icloud.com from 10.10.10.223 Mon Mar 14 19:10:18 2016 daemon.info dnsmasq[5396]: forwarded p44-contacts.icloud.com to 192.168.1.1 Mon Mar 14 19:10:18 2016 daemon.info dnsmasq[5396]: reply p44-contacts.icloud.com is Mon Mar 14 19:10:18 2016 daemon.info dnsmasq[5396]: reply p44-contacts-current.edge.icloud.apple-dns.net is 17.248.139.41 Mon Mar 14 19:10:18 2016 daemon.info dnsmasq[5396]: reply p44-contacts.icloud.com is Mon Mar 14 19:10:18 2016 daemon.info dnsmasq[5396]: reply p44-contacts-current.edge.icloud.apple-dns.net is NODATA-IPv6 Mon Mar 14 19:10:19 2016 daemon.info dnsmasq[5396]: query[AAAA] p44-contacts-current.edge.icloud.apple-dns.net from 10.10.10.223 Mon Mar 14 19:10:19 2016 daemon.info dnsmasq[5396]: cached p44-contacts-current.edge.icloud.apple-dns.net is NODATA-IPv6 Mon Mar 14 19:10:20 2016 daemon.info dnsmasq[5396]: query[AAAA] p03-keyvalueservice.icloud.com from 10.10.10.223 Mon Mar 14 19:10:20 2016 daemon.info dnsmasq[5396]: forwarded p03-keyvalueservice.icloud.com to 192.168.1.1 Mon Mar 14 19:10:20 2016 daemon.info dnsmasq[5396]: query[A] p03-keyvalueservice.icloud.com from 10.10.10.223 Mon Mar 14 19:10:20 2016 daemon.info dnsmasq[5396]: forwarded p03-keyvalueservice.icloud.com to 192.168.1.1 Mon Mar 14 19:10:20 2016 daemon.info dnsmasq[5396]: reply p03-keyvalueservice.icloud.com is Mon Mar 14 19:10:20 2016 daemon.info dnsmasq[5396]: reply p03-keyvalueservice-current.edge.icloud.apple-dns.net is NODATA-IPv6 Mon Mar 14 19:10:20 2016 daemon.info dnsmasq[5396]: reply p03-keyvalueservice.icloud.com is Mon Mar 14 19:10:20 2016 daemon.info dnsmasq[5396]: reply p03-keyvalueservice-current.edge.icloud.apple-dns.net is 17.248.139.41 Mon Mar 14 19:10:20 2016 daemon.info dnsmasq[5396]: query[AAAA] p03-keyvalueservice-current.edge.icloud.apple-dns.net from 10.10.10.223 Mon Mar 14 19:10:20 2016 daemon.info dnsmasq[5396]: cached p03-keyvalueservice-current.edge.icloud.apple-dns.net is NODATA-IPv6 Mon Mar 14 19:10:20 2016 daemon.info dnsmasq[5396]: query[A] p03-keyvalueservice-current.edge.icloud.apple-dns.net from 10.10.10.223 Mon Mar 14 19:10:20 2016 daemon.info dnsmasq[5396]: cached p03-keyvalueservice-current.edge.icloud.apple-dns.net is 17.248.139.41 Mon Mar 14 19:10:22 2016 daemon.info dnsmasq[5396]: query[AAAA] p44-keyvalueservice-current.edge.icloud.apple-dns.net from 10.10.10.143 Mon Mar 14 19:10:22 2016 daemon.info dnsmasq[5396]: forwarded p44-keyvalueservice-current.edge.icloud.apple-dns.net to 192.168.1.1 Mon Mar 14 19:10:22 2016 daemon.info dnsmasq[5396]: query[A] p44-keyvalueservice-current.edge.icloud.apple-dns.net from 10.10.10.143 Mon Mar 14 19:10:22 2016 daemon.info dnsmasq[5396]: forwarded p44-keyvalueservice-current.edge.icloud.apple-dns.net to 192.168.1.1 Mon Mar 14 19:10:22 2016 daemon.info dnsmasq[5396]: query[AAAA] app.procentive.com from 10.10.10.223 Mon Mar 14 19:10:23 2016 daemon.info dnsmasq[5396]: forwarded app.procentive.com to 192.168.1.1 Mon Mar 14 19:10:23 2016 daemon.info dnsmasq[5396]: reply p44-keyvalueservice-current.edge.icloud.apple-dns.net is 17.248.131.148 Mon Mar 14 19:10:23 2016 daemon.info dnsmasq[5396]: query[AAAA] api.smoot-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 19:10:23 2016 daemon.info dnsmasq[5396]: cached api.smoot-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:10:23 2016 daemon.info dnsmasq[5396]: query[A] api.smoot-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 19:10:23 2016 daemon.info dnsmasq[5396]: forwarded api.smoot-apple.com.akadns.net to 192.168.1.1 Mon Mar 14 19:10:23 2016 daemon.info dnsmasq[5396]: reply api.smoot-apple.com.akadns.net is 17.249.73.246 Mon Mar 14 19:10:23 2016 daemon.info dnsmasq[5396]: query[AAAA] www.apple.com from 10.10.10.211 Mon Mar 14 19:10:23 2016 daemon.info dnsmasq[5396]: forwarded www.apple.com to 192.168.1.1 Mon Mar 14 19:10:23 2016 daemon.info dnsmasq[5396]: query[A] www.apple.com from 10.10.10.211 Mon Mar 14 19:10:24 2016 daemon.info dnsmasq[5396]: forwarded www.apple.com to 192.168.1.1 Mon Mar 14 19:10:24 2016 daemon.info dnsmasq[5396]: reply www.apple.com is Mon Mar 14 19:10:24 2016 daemon.info dnsmasq[5396]: reply www.apple.com.edgekey.net is Mon Mar 14 19:10:24 2016 daemon.info dnsmasq[5396]: reply www.apple.com.edgekey.net.globalredir.akadns.net is Mon Mar 14 19:10:24 2016 daemon.info dnsmasq[5396]: reply e6858.dscc.akamaiedge.net is 2600:1404:e:18d::1aca Mon Mar 14 19:10:24 2016 daemon.info dnsmasq[5396]: reply e6858.dscc.akamaiedge.net is 2600:1404:e:194::1aca Mon Mar 14 19:10:24 2016 daemon.info dnsmasq[5396]: reply www.apple.com is Mon Mar 14 19:10:24 2016 daemon.info dnsmasq[5396]: reply www.apple.com.edgekey.net is Mon Mar 14 19:10:24 2016 daemon.info dnsmasq[5396]: reply www.apple.com.edgekey.net.globalredir.akadns.net is Mon Mar 14 19:10:24 2016 daemon.info dnsmasq[5396]: reply e6858.dscc.akamaiedge.net is 23.12.245.148 Mon Mar 14 19:10:24 2016 daemon.info dnsmasq[5396]: query[AAAA] apple.com from 10.10.10.211 Mon Mar 14 19:10:24 2016 daemon.info dnsmasq[5396]: forwarded apple.com to 192.168.1.1 Mon Mar 14 19:10:24 2016 daemon.info dnsmasq[5396]: query[AAAA] st14p02sa.guzzoni-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 19:10:24 2016 daemon.info dnsmasq[5396]: cached st14p02sa.guzzoni-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:10:24 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:10:24 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:10:24 2016 daemon.info dnsmasq[5396]: query[AAAA] p44-keyvalueservice-current.edge.icloud.apple-dns.net from 10.10.10.211 Mon Mar 14 19:10:24 2016 daemon.info dnsmasq[5396]: forwarded p44-keyvalueservice-current.edge.icloud.apple-dns.net to 192.168.1.1 Mon Mar 14 19:10:24 2016 daemon.info dnsmasq[5396]: query[A] p44-keyvalueservice-current.edge.icloud.apple-dns.net from 10.10.10.211 Mon Mar 14 19:10:24 2016 daemon.info dnsmasq[5396]: cached p44-keyvalueservice-current.edge.icloud.apple-dns.net is 17.248.131.148 Mon Mar 14 19:10:33 2016 daemon.info dnsmasq[5396]: query[A] time-ios.g.aaplimg.com from 10.10.10.211 Mon Mar 14 19:10:33 2016 daemon.info dnsmasq[5396]: forwarded time-ios.g.aaplimg.com to 192.168.1.1 Mon Mar 14 19:10:33 2016 daemon.info dnsmasq[5396]: query[AAAA] time-ios.g.aaplimg.com from 10.10.10.211 Mon Mar 14 19:10:33 2016 daemon.info dnsmasq[5396]: cached time-ios.g.aaplimg.com is NODATA-IPv6 Mon Mar 14 19:10:33 2016 daemon.info dnsmasq[5396]: reply time-ios.g.aaplimg.com is 17.253.2.253 Mon Mar 14 19:10:33 2016 daemon.info dnsmasq[5396]: reply time-ios.g.aaplimg.com is 17.253.2.125 Mon Mar 14 19:10:33 2016 daemon.info dnsmasq[5396]: reply time-ios.g.aaplimg.com is 17.253.24.253 Mon Mar 14 19:10:37 2016 daemon.info dnsmasq[5396]: query[AAAA] p44-keyvalueservice-current.edge.icloud.apple-dns.net from 10.10.10.143 Mon Mar 14 19:10:37 2016 daemon.info dnsmasq[5396]: forwarded p44-keyvalueservice-current.edge.icloud.apple-dns.net to 192.168.1.1 Mon Mar 14 19:10:37 2016 daemon.info dnsmasq[5396]: query[A] p44-keyvalueservice-current.edge.icloud.apple-dns.net from 10.10.10.143 Mon Mar 14 19:10:37 2016 daemon.info dnsmasq[5396]: forwarded p44-keyvalueservice-current.edge.icloud.apple-dns.net to 192.168.1.1 Mon Mar 14 19:10:37 2016 daemon.info dnsmasq[5396]: reply p44-keyvalueservice-current.edge.icloud.apple-dns.net is 17.248.129.208 Mon Mar 14 19:10:47 2016 daemon.info dnsmasq[5396]: query[A] time-ios.g.aaplimg.com from 10.10.10.143 Mon Mar 14 19:10:47 2016 daemon.info dnsmasq[5396]: cached time-ios.g.aaplimg.com is 17.253.24.253 Mon Mar 14 19:10:47 2016 daemon.info dnsmasq[5396]: cached time-ios.g.aaplimg.com is 17.253.2.125 Mon Mar 14 19:10:47 2016 daemon.info dnsmasq[5396]: cached time-ios.g.aaplimg.com is 17.253.2.253 Mon Mar 14 19:10:47 2016 daemon.info dnsmasq[5396]: query[AAAA] time-ios.g.aaplimg.com from 10.10.10.143 Mon Mar 14 19:10:47 2016 daemon.info dnsmasq[5396]: cached time-ios.g.aaplimg.com is NODATA-IPv6 Mon Mar 14 19:10:55 2016 daemon.info dnsmasq[5396]: query[TXT] time.apple.com from 10.10.10.223 Mon Mar 14 19:10:55 2016 daemon.info dnsmasq[5396]: forwarded time.apple.com to 192.168.1.1 Mon Mar 14 19:10:55 2016 daemon.info dnsmasq[5396]: reply time.apple.com is ntp minpoll 9 maxpoll 12 iburst Mon Mar 14 19:11:23 2016 daemon.info dnsmasq[5396]: query[A] app.procentive.com from 10.10.10.223 Mon Mar 14 19:11:23 2016 daemon.info dnsmasq[5396]: cached app.procentive.com is 66.179.249.115 Mon Mar 14 19:11:23 2016 daemon.info dnsmasq[5396]: query[AAAA] app.procentive.com from 10.10.10.223 Mon Mar 14 19:11:23 2016 daemon.info dnsmasq[5396]: forwarded app.procentive.com to 192.168.1.1 Mon Mar 14 19:11:26 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:11:26 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:11:40 2016 daemon.info dnsmasq[5396]: query[A] lp-push-server-825.lastpass.com from 10.10.10.223 Mon Mar 14 19:11:40 2016 daemon.info dnsmasq[5396]: forwarded lp-push-server-825.lastpass.com to 192.168.1.1 Mon Mar 14 19:11:40 2016 daemon.info dnsmasq[5396]: query[AAAA] lp-push-server-825.lastpass.com from 10.10.10.223 Mon Mar 14 19:11:40 2016 daemon.info dnsmasq[5396]: forwarded lp-push-server-825.lastpass.com to 192.168.1.1 Mon Mar 14 19:11:40 2016 daemon.info dnsmasq[5396]: reply lp-push-server-825.lastpass.com is 128.121.22.158 Mon Mar 14 19:12:06 2016 daemon.info dnsmasq[5396]: query[A] clients4.google.com from 10.10.10.228 Mon Mar 14 19:12:06 2016 daemon.info dnsmasq[5396]: forwarded clients4.google.com to 192.168.1.1 Mon Mar 14 19:12:06 2016 daemon.info dnsmasq[5396]: query[A] clients4.google.com from 10.10.10.229 Mon Mar 14 19:12:06 2016 daemon.info dnsmasq[5396]: forwarded clients4.google.com to 192.168.1.1 Mon Mar 14 19:12:06 2016 daemon.info dnsmasq[5396]: reply clients4.google.com is Mon Mar 14 19:12:06 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.193.101 Mon Mar 14 19:12:06 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.193.113 Mon Mar 14 19:12:06 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.193.100 Mon Mar 14 19:12:06 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.193.138 Mon Mar 14 19:12:06 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.193.102 Mon Mar 14 19:12:06 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.193.139 Mon Mar 14 19:12:06 2016 daemon.info dnsmasq[5396]: reply clients4.google.com is Mon Mar 14 19:12:06 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.193.101 Mon Mar 14 19:12:06 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.193.113 Mon Mar 14 19:12:06 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.193.100 Mon Mar 14 19:12:06 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.193.138 Mon Mar 14 19:12:06 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.193.102 Mon Mar 14 19:12:06 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.193.139 Mon Mar 14 19:12:07 2016 daemon.info dnsmasq[5396]: query[AAAA] nexus.officeapps.live.com from 10.10.10.223 Mon Mar 14 19:12:07 2016 daemon.info dnsmasq[5396]: forwarded nexus.officeapps.live.com to 192.168.1.1 Mon Mar 14 19:12:07 2016 daemon.info dnsmasq[5396]: query[A] nexus.officeapps.live.com from 10.10.10.223 Mon Mar 14 19:12:07 2016 daemon.info dnsmasq[5396]: forwarded nexus.officeapps.live.com to 192.168.1.1 Mon Mar 14 19:12:07 2016 daemon.info dnsmasq[5396]: reply nexus.officeapps.live.com is Mon Mar 14 19:12:07 2016 daemon.info dnsmasq[5396]: reply prod-w.nexus.live.com.akadns.net is 104.45.11.195 Mon Mar 14 19:12:07 2016 daemon.info dnsmasq[5396]: reply nexus.officeapps.live.com is Mon Mar 14 19:12:07 2016 daemon.info dnsmasq[5396]: reply prod-w.nexus.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:12:07 2016 daemon.info dnsmasq[5396]: query[AAAA] prod-w.nexus.live.com.akadns.net from 10.10.10.223 Mon Mar 14 19:12:07 2016 daemon.info dnsmasq[5396]: cached prod-w.nexus.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:12:28 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:12:28 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:12:36 2016 daemon.info dnsmasq[5396]: query[A] storage.browserapps.amazon.com from 10.10.10.223 Mon Mar 14 19:12:37 2016 daemon.info dnsmasq[5396]: forwarded storage.browserapps.amazon.com to 192.168.1.1 Mon Mar 14 19:12:37 2016 daemon.info dnsmasq[5396]: query[A] reporter.browserapps.amazon.com from 10.10.10.223 Mon Mar 14 19:12:37 2016 daemon.info dnsmasq[5396]: forwarded reporter.browserapps.amazon.com to 192.168.1.1 Mon Mar 14 19:12:37 2016 daemon.info dnsmasq[5396]: query[A] dossier.browserapps.amazon.com from 10.10.10.223 Mon Mar 14 19:12:37 2016 daemon.info dnsmasq[5396]: forwarded dossier.browserapps.amazon.com to 192.168.1.1 Mon Mar 14 19:12:37 2016 daemon.info dnsmasq[5396]: query[A] identity.browserapps.amazon.com from 10.10.10.223 Mon Mar 14 19:12:37 2016 daemon.info dnsmasq[5396]: forwarded identity.browserapps.amazon.com to 192.168.1.1 Mon Mar 14 19:12:37 2016 daemon.info dnsmasq[5396]: reply reporter.browserapps.amazon.com is Mon Mar 14 19:12:37 2016 daemon.info dnsmasq[5396]: reply identity.browserapps.amazon.com is 54.239.21.139 Mon Mar 14 19:12:37 2016 daemon.info dnsmasq[5396]: reply identity.browserapps.amazon.com is 54.239.21.139 Mon Mar 14 19:12:37 2016 daemon.info dnsmasq[5396]: reply storage.browserapps.amazon.com is Mon Mar 14 19:12:37 2016 daemon.info dnsmasq[5396]: reply identity.browserapps.amazon.com is 54.239.21.139 Mon Mar 14 19:12:37 2016 daemon.info dnsmasq[5396]: reply dossier.browserapps.amazon.com is Mon Mar 14 19:12:37 2016 daemon.info dnsmasq[5396]: reply identity.browserapps.amazon.com is 54.239.21.139 Mon Mar 14 19:12:37 2016 daemon.info dnsmasq[5396]: query[AAAA] www3.l.google.com from 10.10.10.223 Mon Mar 14 19:12:37 2016 daemon.info dnsmasq[5396]: forwarded www3.l.google.com to 192.168.1.1 Mon Mar 14 19:12:37 2016 daemon.info dnsmasq[5396]: query[A] www3.l.google.com from 10.10.10.223 Mon Mar 14 19:12:38 2016 daemon.info dnsmasq[5396]: forwarded www3.l.google.com to 192.168.1.1 Mon Mar 14 19:12:38 2016 daemon.info dnsmasq[5396]: reply www3.l.google.com is 2607:f8b0:4001:c0f::71 Mon Mar 14 19:12:38 2016 daemon.info dnsmasq[5396]: reply www3.l.google.com is 216.58.216.110 Mon Mar 14 19:12:38 2016 daemon.info dnsmasq[5396]: query[A] identity.browserapps.amazon.com from 10.10.10.223 Mon Mar 14 19:12:38 2016 daemon.info dnsmasq[5396]: cached identity.browserapps.amazon.com is 54.239.21.139 Mon Mar 14 19:12:40 2016 daemon.info dnsmasq[5396]: query[A] clients6.google.com from 10.10.10.223 Mon Mar 14 19:12:40 2016 daemon.info dnsmasq[5396]: forwarded clients6.google.com to 192.168.1.1 Mon Mar 14 19:12:40 2016 daemon.info dnsmasq[5396]: query[AAAA] clients6.google.com from 10.10.10.223 Mon Mar 14 19:12:40 2016 daemon.info dnsmasq[5396]: forwarded clients6.google.com to 192.168.1.1 Mon Mar 14 19:12:40 2016 daemon.info dnsmasq[5396]: reply clients6.google.com is Mon Mar 14 19:12:40 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.193.101 Mon Mar 14 19:12:40 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.193.113 Mon Mar 14 19:12:40 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.193.100 Mon Mar 14 19:12:40 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.193.138 Mon Mar 14 19:12:40 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.193.102 Mon Mar 14 19:12:40 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.193.139 Mon Mar 14 19:12:40 2016 daemon.info dnsmasq[5396]: reply clients6.google.com is Mon Mar 14 19:12:40 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 2607:f8b0:4001:c0f::64 Mon Mar 14 19:12:40 2016 daemon.info dnsmasq[5396]: query[AAAA] clients.l.google.com from 10.10.10.223 Mon Mar 14 19:12:40 2016 daemon.info dnsmasq[5396]: cached clients.l.google.com is 2607:f8b0:4001:c0f::64 Mon Mar 14 19:12:50 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:12:50 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:12:50 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:12:50 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:12:50 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:12:50 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:12:50 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:12:50 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:12:50 2016 daemon.info dnsmasq[5396]: reply pool1.moatads.com is 52.90.188.167 Mon Mar 14 19:12:50 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:12:50 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:12:50 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:12:50 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:12:50 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:12:50 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:12:50 2016 daemon.info dnsmasq[5396]: reply pool1.moatads.com is 52.90.188.167 Mon Mar 14 19:12:50 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:12:50 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:12:50 2016 daemon.info dnsmasq[5396]: reply pool5.moatads.com is NODATA-IPv6 Mon Mar 14 19:12:50 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:12:50 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:12:50 2016 daemon.info dnsmasq[5396]: reply pool5.moatads.com is NODATA-IPv6 Mon Mar 14 19:12:50 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:12:50 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:12:50 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:12:50 2016 daemon.info dnsmasq[5396]: cached pool5.moatads.com is NODATA-IPv6 Mon Mar 14 19:12:52 2016 daemon.info dnsmasq[5396]: query[AAAA] app.procentive.com from 10.10.10.223 Mon Mar 14 19:12:52 2016 daemon.info dnsmasq[5396]: forwarded app.procentive.com to 192.168.1.1 Mon Mar 14 19:12:57 2016 daemon.info dnsmasq[5396]: query[AAAA] p03-escrowproxy.icloud.com from 10.10.10.223 Mon Mar 14 19:12:57 2016 daemon.info dnsmasq[5396]: forwarded p03-escrowproxy.icloud.com to 192.168.1.1 Mon Mar 14 19:12:57 2016 daemon.info dnsmasq[5396]: query[A] p03-escrowproxy.icloud.com from 10.10.10.223 Mon Mar 14 19:12:57 2016 daemon.info dnsmasq[5396]: forwarded p03-escrowproxy.icloud.com to 192.168.1.1 Mon Mar 14 19:12:57 2016 daemon.info dnsmasq[5396]: reply p03-escrowproxy.icloud.com is Mon Mar 14 19:12:57 2016 daemon.info dnsmasq[5396]: reply p03-escrowproxy-current.edge.icloud.apple-dns.net is NODATA-IPv6 Mon Mar 14 19:12:57 2016 daemon.info dnsmasq[5396]: reply p03-escrowproxy.icloud.com is Mon Mar 14 19:12:57 2016 daemon.info dnsmasq[5396]: reply p03-escrowproxy-current.edge.icloud.apple-dns.net is 17.248.128.247 Mon Mar 14 19:12:57 2016 daemon.info dnsmasq[5396]: query[AAAA] p03-escrowproxy-current.edge.icloud.apple-dns.net from 10.10.10.223 Mon Mar 14 19:12:57 2016 daemon.info dnsmasq[5396]: cached p03-escrowproxy-current.edge.icloud.apple-dns.net is NODATA-IPv6 Mon Mar 14 19:12:57 2016 daemon.info dnsmasq[5396]: query[A] p03-escrowproxy-current.edge.icloud.apple-dns.net from 10.10.10.223 Mon Mar 14 19:12:57 2016 daemon.info dnsmasq[5396]: cached p03-escrowproxy-current.edge.icloud.apple-dns.net is 17.248.128.247 Mon Mar 14 19:12:57 2016 daemon.info dnsmasq[5396]: query[AAAA] p44-escrowproxy.icloud.com from 10.10.10.223 Mon Mar 14 19:12:57 2016 daemon.info dnsmasq[5396]: forwarded p44-escrowproxy.icloud.com to 192.168.1.1 Mon Mar 14 19:12:57 2016 daemon.info dnsmasq[5396]: query[A] p44-escrowproxy.icloud.com from 10.10.10.223 Mon Mar 14 19:12:57 2016 daemon.info dnsmasq[5396]: forwarded p44-escrowproxy.icloud.com to 192.168.1.1 Mon Mar 14 19:12:57 2016 daemon.info dnsmasq[5396]: reply p44-escrowproxy.icloud.com is Mon Mar 14 19:12:57 2016 daemon.info dnsmasq[5396]: reply p44-escrowproxy-current.edge.icloud.apple-dns.net is NODATA-IPv6 Mon Mar 14 19:12:57 2016 daemon.info dnsmasq[5396]: query[AAAA] p44-escrowproxy-current.edge.icloud.apple-dns.net from 10.10.10.223 Mon Mar 14 19:12:57 2016 daemon.info dnsmasq[5396]: cached p44-escrowproxy-current.edge.icloud.apple-dns.net is NODATA-IPv6 Mon Mar 14 19:12:57 2016 daemon.info dnsmasq[5396]: reply p44-escrowproxy.icloud.com is Mon Mar 14 19:12:57 2016 daemon.info dnsmasq[5396]: reply p44-escrowproxy-current.edge.icloud.apple-dns.net is 17.248.128.239 Mon Mar 14 19:12:57 2016 daemon.info dnsmasq[5396]: query[A] p44-escrowproxy-current.edge.icloud.apple-dns.net from 10.10.10.223 Mon Mar 14 19:12:57 2016 daemon.info dnsmasq[5396]: cached p44-escrowproxy-current.edge.icloud.apple-dns.net is 17.248.128.239 Mon Mar 14 19:13:00 2016 daemon.info dnsmasq[5396]: query[AAAA] p03-keyvalueservice-current.edge.icloud.apple-dns.net from 10.10.10.223 Mon Mar 14 19:13:00 2016 daemon.info dnsmasq[5396]: cached p03-keyvalueservice-current.edge.icloud.apple-dns.net is NODATA-IPv6 Mon Mar 14 19:13:00 2016 daemon.info dnsmasq[5396]: query[A] p03-keyvalueservice-current.edge.icloud.apple-dns.net from 10.10.10.223 Mon Mar 14 19:13:00 2016 daemon.info dnsmasq[5396]: forwarded p03-keyvalueservice-current.edge.icloud.apple-dns.net to 192.168.1.1 Mon Mar 14 19:13:00 2016 daemon.info dnsmasq[5396]: reply p03-keyvalueservice-current.edge.icloud.apple-dns.net is 17.248.139.109 Mon Mar 14 19:13:03 2016 daemon.info dnsmasq[5396]: query[AAAA] p44-keyvalueservice-current.edge.icloud.apple-dns.net from 10.10.10.143 Mon Mar 14 19:13:03 2016 daemon.info dnsmasq[5396]: forwarded p44-keyvalueservice-current.edge.icloud.apple-dns.net to 192.168.1.1 Mon Mar 14 19:13:03 2016 daemon.info dnsmasq[5396]: query[A] p44-keyvalueservice-current.edge.icloud.apple-dns.net from 10.10.10.143 Mon Mar 14 19:13:03 2016 daemon.info dnsmasq[5396]: forwarded p44-keyvalueservice-current.edge.icloud.apple-dns.net to 192.168.1.1 Mon Mar 14 19:13:03 2016 daemon.info dnsmasq[5396]: reply p44-keyvalueservice-current.edge.icloud.apple-dns.net is 17.248.139.109 Mon Mar 14 19:13:03 2016 daemon.info dnsmasq[5396]: query[AAAA] origin.guzzoni-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 19:13:03 2016 daemon.info dnsmasq[5396]: forwarded origin.guzzoni-apple.com.akadns.net to 192.168.1.1 Mon Mar 14 19:13:03 2016 daemon.info dnsmasq[5396]: query[A] origin.guzzoni-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 19:13:03 2016 daemon.info dnsmasq[5396]: forwarded origin.guzzoni-apple.com.akadns.net to 192.168.1.1 Mon Mar 14 19:13:03 2016 daemon.info dnsmasq[5396]: query[A] api.smoot-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 19:13:03 2016 daemon.info dnsmasq[5396]: forwarded api.smoot-apple.com.akadns.net to 192.168.1.1 Mon Mar 14 19:13:03 2016 daemon.info dnsmasq[5396]: query[AAAA] api.smoot-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 19:13:03 2016 daemon.info dnsmasq[5396]: cached api.smoot-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:13:03 2016 daemon.info dnsmasq[5396]: reply origin.guzzoni-apple.com.akadns.net is Mon Mar 14 19:13:03 2016 daemon.info dnsmasq[5396]: reply st14p02sa.guzzoni-apple.com.akadns.net is 17.174.2.5 Mon Mar 14 19:13:03 2016 daemon.info dnsmasq[5396]: reply origin.guzzoni-apple.com.akadns.net is Mon Mar 14 19:13:03 2016 daemon.info dnsmasq[5396]: reply st14p02sa.guzzoni-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:13:03 2016 daemon.info dnsmasq[5396]: reply api.smoot-apple.com.akadns.net is 17.249.73.246 Mon Mar 14 19:13:04 2016 daemon.info dnsmasq[5396]: query[AAAA] p44-keyvalueservice-current.edge.icloud.apple-dns.net from 10.10.10.211 Mon Mar 14 19:13:04 2016 daemon.info dnsmasq[5396]: forwarded p44-keyvalueservice-current.edge.icloud.apple-dns.net to 192.168.1.1 Mon Mar 14 19:13:04 2016 daemon.info dnsmasq[5396]: query[A] p44-keyvalueservice-current.edge.icloud.apple-dns.net from 10.10.10.211 Mon Mar 14 19:13:04 2016 daemon.info dnsmasq[5396]: cached p44-keyvalueservice-current.edge.icloud.apple-dns.net is 17.248.139.109 Mon Mar 14 19:13:04 2016 daemon.info dnsmasq[5396]: query[AAAA] e6858.dscc.akamaiedge.net from 10.10.10.211 Mon Mar 14 19:13:04 2016 daemon.info dnsmasq[5396]: forwarded e6858.dscc.akamaiedge.net to 192.168.1.1 Mon Mar 14 19:13:04 2016 daemon.info dnsmasq[5396]: query[A] e6858.dscc.akamaiedge.net from 10.10.10.211 Mon Mar 14 19:13:04 2016 daemon.info dnsmasq[5396]: forwarded e6858.dscc.akamaiedge.net to 192.168.1.1 Mon Mar 14 19:13:04 2016 daemon.info dnsmasq[5396]: reply e6858.dscc.akamaiedge.net is 2600:1404:e:18d::1aca Mon Mar 14 19:13:04 2016 daemon.info dnsmasq[5396]: reply e6858.dscc.akamaiedge.net is 2600:1404:e:194::1aca Mon Mar 14 19:13:04 2016 daemon.info dnsmasq[5396]: query[AAAA] apple.com from 10.10.10.211 Mon Mar 14 19:13:04 2016 daemon.info dnsmasq[5396]: forwarded apple.com to 192.168.1.1 Mon Mar 14 19:13:04 2016 daemon.info dnsmasq[5396]: reply e6858.dscc.akamaiedge.net is 23.12.245.148 Mon Mar 14 19:13:04 2016 daemon.info dnsmasq[5396]: query[A] r3.sn-81fpgxaxnn-vgqe.googlevideo.com from 10.10.10.211 Mon Mar 14 19:13:04 2016 daemon.info dnsmasq[5396]: forwarded r3.sn-81fpgxaxnn-vgqe.googlevideo.com to 192.168.1.1 Mon Mar 14 19:13:04 2016 daemon.info dnsmasq[5396]: query[AAAA] st14p02sa.guzzoni-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 19:13:04 2016 daemon.info dnsmasq[5396]: cached st14p02sa.guzzoni-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:13:04 2016 daemon.info dnsmasq[5396]: reply r3.sn-81fpgxaxnn-vgqe.googlevideo.com is 63.84.3.14 Mon Mar 14 19:13:07 2016 daemon.info dnsmasq[5396]: query[A] fls-na.amazon.com from 10.10.10.223 Mon Mar 14 19:13:07 2016 daemon.info dnsmasq[5396]: forwarded fls-na.amazon.com to 192.168.1.1 Mon Mar 14 19:13:07 2016 daemon.info dnsmasq[5396]: reply fls-na.amazon.com is 54.239.22.50 Mon Mar 14 19:13:15 2016 daemon.info dnsmasq[5396]: query[A] clients2.google.com from 10.10.10.228 Mon Mar 14 19:13:15 2016 daemon.info dnsmasq[5396]: forwarded clients2.google.com to 192.168.1.1 Mon Mar 14 19:13:15 2016 daemon.info dnsmasq[5396]: query[A] clients2.google.com from 10.10.10.229 Mon Mar 14 19:13:15 2016 daemon.info dnsmasq[5396]: forwarded clients2.google.com to 192.168.1.1 Mon Mar 14 19:13:16 2016 daemon.info dnsmasq[5396]: reply clients2.google.com is Mon Mar 14 19:13:16 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.193.139 Mon Mar 14 19:13:16 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.193.101 Mon Mar 14 19:13:16 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.193.113 Mon Mar 14 19:13:16 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.193.100 Mon Mar 14 19:13:16 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.193.138 Mon Mar 14 19:13:16 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.193.102 Mon Mar 14 19:13:16 2016 daemon.info dnsmasq[5396]: reply clients2.google.com is Mon Mar 14 19:13:16 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.193.139 Mon Mar 14 19:13:16 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.193.101 Mon Mar 14 19:13:16 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.193.113 Mon Mar 14 19:13:16 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.193.100 Mon Mar 14 19:13:16 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.193.138 Mon Mar 14 19:13:16 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.193.102 Mon Mar 14 19:13:16 2016 daemon.info dnsmasq[5396]: query[A] chatenabled.mail.google.com from 10.10.10.228 Mon Mar 14 19:13:16 2016 daemon.info dnsmasq[5396]: cached chatenabled.mail.google.com is Mon Mar 14 19:13:16 2016 daemon.info dnsmasq[5396]: forwarded chatenabled.mail.google.com to 192.168.1.1 Mon Mar 14 19:13:16 2016 daemon.info dnsmasq[5396]: query[A] chatenabled.mail.google.com from 10.10.10.229 Mon Mar 14 19:13:16 2016 daemon.info dnsmasq[5396]: forwarded chatenabled.mail.google.com to 192.168.1.1 Mon Mar 14 19:13:16 2016 daemon.info dnsmasq[5396]: reply chatenabled.mail.google.com is Mon Mar 14 19:13:16 2016 daemon.info dnsmasq[5396]: reply b.googlemail.l.google.com is 216.58.216.231 Mon Mar 14 19:13:16 2016 daemon.info dnsmasq[5396]: reply chatenabled.mail.google.com is Mon Mar 14 19:13:16 2016 daemon.info dnsmasq[5396]: reply b.googlemail.l.google.com is 216.58.216.231 Mon Mar 14 19:13:29 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:13:29 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:13:33 2016 daemon.info dnsmasq[5396]: query[A] 9.client-channel.google.com from 10.10.10.223 Mon Mar 14 19:13:33 2016 daemon.info dnsmasq[5396]: forwarded 9.client-channel.google.com to 192.168.1.1 Mon Mar 14 19:13:33 2016 daemon.info dnsmasq[5396]: query[AAAA] 9.client-channel.google.com from 10.10.10.223 Mon Mar 14 19:13:33 2016 daemon.info dnsmasq[5396]: forwarded 9.client-channel.google.com to 192.168.1.1 Mon Mar 14 19:13:33 2016 daemon.info dnsmasq[5396]: reply 9.client-channel.google.com is 74.125.207.189 Mon Mar 14 19:13:33 2016 daemon.info dnsmasq[5396]: reply 9.client-channel.google.com is 2607:f8b0:4001:c07::bd Mon Mar 14 19:13:38 2016 daemon.info dnsmasq[5396]: query[PTR] db._dns-sd._udp.lan from 10.10.10.228 Mon Mar 14 19:13:38 2016 daemon.info dnsmasq[5396]: config db._dns-sd._udp.lan is NXDOMAIN Mon Mar 14 19:13:38 2016 daemon.info dnsmasq[5396]: query[PTR] lb._dns-sd._udp.lan from 10.10.10.228 Mon Mar 14 19:13:38 2016 daemon.info dnsmasq[5396]: config lb._dns-sd._udp.lan is NXDOMAIN Mon Mar 14 19:13:38 2016 daemon.info dnsmasq[5396]: query[PTR] db._dns-sd._udp.0.10.10.10.in-addr.arpa from 10.10.10.228 Mon Mar 14 19:13:38 2016 daemon.info dnsmasq[5396]: forwarded db._dns-sd._udp.0.10.10.10.in-addr.arpa to 192.168.1.1 Mon Mar 14 19:13:38 2016 daemon.info dnsmasq[5396]: query[PTR] dr._dns-sd._udp.lan from 10.10.10.228 Mon Mar 14 19:13:38 2016 daemon.info dnsmasq[5396]: config dr._dns-sd._udp.lan is NXDOMAIN Mon Mar 14 19:13:38 2016 daemon.info dnsmasq[5396]: query[PTR] dr._dns-sd._udp.0.10.10.10.in-addr.arpa from 10.10.10.228 Mon Mar 14 19:13:38 2016 daemon.info dnsmasq[5396]: forwarded dr._dns-sd._udp.0.10.10.10.in-addr.arpa to 192.168.1.1 Mon Mar 14 19:14:00 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:14:00 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:14:00 2016 daemon.info dnsmasq[5396]: query[A] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:14:00 2016 daemon.info dnsmasq[5396]: forwarded skydocs.skyprod.akadns.net to 192.168.1.1 Mon Mar 14 19:14:00 2016 daemon.info dnsmasq[5396]: reply skydocs.skyprod.akadns.net is 134.170.120.24 Mon Mar 14 19:14:18 2016 daemon.info dnsmasq[5396]: query[A] googlemail.l.google.com from 10.10.10.223 Mon Mar 14 19:14:18 2016 daemon.info dnsmasq[5396]: forwarded googlemail.l.google.com to 192.168.1.1 Mon Mar 14 19:14:18 2016 daemon.info dnsmasq[5396]: query[AAAA] googlemail.l.google.com from 10.10.10.223 Mon Mar 14 19:14:18 2016 daemon.info dnsmasq[5396]: forwarded googlemail.l.google.com to 192.168.1.1 Mon Mar 14 19:14:19 2016 daemon.info dnsmasq[5396]: reply googlemail.l.google.com is 216.58.216.229 Mon Mar 14 19:14:19 2016 daemon.info dnsmasq[5396]: reply googlemail.l.google.com is 2607:f8b0:4009:809::2005 Mon Mar 14 19:14:20 2016 daemon.info dnsmasq[5396]: query[PTR] r._dns-sd._udp.lan from 10.10.10.228 Mon Mar 14 19:14:20 2016 daemon.info dnsmasq[5396]: config r._dns-sd._udp.lan is NXDOMAIN Mon Mar 14 19:14:20 2016 daemon.info dnsmasq[5396]: query[PTR] b._dns-sd._udp.0.10.10.10.in-addr.arpa from 10.10.10.228 Mon Mar 14 19:14:20 2016 daemon.info dnsmasq[5396]: forwarded b._dns-sd._udp.0.10.10.10.in-addr.arpa to 192.168.1.1 Mon Mar 14 19:14:20 2016 daemon.info dnsmasq[5396]: query[PTR] r._dns-sd._udp.0.10.10.10.in-addr.arpa from 10.10.10.228 Mon Mar 14 19:14:20 2016 daemon.info dnsmasq[5396]: forwarded r._dns-sd._udp.0.10.10.10.in-addr.arpa to 192.168.1.1 Mon Mar 14 19:14:20 2016 daemon.info dnsmasq[5396]: query[PTR] lb._dns-sd._udp.0.10.10.10.in-addr.arpa from 10.10.10.228 Mon Mar 14 19:14:20 2016 daemon.info dnsmasq[5396]: forwarded lb._dns-sd._udp.0.10.10.10.in-addr.arpa to 192.168.1.1 Mon Mar 14 19:14:20 2016 daemon.info dnsmasq[5396]: query[A] o.aolcdn.com from 10.10.10.228 Mon Mar 14 19:14:20 2016 daemon.info dnsmasq[5396]: forwarded o.aolcdn.com to 192.168.1.1 Mon Mar 14 19:14:20 2016 daemon.info dnsmasq[5396]: query[AAAA] o.aolcdn.com from 10.10.10.228 Mon Mar 14 19:14:20 2016 daemon.info dnsmasq[5396]: forwarded o.aolcdn.com to 192.168.1.1 Mon Mar 14 19:14:20 2016 daemon.info dnsmasq[5396]: query[A] o.aolcdn.com from 10.10.10.229 Mon Mar 14 19:14:20 2016 daemon.info dnsmasq[5396]: forwarded o.aolcdn.com to 192.168.1.1 Mon Mar 14 19:14:20 2016 daemon.info dnsmasq[5396]: reply o.aolcdn.com is Mon Mar 14 19:14:20 2016 daemon.info dnsmasq[5396]: reply o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 19:14:20 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 23.77.232.155 Mon Mar 14 19:14:20 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 23.77.232.170 Mon Mar 14 19:14:20 2016 daemon.info dnsmasq[5396]: query[AAAA] o.aolcdn.com from 10.10.10.229 Mon Mar 14 19:14:20 2016 daemon.info dnsmasq[5396]: cached o.aolcdn.com is Mon Mar 14 19:14:20 2016 daemon.info dnsmasq[5396]: cached o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 19:14:20 2016 daemon.info dnsmasq[5396]: forwarded o.aolcdn.com to 192.168.1.1 Mon Mar 14 19:14:20 2016 daemon.info dnsmasq[5396]: reply o.aolcdn.com is Mon Mar 14 19:14:20 2016 daemon.info dnsmasq[5396]: reply o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 19:14:20 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 2600:1404:e::174d:e91b Mon Mar 14 19:14:20 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 2600:1404:e::174d:e869 Mon Mar 14 19:14:21 2016 daemon.info dnsmasq[5396]: reply o.aolcdn.com is Mon Mar 14 19:14:21 2016 daemon.info dnsmasq[5396]: reply o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 19:14:21 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 23.77.232.155 Mon Mar 14 19:14:21 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 23.77.232.170 Mon Mar 14 19:14:21 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:14:21 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:14:21 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:14:21 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:14:21 2016 daemon.info dnsmasq[5396]: reply o.aolcdn.com is Mon Mar 14 19:14:21 2016 daemon.info dnsmasq[5396]: reply o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 19:14:21 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 2600:1404:e::174d:e91b Mon Mar 14 19:14:21 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 2600:1404:e::174d:e869 Mon Mar 14 19:14:21 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:14:21 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:14:21 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:14:21 2016 daemon.info dnsmasq[5396]: cached pool5.moatads.com is NODATA-IPv6 Mon Mar 14 19:14:21 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:14:21 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:14:21 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:14:21 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:14:21 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:14:21 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:14:21 2016 daemon.info dnsmasq[5396]: reply pool5.moatads.com is 54.152.224.127 Mon Mar 14 19:14:21 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:14:21 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:14:21 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:14:21 2016 daemon.info dnsmasq[5396]: cached pool5.moatads.com is NODATA-IPv6 Mon Mar 14 19:14:21 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:14:21 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:14:21 2016 daemon.info dnsmasq[5396]: reply pool5.moatads.com is 54.152.224.127 Mon Mar 14 19:14:21 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:14:21 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:14:21 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:14:21 2016 daemon.info dnsmasq[5396]: cached pool5.moatads.com is 54.152.224.127 Mon Mar 14 19:14:21 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:14:21 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:14:21 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:14:21 2016 daemon.info dnsmasq[5396]: cached pool5.moatads.com is NODATA-IPv6 Mon Mar 14 19:14:21 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:14:21 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:14:21 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:14:21 2016 daemon.info dnsmasq[5396]: cached pool5.moatads.com is 54.152.224.127 Mon Mar 14 19:14:21 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:14:21 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:14:21 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:14:21 2016 daemon.info dnsmasq[5396]: cached pool5.moatads.com is NODATA-IPv6 Mon Mar 14 19:14:23 2016 daemon.info dnsmasq[5396]: query[AAAA] app.procentive.com from 10.10.10.223 Mon Mar 14 19:14:23 2016 daemon.info dnsmasq[5396]: forwarded app.procentive.com to 192.168.1.1 Mon Mar 14 19:14:58 2016 daemon.info dnsmasq[5396]: query[AAAA] imap.gmail.com from 10.10.10.143 Mon Mar 14 19:14:58 2016 daemon.info dnsmasq[5396]: forwarded imap.gmail.com to 192.168.1.1 Mon Mar 14 19:14:58 2016 daemon.info dnsmasq[5396]: query[A] imap.gmail.com from 10.10.10.143 Mon Mar 14 19:14:58 2016 daemon.info dnsmasq[5396]: forwarded imap.gmail.com to 192.168.1.1 Mon Mar 14 19:14:58 2016 daemon.info dnsmasq[5396]: reply imap.gmail.com is Mon Mar 14 19:14:58 2016 daemon.info dnsmasq[5396]: reply gmail-imap.l.google.com is 2607:f8b0:4001:c13::6c Mon Mar 14 19:14:58 2016 daemon.info dnsmasq[5396]: reply imap.gmail.com is Mon Mar 14 19:14:58 2016 daemon.info dnsmasq[5396]: reply gmail-imap.l.google.com is 173.194.192.108 Mon Mar 14 19:14:58 2016 daemon.info dnsmasq[5396]: reply gmail-imap.l.google.com is 173.194.192.109 Mon Mar 14 19:14:58 2016 daemon.info dnsmasq[5396]: query[A] gmail-imap.l.google.com from 10.10.10.143 Mon Mar 14 19:14:58 2016 daemon.info dnsmasq[5396]: cached gmail-imap.l.google.com is 173.194.192.109 Mon Mar 14 19:14:58 2016 daemon.info dnsmasq[5396]: cached gmail-imap.l.google.com is 173.194.192.108 Mon Mar 14 19:15:02 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:15:02 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:15:05 2016 daemon.info dnsmasq[5396]: query[AAAA] play.google.com from 10.10.10.223 Mon Mar 14 19:15:05 2016 daemon.info dnsmasq[5396]: forwarded play.google.com to 192.168.1.1 Mon Mar 14 19:15:05 2016 daemon.info dnsmasq[5396]: query[A] play.google.com from 10.10.10.223 Mon Mar 14 19:15:05 2016 daemon.info dnsmasq[5396]: forwarded play.google.com to 192.168.1.1 Mon Mar 14 19:15:05 2016 daemon.info dnsmasq[5396]: reply play.google.com is Mon Mar 14 19:15:05 2016 daemon.info dnsmasq[5396]: reply play.l.google.com is 2607:f8b0:4009:809::200e Mon Mar 14 19:15:05 2016 daemon.info dnsmasq[5396]: reply play.google.com is Mon Mar 14 19:15:05 2016 daemon.info dnsmasq[5396]: reply play.l.google.com is 216.58.216.238 Mon Mar 14 19:15:05 2016 daemon.info dnsmasq[5396]: query[A] play.l.google.com from 10.10.10.223 Mon Mar 14 19:15:05 2016 daemon.info dnsmasq[5396]: cached play.l.google.com is 216.58.216.238 Mon Mar 14 19:15:07 2016 daemon.info dnsmasq[5396]: query[AAAA] outlook.office365.com from 10.10.10.143 Mon Mar 14 19:15:07 2016 daemon.info dnsmasq[5396]: forwarded outlook.office365.com to 192.168.1.1 Mon Mar 14 19:15:07 2016 daemon.info dnsmasq[5396]: query[A] outlook.office365.com from 10.10.10.143 Mon Mar 14 19:15:07 2016 daemon.info dnsmasq[5396]: forwarded outlook.office365.com to 192.168.1.1 Mon Mar 14 19:15:07 2016 daemon.info dnsmasq[5396]: reply outlook.office365.com is Mon Mar 14 19:15:07 2016 daemon.info dnsmasq[5396]: reply lb.geo.office365.com is Mon Mar 14 19:15:07 2016 daemon.info dnsmasq[5396]: reply outlook.office365.com.glbdns2.microsoft.com is Mon Mar 14 19:15:07 2016 daemon.info dnsmasq[5396]: reply outlook-namnorth.office365.com is 2a01:111:f400:4c00::2 Mon Mar 14 19:15:07 2016 daemon.info dnsmasq[5396]: reply outlook-namnorth.office365.com is 2a01:111:f400:53ea::2 Mon Mar 14 19:15:07 2016 daemon.info dnsmasq[5396]: reply outlook-namnorth.office365.com is 2a01:111:f400:5387::2 Mon Mar 14 19:15:07 2016 daemon.info dnsmasq[5396]: reply outlook-namnorth.office365.com is 2a01:111:f400:f39b::2 Mon Mar 14 19:15:07 2016 daemon.info dnsmasq[5396]: reply outlook-namnorth.office365.com is 2a01:111:f400:2d38::2 Mon Mar 14 19:15:07 2016 daemon.info dnsmasq[5396]: reply outlook-namnorth.office365.com is 2a01:111:f400:2464::2 Mon Mar 14 19:15:07 2016 daemon.info dnsmasq[5396]: reply outlook-namnorth.office365.com is 2a01:111:f400:2814::2 Mon Mar 14 19:15:07 2016 daemon.info dnsmasq[5396]: reply outlook-namnorth.office365.com is 2a01:111:f400:527e::2 Mon Mar 14 19:15:07 2016 daemon.info dnsmasq[5396]: reply outlook-namnorth.office365.com is 2a01:111:f400:519a::2 Mon Mar 14 19:15:07 2016 daemon.info dnsmasq[5396]: reply outlook-namnorth.office365.com is 2a01:111:f400:2c61::2 Mon Mar 14 19:15:07 2016 daemon.info dnsmasq[5396]: reply outlook.office365.com is Mon Mar 14 19:15:07 2016 daemon.info dnsmasq[5396]: reply lb.geo.office365.com is Mon Mar 14 19:15:07 2016 daemon.info dnsmasq[5396]: reply outlook.office365.com.g.office365.com is Mon Mar 14 19:15:07 2016 daemon.info dnsmasq[5396]: reply outlook-namcentral2.office365.com is 132.245.247.210 Mon Mar 14 19:15:07 2016 daemon.info dnsmasq[5396]: reply outlook-namcentral2.office365.com is 132.245.247.194 Mon Mar 14 19:15:07 2016 daemon.info dnsmasq[5396]: reply outlook-namcentral2.office365.com is 132.245.75.98 Mon Mar 14 19:15:07 2016 daemon.info dnsmasq[5396]: reply outlook-namcentral2.office365.com is 132.245.253.114 Mon Mar 14 19:15:07 2016 daemon.info dnsmasq[5396]: reply outlook-namcentral2.office365.com is 132.245.79.194 Mon Mar 14 19:15:07 2016 daemon.info dnsmasq[5396]: reply outlook-namcentral2.office365.com is 40.96.0.114 Mon Mar 14 19:15:07 2016 daemon.info dnsmasq[5396]: reply outlook-namcentral2.office365.com is 132.245.36.50 Mon Mar 14 19:15:07 2016 daemon.info dnsmasq[5396]: query[A] outlook-namnorth.office365.com from 10.10.10.143 Mon Mar 14 19:15:07 2016 daemon.info dnsmasq[5396]: forwarded outlook-namnorth.office365.com to 192.168.1.1 Mon Mar 14 19:15:07 2016 daemon.info dnsmasq[5396]: reply outlook-namnorth.office365.com is 132.245.15.226 Mon Mar 14 19:15:07 2016 daemon.info dnsmasq[5396]: reply outlook-namnorth.office365.com is 132.245.81.194 Mon Mar 14 19:15:07 2016 daemon.info dnsmasq[5396]: reply outlook-namnorth.office365.com is 132.245.71.178 Mon Mar 14 19:15:07 2016 daemon.info dnsmasq[5396]: reply outlook-namnorth.office365.com is 132.245.46.34 Mon Mar 14 19:15:07 2016 daemon.info dnsmasq[5396]: reply outlook-namnorth.office365.com is 132.245.59.114 Mon Mar 14 19:15:07 2016 daemon.info dnsmasq[5396]: reply outlook-namnorth.office365.com is 132.245.37.130 Mon Mar 14 19:15:07 2016 daemon.info dnsmasq[5396]: reply outlook-namnorth.office365.com is 132.245.250.130 Mon Mar 14 19:15:07 2016 daemon.info dnsmasq[5396]: reply outlook-namnorth.office365.com is 132.245.22.146 Mon Mar 14 19:15:07 2016 daemon.info dnsmasq[5396]: reply outlook-namnorth.office365.com is 132.245.75.162 Mon Mar 14 19:15:07 2016 daemon.info dnsmasq[5396]: reply outlook-namnorth.office365.com is 132.245.21.82 Mon Mar 14 19:15:17 2016 daemon.info dnsmasq[5396]: query[PTR] b._dns-sd._udp.lan from 10.10.10.228 Mon Mar 14 19:15:17 2016 daemon.info dnsmasq[5396]: config b._dns-sd._udp.lan is NXDOMAIN Mon Mar 14 19:15:23 2016 daemon.info dnsmasq[5396]: query[A] app.procentive.com from 10.10.10.223 Mon Mar 14 19:15:23 2016 daemon.info dnsmasq[5396]: forwarded app.procentive.com to 192.168.1.1 Mon Mar 14 19:15:24 2016 daemon.info dnsmasq[5396]: reply app.procentive.com is 66.179.249.115 Mon Mar 14 19:15:44 2016 daemon.info dnsmasq[5396]: query[A] plus.google.com from 10.10.10.223 Mon Mar 14 19:15:44 2016 daemon.info dnsmasq[5396]: forwarded plus.google.com to 192.168.1.1 Mon Mar 14 19:15:44 2016 daemon.info dnsmasq[5396]: query[AAAA] plus.google.com from 10.10.10.223 Mon Mar 14 19:15:44 2016 daemon.info dnsmasq[5396]: forwarded plus.google.com to 192.168.1.1 Mon Mar 14 19:15:44 2016 daemon.info dnsmasq[5396]: reply plus.google.com is 216.58.216.238 Mon Mar 14 19:15:44 2016 daemon.info dnsmasq[5396]: reply plus.google.com is 2607:f8b0:4009:809::200e Mon Mar 14 19:15:51 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:15:51 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:15:51 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:15:51 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:15:51 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:15:51 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:15:51 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:15:51 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:15:51 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:15:51 2016 daemon.info dnsmasq[5396]: reply pool5.moatads.com is 54.210.93.232 Mon Mar 14 19:15:51 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:15:51 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:15:51 2016 daemon.info dnsmasq[5396]: reply pool5.moatads.com is NODATA-IPv6 Mon Mar 14 19:15:51 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:15:51 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:15:51 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:15:51 2016 daemon.info dnsmasq[5396]: cached pool5.moatads.com is NODATA-IPv6 Mon Mar 14 19:15:51 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:15:51 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:15:51 2016 daemon.info dnsmasq[5396]: reply pool5.moatads.com is 54.210.93.232 Mon Mar 14 19:16:03 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:16:03 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:16:23 2016 daemon.info dnsmasq[5396]: query[A] tiles.services.mozilla.com from 10.10.10.223 Mon Mar 14 19:16:23 2016 daemon.info dnsmasq[5396]: forwarded tiles.services.mozilla.com to 192.168.1.1 Mon Mar 14 19:16:23 2016 daemon.info dnsmasq[5396]: reply tiles.services.mozilla.com is Mon Mar 14 19:16:23 2016 daemon.info dnsmasq[5396]: reply tiles.r53-2.services.mozilla.com is 54.69.216.138 Mon Mar 14 19:16:23 2016 daemon.info dnsmasq[5396]: reply tiles.r53-2.services.mozilla.com is 54.68.159.67 Mon Mar 14 19:16:23 2016 daemon.info dnsmasq[5396]: reply tiles.r53-2.services.mozilla.com is 54.149.224.177 Mon Mar 14 19:16:23 2016 daemon.info dnsmasq[5396]: reply tiles.r53-2.services.mozilla.com is 54.191.113.255 Mon Mar 14 19:16:23 2016 daemon.info dnsmasq[5396]: reply tiles.r53-2.services.mozilla.com is 54.191.89.57 Mon Mar 14 19:16:23 2016 daemon.info dnsmasq[5396]: reply tiles.r53-2.services.mozilla.com is 52.25.255.252 Mon Mar 14 19:16:23 2016 daemon.info dnsmasq[5396]: reply tiles.r53-2.services.mozilla.com is 54.148.98.19 Mon Mar 14 19:16:23 2016 daemon.info dnsmasq[5396]: reply tiles.r53-2.services.mozilla.com is 54.218.66.17 Mon Mar 14 19:16:24 2016 daemon.info dnsmasq[5396]: query[AAAA] app.procentive.com from 10.10.10.223 Mon Mar 14 19:16:24 2016 daemon.info dnsmasq[5396]: forwarded app.procentive.com to 192.168.1.1 Mon Mar 14 19:16:24 2016 daemon.info dnsmasq[5396]: query[A] tiles-cloudfront.cdn.mozilla.net from 10.10.10.223 Mon Mar 14 19:16:24 2016 daemon.info dnsmasq[5396]: forwarded tiles-cloudfront.cdn.mozilla.net to 192.168.1.1 Mon Mar 14 19:16:24 2016 daemon.info dnsmasq[5396]: query[AAAA] tiles-cloudfront.cdn.mozilla.net from 10.10.10.223 Mon Mar 14 19:16:24 2016 daemon.info dnsmasq[5396]: forwarded tiles-cloudfront.cdn.mozilla.net to 192.168.1.1 Mon Mar 14 19:16:24 2016 daemon.info dnsmasq[5396]: reply tiles-cloudfront.cdn.mozilla.net is Mon Mar 14 19:16:24 2016 daemon.info dnsmasq[5396]: reply dcky6u1m8u6el.cloudfront.net is 52.84.14.108 Mon Mar 14 19:16:24 2016 daemon.info dnsmasq[5396]: reply dcky6u1m8u6el.cloudfront.net is 52.84.14.72 Mon Mar 14 19:16:24 2016 daemon.info dnsmasq[5396]: reply dcky6u1m8u6el.cloudfront.net is 52.84.14.226 Mon Mar 14 19:16:24 2016 daemon.info dnsmasq[5396]: reply dcky6u1m8u6el.cloudfront.net is 52.84.14.214 Mon Mar 14 19:16:24 2016 daemon.info dnsmasq[5396]: reply dcky6u1m8u6el.cloudfront.net is 52.84.14.89 Mon Mar 14 19:16:24 2016 daemon.info dnsmasq[5396]: reply dcky6u1m8u6el.cloudfront.net is 52.84.14.80 Mon Mar 14 19:16:24 2016 daemon.info dnsmasq[5396]: reply dcky6u1m8u6el.cloudfront.net is 52.84.14.9 Mon Mar 14 19:16:24 2016 daemon.info dnsmasq[5396]: reply dcky6u1m8u6el.cloudfront.net is 52.84.14.6 Mon Mar 14 19:16:24 2016 daemon.info dnsmasq[5396]: reply tiles-cloudfront.cdn.mozilla.net is Mon Mar 14 19:16:24 2016 daemon.info dnsmasq[5396]: reply dcky6u1m8u6el.cloudfront.net is NODATA-IPv6 Mon Mar 14 19:16:24 2016 daemon.info dnsmasq[5396]: query[AAAA] dcky6u1m8u6el.cloudfront.net from 10.10.10.223 Mon Mar 14 19:16:24 2016 daemon.info dnsmasq[5396]: cached dcky6u1m8u6el.cloudfront.net is NODATA-IPv6 Mon Mar 14 19:16:37 2016 daemon.info dnsmasq[5396]: query[A] www.google.com from 10.10.10.223 Mon Mar 14 19:16:37 2016 daemon.info dnsmasq[5396]: forwarded www.google.com to 192.168.1.1 Mon Mar 14 19:16:37 2016 daemon.info dnsmasq[5396]: query[AAAA] www.google.com from 10.10.10.223 Mon Mar 14 19:16:37 2016 daemon.info dnsmasq[5396]: forwarded www.google.com to 192.168.1.1 Mon Mar 14 19:16:37 2016 daemon.info dnsmasq[5396]: reply www.google.com is 74.125.141.103 Mon Mar 14 19:16:37 2016 daemon.info dnsmasq[5396]: reply www.google.com is 74.125.141.106 Mon Mar 14 19:16:37 2016 daemon.info dnsmasq[5396]: reply www.google.com is 74.125.141.147 Mon Mar 14 19:16:37 2016 daemon.info dnsmasq[5396]: reply www.google.com is 74.125.141.99 Mon Mar 14 19:16:37 2016 daemon.info dnsmasq[5396]: reply www.google.com is 74.125.141.105 Mon Mar 14 19:16:37 2016 daemon.info dnsmasq[5396]: reply www.google.com is 74.125.141.104 Mon Mar 14 19:16:37 2016 daemon.info dnsmasq[5396]: reply www.google.com is 2607:f8b0:400c:c06::93 Mon Mar 14 19:16:37 2016 daemon.info dnsmasq[5396]: query[A] ssl.gstatic.com from 10.10.10.223 Mon Mar 14 19:16:37 2016 daemon.info dnsmasq[5396]: forwarded ssl.gstatic.com to 192.168.1.1 Mon Mar 14 19:16:37 2016 daemon.info dnsmasq[5396]: query[AAAA] ssl.gstatic.com from 10.10.10.223 Mon Mar 14 19:16:37 2016 daemon.info dnsmasq[5396]: forwarded ssl.gstatic.com to 192.168.1.1 Mon Mar 14 19:16:37 2016 daemon.info dnsmasq[5396]: query[AAAA] lh4.googleusercontent.com from 10.10.10.223 Mon Mar 14 19:16:37 2016 daemon.info dnsmasq[5396]: forwarded lh4.googleusercontent.com to 192.168.1.1 Mon Mar 14 19:16:37 2016 daemon.info dnsmasq[5396]: reply ssl.gstatic.com is 216.58.216.227 Mon Mar 14 19:16:37 2016 daemon.info dnsmasq[5396]: query[A] lh4.googleusercontent.com from 10.10.10.223 Mon Mar 14 19:16:37 2016 daemon.info dnsmasq[5396]: forwarded lh4.googleusercontent.com to 192.168.1.1 Mon Mar 14 19:16:37 2016 daemon.info dnsmasq[5396]: reply ssl.gstatic.com is 2607:f8b0:4009:809::2003 Mon Mar 14 19:16:37 2016 daemon.info dnsmasq[5396]: reply lh4.googleusercontent.com is Mon Mar 14 19:16:37 2016 daemon.info dnsmasq[5396]: reply googlehosted.l.googleusercontent.com is 2607:f8b0:4001:c07::84 Mon Mar 14 19:16:37 2016 daemon.info dnsmasq[5396]: reply lh4.googleusercontent.com is Mon Mar 14 19:16:37 2016 daemon.info dnsmasq[5396]: reply googlehosted.l.googleusercontent.com is 74.125.207.132 Mon Mar 14 19:16:37 2016 daemon.info dnsmasq[5396]: query[A] id.google.com from 10.10.10.223 Mon Mar 14 19:16:37 2016 daemon.info dnsmasq[5396]: forwarded id.google.com to 192.168.1.1 Mon Mar 14 19:16:37 2016 daemon.info dnsmasq[5396]: query[AAAA] id.google.com from 10.10.10.223 Mon Mar 14 19:16:38 2016 daemon.info dnsmasq[5396]: forwarded id.google.com to 192.168.1.1 Mon Mar 14 19:16:38 2016 daemon.info dnsmasq[5396]: reply id.google.com is Mon Mar 14 19:16:38 2016 daemon.info dnsmasq[5396]: reply id.l.google.com is 209.85.200.94 Mon Mar 14 19:16:38 2016 daemon.info dnsmasq[5396]: reply id.google.com is Mon Mar 14 19:16:38 2016 daemon.info dnsmasq[5396]: reply id.l.google.com is 2404:6800:4008:c04::5e Mon Mar 14 19:16:38 2016 daemon.info dnsmasq[5396]: query[A] googlehosted.l.googleusercontent.com from 10.10.10.223 Mon Mar 14 19:16:38 2016 daemon.info dnsmasq[5396]: cached googlehosted.l.googleusercontent.com is 74.125.207.132 Mon Mar 14 19:16:38 2016 daemon.info dnsmasq[5396]: query[AAAA] id.l.google.com from 10.10.10.223 Mon Mar 14 19:16:38 2016 daemon.info dnsmasq[5396]: cached id.l.google.com is 2404:6800:4008:c04::5e Mon Mar 14 19:16:38 2016 daemon.info dnsmasq[5396]: query[A] www.gstatic.com from 10.10.10.223 Mon Mar 14 19:16:38 2016 daemon.info dnsmasq[5396]: forwarded www.gstatic.com to 192.168.1.1 Mon Mar 14 19:16:38 2016 daemon.info dnsmasq[5396]: query[AAAA] www.gstatic.com from 10.10.10.223 Mon Mar 14 19:16:38 2016 daemon.info dnsmasq[5396]: forwarded www.gstatic.com to 192.168.1.1 Mon Mar 14 19:16:38 2016 daemon.info dnsmasq[5396]: reply www.gstatic.com is 216.58.216.227 Mon Mar 14 19:16:38 2016 daemon.info dnsmasq[5396]: reply www.gstatic.com is 2607:f8b0:4009:809::2003 Mon Mar 14 19:16:38 2016 daemon.info dnsmasq[5396]: query[A] plus.l.google.com from 10.10.10.223 Mon Mar 14 19:16:38 2016 daemon.info dnsmasq[5396]: forwarded plus.l.google.com to 192.168.1.1 Mon Mar 14 19:16:38 2016 daemon.info dnsmasq[5396]: query[AAAA] plus.l.google.com from 10.10.10.223 Mon Mar 14 19:16:38 2016 daemon.info dnsmasq[5396]: forwarded plus.l.google.com to 192.168.1.1 Mon Mar 14 19:16:38 2016 daemon.info dnsmasq[5396]: reply plus.l.google.com is 216.58.216.238 Mon Mar 14 19:16:38 2016 daemon.info dnsmasq[5396]: reply plus.l.google.com is 2607:f8b0:4009:809::200e Mon Mar 14 19:17:21 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:17:21 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:17:31 2016 daemon.info dnsmasq[5396]: query[A] 9.client-channel.google.com from 10.10.10.223 Mon Mar 14 19:17:31 2016 daemon.info dnsmasq[5396]: forwarded 9.client-channel.google.com to 192.168.1.1 Mon Mar 14 19:17:31 2016 daemon.info dnsmasq[5396]: reply 9.client-channel.google.com is 74.125.207.189 Mon Mar 14 19:17:42 2016 daemon.info dnsmasq[5396]: query[AAAA] origin.guzzoni-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 19:17:42 2016 daemon.info dnsmasq[5396]: forwarded origin.guzzoni-apple.com.akadns.net to 192.168.1.1 Mon Mar 14 19:17:42 2016 daemon.info dnsmasq[5396]: query[A] origin.guzzoni-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 19:17:42 2016 daemon.info dnsmasq[5396]: forwarded origin.guzzoni-apple.com.akadns.net to 192.168.1.1 Mon Mar 14 19:17:42 2016 daemon.info dnsmasq[5396]: query[AAAA] e6858.dscc.akamaiedge.net from 10.10.10.211 Mon Mar 14 19:17:42 2016 daemon.info dnsmasq[5396]: forwarded e6858.dscc.akamaiedge.net to 192.168.1.1 Mon Mar 14 19:17:42 2016 daemon.info dnsmasq[5396]: query[A] e6858.dscc.akamaiedge.net from 10.10.10.211 Mon Mar 14 19:17:42 2016 daemon.info dnsmasq[5396]: forwarded e6858.dscc.akamaiedge.net to 192.168.1.1 Mon Mar 14 19:17:42 2016 daemon.info dnsmasq[5396]: reply origin.guzzoni-apple.com.akadns.net is Mon Mar 14 19:17:42 2016 daemon.info dnsmasq[5396]: reply st14p02sa.guzzoni-apple.com.akadns.net is 17.174.2.5 Mon Mar 14 19:17:42 2016 daemon.info dnsmasq[5396]: reply origin.guzzoni-apple.com.akadns.net is Mon Mar 14 19:17:42 2016 daemon.info dnsmasq[5396]: reply st14p02sa.guzzoni-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:17:42 2016 daemon.info dnsmasq[5396]: reply e6858.dscc.akamaiedge.net is 2600:1404:e:194::1aca Mon Mar 14 19:17:42 2016 daemon.info dnsmasq[5396]: reply e6858.dscc.akamaiedge.net is 2600:1404:e:18d::1aca Mon Mar 14 19:17:42 2016 daemon.info dnsmasq[5396]: reply e6858.dscc.akamaiedge.net is 23.12.245.148 Mon Mar 14 19:17:42 2016 daemon.info dnsmasq[5396]: query[AAAA] p44-keyvalueservice-current.edge.icloud.apple-dns.net from 10.10.10.211 Mon Mar 14 19:17:42 2016 daemon.info dnsmasq[5396]: forwarded p44-keyvalueservice-current.edge.icloud.apple-dns.net to 192.168.1.1 Mon Mar 14 19:17:42 2016 daemon.info dnsmasq[5396]: query[A] p44-keyvalueservice-current.edge.icloud.apple-dns.net from 10.10.10.211 Mon Mar 14 19:17:42 2016 daemon.info dnsmasq[5396]: forwarded p44-keyvalueservice-current.edge.icloud.apple-dns.net to 192.168.1.1 Mon Mar 14 19:17:42 2016 daemon.info dnsmasq[5396]: reply p44-keyvalueservice-current.edge.icloud.apple-dns.net is 17.248.128.213 Mon Mar 14 19:17:42 2016 daemon.info dnsmasq[5396]: query[AAAA] apple.com from 10.10.10.211 Mon Mar 14 19:17:42 2016 daemon.info dnsmasq[5396]: forwarded apple.com to 192.168.1.1 Mon Mar 14 19:17:42 2016 daemon.info dnsmasq[5396]: query[AAAA] api.smoot-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 19:17:42 2016 daemon.info dnsmasq[5396]: cached api.smoot-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:17:42 2016 daemon.info dnsmasq[5396]: query[AAAA] st14p02sa.guzzoni-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 19:17:42 2016 daemon.info dnsmasq[5396]: cached st14p02sa.guzzoni-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:18:14 2016 daemon.info dnsmasq[5396]: query[AAAA] nexus.officeapps.live.com from 10.10.10.223 Mon Mar 14 19:18:14 2016 daemon.info dnsmasq[5396]: forwarded nexus.officeapps.live.com to 192.168.1.1 Mon Mar 14 19:18:14 2016 daemon.info dnsmasq[5396]: query[A] nexus.officeapps.live.com from 10.10.10.223 Mon Mar 14 19:18:14 2016 daemon.info dnsmasq[5396]: forwarded nexus.officeapps.live.com to 192.168.1.1 Mon Mar 14 19:18:14 2016 daemon.info dnsmasq[5396]: reply nexus.officeapps.live.com is Mon Mar 14 19:18:14 2016 daemon.info dnsmasq[5396]: reply prod-w.nexus.live.com.akadns.net is 207.46.153.155 Mon Mar 14 19:18:15 2016 daemon.info dnsmasq[5396]: reply nexus.officeapps.live.com is Mon Mar 14 19:18:15 2016 daemon.info dnsmasq[5396]: reply prod-w.nexus.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:18:15 2016 daemon.info dnsmasq[5396]: query[AAAA] prod-w.nexus.live.com.akadns.net from 10.10.10.223 Mon Mar 14 19:18:15 2016 daemon.info dnsmasq[5396]: cached prod-w.nexus.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:18:23 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:18:23 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:18:27 2016 daemon.info dnsmasq[5396]: query[A] chatenabled.mail.google.com from 10.10.10.228 Mon Mar 14 19:18:27 2016 daemon.info dnsmasq[5396]: forwarded chatenabled.mail.google.com to 192.168.1.1 Mon Mar 14 19:18:27 2016 daemon.info dnsmasq[5396]: query[A] chatenabled.mail.google.com from 10.10.10.229 Mon Mar 14 19:18:27 2016 daemon.info dnsmasq[5396]: forwarded chatenabled.mail.google.com to 192.168.1.1 Mon Mar 14 19:18:27 2016 daemon.info dnsmasq[5396]: reply chatenabled.mail.google.com is Mon Mar 14 19:18:27 2016 daemon.info dnsmasq[5396]: reply b.googlemail.l.google.com is 216.58.216.231 Mon Mar 14 19:18:27 2016 daemon.info dnsmasq[5396]: reply chatenabled.mail.google.com is Mon Mar 14 19:18:27 2016 daemon.info dnsmasq[5396]: reply b.googlemail.l.google.com is 216.58.216.231 Mon Mar 14 19:18:33 2016 daemon.info dnsmasq[5396]: query[A] p25-quota.icloud.com from 10.10.10.228 Mon Mar 14 19:18:33 2016 daemon.info dnsmasq[5396]: forwarded p25-quota.icloud.com to 192.168.1.1 Mon Mar 14 19:18:33 2016 daemon.info dnsmasq[5396]: query[AAAA] p25-quota.icloud.com from 10.10.10.228 Mon Mar 14 19:18:33 2016 daemon.info dnsmasq[5396]: forwarded p25-quota.icloud.com to 192.168.1.1 Mon Mar 14 19:18:33 2016 daemon.info dnsmasq[5396]: query[A] p25-quota.icloud.com from 10.10.10.229 Mon Mar 14 19:18:33 2016 daemon.info dnsmasq[5396]: forwarded p25-quota.icloud.com to 192.168.1.1 Mon Mar 14 19:18:33 2016 daemon.info dnsmasq[5396]: query[AAAA] p25-quota.icloud.com from 10.10.10.229 Mon Mar 14 19:18:33 2016 daemon.info dnsmasq[5396]: forwarded p25-quota.icloud.com to 192.168.1.1 Mon Mar 14 19:18:33 2016 daemon.info dnsmasq[5396]: reply p25-quota.icloud.com is Mon Mar 14 19:18:33 2016 daemon.info dnsmasq[5396]: reply p25-quota-current.edge.icloud.apple-dns.net is 17.248.131.173 Mon Mar 14 19:18:33 2016 daemon.info dnsmasq[5396]: reply p25-quota.icloud.com is Mon Mar 14 19:18:33 2016 daemon.info dnsmasq[5396]: reply p25-quota-current.edge.icloud.apple-dns.net is 17.248.131.173 Mon Mar 14 19:18:33 2016 daemon.info dnsmasq[5396]: reply p25-quota.icloud.com is Mon Mar 14 19:18:33 2016 daemon.info dnsmasq[5396]: reply p25-quota-current.edge.icloud.apple-dns.net is NODATA-IPv6 Mon Mar 14 19:18:33 2016 daemon.info dnsmasq[5396]: reply p25-quota.icloud.com is Mon Mar 14 19:18:33 2016 daemon.info dnsmasq[5396]: reply p25-quota-current.edge.icloud.apple-dns.net is NODATA-IPv6 Mon Mar 14 19:18:39 2016 daemon.info dnsmasq[5396]: query[A] p25-imap.mail.me.com from 10.10.10.212 Mon Mar 14 19:18:39 2016 daemon.info dnsmasq[5396]: forwarded p25-imap.mail.me.com to 192.168.1.1 Mon Mar 14 19:18:39 2016 daemon.info dnsmasq[5396]: reply p25-imap.mail.me.com is Mon Mar 14 19:18:39 2016 daemon.info dnsmasq[5396]: reply p25-imap.mail.me.com.akadns.net is 17.167.145.16 Mon Mar 14 19:18:39 2016 daemon.info dnsmasq[5396]: query[AAAA] p25-caldav-current.edge.icloud.apple-dns.net from 10.10.10.212 Mon Mar 14 19:18:39 2016 daemon.info dnsmasq[5396]: forwarded p25-caldav-current.edge.icloud.apple-dns.net to 192.168.1.1 Mon Mar 14 19:18:39 2016 daemon.info dnsmasq[5396]: query[A] p25-caldav-current.edge.icloud.apple-dns.net from 10.10.10.212 Mon Mar 14 19:18:39 2016 daemon.info dnsmasq[5396]: forwarded p25-caldav-current.edge.icloud.apple-dns.net to 192.168.1.1 Mon Mar 14 19:18:39 2016 daemon.info dnsmasq[5396]: query[AAAA] p25-contacts-current.edge.icloud.apple-dns.net from 10.10.10.212 Mon Mar 14 19:18:39 2016 daemon.info dnsmasq[5396]: forwarded p25-contacts-current.edge.icloud.apple-dns.net to 192.168.1.1 Mon Mar 14 19:18:39 2016 daemon.info dnsmasq[5396]: query[A] p25-contacts-current.edge.icloud.apple-dns.net from 10.10.10.212 Mon Mar 14 19:18:39 2016 daemon.info dnsmasq[5396]: forwarded p25-contacts-current.edge.icloud.apple-dns.net to 192.168.1.1 Mon Mar 14 19:18:39 2016 daemon.info dnsmasq[5396]: reply p25-caldav-current.edge.icloud.apple-dns.net is 17.248.129.170 Mon Mar 14 19:18:39 2016 daemon.info dnsmasq[5396]: query[AAAA] google.com from 10.10.10.212 Mon Mar 14 19:18:39 2016 daemon.info dnsmasq[5396]: forwarded google.com to 192.168.1.1 Mon Mar 14 19:18:39 2016 daemon.info dnsmasq[5396]: reply p25-contacts-current.edge.icloud.apple-dns.net is 17.248.131.173 Mon Mar 14 19:18:39 2016 daemon.info dnsmasq[5396]: query[A] google.com from 10.10.10.212 Mon Mar 14 19:18:39 2016 daemon.info dnsmasq[5396]: forwarded google.com to 192.168.1.1 Mon Mar 14 19:18:39 2016 daemon.info dnsmasq[5396]: reply google.com is 2607:f8b0:4001:c1b::71 Mon Mar 14 19:18:39 2016 daemon.info dnsmasq[5396]: query[AAAA] p25-bookmarks-current.edge.icloud.apple-dns.net from 10.10.10.212 Mon Mar 14 19:18:39 2016 daemon.info dnsmasq[5396]: forwarded p25-bookmarks-current.edge.icloud.apple-dns.net to 192.168.1.1 Mon Mar 14 19:18:39 2016 daemon.info dnsmasq[5396]: reply google.com is 216.58.216.110 Mon Mar 14 19:18:39 2016 daemon.info dnsmasq[5396]: query[A] p25-bookmarks-current.edge.icloud.apple-dns.net from 10.10.10.212 Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: forwarded p25-bookmarks-current.edge.icloud.apple-dns.net to 192.168.1.1 Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: query[AAAA] www3.l.google.com from 10.10.10.212 Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: forwarded www3.l.google.com to 192.168.1.1 Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: reply p25-bookmarks-current.edge.icloud.apple-dns.net is 17.248.131.147 Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: query[A] www3.l.google.com from 10.10.10.212 Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: forwarded www3.l.google.com to 192.168.1.1 Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: reply www3.l.google.com is 2607:f8b0:4001:c0e::64 Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: query[AAAA] apple.imap.mail.yahoo.com from 10.10.10.212 Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: forwarded apple.imap.mail.yahoo.com to 192.168.1.1 Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: reply www3.l.google.com is 173.194.192.102 Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: reply www3.l.google.com is 173.194.192.101 Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: reply www3.l.google.com is 173.194.192.113 Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: reply www3.l.google.com is 173.194.192.100 Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: reply www3.l.google.com is 173.194.192.138 Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: reply www3.l.google.com is 173.194.192.139 Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: query[A] apple.imap.mail.yahoo.com from 10.10.10.212 Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: forwarded apple.imap.mail.yahoo.com to 192.168.1.1 Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: query[AAAA] p25-imap.mail.me.com.akadns.net from 10.10.10.212 Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: forwarded p25-imap.mail.me.com.akadns.net to 192.168.1.1 Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: reply apple.imap.mail.yahoo.com is Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: reply imap-ssl.mail.yahoo.com is Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: reply imap.mail.gm0.yahoodns.net is NODATA-IPv6 Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: reply apple.imap.mail.yahoo.com is Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: reply imap-ssl.mail.yahoo.com is Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: reply imap.mail.gm0.yahoodns.net is 66.218.74.148 Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: reply imap.mail.gm0.yahoodns.net is 98.138.13.26 Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: reply imap.mail.gm0.yahoodns.net is 98.138.13.30 Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: reply imap.mail.gm0.yahoodns.net is 67.195.236.147 Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: reply imap.mail.gm0.yahoodns.net is 98.138.13.27 Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: reply imap.mail.gm0.yahoodns.net is 98.138.13.28 Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: reply imap.mail.gm0.yahoodns.net is 98.138.74.44 Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: reply imap.mail.gm0.yahoodns.net is 98.138.13.29 Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: query[AAAA] imap.mail.gm0.yahoodns.net from 10.10.10.212 Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: cached imap.mail.gm0.yahoodns.net is NODATA-IPv6 Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: query[A] imap.mail.gm0.yahoodns.net from 10.10.10.212 Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: cached imap.mail.gm0.yahoodns.net is 98.138.13.29 Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: cached imap.mail.gm0.yahoodns.net is 98.138.74.44 Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: cached imap.mail.gm0.yahoodns.net is 98.138.13.28 Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: cached imap.mail.gm0.yahoodns.net is 98.138.13.27 Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: cached imap.mail.gm0.yahoodns.net is 67.195.236.147 Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: cached imap.mail.gm0.yahoodns.net is 98.138.13.30 Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: cached imap.mail.gm0.yahoodns.net is 98.138.13.26 Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: cached imap.mail.gm0.yahoodns.net is 66.218.74.148 Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: query[AAAA] imap.gmail.com from 10.10.10.212 Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: forwarded imap.gmail.com to 192.168.1.1 Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: query[A] imap.gmail.com from 10.10.10.212 Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: forwarded imap.gmail.com to 192.168.1.1 Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: reply imap.gmail.com is Mon Mar 14 19:18:40 2016 daemon.info dnsmasq[5396]: reply gmail-imap.l.google.com is 2607:f8b0:4001:c06::6c Mon Mar 14 19:18:41 2016 daemon.info dnsmasq[5396]: reply imap.gmail.com is Mon Mar 14 19:18:41 2016 daemon.info dnsmasq[5396]: reply gmail-imap.l.google.com is 74.125.142.109 Mon Mar 14 19:18:41 2016 daemon.info dnsmasq[5396]: reply gmail-imap.l.google.com is 74.125.142.108 Mon Mar 14 19:18:41 2016 daemon.info dnsmasq[5396]: query[A] gmail-imap.l.google.com from 10.10.10.212 Mon Mar 14 19:18:41 2016 daemon.info dnsmasq[5396]: cached gmail-imap.l.google.com is 74.125.142.108 Mon Mar 14 19:18:41 2016 daemon.info dnsmasq[5396]: cached gmail-imap.l.google.com is 74.125.142.109 Mon Mar 14 19:18:51 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:18:51 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:18:51 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:18:51 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:18:51 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:18:51 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:18:51 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:18:51 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:18:51 2016 daemon.info dnsmasq[5396]: reply pool2.moatads.com is 54.152.81.63 Mon Mar 14 19:18:51 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:18:51 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:18:51 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:18:51 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:18:51 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:18:51 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:18:51 2016 daemon.info dnsmasq[5396]: reply pool2.moatads.com is 54.152.81.63 Mon Mar 14 19:18:51 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:18:51 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:18:51 2016 daemon.info dnsmasq[5396]: reply pool2.moatads.com is NODATA-IPv6 Mon Mar 14 19:18:51 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:18:51 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:18:51 2016 daemon.info dnsmasq[5396]: reply pool2.moatads.com is NODATA-IPv6 Mon Mar 14 19:18:51 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:18:51 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:18:51 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:18:51 2016 daemon.info dnsmasq[5396]: cached pool2.moatads.com is NODATA-IPv6 Mon Mar 14 19:18:53 2016 daemon.info dnsmasq[5396]: query[AAAA] app.procentive.com from 10.10.10.223 Mon Mar 14 19:18:53 2016 daemon.info dnsmasq[5396]: forwarded app.procentive.com to 192.168.1.1 Mon Mar 14 19:19:04 2016 daemon.info dnsmasq[5396]: query[A] google.com from 10.10.10.143 Mon Mar 14 19:19:04 2016 daemon.info dnsmasq[5396]: cached google.com is 216.58.216.110 Mon Mar 14 19:19:05 2016 daemon.info dnsmasq[5396]: query[AAAA] www.google.com from 10.10.10.143 Mon Mar 14 19:19:05 2016 daemon.info dnsmasq[5396]: forwarded www.google.com to 192.168.1.1 Mon Mar 14 19:19:05 2016 daemon.info dnsmasq[5396]: query[A] www.google.com from 10.10.10.143 Mon Mar 14 19:19:05 2016 daemon.info dnsmasq[5396]: forwarded www.google.com to 192.168.1.1 Mon Mar 14 19:19:05 2016 daemon.info dnsmasq[5396]: query[AAAA] google.com from 10.10.10.143 Mon Mar 14 19:19:05 2016 daemon.info dnsmasq[5396]: cached google.com is 2607:f8b0:4001:c1b::71 Mon Mar 14 19:19:05 2016 daemon.info dnsmasq[5396]: reply www.google.com is 2607:f8b0:400c:c06::68 Mon Mar 14 19:19:05 2016 daemon.info dnsmasq[5396]: reply www.google.com is 74.125.141.147 Mon Mar 14 19:19:05 2016 daemon.info dnsmasq[5396]: reply www.google.com is 74.125.141.104 Mon Mar 14 19:19:05 2016 daemon.info dnsmasq[5396]: reply www.google.com is 74.125.141.105 Mon Mar 14 19:19:05 2016 daemon.info dnsmasq[5396]: reply www.google.com is 74.125.141.103 Mon Mar 14 19:19:05 2016 daemon.info dnsmasq[5396]: reply www.google.com is 74.125.141.106 Mon Mar 14 19:19:05 2016 daemon.info dnsmasq[5396]: reply www.google.com is 74.125.141.99 Mon Mar 14 19:19:21 2016 daemon.info dnsmasq[5396]: query[AAAA] iphonesubmissions.apple.com from 10.10.10.250 Mon Mar 14 19:19:21 2016 daemon.info dnsmasq[5396]: forwarded iphonesubmissions.apple.com to 192.168.1.1 Mon Mar 14 19:19:21 2016 daemon.info dnsmasq[5396]: query[A] iphonesubmissions.apple.com from 10.10.10.250 Mon Mar 14 19:19:21 2016 daemon.info dnsmasq[5396]: forwarded iphonesubmissions.apple.com to 192.168.1.1 Mon Mar 14 19:19:21 2016 daemon.info dnsmasq[5396]: reply iphonesubmissions.apple.com is 17.171.75.198 Mon Mar 14 19:19:21 2016 kern.debug kernel: [ 2104.989432] Port 2 receive error code 10, packet dropped Mon Mar 14 19:19:21 2016 kern.debug kernel: [ 2104.989462] Port 2 receive error code 10, packet dropped Mon Mar 14 19:19:21 2016 kern.debug kernel: [ 2104.989497] Port 2 receive error code 10, packet dropped Mon Mar 14 19:19:24 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:19:24 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:19:24 2016 daemon.info dnsmasq[5396]: query[A] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:19:24 2016 daemon.info dnsmasq[5396]: forwarded skydocs.skyprod.akadns.net to 192.168.1.1 Mon Mar 14 19:19:24 2016 daemon.info dnsmasq[5396]: reply skydocs.skyprod.akadns.net is 134.170.109.200 Mon Mar 14 19:19:48 2016 daemon.info dnsmasq[5396]: query[A] clients4.google.com from 10.10.10.223 Mon Mar 14 19:19:48 2016 daemon.info dnsmasq[5396]: forwarded clients4.google.com to 192.168.1.1 Mon Mar 14 19:19:48 2016 daemon.info dnsmasq[5396]: reply clients4.google.com is Mon Mar 14 19:19:48 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.113 Mon Mar 14 19:19:48 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.138 Mon Mar 14 19:19:48 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.101 Mon Mar 14 19:19:48 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.100 Mon Mar 14 19:19:48 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.139 Mon Mar 14 19:19:48 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.102 Mon Mar 14 19:19:57 2016 daemon.info dnsmasq[5396]: query[AAAA] prod-w.nexus.live.com.akadns.net from 10.10.10.223 Mon Mar 14 19:19:57 2016 daemon.info dnsmasq[5396]: cached prod-w.nexus.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:20:00 2016 cron.info crond[3202]: USER root pid 6111 cmd /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Mon Mar 14 19:20:00 2016 daemon.info dnsmasq[5396]: query[A] 0.us.pool.ntp.org from 127.0.0.1 Mon Mar 14 19:20:00 2016 daemon.info dnsmasq[5396]: forwarded 0.us.pool.ntp.org to 192.168.1.1 Mon Mar 14 19:20:00 2016 daemon.info dnsmasq[5396]: reply 0.us.pool.ntp.org is 198.60.22.240 Mon Mar 14 19:20:00 2016 daemon.info dnsmasq[5396]: reply 0.us.pool.ntp.org is 64.113.44.54 Mon Mar 14 19:20:00 2016 daemon.info dnsmasq[5396]: reply 0.us.pool.ntp.org is 66.232.97.8 Mon Mar 14 19:20:00 2016 daemon.info dnsmasq[5396]: reply 0.us.pool.ntp.org is 198.211.106.151 Mon Mar 14 19:20:02 2016 daemon.info dnsmasq[5396]: query[A] plus.google.com from 10.10.10.223 Mon Mar 14 19:20:02 2016 daemon.info dnsmasq[5396]: forwarded plus.google.com to 192.168.1.1 Mon Mar 14 19:20:03 2016 daemon.info dnsmasq[5396]: reply plus.google.com is 216.58.216.206 Mon Mar 14 19:20:04 2016 daemon.info dnsmasq[5396]: query[A] www.google-analytics.com from 10.10.10.223 Mon Mar 14 19:20:04 2016 daemon.info dnsmasq[5396]: forwarded www.google-analytics.com to 192.168.1.1 Mon Mar 14 19:20:04 2016 daemon.info dnsmasq[5396]: reply www.google-analytics.com is Mon Mar 14 19:20:04 2016 daemon.info dnsmasq[5396]: reply www-google-analytics.l.google.com is 216.58.216.238 Mon Mar 14 19:20:06 2016 daemon.info dnsmasq[5396]: query[A] clients2.google.com from 10.10.10.228 Mon Mar 14 19:20:06 2016 daemon.info dnsmasq[5396]: forwarded clients2.google.com to 192.168.1.1 Mon Mar 14 19:20:06 2016 daemon.info dnsmasq[5396]: query[A] clients2.google.com from 10.10.10.229 Mon Mar 14 19:20:06 2016 daemon.info dnsmasq[5396]: forwarded clients2.google.com to 192.168.1.1 Mon Mar 14 19:20:06 2016 daemon.info dnsmasq[5396]: reply clients2.google.com is Mon Mar 14 19:20:06 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.113 Mon Mar 14 19:20:06 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.138 Mon Mar 14 19:20:06 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.101 Mon Mar 14 19:20:06 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.100 Mon Mar 14 19:20:06 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.139 Mon Mar 14 19:20:06 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.102 Mon Mar 14 19:20:06 2016 daemon.info dnsmasq[5396]: reply clients2.google.com is Mon Mar 14 19:20:06 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.113 Mon Mar 14 19:20:06 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.138 Mon Mar 14 19:20:06 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.101 Mon Mar 14 19:20:06 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.100 Mon Mar 14 19:20:06 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.139 Mon Mar 14 19:20:06 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.102 Mon Mar 14 19:20:06 2016 daemon.info dnsmasq[5396]: query[A] clients2.googleusercontent.com from 10.10.10.228 Mon Mar 14 19:20:06 2016 daemon.info dnsmasq[5396]: forwarded clients2.googleusercontent.com to 192.168.1.1 Mon Mar 14 19:20:06 2016 daemon.info dnsmasq[5396]: query[A] clients2.googleusercontent.com from 10.10.10.229 Mon Mar 14 19:20:06 2016 daemon.info dnsmasq[5396]: forwarded clients2.googleusercontent.com to 192.168.1.1 Mon Mar 14 19:20:06 2016 daemon.info dnsmasq[5396]: reply clients2.googleusercontent.com is Mon Mar 14 19:20:06 2016 daemon.info dnsmasq[5396]: reply googlehosted.l.googleusercontent.com is 74.125.207.132 Mon Mar 14 19:20:06 2016 daemon.info dnsmasq[5396]: reply clients2.googleusercontent.com is Mon Mar 14 19:20:06 2016 daemon.info dnsmasq[5396]: reply googlehosted.l.googleusercontent.com is 74.125.207.132 Mon Mar 14 19:20:07 2016 daemon.info dnsmasq[5396]: query[A] docs.google.com from 10.10.10.228 Mon Mar 14 19:20:07 2016 daemon.info dnsmasq[5396]: forwarded docs.google.com to 192.168.1.1 Mon Mar 14 19:20:07 2016 daemon.info dnsmasq[5396]: query[A] docs.google.com from 10.10.10.229 Mon Mar 14 19:20:07 2016 daemon.info dnsmasq[5396]: forwarded docs.google.com to 192.168.1.1 Mon Mar 14 19:20:07 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 173.194.192.101 Mon Mar 14 19:20:07 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 173.194.192.138 Mon Mar 14 19:20:07 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 173.194.192.139 Mon Mar 14 19:20:07 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 173.194.192.102 Mon Mar 14 19:20:07 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 173.194.192.100 Mon Mar 14 19:20:07 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 173.194.192.113 Mon Mar 14 19:20:07 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 173.194.192.101 Mon Mar 14 19:20:07 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 173.194.192.138 Mon Mar 14 19:20:07 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 173.194.192.139 Mon Mar 14 19:20:07 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 173.194.192.102 Mon Mar 14 19:20:07 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 173.194.192.100 Mon Mar 14 19:20:07 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 173.194.192.113 Mon Mar 14 19:20:08 2016 daemon.info dnsmasq[5396]: query[A] ubp-ubpextension-us-prod.s3-us-west-2.amazonaws.com from 10.10.10.223 Mon Mar 14 19:20:08 2016 daemon.info dnsmasq[5396]: forwarded ubp-ubpextension-us-prod.s3-us-west-2.amazonaws.com to 192.168.1.1 Mon Mar 14 19:20:09 2016 daemon.info dnsmasq[5396]: reply ubp-ubpextension-us-prod.s3-us-west-2.amazonaws.com is Mon Mar 14 19:20:09 2016 daemon.info dnsmasq[5396]: reply s3-us-west-2-r-w.amazonaws.com is 54.231.161.169 Mon Mar 14 19:20:15 2016 daemon.info dnsmasq[5396]: query[A] ubp-common-us-prod.s3.amazonaws.com from 10.10.10.223 Mon Mar 14 19:20:15 2016 daemon.info dnsmasq[5396]: forwarded ubp-common-us-prod.s3.amazonaws.com to 192.168.1.1 Mon Mar 14 19:20:15 2016 daemon.info dnsmasq[5396]: reply ubp-common-us-prod.s3.amazonaws.com is Mon Mar 14 19:20:15 2016 daemon.info dnsmasq[5396]: reply s3-us-west-2-w.amazonaws.com is 54.231.168.222 Mon Mar 14 19:20:24 2016 daemon.info dnsmasq[5396]: query[AAAA] app.procentive.com from 10.10.10.223 Mon Mar 14 19:20:24 2016 daemon.info dnsmasq[5396]: forwarded app.procentive.com to 192.168.1.1 Mon Mar 14 19:20:25 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:20:25 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:20:37 2016 daemon.info dnsmasq[5396]: query[PTR] lb._dns-sd._udp.0.10.10.10.in-addr.arpa from 10.10.10.223 Mon Mar 14 19:20:37 2016 daemon.info dnsmasq[5396]: forwarded lb._dns-sd._udp.0.10.10.10.in-addr.arpa to 192.168.1.1 Mon Mar 14 19:20:37 2016 daemon.info dnsmasq[5396]: query[PTR] lb._dns-sd._udp.lan from 10.10.10.223 Mon Mar 14 19:20:37 2016 daemon.info dnsmasq[5396]: config lb._dns-sd._udp.lan is NXDOMAIN Mon Mar 14 19:20:47 2016 daemon.info dnsmasq[5396]: query[A] safebrowsing.google.com from 10.10.10.223 Mon Mar 14 19:20:47 2016 daemon.info dnsmasq[5396]: forwarded safebrowsing.google.com to 192.168.1.1 Mon Mar 14 19:20:47 2016 daemon.info dnsmasq[5396]: reply safebrowsing.google.com is Mon Mar 14 19:20:47 2016 daemon.info dnsmasq[5396]: reply sb.l.google.com is 216.58.192.206 Mon Mar 14 19:20:47 2016 daemon.info dnsmasq[5396]: query[A] safebrowsing-cache.google.com from 10.10.10.223 Mon Mar 14 19:20:47 2016 daemon.info dnsmasq[5396]: forwarded safebrowsing-cache.google.com to 192.168.1.1 Mon Mar 14 19:20:47 2016 daemon.info dnsmasq[5396]: reply safebrowsing-cache.google.com is Mon Mar 14 19:20:47 2016 daemon.info dnsmasq[5396]: reply safebrowsing.cache.l.google.com is 216.58.216.238 Mon Mar 14 19:21:09 2016 daemon.info dnsmasq[5396]: query[A] gfe.nvidia.com from 10.10.10.228 Mon Mar 14 19:21:09 2016 daemon.info dnsmasq[5396]: forwarded gfe.nvidia.com to 192.168.1.1 Mon Mar 14 19:21:09 2016 daemon.info dnsmasq[5396]: query[AAAA] gfe.nvidia.com from 10.10.10.228 Mon Mar 14 19:21:09 2016 daemon.info dnsmasq[5396]: forwarded gfe.nvidia.com to 192.168.1.1 Mon Mar 14 19:21:09 2016 daemon.info dnsmasq[5396]: query[A] gfe.nvidia.com from 10.10.10.229 Mon Mar 14 19:21:09 2016 daemon.info dnsmasq[5396]: forwarded gfe.nvidia.com to 192.168.1.1 Mon Mar 14 19:21:09 2016 daemon.info dnsmasq[5396]: reply gfe.nvidia.com is 8.36.120.226 Mon Mar 14 19:21:09 2016 daemon.info dnsmasq[5396]: reply gfe.nvidia.com is 8.36.113.188 Mon Mar 14 19:21:09 2016 daemon.info dnsmasq[5396]: reply gfe.nvidia.com is 8.36.113.132 Mon Mar 14 19:21:09 2016 daemon.info dnsmasq[5396]: query[AAAA] gfe.nvidia.com from 10.10.10.229 Mon Mar 14 19:21:09 2016 daemon.info dnsmasq[5396]: forwarded gfe.nvidia.com to 192.168.1.1 Mon Mar 14 19:21:09 2016 daemon.info dnsmasq[5396]: reply gfe.nvidia.com is 8.36.120.226 Mon Mar 14 19:21:09 2016 daemon.info dnsmasq[5396]: reply gfe.nvidia.com is 8.36.113.188 Mon Mar 14 19:21:09 2016 daemon.info dnsmasq[5396]: reply gfe.nvidia.com is 8.36.113.132 Mon Mar 14 19:21:17 2016 daemon.info dnsmasq[5396]: query[A] clients2.google.com from 10.10.10.223 Mon Mar 14 19:21:17 2016 daemon.info dnsmasq[5396]: cached clients2.google.com is Mon Mar 14 19:21:17 2016 daemon.info dnsmasq[5396]: cached clients.l.google.com is 173.194.192.102 Mon Mar 14 19:21:17 2016 daemon.info dnsmasq[5396]: cached clients.l.google.com is 173.194.192.139 Mon Mar 14 19:21:17 2016 daemon.info dnsmasq[5396]: cached clients.l.google.com is 173.194.192.100 Mon Mar 14 19:21:17 2016 daemon.info dnsmasq[5396]: cached clients.l.google.com is 173.194.192.101 Mon Mar 14 19:21:17 2016 daemon.info dnsmasq[5396]: cached clients.l.google.com is 173.194.192.138 Mon Mar 14 19:21:17 2016 daemon.info dnsmasq[5396]: cached clients.l.google.com is 173.194.192.113 Mon Mar 14 19:21:24 2016 daemon.info dnsmasq[5396]: query[A] 9.client-channel.google.com from 10.10.10.223 Mon Mar 14 19:21:24 2016 daemon.info dnsmasq[5396]: forwarded 9.client-channel.google.com to 192.168.1.1 Mon Mar 14 19:21:24 2016 daemon.info dnsmasq[5396]: query[AAAA] 9.client-channel.google.com from 10.10.10.223 Mon Mar 14 19:21:24 2016 daemon.info dnsmasq[5396]: forwarded 9.client-channel.google.com to 192.168.1.1 Mon Mar 14 19:21:24 2016 daemon.info dnsmasq[5396]: reply 9.client-channel.google.com is 74.125.207.189 Mon Mar 14 19:21:24 2016 daemon.info dnsmasq[5396]: reply 9.client-channel.google.com is 2607:f8b0:4001:c07::bd Mon Mar 14 19:21:26 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:21:26 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:21:43 2016 daemon.info dnsmasq[5396]: query[A] partiality.itunes-apple.com.akadns.net from 10.10.10.216 Mon Mar 14 19:21:43 2016 daemon.info dnsmasq[5396]: forwarded partiality.itunes-apple.com.akadns.net to 192.168.1.1 Mon Mar 14 19:21:43 2016 daemon.info dnsmasq[5396]: query[AAAA] partiality.itunes-apple.com.akadns.net from 10.10.10.216 Mon Mar 14 19:21:43 2016 daemon.info dnsmasq[5396]: cached partiality.itunes-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:21:43 2016 daemon.info dnsmasq[5396]: reply partiality.itunes-apple.com.akadns.net is 17.173.66.73 Mon Mar 14 19:21:43 2016 daemon.info dnsmasq[5396]: reply partiality.itunes-apple.com.akadns.net is 17.173.66.75 Mon Mar 14 19:21:43 2016 daemon.info dnsmasq[5396]: reply partiality.itunes-apple.com.akadns.net is 17.173.66.74 Mon Mar 14 19:21:43 2016 daemon.info dnsmasq[5396]: query[AAAA] e7542.e9.akamaiedge.net from 10.10.10.216 Mon Mar 14 19:21:43 2016 daemon.info dnsmasq[5396]: cached e7542.e9.akamaiedge.net is NODATA-IPv6 Mon Mar 14 19:21:43 2016 daemon.info dnsmasq[5396]: query[A] e7542.e9.akamaiedge.net from 10.10.10.216 Mon Mar 14 19:21:43 2016 daemon.info dnsmasq[5396]: forwarded e7542.e9.akamaiedge.net to 192.168.1.1 Mon Mar 14 19:21:43 2016 daemon.info dnsmasq[5396]: reply e7542.e9.akamaiedge.net is 23.211.186.161 Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: query[A] o.aolcdn.com from 10.10.10.228 Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: forwarded o.aolcdn.com to 192.168.1.1 Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: query[AAAA] o.aolcdn.com from 10.10.10.228 Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: forwarded o.aolcdn.com to 192.168.1.1 Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: query[A] o.aolcdn.com from 10.10.10.229 Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: forwarded o.aolcdn.com to 192.168.1.1 Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: query[AAAA] o.aolcdn.com from 10.10.10.229 Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: forwarded o.aolcdn.com to 192.168.1.1 Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: reply o.aolcdn.com is Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: reply o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 23.77.232.155 Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 23.77.232.170 Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: reply o.aolcdn.com is Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: reply o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 2600:1404:e::174d:e91b Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 2600:1404:e::174d:e869 Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: reply o.aolcdn.com is Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: reply o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 23.77.232.155 Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 23.77.232.170 Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: reply o.aolcdn.com is Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: reply o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 2600:1404:e::174d:e91b Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 2600:1404:e::174d:e869 Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: cached pool2.moatads.com is NODATA-IPv6 Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: reply pool2.moatads.com is 54.209.173.168 Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: cached pool2.moatads.com is NODATA-IPv6 Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: reply pool2.moatads.com is 54.209.173.168 Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: cached pool2.moatads.com is 54.209.173.168 Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: cached pool2.moatads.com is NODATA-IPv6 Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: cached pool2.moatads.com is NODATA-IPv6 Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:21:51 2016 daemon.info dnsmasq[5396]: cached pool2.moatads.com is 54.209.173.168 Mon Mar 14 19:22:17 2016 daemon.info dnsmasq[5396]: query[A] nexus.officeapps.live.com from 10.10.10.228 Mon Mar 14 19:22:17 2016 daemon.info dnsmasq[5396]: forwarded nexus.officeapps.live.com to 192.168.1.1 Mon Mar 14 19:22:17 2016 daemon.info dnsmasq[5396]: query[AAAA] nexus.officeapps.live.com from 10.10.10.228 Mon Mar 14 19:22:17 2016 daemon.info dnsmasq[5396]: forwarded nexus.officeapps.live.com to 192.168.1.1 Mon Mar 14 19:22:17 2016 daemon.info dnsmasq[5396]: query[A] nexus.officeapps.live.com from 10.10.10.229 Mon Mar 14 19:22:17 2016 daemon.info dnsmasq[5396]: forwarded nexus.officeapps.live.com to 192.168.1.1 Mon Mar 14 19:22:17 2016 daemon.info dnsmasq[5396]: reply nexus.officeapps.live.com is Mon Mar 14 19:22:17 2016 daemon.info dnsmasq[5396]: reply prod-w.nexus.live.com.akadns.net is 23.99.121.207 Mon Mar 14 19:22:17 2016 daemon.info dnsmasq[5396]: query[AAAA] nexus.officeapps.live.com from 10.10.10.229 Mon Mar 14 19:22:17 2016 daemon.info dnsmasq[5396]: cached nexus.officeapps.live.com is Mon Mar 14 19:22:17 2016 daemon.info dnsmasq[5396]: forwarded nexus.officeapps.live.com to 192.168.1.1 Mon Mar 14 19:22:17 2016 daemon.info dnsmasq[5396]: reply nexus.officeapps.live.com is Mon Mar 14 19:22:17 2016 daemon.info dnsmasq[5396]: reply prod-w.nexus.live.com.akadns.net is 23.99.121.207 Mon Mar 14 19:22:17 2016 daemon.info dnsmasq[5396]: reply nexus.officeapps.live.com is Mon Mar 14 19:22:17 2016 daemon.info dnsmasq[5396]: reply prod-w.nexus.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:22:17 2016 daemon.info dnsmasq[5396]: reply nexus.officeapps.live.com is Mon Mar 14 19:22:17 2016 daemon.info dnsmasq[5396]: reply prod-w.nexus.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:22:17 2016 daemon.info dnsmasq[5396]: query[AAAA] nexus.officeapps.live.com from 10.10.10.228 Mon Mar 14 19:22:17 2016 daemon.info dnsmasq[5396]: cached nexus.officeapps.live.com is Mon Mar 14 19:22:17 2016 daemon.info dnsmasq[5396]: cached prod-w.nexus.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:22:17 2016 daemon.info dnsmasq[5396]: query[AAAA] nexus.officeapps.live.com from 10.10.10.229 Mon Mar 14 19:22:17 2016 daemon.info dnsmasq[5396]: cached nexus.officeapps.live.com is Mon Mar 14 19:22:17 2016 daemon.info dnsmasq[5396]: cached prod-w.nexus.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:22:18 2016 daemon.info dnsmasq[5396]: query[A] clients2.google.com from 10.10.10.223 Mon Mar 14 19:22:18 2016 daemon.info dnsmasq[5396]: forwarded clients2.google.com to 192.168.1.1 Mon Mar 14 19:22:18 2016 daemon.info dnsmasq[5396]: reply clients2.google.com is Mon Mar 14 19:22:18 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.100 Mon Mar 14 19:22:18 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.113 Mon Mar 14 19:22:18 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.139 Mon Mar 14 19:22:18 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.102 Mon Mar 14 19:22:18 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.101 Mon Mar 14 19:22:18 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.138 Mon Mar 14 19:22:18 2016 daemon.info dnsmasq[5396]: query[A] beacons5.gvt3.com from 10.10.10.223 Mon Mar 14 19:22:18 2016 daemon.info dnsmasq[5396]: forwarded beacons5.gvt3.com to 192.168.1.1 Mon Mar 14 19:22:18 2016 daemon.info dnsmasq[5396]: reply beacons5.gvt3.com is 104.237.191.1 Mon Mar 14 19:22:18 2016 daemon.info dnsmasq[5396]: query[A] nexusrules.officeapps.live.com from 10.10.10.228 Mon Mar 14 19:22:18 2016 daemon.info dnsmasq[5396]: forwarded nexusrules.officeapps.live.com to 192.168.1.1 Mon Mar 14 19:22:18 2016 daemon.info dnsmasq[5396]: query[AAAA] nexusrules.officeapps.live.com from 10.10.10.228 Mon Mar 14 19:22:18 2016 daemon.info dnsmasq[5396]: forwarded nexusrules.officeapps.live.com to 192.168.1.1 Mon Mar 14 19:22:18 2016 daemon.info dnsmasq[5396]: query[A] nexusrules.officeapps.live.com from 10.10.10.229 Mon Mar 14 19:22:18 2016 daemon.info dnsmasq[5396]: forwarded nexusrules.officeapps.live.com to 192.168.1.1 Mon Mar 14 19:22:18 2016 daemon.info dnsmasq[5396]: reply nexusrules.officeapps.live.com is Mon Mar 14 19:22:18 2016 daemon.info dnsmasq[5396]: reply prod.nexusrules.live.com.akadns.net is 23.99.109.44 Mon Mar 14 19:22:18 2016 daemon.info dnsmasq[5396]: query[AAAA] nexusrules.officeapps.live.com from 10.10.10.229 Mon Mar 14 19:22:18 2016 daemon.info dnsmasq[5396]: cached nexusrules.officeapps.live.com is Mon Mar 14 19:22:18 2016 daemon.info dnsmasq[5396]: forwarded nexusrules.officeapps.live.com to 192.168.1.1 Mon Mar 14 19:22:18 2016 daemon.info dnsmasq[5396]: reply nexusrules.officeapps.live.com is Mon Mar 14 19:22:18 2016 daemon.info dnsmasq[5396]: reply prod.nexusrules.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:22:18 2016 daemon.info dnsmasq[5396]: reply nexusrules.officeapps.live.com is Mon Mar 14 19:22:18 2016 daemon.info dnsmasq[5396]: reply prod.nexusrules.live.com.akadns.net is 23.99.109.44 Mon Mar 14 19:22:18 2016 daemon.info dnsmasq[5396]: reply nexusrules.officeapps.live.com is Mon Mar 14 19:22:18 2016 daemon.info dnsmasq[5396]: reply prod.nexusrules.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:22:27 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:22:27 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:22:55 2016 daemon.info dnsmasq[5396]: query[AAAA] app.procentive.com from 10.10.10.223 Mon Mar 14 19:22:55 2016 daemon.info dnsmasq[5396]: forwarded app.procentive.com to 192.168.1.1 Mon Mar 14 19:23:06 2016 daemon.info dnsmasq[5396]: query[A] v10.vortex-win.data.microsoft.com from 10.10.10.228 Mon Mar 14 19:23:06 2016 daemon.info dnsmasq[5396]: forwarded v10.vortex-win.data.microsoft.com to 192.168.1.1 Mon Mar 14 19:23:06 2016 daemon.info dnsmasq[5396]: query[AAAA] v10.vortex-win.data.microsoft.com from 10.10.10.228 Mon Mar 14 19:23:07 2016 daemon.info dnsmasq[5396]: forwarded v10.vortex-win.data.microsoft.com to 192.168.1.1 Mon Mar 14 19:23:07 2016 daemon.info dnsmasq[5396]: query[A] v10.vortex-win.data.microsoft.com from 10.10.10.229 Mon Mar 14 19:23:07 2016 daemon.info dnsmasq[5396]: forwarded v10.vortex-win.data.microsoft.com to 192.168.1.1 Mon Mar 14 19:23:07 2016 daemon.info dnsmasq[5396]: reply v10.vortex-win.data.microsoft.com is Mon Mar 14 19:23:07 2016 daemon.info dnsmasq[5396]: reply v10.vortex-win.data.metron.live.com.nsatc.net is Mon Mar 14 19:23:07 2016 daemon.info dnsmasq[5396]: reply vortex.data.glbdns2.microsoft.com is Mon Mar 14 19:23:07 2016 daemon.info dnsmasq[5396]: reply vortex-cy2.metron.live.com.nsatc.net is 64.4.54.254 Mon Mar 14 19:23:07 2016 daemon.info dnsmasq[5396]: query[AAAA] v10.vortex-win.data.microsoft.com from 10.10.10.229 Mon Mar 14 19:23:07 2016 daemon.info dnsmasq[5396]: cached v10.vortex-win.data.microsoft.com is Mon Mar 14 19:23:07 2016 daemon.info dnsmasq[5396]: cached v10.vortex-win.data.metron.live.com.nsatc.net is Mon Mar 14 19:23:07 2016 daemon.info dnsmasq[5396]: cached vortex.data.glbdns2.microsoft.com is Mon Mar 14 19:23:07 2016 daemon.info dnsmasq[5396]: forwarded v10.vortex-win.data.microsoft.com to 192.168.1.1 Mon Mar 14 19:23:07 2016 daemon.info dnsmasq[5396]: reply v10.vortex-win.data.microsoft.com is Mon Mar 14 19:23:07 2016 daemon.info dnsmasq[5396]: reply v10.vortex-win.data.metron.live.com.nsatc.net is Mon Mar 14 19:23:07 2016 daemon.info dnsmasq[5396]: reply vortex.data.glbdns2.microsoft.com is Mon Mar 14 19:23:07 2016 daemon.info dnsmasq[5396]: reply vortex-cy2.metron.live.com.nsatc.net is 64.4.54.254 Mon Mar 14 19:23:07 2016 daemon.info dnsmasq[5396]: reply v10.vortex-win.data.microsoft.com is Mon Mar 14 19:23:07 2016 daemon.info dnsmasq[5396]: reply v10.vortex-win.data.metron.live.com.nsatc.net is Mon Mar 14 19:23:07 2016 daemon.info dnsmasq[5396]: reply vortex.data.glbdns2.microsoft.com is Mon Mar 14 19:23:07 2016 daemon.info dnsmasq[5396]: reply vortex-cy2.metron.live.com.nsatc.net is NODATA-IPv6 Mon Mar 14 19:23:07 2016 daemon.info dnsmasq[5396]: reply v10.vortex-win.data.microsoft.com is Mon Mar 14 19:23:07 2016 daemon.info dnsmasq[5396]: reply v10.vortex-win.data.metron.live.com.nsatc.net is Mon Mar 14 19:23:07 2016 daemon.info dnsmasq[5396]: reply vortex.data.glbdns2.microsoft.com is Mon Mar 14 19:23:07 2016 daemon.info dnsmasq[5396]: reply vortex-cy2.metron.live.com.nsatc.net is NODATA-IPv6 Mon Mar 14 19:23:07 2016 daemon.info dnsmasq[5396]: query[AAAA] v10.vortex-win.data.microsoft.com from 10.10.10.228 Mon Mar 14 19:23:07 2016 daemon.info dnsmasq[5396]: cached v10.vortex-win.data.microsoft.com is Mon Mar 14 19:23:07 2016 daemon.info dnsmasq[5396]: cached v10.vortex-win.data.metron.live.com.nsatc.net is Mon Mar 14 19:23:07 2016 daemon.info dnsmasq[5396]: cached vortex.data.glbdns2.microsoft.com is Mon Mar 14 19:23:07 2016 daemon.info dnsmasq[5396]: cached vortex-cy2.metron.live.com.nsatc.net is NODATA-IPv6 Mon Mar 14 19:23:09 2016 daemon.info dnsmasq[5396]: query[AAAA] origin.guzzoni-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 19:23:09 2016 daemon.info dnsmasq[5396]: forwarded origin.guzzoni-apple.com.akadns.net to 192.168.1.1 Mon Mar 14 19:23:09 2016 daemon.info dnsmasq[5396]: query[A] origin.guzzoni-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 19:23:09 2016 daemon.info dnsmasq[5396]: forwarded origin.guzzoni-apple.com.akadns.net to 192.168.1.1 Mon Mar 14 19:23:09 2016 daemon.info dnsmasq[5396]: query[AAAA] r3---sn-81fpgxaxnn-vgqe.googlevideo.com from 10.10.10.211 Mon Mar 14 19:23:09 2016 daemon.info dnsmasq[5396]: forwarded r3---sn-81fpgxaxnn-vgqe.googlevideo.com to 192.168.1.1 Mon Mar 14 19:23:09 2016 daemon.info dnsmasq[5396]: query[A] r3---sn-81fpgxaxnn-vgqe.googlevideo.com from 10.10.10.211 Mon Mar 14 19:23:09 2016 daemon.info dnsmasq[5396]: forwarded r3---sn-81fpgxaxnn-vgqe.googlevideo.com to 192.168.1.1 Mon Mar 14 19:23:09 2016 daemon.info dnsmasq[5396]: reply origin.guzzoni-apple.com.akadns.net is Mon Mar 14 19:23:09 2016 daemon.info dnsmasq[5396]: reply st14p02sa.guzzoni-apple.com.akadns.net is 17.174.2.5 Mon Mar 14 19:23:09 2016 daemon.info dnsmasq[5396]: query[AAAA] p44-keyvalueservice-current.edge.icloud.apple-dns.net from 10.10.10.211 Mon Mar 14 19:23:09 2016 daemon.info dnsmasq[5396]: forwarded p44-keyvalueservice-current.edge.icloud.apple-dns.net to 192.168.1.1 Mon Mar 14 19:23:09 2016 daemon.info dnsmasq[5396]: reply origin.guzzoni-apple.com.akadns.net is Mon Mar 14 19:23:09 2016 daemon.info dnsmasq[5396]: reply st14p02sa.guzzoni-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:23:09 2016 daemon.info dnsmasq[5396]: reply r3---sn-81fpgxaxnn-vgqe.googlevideo.com is Mon Mar 14 19:23:09 2016 daemon.info dnsmasq[5396]: reply r3.sn-81fpgxaxnn-vgqe.googlevideo.com is 63.84.3.14 Mon Mar 14 19:23:09 2016 daemon.info dnsmasq[5396]: query[A] p44-keyvalueservice-current.edge.icloud.apple-dns.net from 10.10.10.211 Mon Mar 14 19:23:09 2016 daemon.info dnsmasq[5396]: forwarded p44-keyvalueservice-current.edge.icloud.apple-dns.net to 192.168.1.1 Mon Mar 14 19:23:09 2016 daemon.info dnsmasq[5396]: reply r3---sn-81fpgxaxnn-vgqe.googlevideo.com is Mon Mar 14 19:23:09 2016 daemon.info dnsmasq[5396]: reply r3.sn-81fpgxaxnn-vgqe.googlevideo.com is 2600:805:110::e Mon Mar 14 19:23:09 2016 daemon.info dnsmasq[5396]: query[AAAA] www.apple.com.edgekey.net.globalredir.akadns.net from 10.10.10.211 Mon Mar 14 19:23:09 2016 daemon.info dnsmasq[5396]: forwarded www.apple.com.edgekey.net.globalredir.akadns.net to 192.168.1.1 Mon Mar 14 19:23:09 2016 daemon.info dnsmasq[5396]: reply p44-keyvalueservice-current.edge.icloud.apple-dns.net is 17.248.131.148 Mon Mar 14 19:23:09 2016 daemon.info dnsmasq[5396]: query[A] www.apple.com.edgekey.net.globalredir.akadns.net from 10.10.10.211 Mon Mar 14 19:23:09 2016 daemon.info dnsmasq[5396]: forwarded www.apple.com.edgekey.net.globalredir.akadns.net to 192.168.1.1 Mon Mar 14 19:23:09 2016 daemon.info dnsmasq[5396]: reply www.apple.com.edgekey.net.globalredir.akadns.net is Mon Mar 14 19:23:09 2016 daemon.info dnsmasq[5396]: reply e6858.dscc.akamaiedge.net is 2600:1404:e:194::1aca Mon Mar 14 19:23:09 2016 daemon.info dnsmasq[5396]: reply e6858.dscc.akamaiedge.net is 2600:1404:e:18d::1aca Mon Mar 14 19:23:09 2016 daemon.info dnsmasq[5396]: query[AAAA] api.smoot-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 19:23:09 2016 daemon.info dnsmasq[5396]: cached api.smoot-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:23:09 2016 daemon.info dnsmasq[5396]: reply www.apple.com.edgekey.net.globalredir.akadns.net is Mon Mar 14 19:23:09 2016 daemon.info dnsmasq[5396]: reply e6858.dscc.akamaiedge.net is 23.12.245.148 Mon Mar 14 19:23:09 2016 daemon.info dnsmasq[5396]: query[A] api.smoot-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 19:23:09 2016 daemon.info dnsmasq[5396]: forwarded api.smoot-apple.com.akadns.net to 192.168.1.1 Mon Mar 14 19:23:09 2016 daemon.info dnsmasq[5396]: query[AAAA] apple.com from 10.10.10.211 Mon Mar 14 19:23:09 2016 daemon.info dnsmasq[5396]: forwarded apple.com to 192.168.1.1 Mon Mar 14 19:23:09 2016 daemon.info dnsmasq[5396]: reply api.smoot-apple.com.akadns.net is 17.249.73.246 Mon Mar 14 19:23:09 2016 daemon.info dnsmasq[5396]: query[AAAA] st14p02sa.guzzoni-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 19:23:09 2016 daemon.info dnsmasq[5396]: cached st14p02sa.guzzoni-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:23:09 2016 daemon.info dnsmasq[5396]: query[AAAA] r3.sn-81fpgxaxnn-vgqe.googlevideo.com from 10.10.10.211 Mon Mar 14 19:23:09 2016 daemon.info dnsmasq[5396]: cached r3.sn-81fpgxaxnn-vgqe.googlevideo.com is 2600:805:110::e Mon Mar 14 19:23:09 2016 daemon.info dnsmasq[5396]: query[A] e6858.dscc.akamaiedge.net from 10.10.10.211 Mon Mar 14 19:23:09 2016 daemon.info dnsmasq[5396]: cached e6858.dscc.akamaiedge.net is 23.12.245.148 Mon Mar 14 19:23:21 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:23:21 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:23:21 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:23:21 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:23:21 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:23:21 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:23:21 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:23:21 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:23:21 2016 daemon.info dnsmasq[5396]: reply pool1.moatads.com is 54.164.127.230 Mon Mar 14 19:23:21 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:23:21 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:23:21 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:23:21 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:23:21 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:23:21 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:23:21 2016 daemon.info dnsmasq[5396]: reply pool1.moatads.com is 54.164.127.230 Mon Mar 14 19:23:21 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:23:21 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:23:21 2016 daemon.info dnsmasq[5396]: reply pool1.moatads.com is NODATA-IPv6 Mon Mar 14 19:23:22 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:23:22 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:23:22 2016 daemon.info dnsmasq[5396]: reply pool1.moatads.com is NODATA-IPv6 Mon Mar 14 19:23:22 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:23:22 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:23:22 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:23:22 2016 daemon.info dnsmasq[5396]: cached pool1.moatads.com is NODATA-IPv6 Mon Mar 14 19:23:22 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:23:22 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:23:22 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:23:22 2016 daemon.info dnsmasq[5396]: cached pool1.moatads.com is NODATA-IPv6 Mon Mar 14 19:23:28 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:23:28 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:23:39 2016 daemon.info dnsmasq[5396]: query[A] chatenabled.mail.google.com from 10.10.10.228 Mon Mar 14 19:23:39 2016 daemon.info dnsmasq[5396]: forwarded chatenabled.mail.google.com to 192.168.1.1 Mon Mar 14 19:23:39 2016 daemon.info dnsmasq[5396]: query[A] chatenabled.mail.google.com from 10.10.10.229 Mon Mar 14 19:23:39 2016 daemon.info dnsmasq[5396]: forwarded chatenabled.mail.google.com to 192.168.1.1 Mon Mar 14 19:23:39 2016 daemon.info dnsmasq[5396]: reply chatenabled.mail.google.com is Mon Mar 14 19:23:39 2016 daemon.info dnsmasq[5396]: reply b.googlemail.l.google.com is 216.58.216.231 Mon Mar 14 19:23:39 2016 daemon.info dnsmasq[5396]: reply chatenabled.mail.google.com is Mon Mar 14 19:23:39 2016 daemon.info dnsmasq[5396]: reply b.googlemail.l.google.com is 216.58.216.231 Mon Mar 14 19:23:43 2016 daemon.info dnsmasq[5396]: query[A] clients5.google.com from 10.10.10.228 Mon Mar 14 19:23:43 2016 daemon.info dnsmasq[5396]: forwarded clients5.google.com to 192.168.1.1 Mon Mar 14 19:23:43 2016 daemon.info dnsmasq[5396]: query[A] clients5.google.com from 10.10.10.229 Mon Mar 14 19:23:43 2016 daemon.info dnsmasq[5396]: forwarded clients5.google.com to 192.168.1.1 Mon Mar 14 19:23:43 2016 daemon.info dnsmasq[5396]: reply clients5.google.com is Mon Mar 14 19:23:43 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.101 Mon Mar 14 19:23:43 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.138 Mon Mar 14 19:23:43 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.100 Mon Mar 14 19:23:43 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.113 Mon Mar 14 19:23:43 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.139 Mon Mar 14 19:23:43 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.102 Mon Mar 14 19:23:43 2016 daemon.info dnsmasq[5396]: reply clients5.google.com is Mon Mar 14 19:23:43 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.101 Mon Mar 14 19:23:43 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.138 Mon Mar 14 19:23:43 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.100 Mon Mar 14 19:23:43 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.113 Mon Mar 14 19:23:43 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.139 Mon Mar 14 19:23:43 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.102 Mon Mar 14 19:23:45 2016 daemon.info dnsmasq[5396]: query[A] clients6.google.com from 10.10.10.223 Mon Mar 14 19:23:45 2016 daemon.info dnsmasq[5396]: forwarded clients6.google.com to 192.168.1.1 Mon Mar 14 19:23:45 2016 daemon.info dnsmasq[5396]: query[AAAA] clients6.google.com from 10.10.10.223 Mon Mar 14 19:23:45 2016 daemon.info dnsmasq[5396]: forwarded clients6.google.com to 192.168.1.1 Mon Mar 14 19:23:45 2016 daemon.info dnsmasq[5396]: reply clients6.google.com is Mon Mar 14 19:23:45 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.139 Mon Mar 14 19:23:45 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.102 Mon Mar 14 19:23:45 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.101 Mon Mar 14 19:23:45 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.138 Mon Mar 14 19:23:45 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.100 Mon Mar 14 19:23:45 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.113 Mon Mar 14 19:23:45 2016 daemon.info dnsmasq[5396]: reply clients6.google.com is Mon Mar 14 19:23:45 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 2607:f8b0:4001:c0e::8a Mon Mar 14 19:23:45 2016 daemon.info dnsmasq[5396]: query[AAAA] clients.l.google.com from 10.10.10.223 Mon Mar 14 19:23:45 2016 daemon.info dnsmasq[5396]: cached clients.l.google.com is 2607:f8b0:4001:c0e::8a Mon Mar 14 19:23:58 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:23:58 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:23:58 2016 daemon.info dnsmasq[5396]: query[A] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:23:59 2016 daemon.info dnsmasq[5396]: forwarded skydocs.skyprod.akadns.net to 192.168.1.1 Mon Mar 14 19:23:59 2016 daemon.info dnsmasq[5396]: reply skydocs.skyprod.akadns.net is 134.170.110.24 Mon Mar 14 19:24:05 2016 daemon.info dnsmasq[5396]: query[A] play.google.com from 10.10.10.223 Mon Mar 14 19:24:05 2016 daemon.info dnsmasq[5396]: forwarded play.google.com to 192.168.1.1 Mon Mar 14 19:24:05 2016 daemon.info dnsmasq[5396]: query[AAAA] play.google.com from 10.10.10.223 Mon Mar 14 19:24:05 2016 daemon.info dnsmasq[5396]: forwarded play.google.com to 192.168.1.1 Mon Mar 14 19:24:05 2016 daemon.info dnsmasq[5396]: reply play.google.com is Mon Mar 14 19:24:05 2016 daemon.info dnsmasq[5396]: reply play.l.google.com is 216.58.216.238 Mon Mar 14 19:24:05 2016 daemon.info dnsmasq[5396]: reply play.google.com is Mon Mar 14 19:24:05 2016 daemon.info dnsmasq[5396]: reply play.l.google.com is 2607:f8b0:4009:809::200e Mon Mar 14 19:24:05 2016 daemon.info dnsmasq[5396]: query[AAAA] play.l.google.com from 10.10.10.223 Mon Mar 14 19:24:05 2016 daemon.info dnsmasq[5396]: cached play.l.google.com is 2607:f8b0:4009:809::200e Mon Mar 14 19:24:19 2016 daemon.info dnsmasq[5396]: query[A] googlemail.l.google.com from 10.10.10.223 Mon Mar 14 19:24:19 2016 daemon.info dnsmasq[5396]: forwarded googlemail.l.google.com to 192.168.1.1 Mon Mar 14 19:24:19 2016 daemon.info dnsmasq[5396]: query[AAAA] googlemail.l.google.com from 10.10.10.223 Mon Mar 14 19:24:19 2016 daemon.info dnsmasq[5396]: forwarded googlemail.l.google.com to 192.168.1.1 Mon Mar 14 19:24:19 2016 daemon.info dnsmasq[5396]: reply googlemail.l.google.com is 216.58.216.229 Mon Mar 14 19:24:19 2016 daemon.info dnsmasq[5396]: reply googlemail.l.google.com is 2607:f8b0:4009:809::2005 Mon Mar 14 19:24:22 2016 daemon.info dnsmasq[5396]: query[AAAA] nexus.officeapps.live.com from 10.10.10.223 Mon Mar 14 19:24:22 2016 daemon.info dnsmasq[5396]: cached nexus.officeapps.live.com is Mon Mar 14 19:24:22 2016 daemon.info dnsmasq[5396]: cached prod-w.nexus.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:24:22 2016 daemon.info dnsmasq[5396]: query[A] nexus.officeapps.live.com from 10.10.10.223 Mon Mar 14 19:24:22 2016 daemon.info dnsmasq[5396]: cached nexus.officeapps.live.com is Mon Mar 14 19:24:22 2016 daemon.info dnsmasq[5396]: cached prod-w.nexus.live.com.akadns.net is 23.99.121.207 Mon Mar 14 19:24:23 2016 daemon.info dnsmasq[5396]: query[AAAA] prod-w.nexus.live.com.akadns.net from 10.10.10.223 Mon Mar 14 19:24:23 2016 daemon.info dnsmasq[5396]: cached prod-w.nexus.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:24:25 2016 daemon.info dnsmasq[5396]: query[AAAA] app.procentive.com from 10.10.10.223 Mon Mar 14 19:24:25 2016 daemon.info dnsmasq[5396]: forwarded app.procentive.com to 192.168.1.1 Mon Mar 14 19:24:34 2016 daemon.info dnsmasq[5396]: query[A] clients4.google.com from 10.10.10.228 Mon Mar 14 19:24:34 2016 daemon.info dnsmasq[5396]: forwarded clients4.google.com to 192.168.1.1 Mon Mar 14 19:24:34 2016 daemon.info dnsmasq[5396]: query[A] clients4.google.com from 10.10.10.229 Mon Mar 14 19:24:34 2016 daemon.info dnsmasq[5396]: forwarded clients4.google.com to 192.168.1.1 Mon Mar 14 19:24:34 2016 daemon.info dnsmasq[5396]: reply clients4.google.com is Mon Mar 14 19:24:34 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.138 Mon Mar 14 19:24:34 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.100 Mon Mar 14 19:24:34 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.113 Mon Mar 14 19:24:34 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.139 Mon Mar 14 19:24:34 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.102 Mon Mar 14 19:24:34 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.101 Mon Mar 14 19:24:34 2016 daemon.info dnsmasq[5396]: reply clients4.google.com is Mon Mar 14 19:24:34 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.138 Mon Mar 14 19:24:34 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.100 Mon Mar 14 19:24:34 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.113 Mon Mar 14 19:24:34 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.139 Mon Mar 14 19:24:34 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.102 Mon Mar 14 19:24:34 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.101 Mon Mar 14 19:24:35 2016 daemon.info dnsmasq[5396]: query[A] docs.google.com from 10.10.10.228 Mon Mar 14 19:24:35 2016 daemon.info dnsmasq[5396]: forwarded docs.google.com to 192.168.1.1 Mon Mar 14 19:24:35 2016 daemon.info dnsmasq[5396]: query[A] docs.google.com from 10.10.10.229 Mon Mar 14 19:24:35 2016 daemon.info dnsmasq[5396]: forwarded docs.google.com to 192.168.1.1 Mon Mar 14 19:24:35 2016 daemon.info dnsmasq[5396]: query[A] plus.google.com from 10.10.10.228 Mon Mar 14 19:24:35 2016 daemon.info dnsmasq[5396]: forwarded plus.google.com to 192.168.1.1 Mon Mar 14 19:24:35 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 173.194.192.102 Mon Mar 14 19:24:35 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 173.194.192.100 Mon Mar 14 19:24:35 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 173.194.192.138 Mon Mar 14 19:24:35 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 173.194.192.113 Mon Mar 14 19:24:35 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 173.194.192.101 Mon Mar 14 19:24:35 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 173.194.192.139 Mon Mar 14 19:24:35 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 173.194.192.102 Mon Mar 14 19:24:35 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 173.194.192.100 Mon Mar 14 19:24:35 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 173.194.192.138 Mon Mar 14 19:24:35 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 173.194.192.113 Mon Mar 14 19:24:35 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 173.194.192.101 Mon Mar 14 19:24:35 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 173.194.192.139 Mon Mar 14 19:24:35 2016 daemon.info dnsmasq[5396]: query[A] plus.google.com from 10.10.10.229 Mon Mar 14 19:24:35 2016 daemon.info dnsmasq[5396]: forwarded plus.google.com to 192.168.1.1 Mon Mar 14 19:24:35 2016 daemon.info dnsmasq[5396]: reply plus.google.com is 216.58.216.238 Mon Mar 14 19:24:35 2016 daemon.info dnsmasq[5396]: reply plus.google.com is 216.58.216.238 Mon Mar 14 19:24:35 2016 daemon.info dnsmasq[5396]: query[A] www.google-analytics.com from 10.10.10.228 Mon Mar 14 19:24:35 2016 daemon.info dnsmasq[5396]: forwarded www.google-analytics.com to 192.168.1.1 Mon Mar 14 19:24:35 2016 daemon.info dnsmasq[5396]: query[A] www.google-analytics.com from 10.10.10.229 Mon Mar 14 19:24:35 2016 daemon.info dnsmasq[5396]: forwarded www.google-analytics.com to 192.168.1.1 Mon Mar 14 19:24:35 2016 daemon.info dnsmasq[5396]: query[A] drive.google.com from 10.10.10.228 Mon Mar 14 19:24:35 2016 daemon.info dnsmasq[5396]: forwarded drive.google.com to 192.168.1.1 Mon Mar 14 19:24:35 2016 daemon.info dnsmasq[5396]: reply www.google-analytics.com is Mon Mar 14 19:24:35 2016 daemon.info dnsmasq[5396]: reply www-google-analytics.l.google.com is 216.58.216.238 Mon Mar 14 19:24:35 2016 daemon.info dnsmasq[5396]: reply www.google-analytics.com is Mon Mar 14 19:24:35 2016 daemon.info dnsmasq[5396]: reply www-google-analytics.l.google.com is 216.58.216.238 Mon Mar 14 19:24:35 2016 daemon.info dnsmasq[5396]: query[A] drive.google.com from 10.10.10.229 Mon Mar 14 19:24:35 2016 daemon.info dnsmasq[5396]: forwarded drive.google.com to 192.168.1.1 Mon Mar 14 19:24:35 2016 daemon.info dnsmasq[5396]: reply drive.google.com is 173.194.192.100 Mon Mar 14 19:24:35 2016 daemon.info dnsmasq[5396]: reply drive.google.com is 173.194.192.138 Mon Mar 14 19:24:35 2016 daemon.info dnsmasq[5396]: reply drive.google.com is 173.194.192.113 Mon Mar 14 19:24:35 2016 daemon.info dnsmasq[5396]: reply drive.google.com is 173.194.192.139 Mon Mar 14 19:24:35 2016 daemon.info dnsmasq[5396]: reply drive.google.com is 173.194.192.102 Mon Mar 14 19:24:35 2016 daemon.info dnsmasq[5396]: reply drive.google.com is 173.194.192.101 Mon Mar 14 19:24:35 2016 daemon.info dnsmasq[5396]: reply drive.google.com is 173.194.192.100 Mon Mar 14 19:24:35 2016 daemon.info dnsmasq[5396]: reply drive.google.com is 173.194.192.138 Mon Mar 14 19:24:35 2016 daemon.info dnsmasq[5396]: reply drive.google.com is 173.194.192.113 Mon Mar 14 19:24:35 2016 daemon.info dnsmasq[5396]: reply drive.google.com is 173.194.192.139 Mon Mar 14 19:24:35 2016 daemon.info dnsmasq[5396]: reply drive.google.com is 173.194.192.102 Mon Mar 14 19:24:35 2016 daemon.info dnsmasq[5396]: reply drive.google.com is 173.194.192.101 Mon Mar 14 19:24:36 2016 daemon.info dnsmasq[5396]: query[A] ssl.gstatic.com from 10.10.10.228 Mon Mar 14 19:24:36 2016 daemon.info dnsmasq[5396]: forwarded ssl.gstatic.com to 192.168.1.1 Mon Mar 14 19:24:36 2016 daemon.info dnsmasq[5396]: query[A] ssl.gstatic.com from 10.10.10.229 Mon Mar 14 19:24:36 2016 daemon.info dnsmasq[5396]: forwarded ssl.gstatic.com to 192.168.1.1 Mon Mar 14 19:24:36 2016 daemon.info dnsmasq[5396]: reply ssl.gstatic.com is 216.58.216.227 Mon Mar 14 19:24:36 2016 daemon.info dnsmasq[5396]: reply ssl.gstatic.com is 216.58.216.227 Mon Mar 14 19:24:38 2016 daemon.info dnsmasq[5396]: query[A] webhook.logentries.com from 10.10.10.228 Mon Mar 14 19:24:38 2016 daemon.info dnsmasq[5396]: forwarded webhook.logentries.com to 192.168.1.1 Mon Mar 14 19:24:38 2016 daemon.info dnsmasq[5396]: query[A] webhook.logentries.com from 10.10.10.229 Mon Mar 14 19:24:38 2016 daemon.info dnsmasq[5396]: forwarded webhook.logentries.com to 192.168.1.1 Mon Mar 14 19:24:38 2016 daemon.info dnsmasq[5396]: reply webhook.logentries.com is 54.229.19.14 Mon Mar 14 19:24:38 2016 daemon.info dnsmasq[5396]: reply webhook.logentries.com is 54.246.209.52 Mon Mar 14 19:24:38 2016 daemon.info dnsmasq[5396]: reply webhook.logentries.com is 52.30.224.210 Mon Mar 14 19:24:38 2016 daemon.info dnsmasq[5396]: reply webhook.logentries.com is 54.229.19.14 Mon Mar 14 19:24:38 2016 daemon.info dnsmasq[5396]: reply webhook.logentries.com is 54.246.209.52 Mon Mar 14 19:24:38 2016 daemon.info dnsmasq[5396]: reply webhook.logentries.com is 52.30.224.210 Mon Mar 14 19:24:38 2016 daemon.info dnsmasq[5396]: query[A] clients2.google.com from 10.10.10.228 Mon Mar 14 19:24:38 2016 daemon.info dnsmasq[5396]: forwarded clients2.google.com to 192.168.1.1 Mon Mar 14 19:24:38 2016 daemon.info dnsmasq[5396]: query[A] clients2.google.com from 10.10.10.229 Mon Mar 14 19:24:38 2016 daemon.info dnsmasq[5396]: forwarded clients2.google.com to 192.168.1.1 Mon Mar 14 19:24:38 2016 daemon.info dnsmasq[5396]: reply clients2.google.com is Mon Mar 14 19:24:38 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.138 Mon Mar 14 19:24:38 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.100 Mon Mar 14 19:24:38 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.113 Mon Mar 14 19:24:38 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.139 Mon Mar 14 19:24:38 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.102 Mon Mar 14 19:24:38 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.101 Mon Mar 14 19:24:38 2016 daemon.info dnsmasq[5396]: reply clients2.google.com is Mon Mar 14 19:24:38 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.138 Mon Mar 14 19:24:38 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.100 Mon Mar 14 19:24:38 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.113 Mon Mar 14 19:24:38 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.139 Mon Mar 14 19:24:38 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.102 Mon Mar 14 19:24:38 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.101 Mon Mar 14 19:24:45 2016 daemon.info dnsmasq[5396]: query[AAAA] configuration.apple.com from 10.10.10.223 Mon Mar 14 19:24:45 2016 daemon.info dnsmasq[5396]: forwarded configuration.apple.com to 192.168.1.1 Mon Mar 14 19:24:45 2016 daemon.info dnsmasq[5396]: query[A] configuration.apple.com from 10.10.10.223 Mon Mar 14 19:24:45 2016 daemon.info dnsmasq[5396]: forwarded configuration.apple.com to 192.168.1.1 Mon Mar 14 19:24:45 2016 daemon.info dnsmasq[5396]: reply configuration.apple.com is Mon Mar 14 19:24:45 2016 daemon.info dnsmasq[5396]: reply configuration.apple.com.edgekey.net is Mon Mar 14 19:24:45 2016 daemon.info dnsmasq[5396]: reply e5153.a.akamaiedge.net is 23.5.170.224 Mon Mar 14 19:24:45 2016 daemon.info dnsmasq[5396]: reply configuration.apple.com is Mon Mar 14 19:24:45 2016 daemon.info dnsmasq[5396]: reply configuration.apple.com.edgekey.net is Mon Mar 14 19:24:45 2016 daemon.info dnsmasq[5396]: reply e5153.a.akamaiedge.net is NODATA-IPv6 Mon Mar 14 19:24:45 2016 daemon.info dnsmasq[5396]: query[AAAA] e5153.a.akamaiedge.net from 10.10.10.223 Mon Mar 14 19:24:45 2016 daemon.info dnsmasq[5396]: cached e5153.a.akamaiedge.net is NODATA-IPv6 Mon Mar 14 19:24:45 2016 daemon.info dnsmasq[5396]: query[AAAA] sr.symcd.com from 10.10.10.223 Mon Mar 14 19:24:45 2016 daemon.info dnsmasq[5396]: forwarded sr.symcd.com to 192.168.1.1 Mon Mar 14 19:24:45 2016 daemon.info dnsmasq[5396]: query[A] sr.symcd.com from 10.10.10.223 Mon Mar 14 19:24:45 2016 daemon.info dnsmasq[5396]: forwarded sr.symcd.com to 192.168.1.1 Mon Mar 14 19:24:45 2016 daemon.info dnsmasq[5396]: reply sr.symcd.com is Mon Mar 14 19:24:45 2016 daemon.info dnsmasq[5396]: reply ocsp-ds.ws.symantec.com.edgekey.net is Mon Mar 14 19:24:45 2016 daemon.info dnsmasq[5396]: reply e8218.dscb1.akamaiedge.net is 2600:1404:e:193::201a Mon Mar 14 19:24:45 2016 daemon.info dnsmasq[5396]: reply e8218.dscb1.akamaiedge.net is 2600:1404:e:18b::201a Mon Mar 14 19:24:45 2016 daemon.info dnsmasq[5396]: reply sr.symcd.com is Mon Mar 14 19:24:45 2016 daemon.info dnsmasq[5396]: reply ocsp-ds.ws.symantec.com.edgekey.net is Mon Mar 14 19:24:45 2016 daemon.info dnsmasq[5396]: reply e8218.dscb1.akamaiedge.net is 23.4.59.27 Mon Mar 14 19:24:46 2016 daemon.info dnsmasq[5396]: query[A] e8218.dscb1.akamaiedge.net from 10.10.10.223 Mon Mar 14 19:24:46 2016 daemon.info dnsmasq[5396]: cached e8218.dscb1.akamaiedge.net is 23.4.59.27 Mon Mar 14 19:24:46 2016 daemon.info dnsmasq[5396]: query[AAAA] s2.symcb.com from 10.10.10.223 Mon Mar 14 19:24:46 2016 daemon.info dnsmasq[5396]: forwarded s2.symcb.com to 192.168.1.1 Mon Mar 14 19:24:46 2016 daemon.info dnsmasq[5396]: query[A] s2.symcb.com from 10.10.10.223 Mon Mar 14 19:24:46 2016 daemon.info dnsmasq[5396]: forwarded s2.symcb.com to 192.168.1.1 Mon Mar 14 19:24:46 2016 daemon.info dnsmasq[5396]: reply s2.symcb.com is Mon Mar 14 19:24:46 2016 daemon.info dnsmasq[5396]: reply ocsp-ds.ws.symantec.com.edgekey.net is Mon Mar 14 19:24:46 2016 daemon.info dnsmasq[5396]: reply e8218.dscb1.akamaiedge.net is 2600:1404:e:193::201a Mon Mar 14 19:24:46 2016 daemon.info dnsmasq[5396]: reply e8218.dscb1.akamaiedge.net is 2600:1404:e:18b::201a Mon Mar 14 19:24:46 2016 daemon.info dnsmasq[5396]: reply s2.symcb.com is Mon Mar 14 19:24:46 2016 daemon.info dnsmasq[5396]: reply ocsp-ds.ws.symantec.com.edgekey.net is Mon Mar 14 19:24:46 2016 daemon.info dnsmasq[5396]: reply e8218.dscb1.akamaiedge.net is 23.4.59.27 Mon Mar 14 19:24:47 2016 daemon.info dnsmasq[5396]: query[AAAA] p03-ckdatabase.icloud.com from 10.10.10.223 Mon Mar 14 19:24:47 2016 daemon.info dnsmasq[5396]: forwarded p03-ckdatabase.icloud.com to 192.168.1.1 Mon Mar 14 19:24:47 2016 daemon.info dnsmasq[5396]: query[A] p03-ckdatabase.icloud.com from 10.10.10.223 Mon Mar 14 19:24:47 2016 daemon.info dnsmasq[5396]: forwarded p03-ckdatabase.icloud.com to 192.168.1.1 Mon Mar 14 19:24:47 2016 daemon.info dnsmasq[5396]: reply p03-ckdatabase.icloud.com is Mon Mar 14 19:24:47 2016 daemon.info dnsmasq[5396]: reply p03-ckdatabase-current.edge.icloud.apple-dns.net is 17.248.131.176 Mon Mar 14 19:24:47 2016 daemon.info dnsmasq[5396]: reply p03-ckdatabase.icloud.com is Mon Mar 14 19:24:47 2016 daemon.info dnsmasq[5396]: reply p03-ckdatabase-current.edge.icloud.apple-dns.net is NODATA-IPv6 Mon Mar 14 19:24:47 2016 daemon.info dnsmasq[5396]: query[AAAA] p03-ckdatabase-current.edge.icloud.apple-dns.net from 10.10.10.223 Mon Mar 14 19:24:47 2016 daemon.info dnsmasq[5396]: cached p03-ckdatabase-current.edge.icloud.apple-dns.net is NODATA-IPv6 Mon Mar 14 19:24:52 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:24:52 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:24:52 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:24:52 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:24:52 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:24:52 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:24:52 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:24:52 2016 daemon.info dnsmasq[5396]: cached pool1.moatads.com is NODATA-IPv6 Mon Mar 14 19:24:52 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:24:52 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:24:52 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:24:52 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:24:52 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:24:52 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:24:52 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:24:52 2016 daemon.info dnsmasq[5396]: cached pool1.moatads.com is NODATA-IPv6 Mon Mar 14 19:24:52 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:24:52 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:24:52 2016 daemon.info dnsmasq[5396]: reply pool1.moatads.com is 54.172.47.58 Mon Mar 14 19:24:52 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:24:52 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:24:52 2016 daemon.info dnsmasq[5396]: reply pool1.moatads.com is 54.172.47.58 Mon Mar 14 19:25:01 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:25:01 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:25:05 2016 daemon.info dnsmasq[5396]: query[A] lastpass.com from 10.10.10.223 Mon Mar 14 19:25:05 2016 daemon.info dnsmasq[5396]: forwarded lastpass.com to 192.168.1.1 Mon Mar 14 19:25:05 2016 daemon.info dnsmasq[5396]: reply lastpass.com is 128.121.22.176 Mon Mar 14 19:25:05 2016 daemon.info dnsmasq[5396]: reply lastpass.com is 38.127.167.48 Mon Mar 14 19:25:17 2016 daemon.info dnsmasq[5396]: query[A] time-ios.g.aaplimg.com from 10.10.10.212 Mon Mar 14 19:25:17 2016 daemon.info dnsmasq[5396]: forwarded time-ios.g.aaplimg.com to 192.168.1.1 Mon Mar 14 19:25:17 2016 daemon.info dnsmasq[5396]: query[AAAA] time-ios.g.aaplimg.com from 10.10.10.212 Mon Mar 14 19:25:17 2016 daemon.info dnsmasq[5396]: cached time-ios.g.aaplimg.com is NODATA-IPv6 Mon Mar 14 19:25:17 2016 daemon.info dnsmasq[5396]: reply time-ios.g.aaplimg.com is 17.253.2.125 Mon Mar 14 19:25:17 2016 daemon.info dnsmasq[5396]: reply time-ios.g.aaplimg.com is 17.253.24.253 Mon Mar 14 19:25:17 2016 daemon.info dnsmasq[5396]: reply time-ios.g.aaplimg.com is 17.253.2.253 Mon Mar 14 19:25:22 2016 daemon.info dnsmasq[5396]: query[A] clients4.google.com from 10.10.10.223 Mon Mar 14 19:25:22 2016 daemon.info dnsmasq[5396]: forwarded clients4.google.com to 192.168.1.1 Mon Mar 14 19:25:22 2016 daemon.info dnsmasq[5396]: query[AAAA] clients4.google.com from 10.10.10.223 Mon Mar 14 19:25:22 2016 daemon.info dnsmasq[5396]: forwarded clients4.google.com to 192.168.1.1 Mon Mar 14 19:25:22 2016 daemon.info dnsmasq[5396]: reply clients4.google.com is Mon Mar 14 19:25:22 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.138 Mon Mar 14 19:25:22 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.100 Mon Mar 14 19:25:22 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.113 Mon Mar 14 19:25:22 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.139 Mon Mar 14 19:25:22 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.102 Mon Mar 14 19:25:22 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.192.101 Mon Mar 14 19:25:22 2016 daemon.info dnsmasq[5396]: reply clients4.google.com is Mon Mar 14 19:25:22 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 2607:f8b0:4001:c0e::8a Mon Mar 14 19:25:25 2016 daemon.info dnsmasq[5396]: query[A] app.procentive.com from 10.10.10.223 Mon Mar 14 19:25:25 2016 daemon.info dnsmasq[5396]: cached app.procentive.com is 66.179.249.115 Mon Mar 14 19:25:25 2016 daemon.info dnsmasq[5396]: query[AAAA] app.procentive.com from 10.10.10.223 Mon Mar 14 19:25:25 2016 daemon.info dnsmasq[5396]: forwarded app.procentive.com to 192.168.1.1 Mon Mar 14 19:25:31 2016 daemon.info dnsmasq[5396]: query[AAAA] 9.client-channel.google.com from 10.10.10.223 Mon Mar 14 19:25:31 2016 daemon.info dnsmasq[5396]: forwarded 9.client-channel.google.com to 192.168.1.1 Mon Mar 14 19:25:31 2016 daemon.info dnsmasq[5396]: reply 9.client-channel.google.com is 2607:f8b0:4001:c07::bd Mon Mar 14 19:26:02 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:26:02 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:26:22 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:26:22 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:26:22 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:26:22 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:26:22 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:26:22 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:26:22 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:26:22 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:26:22 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:26:22 2016 daemon.info dnsmasq[5396]: reply pool1.moatads.com is 54.210.83.75 Mon Mar 14 19:26:22 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:26:22 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:26:22 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:26:22 2016 daemon.info dnsmasq[5396]: cached pool1.moatads.com is NODATA-IPv6 Mon Mar 14 19:26:22 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:26:22 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:26:22 2016 daemon.info dnsmasq[5396]: reply pool1.moatads.com is NODATA-IPv6 Mon Mar 14 19:26:22 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:26:22 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:26:22 2016 daemon.info dnsmasq[5396]: reply pool1.moatads.com is 54.210.83.75 Mon Mar 14 19:26:44 2016 daemon.info dnsmasq[5396]: query[A] plus.google.com from 10.10.10.223 Mon Mar 14 19:26:44 2016 daemon.info dnsmasq[5396]: cached plus.google.com is 216.58.216.238 Mon Mar 14 19:26:44 2016 daemon.info dnsmasq[5396]: query[AAAA] plus.google.com from 10.10.10.223 Mon Mar 14 19:26:44 2016 daemon.info dnsmasq[5396]: forwarded plus.google.com to 192.168.1.1 Mon Mar 14 19:26:44 2016 daemon.info dnsmasq[5396]: reply plus.google.com is 2607:f8b0:4009:809::200e Mon Mar 14 19:26:45 2016 daemon.info dnsmasq[5396]: query[A] plus.l.google.com from 10.10.10.223 Mon Mar 14 19:26:45 2016 daemon.info dnsmasq[5396]: forwarded plus.l.google.com to 192.168.1.1 Mon Mar 14 19:26:45 2016 daemon.info dnsmasq[5396]: query[AAAA] plus.l.google.com from 10.10.10.223 Mon Mar 14 19:26:45 2016 daemon.info dnsmasq[5396]: forwarded plus.l.google.com to 192.168.1.1 Mon Mar 14 19:26:45 2016 daemon.info dnsmasq[5396]: reply plus.l.google.com is 216.58.216.238 Mon Mar 14 19:26:45 2016 daemon.info dnsmasq[5396]: reply plus.l.google.com is 2607:f8b0:4009:809::200e Mon Mar 14 19:26:51 2016 daemon.info dnsmasq[5396]: query[AAAA] origin.guzzoni-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 19:26:51 2016 daemon.info dnsmasq[5396]: forwarded origin.guzzoni-apple.com.akadns.net to 192.168.1.1 Mon Mar 14 19:26:51 2016 daemon.info dnsmasq[5396]: query[A] origin.guzzoni-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 19:26:51 2016 daemon.info dnsmasq[5396]: forwarded origin.guzzoni-apple.com.akadns.net to 192.168.1.1 Mon Mar 14 19:26:51 2016 daemon.info dnsmasq[5396]: query[AAAA] p44-keyvalueservice-current.edge.icloud.apple-dns.net from 10.10.10.211 Mon Mar 14 19:26:51 2016 daemon.info dnsmasq[5396]: forwarded p44-keyvalueservice-current.edge.icloud.apple-dns.net to 192.168.1.1 Mon Mar 14 19:26:51 2016 daemon.info dnsmasq[5396]: query[A] p44-keyvalueservice-current.edge.icloud.apple-dns.net from 10.10.10.211 Mon Mar 14 19:26:51 2016 daemon.info dnsmasq[5396]: forwarded p44-keyvalueservice-current.edge.icloud.apple-dns.net to 192.168.1.1 Mon Mar 14 19:26:51 2016 daemon.info dnsmasq[5396]: reply origin.guzzoni-apple.com.akadns.net is Mon Mar 14 19:26:51 2016 daemon.info dnsmasq[5396]: reply st14p02sa.guzzoni-apple.com.akadns.net is 17.174.2.5 Mon Mar 14 19:26:51 2016 daemon.info dnsmasq[5396]: query[AAAA] www.apple.com from 10.10.10.211 Mon Mar 14 19:26:51 2016 daemon.info dnsmasq[5396]: forwarded www.apple.com to 192.168.1.1 Mon Mar 14 19:26:51 2016 daemon.info dnsmasq[5396]: reply origin.guzzoni-apple.com.akadns.net is Mon Mar 14 19:26:51 2016 daemon.info dnsmasq[5396]: reply st14p02sa.guzzoni-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:26:51 2016 daemon.info dnsmasq[5396]: reply p44-keyvalueservice-current.edge.icloud.apple-dns.net is 17.248.131.140 Mon Mar 14 19:26:51 2016 daemon.info dnsmasq[5396]: query[A] www.apple.com from 10.10.10.211 Mon Mar 14 19:26:51 2016 daemon.info dnsmasq[5396]: forwarded www.apple.com to 192.168.1.1 Mon Mar 14 19:26:51 2016 daemon.info dnsmasq[5396]: reply www.apple.com is Mon Mar 14 19:26:51 2016 daemon.info dnsmasq[5396]: reply www.apple.com.edgekey.net is Mon Mar 14 19:26:51 2016 daemon.info dnsmasq[5396]: reply www.apple.com.edgekey.net.globalredir.akadns.net is Mon Mar 14 19:26:51 2016 daemon.info dnsmasq[5396]: reply e6858.dscc.akamaiedge.net is 2600:1404:e:194::1aca Mon Mar 14 19:26:51 2016 daemon.info dnsmasq[5396]: reply e6858.dscc.akamaiedge.net is 2600:1404:e:18d::1aca Mon Mar 14 19:26:51 2016 daemon.info dnsmasq[5396]: reply www.apple.com is Mon Mar 14 19:26:51 2016 daemon.info dnsmasq[5396]: reply www.apple.com.edgekey.net is Mon Mar 14 19:26:51 2016 daemon.info dnsmasq[5396]: reply www.apple.com.edgekey.net.globalredir.akadns.net is Mon Mar 14 19:26:51 2016 daemon.info dnsmasq[5396]: reply e6858.dscc.akamaiedge.net is 23.12.245.148 Mon Mar 14 19:26:51 2016 daemon.info dnsmasq[5396]: query[AAAA] apple.com from 10.10.10.211 Mon Mar 14 19:26:51 2016 daemon.info dnsmasq[5396]: forwarded apple.com to 192.168.1.1 Mon Mar 14 19:26:51 2016 daemon.info dnsmasq[5396]: query[AAAA] api.smoot-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 19:26:51 2016 daemon.info dnsmasq[5396]: cached api.smoot-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:26:51 2016 daemon.info dnsmasq[5396]: query[AAAA] st14p02sa.guzzoni-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 19:26:51 2016 daemon.info dnsmasq[5396]: cached st14p02sa.guzzoni-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:26:51 2016 daemon.info dnsmasq[5396]: query[A] e6858.dscc.akamaiedge.net from 10.10.10.211 Mon Mar 14 19:26:51 2016 daemon.info dnsmasq[5396]: cached e6858.dscc.akamaiedge.net is 23.12.245.148 Mon Mar 14 19:26:56 2016 daemon.info dnsmasq[5396]: query[AAAA] app.procentive.com from 10.10.10.223 Mon Mar 14 19:26:56 2016 daemon.info dnsmasq[5396]: forwarded app.procentive.com to 192.168.1.1 Mon Mar 14 19:27:03 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:27:03 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:27:05 2016 daemon.info dnsmasq[5396]: query[A] play.google.com from 10.10.10.223 Mon Mar 14 19:27:05 2016 daemon.info dnsmasq[5396]: forwarded play.google.com to 192.168.1.1 Mon Mar 14 19:27:05 2016 daemon.info dnsmasq[5396]: query[AAAA] play.google.com from 10.10.10.223 Mon Mar 14 19:27:05 2016 daemon.info dnsmasq[5396]: forwarded play.google.com to 192.168.1.1 Mon Mar 14 19:27:05 2016 daemon.info dnsmasq[5396]: reply play.google.com is Mon Mar 14 19:27:05 2016 daemon.info dnsmasq[5396]: reply play.l.google.com is 216.58.216.238 Mon Mar 14 19:27:05 2016 daemon.info dnsmasq[5396]: reply play.google.com is Mon Mar 14 19:27:05 2016 daemon.info dnsmasq[5396]: reply play.l.google.com is 2607:f8b0:4009:809::200e Mon Mar 14 19:27:05 2016 daemon.info dnsmasq[5396]: query[A] play.l.google.com from 10.10.10.223 Mon Mar 14 19:27:05 2016 daemon.info dnsmasq[5396]: cached play.l.google.com is 216.58.216.238 Mon Mar 14 19:27:05 2016 daemon.info dnsmasq[5396]: query[AAAA] play.l.google.com from 10.10.10.223 Mon Mar 14 19:27:05 2016 daemon.info dnsmasq[5396]: cached play.l.google.com is 2607:f8b0:4009:809::200e Mon Mar 14 19:27:39 2016 daemon.info dnsmasq[5396]: query[A] clients2.google.com from 10.10.10.228 Mon Mar 14 19:27:39 2016 daemon.info dnsmasq[5396]: forwarded clients2.google.com to 192.168.1.1 Mon Mar 14 19:27:39 2016 daemon.info dnsmasq[5396]: query[A] clients2.google.com from 10.10.10.229 Mon Mar 14 19:27:39 2016 daemon.info dnsmasq[5396]: forwarded clients2.google.com to 192.168.1.1 Mon Mar 14 19:27:39 2016 daemon.info dnsmasq[5396]: reply clients2.google.com is Mon Mar 14 19:27:39 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.74.100 Mon Mar 14 19:27:39 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.74.102 Mon Mar 14 19:27:39 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.74.101 Mon Mar 14 19:27:39 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.74.113 Mon Mar 14 19:27:39 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.74.139 Mon Mar 14 19:27:39 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.74.138 Mon Mar 14 19:27:39 2016 daemon.info dnsmasq[5396]: reply clients2.google.com is Mon Mar 14 19:27:39 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.74.100 Mon Mar 14 19:27:39 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.74.102 Mon Mar 14 19:27:39 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.74.101 Mon Mar 14 19:27:39 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.74.113 Mon Mar 14 19:27:39 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.74.139 Mon Mar 14 19:27:39 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.74.138 Mon Mar 14 19:27:39 2016 daemon.info dnsmasq[5396]: query[A] beacons5.gvt3.com from 10.10.10.228 Mon Mar 14 19:27:39 2016 daemon.info dnsmasq[5396]: forwarded beacons5.gvt3.com to 192.168.1.1 Mon Mar 14 19:27:39 2016 daemon.info dnsmasq[5396]: query[A] beacons5.gvt3.com from 10.10.10.229 Mon Mar 14 19:27:39 2016 daemon.info dnsmasq[5396]: forwarded beacons5.gvt3.com to 192.168.1.1 Mon Mar 14 19:27:39 2016 daemon.info dnsmasq[5396]: reply beacons5.gvt3.com is 104.237.191.1 Mon Mar 14 19:27:39 2016 daemon.info dnsmasq[5396]: reply beacons5.gvt3.com is 104.237.191.1 Mon Mar 14 19:27:44 2016 daemon.info dnsmasq[5396]: query[AAAA] odc.officeapps.live.com from 10.10.10.223 Mon Mar 14 19:27:44 2016 daemon.info dnsmasq[5396]: forwarded odc.officeapps.live.com to 192.168.1.1 Mon Mar 14 19:27:44 2016 daemon.info dnsmasq[5396]: query[A] odc.officeapps.live.com from 10.10.10.223 Mon Mar 14 19:27:44 2016 daemon.info dnsmasq[5396]: forwarded odc.officeapps.live.com to 192.168.1.1 Mon Mar 14 19:27:44 2016 daemon.info dnsmasq[5396]: query[A] nexus.officeapps.live.com from 10.10.10.223 Mon Mar 14 19:27:44 2016 daemon.info dnsmasq[5396]: forwarded nexus.officeapps.live.com to 192.168.1.1 Mon Mar 14 19:27:44 2016 daemon.info dnsmasq[5396]: query[AAAA] nexus.officeapps.live.com from 10.10.10.223 Mon Mar 14 19:27:44 2016 daemon.info dnsmasq[5396]: forwarded nexus.officeapps.live.com to 192.168.1.1 Mon Mar 14 19:27:44 2016 daemon.info dnsmasq[5396]: reply odc.officeapps.live.com is Mon Mar 14 19:27:44 2016 daemon.info dnsmasq[5396]: reply prod.odcsm.live.com.akadns.net is Mon Mar 14 19:27:44 2016 daemon.info dnsmasq[5396]: reply ncus-odc.officeapps.live.com is Mon Mar 14 19:27:44 2016 daemon.info dnsmasq[5396]: reply osiprod-ncus01-odcsm.cloudapp.net is 23.96.219.115 Mon Mar 14 19:27:44 2016 daemon.info dnsmasq[5396]: query[A] roaming.officeapps.live.com from 10.10.10.223 Mon Mar 14 19:27:44 2016 daemon.info dnsmasq[5396]: forwarded roaming.officeapps.live.com to 192.168.1.1 Mon Mar 14 19:27:44 2016 daemon.info dnsmasq[5396]: reply odc.officeapps.live.com is Mon Mar 14 19:27:44 2016 daemon.info dnsmasq[5396]: reply prod.odcsm.live.com.akadns.net is Mon Mar 14 19:27:44 2016 daemon.info dnsmasq[5396]: reply ncus-odc.officeapps.live.com is Mon Mar 14 19:27:44 2016 daemon.info dnsmasq[5396]: reply osiprod-ncus01-odcsm.cloudapp.net is NODATA-IPv6 Mon Mar 14 19:27:44 2016 daemon.info dnsmasq[5396]: reply nexus.officeapps.live.com is Mon Mar 14 19:27:44 2016 daemon.info dnsmasq[5396]: reply prod-w.nexus.live.com.akadns.net is 191.236.88.160 Mon Mar 14 19:27:44 2016 daemon.info dnsmasq[5396]: query[AAAA] roaming.officeapps.live.com from 10.10.10.223 Mon Mar 14 19:27:44 2016 daemon.info dnsmasq[5396]: forwarded roaming.officeapps.live.com to 192.168.1.1 Mon Mar 14 19:27:44 2016 daemon.info dnsmasq[5396]: reply roaming.officeapps.live.com is Mon Mar 14 19:27:44 2016 daemon.info dnsmasq[5396]: reply prod.roaming.live.com.akadns.net is Mon Mar 14 19:27:44 2016 daemon.info dnsmasq[5396]: reply produsdc.roaming.live.com.akadns.net is 137.116.77.120 Mon Mar 14 19:27:44 2016 daemon.info dnsmasq[5396]: reply nexus.officeapps.live.com is Mon Mar 14 19:27:44 2016 daemon.info dnsmasq[5396]: reply prod-w.nexus.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:27:44 2016 daemon.info dnsmasq[5396]: query[AAAA] ocws.officeapps.live.com from 10.10.10.223 Mon Mar 14 19:27:44 2016 daemon.info dnsmasq[5396]: forwarded ocws.officeapps.live.com to 192.168.1.1 Mon Mar 14 19:27:44 2016 daemon.info dnsmasq[5396]: reply roaming.officeapps.live.com is Mon Mar 14 19:27:44 2016 daemon.info dnsmasq[5396]: reply prod.roaming.live.com.akadns.net is Mon Mar 14 19:27:44 2016 daemon.info dnsmasq[5396]: reply produsdc.roaming.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:27:44 2016 daemon.info dnsmasq[5396]: query[A] ocws.officeapps.live.com from 10.10.10.223 Mon Mar 14 19:27:44 2016 daemon.info dnsmasq[5396]: forwarded ocws.officeapps.live.com to 192.168.1.1 Mon Mar 14 19:27:44 2016 daemon.info dnsmasq[5396]: reply ocws.officeapps.live.com is Mon Mar 14 19:27:44 2016 daemon.info dnsmasq[5396]: reply prod.ocws.live.com.akadns.net is Mon Mar 14 19:27:44 2016 daemon.info dnsmasq[5396]: reply ncus-ocws.officeapps.live.com is Mon Mar 14 19:27:44 2016 daemon.info dnsmasq[5396]: reply osiprod-ncus-flax-000.cloudapp.net is 168.62.106.152 Mon Mar 14 19:27:45 2016 daemon.info dnsmasq[5396]: reply ocws.officeapps.live.com is Mon Mar 14 19:27:45 2016 daemon.info dnsmasq[5396]: reply prod.ocws.live.com.akadns.net is Mon Mar 14 19:27:45 2016 daemon.info dnsmasq[5396]: reply ncus-ocws.officeapps.live.com is Mon Mar 14 19:27:45 2016 daemon.info dnsmasq[5396]: reply osiprod-ncus-flax-000.cloudapp.net is NODATA-IPv6 Mon Mar 14 19:27:45 2016 daemon.info dnsmasq[5396]: query[AAAA] osiprod-ncus01-odcsm.cloudapp.net from 10.10.10.223 Mon Mar 14 19:27:45 2016 daemon.info dnsmasq[5396]: cached osiprod-ncus01-odcsm.cloudapp.net is NODATA-IPv6 Mon Mar 14 19:27:45 2016 daemon.info dnsmasq[5396]: query[AAAA] prod-w.nexus.live.com.akadns.net from 10.10.10.223 Mon Mar 14 19:27:45 2016 daemon.info dnsmasq[5396]: cached prod-w.nexus.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:27:45 2016 daemon.info dnsmasq[5396]: query[AAAA] produsdc.roaming.live.com.akadns.net from 10.10.10.223 Mon Mar 14 19:27:45 2016 daemon.info dnsmasq[5396]: cached produsdc.roaming.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:27:45 2016 daemon.info dnsmasq[5396]: query[AAAA] osiprod-ncus-flax-000.cloudapp.net from 10.10.10.223 Mon Mar 14 19:27:45 2016 daemon.info dnsmasq[5396]: cached osiprod-ncus-flax-000.cloudapp.net is NODATA-IPv6 Mon Mar 14 19:27:49 2016 daemon.info dnsmasq[5396]: query[A] googlemail.l.google.com from 10.10.10.223 Mon Mar 14 19:27:49 2016 daemon.info dnsmasq[5396]: forwarded googlemail.l.google.com to 192.168.1.1 Mon Mar 14 19:27:49 2016 daemon.info dnsmasq[5396]: query[AAAA] googlemail.l.google.com from 10.10.10.223 Mon Mar 14 19:27:49 2016 daemon.info dnsmasq[5396]: forwarded googlemail.l.google.com to 192.168.1.1 Mon Mar 14 19:27:49 2016 daemon.info dnsmasq[5396]: reply googlemail.l.google.com is 216.58.216.229 Mon Mar 14 19:27:49 2016 daemon.info dnsmasq[5396]: reply googlemail.l.google.com is 2607:f8b0:4009:809::2005 Mon Mar 14 19:27:49 2016 daemon.info dnsmasq[5396]: query[A] ssl.gstatic.com from 10.10.10.223 Mon Mar 14 19:27:49 2016 daemon.info dnsmasq[5396]: forwarded ssl.gstatic.com to 192.168.1.1 Mon Mar 14 19:27:49 2016 daemon.info dnsmasq[5396]: query[AAAA] ssl.gstatic.com from 10.10.10.223 Mon Mar 14 19:27:49 2016 daemon.info dnsmasq[5396]: forwarded ssl.gstatic.com to 192.168.1.1 Mon Mar 14 19:27:49 2016 daemon.info dnsmasq[5396]: reply ssl.gstatic.com is 216.58.216.227 Mon Mar 14 19:27:49 2016 daemon.info dnsmasq[5396]: reply ssl.gstatic.com is 2607:f8b0:4009:809::2003 Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: query[A] o.aolcdn.com from 10.10.10.228 Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: forwarded o.aolcdn.com to 192.168.1.1 Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: query[AAAA] o.aolcdn.com from 10.10.10.228 Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: forwarded o.aolcdn.com to 192.168.1.1 Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: query[A] o.aolcdn.com from 10.10.10.229 Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: forwarded o.aolcdn.com to 192.168.1.1 Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: reply o.aolcdn.com is Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: reply o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 23.77.232.155 Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 23.77.232.170 Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: query[AAAA] o.aolcdn.com from 10.10.10.229 Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: cached o.aolcdn.com is Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: cached o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: forwarded o.aolcdn.com to 192.168.1.1 Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: reply o.aolcdn.com is Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: reply o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 2600:1404:e::174d:e91b Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 2600:1404:e::174d:e869 Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: reply o.aolcdn.com is Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: reply o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 23.77.232.155 Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 23.77.232.170 Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: reply o.aolcdn.com is Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: reply o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 2600:1404:e::174d:e91b Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 2600:1404:e::174d:e869 Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: reply pool2.moatads.com is 52.90.66.199 Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: cached pool2.moatads.com is 52.90.66.199 Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: reply pool2.moatads.com is NODATA-IPv6 Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: cached pool2.moatads.com is NODATA-IPv6 Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: reply pool2.moatads.com is NODATA-IPv6 Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: cached pool2.moatads.com is 52.90.66.199 Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: cached pool2.moatads.com is 52.90.66.199 Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: cached pool2.moatads.com is NODATA-IPv6 Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: cached pool2.moatads.com is NODATA-IPv6 Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: cached pool2.moatads.com is 52.90.66.199 Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:27:52 2016 daemon.info dnsmasq[5396]: cached pool2.moatads.com is NODATA-IPv6 Mon Mar 14 19:28:25 2016 daemon.info dnsmasq[5396]: query[AAAA] app.procentive.com from 10.10.10.223 Mon Mar 14 19:28:25 2016 daemon.info dnsmasq[5396]: forwarded app.procentive.com to 192.168.1.1 Mon Mar 14 19:28:31 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:28:31 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:28:33 2016 daemon.info dnsmasq[5396]: query[A] p25-quota.icloud.com from 10.10.10.228 Mon Mar 14 19:28:33 2016 daemon.info dnsmasq[5396]: cached p25-quota.icloud.com is Mon Mar 14 19:28:33 2016 daemon.info dnsmasq[5396]: forwarded p25-quota.icloud.com to 192.168.1.1 Mon Mar 14 19:28:33 2016 daemon.info dnsmasq[5396]: query[AAAA] p25-quota.icloud.com from 10.10.10.228 Mon Mar 14 19:28:33 2016 daemon.info dnsmasq[5396]: cached p25-quota.icloud.com is Mon Mar 14 19:28:33 2016 daemon.info dnsmasq[5396]: cached p25-quota-current.edge.icloud.apple-dns.net is NODATA-IPv6 Mon Mar 14 19:28:33 2016 daemon.info dnsmasq[5396]: query[A] p25-quota.icloud.com from 10.10.10.229 Mon Mar 14 19:28:33 2016 daemon.info dnsmasq[5396]: cached p25-quota.icloud.com is Mon Mar 14 19:28:33 2016 daemon.info dnsmasq[5396]: forwarded p25-quota.icloud.com to 192.168.1.1 Mon Mar 14 19:28:33 2016 daemon.info dnsmasq[5396]: query[AAAA] p25-quota.icloud.com from 10.10.10.229 Mon Mar 14 19:28:33 2016 daemon.info dnsmasq[5396]: cached p25-quota.icloud.com is Mon Mar 14 19:28:33 2016 daemon.info dnsmasq[5396]: cached p25-quota-current.edge.icloud.apple-dns.net is NODATA-IPv6 Mon Mar 14 19:28:33 2016 daemon.info dnsmasq[5396]: reply p25-quota.icloud.com is Mon Mar 14 19:28:33 2016 daemon.info dnsmasq[5396]: reply p25-quota-current.edge.icloud.apple-dns.net is 17.248.139.75 Mon Mar 14 19:28:33 2016 daemon.info dnsmasq[5396]: reply p25-quota.icloud.com is Mon Mar 14 19:28:33 2016 daemon.info dnsmasq[5396]: reply p25-quota-current.edge.icloud.apple-dns.net is 17.248.139.75 Mon Mar 14 19:28:50 2016 daemon.info dnsmasq[5396]: query[A] chatenabled.mail.google.com from 10.10.10.228 Mon Mar 14 19:28:50 2016 daemon.info dnsmasq[5396]: forwarded chatenabled.mail.google.com to 192.168.1.1 Mon Mar 14 19:28:50 2016 daemon.info dnsmasq[5396]: query[A] chatenabled.mail.google.com from 10.10.10.229 Mon Mar 14 19:28:50 2016 daemon.info dnsmasq[5396]: forwarded chatenabled.mail.google.com to 192.168.1.1 Mon Mar 14 19:28:50 2016 daemon.info dnsmasq[5396]: reply chatenabled.mail.google.com is Mon Mar 14 19:28:50 2016 daemon.info dnsmasq[5396]: reply b.googlemail.l.google.com is 216.58.216.231 Mon Mar 14 19:28:50 2016 daemon.info dnsmasq[5396]: reply chatenabled.mail.google.com is Mon Mar 14 19:28:50 2016 daemon.info dnsmasq[5396]: reply b.googlemail.l.google.com is 216.58.216.231 Mon Mar 14 19:28:52 2016 daemon.info dnsmasq[5396]: query[A] plus.google.com from 10.10.10.223 Mon Mar 14 19:28:52 2016 daemon.info dnsmasq[5396]: forwarded plus.google.com to 192.168.1.1 Mon Mar 14 19:28:52 2016 daemon.info dnsmasq[5396]: query[AAAA] plus.google.com from 10.10.10.223 Mon Mar 14 19:28:52 2016 daemon.info dnsmasq[5396]: forwarded plus.google.com to 192.168.1.1 Mon Mar 14 19:28:52 2016 daemon.info dnsmasq[5396]: reply plus.google.com is 216.58.216.238 Mon Mar 14 19:28:52 2016 daemon.info dnsmasq[5396]: reply plus.google.com is 2607:f8b0:4009:809::200e Mon Mar 14 19:28:53 2016 daemon.info dnsmasq[5396]: query[A] wpad.lan from 10.10.10.228 Mon Mar 14 19:28:53 2016 daemon.info dnsmasq[5396]: config wpad.lan is NXDOMAIN Mon Mar 14 19:28:53 2016 daemon.info dnsmasq[5396]: query[AAAA] wpad.lan from 10.10.10.228 Mon Mar 14 19:28:53 2016 daemon.info dnsmasq[5396]: config wpad.lan is NXDOMAIN Mon Mar 14 19:28:53 2016 daemon.info dnsmasq[5396]: query[A] wpad.lan from 10.10.10.229 Mon Mar 14 19:28:53 2016 daemon.info dnsmasq[5396]: config wpad.lan is NXDOMAIN Mon Mar 14 19:28:53 2016 daemon.info dnsmasq[5396]: query[AAAA] wpad.lan from 10.10.10.229 Mon Mar 14 19:28:54 2016 daemon.info dnsmasq[5396]: config wpad.lan is NXDOMAIN Mon Mar 14 19:29:01 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:29:01 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:29:01 2016 daemon.info dnsmasq[5396]: query[A] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:29:01 2016 daemon.info dnsmasq[5396]: forwarded skydocs.skyprod.akadns.net to 192.168.1.1 Mon Mar 14 19:29:01 2016 daemon.info dnsmasq[5396]: reply skydocs.skyprod.akadns.net is 134.170.120.96 Mon Mar 14 19:29:22 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:29:22 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:29:22 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:29:22 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:29:22 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:29:22 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:29:22 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:29:22 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:29:22 2016 daemon.info dnsmasq[5396]: reply pool3.moatads.com is 54.174.96.109 Mon Mar 14 19:29:22 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:29:22 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:29:22 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:29:22 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:29:22 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:29:22 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:29:22 2016 daemon.info dnsmasq[5396]: reply pool3.moatads.com is 54.174.96.109 Mon Mar 14 19:29:22 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:29:22 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:29:22 2016 daemon.info dnsmasq[5396]: reply pool3.moatads.com is NODATA-IPv6 Mon Mar 14 19:29:22 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:29:22 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:29:22 2016 daemon.info dnsmasq[5396]: reply pool3.moatads.com is NODATA-IPv6 Mon Mar 14 19:29:22 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:29:22 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:29:22 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:29:22 2016 daemon.info dnsmasq[5396]: cached pool3.moatads.com is NODATA-IPv6 Mon Mar 14 19:29:22 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:29:22 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:29:22 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:29:22 2016 daemon.info dnsmasq[5396]: cached pool3.moatads.com is NODATA-IPv6 Mon Mar 14 19:29:35 2016 daemon.info dnsmasq[5396]: query[A] 9.client-channel.google.com from 10.10.10.223 Mon Mar 14 19:29:36 2016 daemon.info dnsmasq[5396]: forwarded 9.client-channel.google.com to 192.168.1.1 Mon Mar 14 19:29:36 2016 daemon.info dnsmasq[5396]: reply 9.client-channel.google.com is 74.125.207.189 Mon Mar 14 19:30:00 2016 cron.info crond[3202]: USER root pid 6113 cmd /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Mon Mar 14 19:30:00 2016 daemon.info dnsmasq[5396]: query[A] 0.us.pool.ntp.org from 127.0.0.1 Mon Mar 14 19:30:00 2016 daemon.info dnsmasq[5396]: forwarded 0.us.pool.ntp.org to 192.168.1.1 Mon Mar 14 19:30:00 2016 daemon.info dnsmasq[5396]: reply 0.us.pool.ntp.org is 132.163.4.102 Mon Mar 14 19:30:00 2016 daemon.info dnsmasq[5396]: reply 0.us.pool.ntp.org is 204.9.54.119 Mon Mar 14 19:30:00 2016 daemon.info dnsmasq[5396]: reply 0.us.pool.ntp.org is 160.36.59.61 Mon Mar 14 19:30:00 2016 daemon.info dnsmasq[5396]: reply 0.us.pool.ntp.org is 173.230.144.109 Mon Mar 14 19:30:03 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:30:03 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:30:05 2016 daemon.info dnsmasq[5396]: query[A] play.l.google.com from 10.10.10.223 Mon Mar 14 19:30:05 2016 daemon.info dnsmasq[5396]: forwarded play.l.google.com to 192.168.1.1 Mon Mar 14 19:30:05 2016 daemon.info dnsmasq[5396]: reply play.l.google.com is 216.58.216.238 Mon Mar 14 19:30:15 2016 daemon.info dnsmasq[5396]: query[A] ubp-common-us-prod.s3.amazonaws.com from 10.10.10.223 Mon Mar 14 19:30:15 2016 daemon.info dnsmasq[5396]: forwarded ubp-common-us-prod.s3.amazonaws.com to 192.168.1.1 Mon Mar 14 19:30:15 2016 daemon.info dnsmasq[5396]: reply ubp-common-us-prod.s3.amazonaws.com is Mon Mar 14 19:30:15 2016 daemon.info dnsmasq[5396]: reply s3-us-west-2-w.amazonaws.com is 54.231.168.222 Mon Mar 14 19:30:19 2016 daemon.info dnsmasq-dhcp[5396]: DHCPREQUEST(br-lan) 10.10.10.143 b8:e8:56:74:00:de Mon Mar 14 19:30:19 2016 daemon.info dnsmasq-dhcp[5396]: DHCPACK(br-lan) 10.10.10.143 b8:e8:56:74:00:de DKK-iPad-Air Mon Mar 14 19:30:21 2016 daemon.info dnsmasq[5396]: query[AAAA] outlook.office365.com from 10.10.10.143 Mon Mar 14 19:30:21 2016 daemon.info dnsmasq[5396]: forwarded outlook.office365.com to 192.168.1.1 Mon Mar 14 19:30:21 2016 daemon.info dnsmasq[5396]: query[A] outlook.office365.com from 10.10.10.143 Mon Mar 14 19:30:21 2016 daemon.info dnsmasq[5396]: forwarded outlook.office365.com to 192.168.1.1 Mon Mar 14 19:30:21 2016 daemon.info dnsmasq[5396]: reply outlook.office365.com is Mon Mar 14 19:30:21 2016 daemon.info dnsmasq[5396]: reply lb.geo.office365.com is Mon Mar 14 19:30:21 2016 daemon.info dnsmasq[5396]: reply outlook.office365.com.glbdns2.microsoft.com is Mon Mar 14 19:30:21 2016 daemon.info dnsmasq[5396]: reply outlook-namcentral.office365.com is 2a01:111:f400:52bf::2 Mon Mar 14 19:30:21 2016 daemon.info dnsmasq[5396]: reply outlook-namcentral.office365.com is 2a01:111:f400:7020::2 Mon Mar 14 19:30:21 2016 daemon.info dnsmasq[5396]: reply outlook-namcentral.office365.com is 2a01:111:f400:2c2c::2 Mon Mar 14 19:30:21 2016 daemon.info dnsmasq[5396]: reply outlook-namcentral.office365.com is 2a01:111:f400:f383::2 Mon Mar 14 19:30:21 2016 daemon.info dnsmasq[5396]: reply outlook-namcentral.office365.com is 2a01:111:f400:5254::2 Mon Mar 14 19:30:21 2016 daemon.info dnsmasq[5396]: reply outlook-namcentral.office365.com is 2a01:111:f400:f3d3::2 Mon Mar 14 19:30:21 2016 daemon.info dnsmasq[5396]: reply outlook-namcentral.office365.com is 2a01:111:f400:535f::2 Mon Mar 14 19:30:21 2016 daemon.info dnsmasq[5396]: reply outlook.office365.com is Mon Mar 14 19:30:21 2016 daemon.info dnsmasq[5396]: reply lb.geo.office365.com is Mon Mar 14 19:30:21 2016 daemon.info dnsmasq[5396]: reply outlook.office365.com.glbdns2.microsoft.com is Mon Mar 14 19:30:21 2016 daemon.info dnsmasq[5396]: reply outlook-namcentral.office365.com is 132.245.48.66 Mon Mar 14 19:30:21 2016 daemon.info dnsmasq[5396]: reply outlook-namcentral.office365.com is 132.245.45.18 Mon Mar 14 19:30:21 2016 daemon.info dnsmasq[5396]: reply outlook-namcentral.office365.com is 132.245.52.242 Mon Mar 14 19:30:21 2016 daemon.info dnsmasq[5396]: reply outlook-namcentral.office365.com is 132.245.70.82 Mon Mar 14 19:30:21 2016 daemon.info dnsmasq[5396]: reply outlook-namcentral.office365.com is 132.245.52.66 Mon Mar 14 19:30:21 2016 daemon.info dnsmasq[5396]: reply outlook-namcentral.office365.com is 132.245.79.50 Mon Mar 14 19:30:21 2016 daemon.info dnsmasq[5396]: reply outlook-namcentral.office365.com is 157.56.239.194 Mon Mar 14 19:30:22 2016 daemon.info dnsmasq[5396]: query[A] outlook-namcentral.office365.com from 10.10.10.143 Mon Mar 14 19:30:22 2016 daemon.info dnsmasq[5396]: cached outlook-namcentral.office365.com is 157.56.239.194 Mon Mar 14 19:30:22 2016 daemon.info dnsmasq[5396]: cached outlook-namcentral.office365.com is 132.245.79.50 Mon Mar 14 19:30:22 2016 daemon.info dnsmasq[5396]: cached outlook-namcentral.office365.com is 132.245.52.66 Mon Mar 14 19:30:22 2016 daemon.info dnsmasq[5396]: cached outlook-namcentral.office365.com is 132.245.70.82 Mon Mar 14 19:30:22 2016 daemon.info dnsmasq[5396]: cached outlook-namcentral.office365.com is 132.245.52.242 Mon Mar 14 19:30:22 2016 daemon.info dnsmasq[5396]: cached outlook-namcentral.office365.com is 132.245.45.18 Mon Mar 14 19:30:22 2016 daemon.info dnsmasq[5396]: cached outlook-namcentral.office365.com is 132.245.48.66 Mon Mar 14 19:30:30 2016 daemon.info dnsmasq[5396]: query[AAAA] prod-w.nexus.live.com.akadns.net from 10.10.10.223 Mon Mar 14 19:30:30 2016 daemon.info dnsmasq[5396]: cached prod-w.nexus.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:30:36 2016 daemon.info dnsmasq[5396]: query[A] clients4.google.com from 10.10.10.228 Mon Mar 14 19:30:36 2016 daemon.info dnsmasq[5396]: forwarded clients4.google.com to 192.168.1.1 Mon Mar 14 19:30:36 2016 daemon.info dnsmasq[5396]: query[A] clients4.google.com from 10.10.10.229 Mon Mar 14 19:30:36 2016 daemon.info dnsmasq[5396]: forwarded clients4.google.com to 192.168.1.1 Mon Mar 14 19:30:36 2016 daemon.info dnsmasq[5396]: reply clients4.google.com is Mon Mar 14 19:30:36 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.74.102 Mon Mar 14 19:30:36 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.74.101 Mon Mar 14 19:30:36 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.74.113 Mon Mar 14 19:30:36 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.74.139 Mon Mar 14 19:30:36 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.74.138 Mon Mar 14 19:30:36 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.74.100 Mon Mar 14 19:30:36 2016 daemon.info dnsmasq[5396]: reply clients4.google.com is Mon Mar 14 19:30:36 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.74.102 Mon Mar 14 19:30:36 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.74.101 Mon Mar 14 19:30:36 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.74.113 Mon Mar 14 19:30:36 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.74.139 Mon Mar 14 19:30:36 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.74.138 Mon Mar 14 19:30:36 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 173.194.74.100 Mon Mar 14 19:30:37 2016 daemon.info dnsmasq[5396]: query[AAAA] www3.l.google.com from 10.10.10.223 Mon Mar 14 19:30:38 2016 daemon.info dnsmasq[5396]: forwarded www3.l.google.com to 192.168.1.1 Mon Mar 14 19:30:38 2016 daemon.info dnsmasq[5396]: query[A] www3.l.google.com from 10.10.10.223 Mon Mar 14 19:30:38 2016 daemon.info dnsmasq[5396]: forwarded www3.l.google.com to 192.168.1.1 Mon Mar 14 19:30:38 2016 daemon.info dnsmasq[5396]: reply www3.l.google.com is 2607:f8b0:4001:c1b::71 Mon Mar 14 19:30:38 2016 daemon.info dnsmasq[5396]: reply www3.l.google.com is 64.233.191.101 Mon Mar 14 19:30:38 2016 daemon.info dnsmasq[5396]: reply www3.l.google.com is 64.233.191.138 Mon Mar 14 19:30:38 2016 daemon.info dnsmasq[5396]: reply www3.l.google.com is 64.233.191.102 Mon Mar 14 19:30:38 2016 daemon.info dnsmasq[5396]: reply www3.l.google.com is 64.233.191.113 Mon Mar 14 19:30:38 2016 daemon.info dnsmasq[5396]: reply www3.l.google.com is 64.233.191.139 Mon Mar 14 19:30:38 2016 daemon.info dnsmasq[5396]: reply www3.l.google.com is 64.233.191.100 Mon Mar 14 19:30:52 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:30:52 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:30:52 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:30:52 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:30:52 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:30:52 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:30:52 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:30:52 2016 daemon.info dnsmasq[5396]: cached pool3.moatads.com is NODATA-IPv6 Mon Mar 14 19:30:52 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:30:52 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:30:52 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:30:52 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:30:52 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:30:52 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:30:52 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:30:52 2016 daemon.info dnsmasq[5396]: cached pool3.moatads.com is NODATA-IPv6 Mon Mar 14 19:30:52 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:30:52 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:30:52 2016 daemon.info dnsmasq[5396]: reply pool3.moatads.com is 54.175.137.248 Mon Mar 14 19:30:52 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:30:52 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:30:52 2016 daemon.info dnsmasq[5396]: reply pool3.moatads.com is 54.175.137.248 Mon Mar 14 19:30:55 2016 daemon.info dnsmasq[5396]: query[AAAA] guzzoni.apple.com from 10.10.10.212 Mon Mar 14 19:30:55 2016 daemon.info dnsmasq[5396]: forwarded guzzoni.apple.com to 192.168.1.1 Mon Mar 14 19:30:55 2016 daemon.info dnsmasq[5396]: query[A] guzzoni.apple.com from 10.10.10.212 Mon Mar 14 19:30:55 2016 daemon.info dnsmasq[5396]: forwarded guzzoni.apple.com to 192.168.1.1 Mon Mar 14 19:30:55 2016 daemon.info dnsmasq[5396]: reply guzzoni.apple.com is Mon Mar 14 19:30:55 2016 daemon.info dnsmasq[5396]: reply origin.guzzoni-apple.com.akadns.net is Mon Mar 14 19:30:55 2016 daemon.info dnsmasq[5396]: reply st14p02sa.guzzoni-apple.com.akadns.net is 17.174.2.5 Mon Mar 14 19:30:55 2016 daemon.info dnsmasq[5396]: reply guzzoni.apple.com is Mon Mar 14 19:30:55 2016 daemon.info dnsmasq[5396]: reply origin.guzzoni-apple.com.akadns.net is Mon Mar 14 19:30:55 2016 daemon.info dnsmasq[5396]: reply st14p02sa.guzzoni-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:30:56 2016 daemon.info dnsmasq[5396]: query[AAAA] st14p02sa.guzzoni-apple.com.akadns.net from 10.10.10.212 Mon Mar 14 19:30:56 2016 daemon.info dnsmasq[5396]: cached st14p02sa.guzzoni-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:30:57 2016 daemon.info dnsmasq[5396]: query[AAAA] app.procentive.com from 10.10.10.223 Mon Mar 14 19:30:57 2016 daemon.info dnsmasq[5396]: forwarded app.procentive.com to 192.168.1.1 Mon Mar 14 19:31:02 2016 daemon.info dnsmasq[5396]: query[A] safebrowsing.google.com from 10.10.10.228 Mon Mar 14 19:31:02 2016 daemon.info dnsmasq[5396]: forwarded safebrowsing.google.com to 192.168.1.1 Mon Mar 14 19:31:02 2016 daemon.info dnsmasq[5396]: query[A] safebrowsing.google.com from 10.10.10.229 Mon Mar 14 19:31:02 2016 daemon.info dnsmasq[5396]: forwarded safebrowsing.google.com to 192.168.1.1 Mon Mar 14 19:31:02 2016 daemon.info dnsmasq[5396]: reply safebrowsing.google.com is Mon Mar 14 19:31:02 2016 daemon.info dnsmasq[5396]: reply sb.l.google.com is 216.58.192.206 Mon Mar 14 19:31:02 2016 daemon.info dnsmasq[5396]: reply safebrowsing.google.com is Mon Mar 14 19:31:02 2016 daemon.info dnsmasq[5396]: reply sb.l.google.com is 216.58.192.206 Mon Mar 14 19:31:02 2016 daemon.info dnsmasq[5396]: query[A] safebrowsing-cache.google.com from 10.10.10.228 Mon Mar 14 19:31:02 2016 daemon.info dnsmasq[5396]: forwarded safebrowsing-cache.google.com to 192.168.1.1 Mon Mar 14 19:31:02 2016 daemon.info dnsmasq[5396]: query[A] safebrowsing-cache.google.com from 10.10.10.229 Mon Mar 14 19:31:02 2016 daemon.info dnsmasq[5396]: forwarded safebrowsing-cache.google.com to 192.168.1.1 Mon Mar 14 19:31:02 2016 daemon.info dnsmasq[5396]: reply safebrowsing-cache.google.com is Mon Mar 14 19:31:02 2016 daemon.info dnsmasq[5396]: reply safebrowsing.cache.l.google.com is 216.58.216.238 Mon Mar 14 19:31:02 2016 daemon.info dnsmasq[5396]: reply safebrowsing-cache.google.com is Mon Mar 14 19:31:02 2016 daemon.info dnsmasq[5396]: reply safebrowsing.cache.l.google.com is 216.58.216.238 Mon Mar 14 19:31:04 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:31:04 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:31:21 2016 daemon.info dnsmasq[5396]: query[A] dm2306.storage.live.com from 10.10.10.228 Mon Mar 14 19:31:21 2016 daemon.info dnsmasq[5396]: forwarded dm2306.storage.live.com to 192.168.1.1 Mon Mar 14 19:31:21 2016 daemon.info dnsmasq[5396]: query[AAAA] dm2306.storage.live.com from 10.10.10.228 Mon Mar 14 19:31:21 2016 daemon.info dnsmasq[5396]: forwarded dm2306.storage.live.com to 192.168.1.1 Mon Mar 14 19:31:21 2016 daemon.info dnsmasq[5396]: query[A] dm2306.storage.live.com from 10.10.10.229 Mon Mar 14 19:31:21 2016 daemon.info dnsmasq[5396]: forwarded dm2306.storage.live.com to 192.168.1.1 Mon Mar 14 19:31:21 2016 daemon.info dnsmasq[5396]: reply dm2306.storage.live.com is Mon Mar 14 19:31:21 2016 daemon.info dnsmasq[5396]: reply dm2306geo.storage.skyprod.akadns.net is Mon Mar 14 19:31:21 2016 daemon.info dnsmasq[5396]: reply dm2306-storage-live-com.a-0011.a-msedge.net is Mon Mar 14 19:31:21 2016 daemon.info dnsmasq[5396]: reply a-0011.a-msedge.net is 204.79.197.213 Mon Mar 14 19:31:21 2016 daemon.info dnsmasq[5396]: query[AAAA] dm2306.storage.live.com from 10.10.10.229 Mon Mar 14 19:31:21 2016 daemon.info dnsmasq[5396]: cached dm2306.storage.live.com is Mon Mar 14 19:31:21 2016 daemon.info dnsmasq[5396]: cached dm2306geo.storage.skyprod.akadns.net is Mon Mar 14 19:31:21 2016 daemon.info dnsmasq[5396]: cached dm2306-storage-live-com.a-0011.a-msedge.net is Mon Mar 14 19:31:21 2016 daemon.info dnsmasq[5396]: forwarded dm2306.storage.live.com to 192.168.1.1 Mon Mar 14 19:31:21 2016 daemon.info dnsmasq[5396]: reply dm2306.storage.live.com is Mon Mar 14 19:31:21 2016 daemon.info dnsmasq[5396]: reply dm2306geo.storage.skyprod.akadns.net is Mon Mar 14 19:31:21 2016 daemon.info dnsmasq[5396]: reply dm2306-storage-live-com.a-0011.a-msedge.net is Mon Mar 14 19:31:21 2016 daemon.info dnsmasq[5396]: reply a-0011.a-msedge.net is 204.79.197.213 Mon Mar 14 19:31:21 2016 daemon.info dnsmasq[5396]: reply dm2306.storage.live.com is Mon Mar 14 19:31:21 2016 daemon.info dnsmasq[5396]: reply dm2306geo.storage.skyprod.akadns.net is Mon Mar 14 19:31:21 2016 daemon.info dnsmasq[5396]: reply dm2306-storage-live-com.a-0011.a-msedge.net is Mon Mar 14 19:31:21 2016 daemon.info dnsmasq[5396]: reply a-0011.a-msedge.net is NODATA-IPv6 Mon Mar 14 19:31:21 2016 daemon.info dnsmasq[5396]: reply dm2306.storage.live.com is Mon Mar 14 19:31:21 2016 daemon.info dnsmasq[5396]: reply dm2306geo.storage.skyprod.akadns.net is Mon Mar 14 19:31:21 2016 daemon.info dnsmasq[5396]: reply dm2306-storage-live-com.a-0011.a-msedge.net is Mon Mar 14 19:31:21 2016 daemon.info dnsmasq[5396]: reply a-0011.a-msedge.net is NODATA-IPv6 Mon Mar 14 19:31:21 2016 daemon.info dnsmasq[5396]: query[AAAA] dm2306.storage.live.com from 10.10.10.228 Mon Mar 14 19:31:21 2016 daemon.info dnsmasq[5396]: cached dm2306.storage.live.com is Mon Mar 14 19:31:21 2016 daemon.info dnsmasq[5396]: cached dm2306geo.storage.skyprod.akadns.net is Mon Mar 14 19:31:21 2016 daemon.info dnsmasq[5396]: cached dm2306-storage-live-com.a-0011.a-msedge.net is Mon Mar 14 19:31:21 2016 daemon.info dnsmasq[5396]: cached a-0011.a-msedge.net is NODATA-IPv6 Mon Mar 14 19:31:21 2016 daemon.info dnsmasq[5396]: query[AAAA] dm2306.storage.live.com from 10.10.10.229 Mon Mar 14 19:31:21 2016 daemon.info dnsmasq[5396]: cached dm2306.storage.live.com is Mon Mar 14 19:31:21 2016 daemon.info dnsmasq[5396]: cached dm2306geo.storage.skyprod.akadns.net is Mon Mar 14 19:31:21 2016 daemon.info dnsmasq[5396]: cached dm2306-storage-live-com.a-0011.a-msedge.net is Mon Mar 14 19:31:21 2016 daemon.info dnsmasq[5396]: cached a-0011.a-msedge.net is NODATA-IPv6 Mon Mar 14 19:32:06 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:32:06 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:32:22 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:32:22 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:32:22 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:32:22 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:32:22 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:32:22 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:32:22 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:32:22 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:32:22 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:32:22 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:32:22 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:32:22 2016 daemon.info dnsmasq[5396]: reply pool3.moatads.com is 54.174.81.143 Mon Mar 14 19:32:22 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:32:22 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:32:22 2016 daemon.info dnsmasq[5396]: reply pool3.moatads.com is NODATA-IPv6 Mon Mar 14 19:32:22 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:32:22 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:32:22 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:32:22 2016 daemon.info dnsmasq[5396]: cached pool3.moatads.com is NODATA-IPv6 Mon Mar 14 19:32:22 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:32:22 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:32:22 2016 daemon.info dnsmasq[5396]: reply pool3.moatads.com is 54.174.81.143 Mon Mar 14 19:32:26 2016 daemon.info dnsmasq[5396]: query[AAAA] app.procentive.com from 10.10.10.223 Mon Mar 14 19:32:26 2016 daemon.info dnsmasq[5396]: forwarded app.procentive.com to 192.168.1.1 Mon Mar 14 19:32:30 2016 daemon.info dnsmasq[5396]: query[AAAA] origin.guzzoni-apple.com.akadns.net from 10.10.10.212 Mon Mar 14 19:32:30 2016 daemon.info dnsmasq[5396]: forwarded origin.guzzoni-apple.com.akadns.net to 192.168.1.1 Mon Mar 14 19:32:30 2016 daemon.info dnsmasq[5396]: query[A] origin.guzzoni-apple.com.akadns.net from 10.10.10.212 Mon Mar 14 19:32:30 2016 daemon.info dnsmasq[5396]: forwarded origin.guzzoni-apple.com.akadns.net to 192.168.1.1 Mon Mar 14 19:32:30 2016 daemon.info dnsmasq[5396]: reply origin.guzzoni-apple.com.akadns.net is Mon Mar 14 19:32:30 2016 daemon.info dnsmasq[5396]: reply st14p02sa.guzzoni-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:32:30 2016 daemon.info dnsmasq[5396]: reply origin.guzzoni-apple.com.akadns.net is Mon Mar 14 19:32:30 2016 daemon.info dnsmasq[5396]: reply st14p02sa.guzzoni-apple.com.akadns.net is 17.174.2.5 Mon Mar 14 19:32:30 2016 daemon.info dnsmasq[5396]: query[A] st14p02sa.guzzoni-apple.com.akadns.net from 10.10.10.212 Mon Mar 14 19:32:30 2016 daemon.info dnsmasq[5396]: cached st14p02sa.guzzoni-apple.com.akadns.net is 17.174.2.5 Mon Mar 14 19:32:30 2016 daemon.info dnsmasq[5396]: query[AAAA] st14p02sa.guzzoni-apple.com.akadns.net from 10.10.10.212 Mon Mar 14 19:32:30 2016 daemon.info dnsmasq[5396]: cached st14p02sa.guzzoni-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:33:07 2016 daemon.info dnsmasq[5396]: query[A] clients4.google.com from 10.10.10.228 Mon Mar 14 19:33:07 2016 daemon.info dnsmasq[5396]: forwarded clients4.google.com to 192.168.1.1 Mon Mar 14 19:33:07 2016 daemon.info dnsmasq[5396]: query[A] clients4.google.com from 10.10.10.229 Mon Mar 14 19:33:07 2016 daemon.info dnsmasq[5396]: forwarded clients4.google.com to 192.168.1.1 Mon Mar 14 19:33:07 2016 daemon.info dnsmasq[5396]: reply clients4.google.com is Mon Mar 14 19:33:07 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 216.58.216.110 Mon Mar 14 19:33:07 2016 daemon.info dnsmasq[5396]: reply clients4.google.com is Mon Mar 14 19:33:07 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 216.58.216.110 Mon Mar 14 19:33:07 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:33:07 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:33:11 2016 daemon.info dnsmasq[5396]: query[A] 9.client-channel.google.com from 10.10.10.223 Mon Mar 14 19:33:11 2016 daemon.info dnsmasq[5396]: forwarded 9.client-channel.google.com to 192.168.1.1 Mon Mar 14 19:33:11 2016 daemon.info dnsmasq[5396]: query[AAAA] 9.client-channel.google.com from 10.10.10.223 Mon Mar 14 19:33:11 2016 daemon.info dnsmasq[5396]: forwarded 9.client-channel.google.com to 192.168.1.1 Mon Mar 14 19:33:11 2016 daemon.info dnsmasq[5396]: reply 9.client-channel.google.com is 74.125.207.189 Mon Mar 14 19:33:11 2016 daemon.info dnsmasq[5396]: reply 9.client-channel.google.com is 2607:f8b0:4001:c07::bd Mon Mar 14 19:33:13 2016 daemon.info dnsmasq[5396]: query[AAAA] prod.odcsm.live.com.akadns.net from 10.10.10.223 Mon Mar 14 19:33:13 2016 daemon.info dnsmasq[5396]: forwarded prod.odcsm.live.com.akadns.net to 192.168.1.1 Mon Mar 14 19:33:13 2016 daemon.info dnsmasq[5396]: query[A] prod.odcsm.live.com.akadns.net from 10.10.10.223 Mon Mar 14 19:33:13 2016 daemon.info dnsmasq[5396]: forwarded prod.odcsm.live.com.akadns.net to 192.168.1.1 Mon Mar 14 19:33:13 2016 daemon.info dnsmasq[5396]: query[AAAA] nexus.officeapps.live.com from 10.10.10.223 Mon Mar 14 19:33:13 2016 daemon.info dnsmasq[5396]: forwarded nexus.officeapps.live.com to 192.168.1.1 Mon Mar 14 19:33:13 2016 daemon.info dnsmasq[5396]: query[A] nexus.officeapps.live.com from 10.10.10.223 Mon Mar 14 19:33:13 2016 daemon.info dnsmasq[5396]: forwarded nexus.officeapps.live.com to 192.168.1.1 Mon Mar 14 19:33:13 2016 daemon.info dnsmasq[5396]: reply prod.odcsm.live.com.akadns.net is Mon Mar 14 19:33:13 2016 daemon.info dnsmasq[5396]: reply ncus-odc.officeapps.live.com is Mon Mar 14 19:33:13 2016 daemon.info dnsmasq[5396]: reply osiprod-ncus01-odcsm.cloudapp.net is 23.96.219.115 Mon Mar 14 19:33:14 2016 daemon.info dnsmasq[5396]: reply prod.odcsm.live.com.akadns.net is Mon Mar 14 19:33:14 2016 daemon.info dnsmasq[5396]: reply ncus-odc.officeapps.live.com is Mon Mar 14 19:33:14 2016 daemon.info dnsmasq[5396]: reply osiprod-ncus01-odcsm.cloudapp.net is NODATA-IPv6 Mon Mar 14 19:33:14 2016 daemon.info dnsmasq[5396]: query[AAAA] roaming.officeapps.live.com from 10.10.10.223 Mon Mar 14 19:33:14 2016 daemon.info dnsmasq[5396]: forwarded roaming.officeapps.live.com to 192.168.1.1 Mon Mar 14 19:33:14 2016 daemon.info dnsmasq[5396]: reply nexus.officeapps.live.com is Mon Mar 14 19:33:14 2016 daemon.info dnsmasq[5396]: reply prod-w.nexus.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:33:14 2016 daemon.info dnsmasq[5396]: reply nexus.officeapps.live.com is Mon Mar 14 19:33:14 2016 daemon.info dnsmasq[5396]: reply prod-w.nexus.live.com.akadns.net is 104.43.140.223 Mon Mar 14 19:33:14 2016 daemon.info dnsmasq[5396]: query[A] roaming.officeapps.live.com from 10.10.10.223 Mon Mar 14 19:33:14 2016 daemon.info dnsmasq[5396]: forwarded roaming.officeapps.live.com to 192.168.1.1 Mon Mar 14 19:33:14 2016 daemon.info dnsmasq[5396]: query[A] prod-w.nexus.live.com.akadns.net from 10.10.10.223 Mon Mar 14 19:33:14 2016 daemon.info dnsmasq[5396]: cached prod-w.nexus.live.com.akadns.net is 104.43.140.223 Mon Mar 14 19:33:14 2016 daemon.info dnsmasq[5396]: query[AAAA] prod-w.nexus.live.com.akadns.net from 10.10.10.223 Mon Mar 14 19:33:14 2016 daemon.info dnsmasq[5396]: cached prod-w.nexus.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:33:14 2016 daemon.info dnsmasq[5396]: reply roaming.officeapps.live.com is Mon Mar 14 19:33:14 2016 daemon.info dnsmasq[5396]: reply prod.roaming.live.com.akadns.net is Mon Mar 14 19:33:14 2016 daemon.info dnsmasq[5396]: reply produsdc.roaming.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:33:14 2016 daemon.info dnsmasq[5396]: query[AAAA] produsdc.roaming.live.com.akadns.net from 10.10.10.223 Mon Mar 14 19:33:14 2016 daemon.info dnsmasq[5396]: cached produsdc.roaming.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:33:14 2016 daemon.info dnsmasq[5396]: query[A] produsdc.roaming.live.com.akadns.net from 10.10.10.223 Mon Mar 14 19:33:14 2016 daemon.info dnsmasq[5396]: forwarded produsdc.roaming.live.com.akadns.net to 192.168.1.1 Mon Mar 14 19:33:14 2016 daemon.info dnsmasq[5396]: reply roaming.officeapps.live.com is Mon Mar 14 19:33:14 2016 daemon.info dnsmasq[5396]: reply prod.roaming.live.com.akadns.net is Mon Mar 14 19:33:14 2016 daemon.info dnsmasq[5396]: reply produsdc.roaming.live.com.akadns.net is 137.116.77.120 Mon Mar 14 19:33:14 2016 daemon.info dnsmasq[5396]: reply produsdc.roaming.live.com.akadns.net is 137.116.77.120 Mon Mar 14 19:33:14 2016 daemon.info dnsmasq[5396]: query[AAAA] prod.ocws.live.com.akadns.net from 10.10.10.223 Mon Mar 14 19:33:14 2016 daemon.info dnsmasq[5396]: forwarded prod.ocws.live.com.akadns.net to 192.168.1.1 Mon Mar 14 19:33:14 2016 daemon.info dnsmasq[5396]: query[A] prod.ocws.live.com.akadns.net from 10.10.10.223 Mon Mar 14 19:33:14 2016 daemon.info dnsmasq[5396]: forwarded prod.ocws.live.com.akadns.net to 192.168.1.1 Mon Mar 14 19:33:14 2016 daemon.info dnsmasq[5396]: reply prod.ocws.live.com.akadns.net is Mon Mar 14 19:33:14 2016 daemon.info dnsmasq[5396]: reply ncus-ocws.officeapps.live.com is Mon Mar 14 19:33:14 2016 daemon.info dnsmasq[5396]: reply osiprod-ncus-flax-000.cloudapp.net is 168.62.106.152 Mon Mar 14 19:33:14 2016 daemon.info dnsmasq[5396]: reply prod.ocws.live.com.akadns.net is Mon Mar 14 19:33:14 2016 daemon.info dnsmasq[5396]: reply ncus-ocws.officeapps.live.com is Mon Mar 14 19:33:14 2016 daemon.info dnsmasq[5396]: reply osiprod-ncus-flax-000.cloudapp.net is NODATA-IPv6 Mon Mar 14 19:33:14 2016 daemon.info dnsmasq[5396]: query[AAAA] osiprod-ncus01-odcsm.cloudapp.net from 10.10.10.223 Mon Mar 14 19:33:14 2016 daemon.info dnsmasq[5396]: cached osiprod-ncus01-odcsm.cloudapp.net is NODATA-IPv6 Mon Mar 14 19:33:14 2016 daemon.info dnsmasq[5396]: query[AAAA] osiprod-ncus-flax-000.cloudapp.net from 10.10.10.223 Mon Mar 14 19:33:14 2016 daemon.info dnsmasq[5396]: cached osiprod-ncus-flax-000.cloudapp.net is NODATA-IPv6 Mon Mar 14 19:33:27 2016 daemon.info dnsmasq[5396]: query[A] app.procentive.com from 10.10.10.223 Mon Mar 14 19:33:27 2016 daemon.info dnsmasq[5396]: cached app.procentive.com is 66.179.249.115 Mon Mar 14 19:33:30 2016 daemon.info dnsmasq[5396]: query[A] osiprod-ncus01-odcsm.cloudapp.net from 10.10.10.223 Mon Mar 14 19:33:30 2016 daemon.info dnsmasq[5396]: forwarded osiprod-ncus01-odcsm.cloudapp.net to 192.168.1.1 Mon Mar 14 19:33:30 2016 daemon.info dnsmasq[5396]: reply osiprod-ncus01-odcsm.cloudapp.net is 23.96.219.115 Mon Mar 14 19:33:50 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:33:50 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:33:50 2016 daemon.info dnsmasq[5396]: query[A] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:33:50 2016 daemon.info dnsmasq[5396]: forwarded skydocs.skyprod.akadns.net to 192.168.1.1 Mon Mar 14 19:33:51 2016 daemon.info dnsmasq[5396]: reply skydocs.skyprod.akadns.net is 134.170.104.232 Mon Mar 14 19:33:52 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:33:52 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:33:52 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:33:52 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:33:52 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:33:52 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:33:53 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:33:53 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:33:53 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:33:53 2016 daemon.info dnsmasq[5396]: reply pool3.moatads.com is 54.209.252.139 Mon Mar 14 19:33:53 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:33:53 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:33:53 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:33:53 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:33:53 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:33:53 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:33:53 2016 daemon.info dnsmasq[5396]: reply pool3.moatads.com is 54.209.252.139 Mon Mar 14 19:33:53 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:33:53 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:33:53 2016 daemon.info dnsmasq[5396]: reply pool4.moatads.com is NODATA-IPv6 Mon Mar 14 19:33:53 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:33:53 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:33:53 2016 daemon.info dnsmasq[5396]: reply pool4.moatads.com is NODATA-IPv6 Mon Mar 14 19:33:53 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:33:53 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:33:53 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:33:53 2016 daemon.info dnsmasq[5396]: cached pool4.moatads.com is NODATA-IPv6 Mon Mar 14 19:33:53 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:33:53 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:33:53 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:33:53 2016 daemon.info dnsmasq[5396]: cached pool4.moatads.com is NODATA-IPv6 Mon Mar 14 19:34:01 2016 daemon.info dnsmasq[5396]: query[A] chatenabled.mail.google.com from 10.10.10.228 Mon Mar 14 19:34:01 2016 daemon.info dnsmasq[5396]: forwarded chatenabled.mail.google.com to 192.168.1.1 Mon Mar 14 19:34:01 2016 daemon.info dnsmasq[5396]: query[A] chatenabled.mail.google.com from 10.10.10.229 Mon Mar 14 19:34:01 2016 daemon.info dnsmasq[5396]: forwarded chatenabled.mail.google.com to 192.168.1.1 Mon Mar 14 19:34:01 2016 daemon.info dnsmasq[5396]: reply chatenabled.mail.google.com is Mon Mar 14 19:34:01 2016 daemon.info dnsmasq[5396]: reply b.googlemail.l.google.com is 216.58.216.231 Mon Mar 14 19:34:01 2016 daemon.info dnsmasq[5396]: reply chatenabled.mail.google.com is Mon Mar 14 19:34:01 2016 daemon.info dnsmasq[5396]: reply b.googlemail.l.google.com is 216.58.216.231 Mon Mar 14 19:34:20 2016 daemon.info dnsmasq[5396]: query[A] googlemail.l.google.com from 10.10.10.223 Mon Mar 14 19:34:20 2016 daemon.info dnsmasq[5396]: forwarded googlemail.l.google.com to 192.168.1.1 Mon Mar 14 19:34:20 2016 daemon.info dnsmasq[5396]: query[AAAA] googlemail.l.google.com from 10.10.10.223 Mon Mar 14 19:34:20 2016 daemon.info dnsmasq[5396]: forwarded googlemail.l.google.com to 192.168.1.1 Mon Mar 14 19:34:20 2016 daemon.info dnsmasq[5396]: reply googlemail.l.google.com is 173.194.192.17 Mon Mar 14 19:34:20 2016 daemon.info dnsmasq[5396]: reply googlemail.l.google.com is 173.194.192.18 Mon Mar 14 19:34:20 2016 daemon.info dnsmasq[5396]: reply googlemail.l.google.com is 173.194.192.19 Mon Mar 14 19:34:20 2016 daemon.info dnsmasq[5396]: reply googlemail.l.google.com is 173.194.192.83 Mon Mar 14 19:34:20 2016 daemon.info dnsmasq[5396]: reply googlemail.l.google.com is 2607:f8b0:4009:809::2005 Mon Mar 14 19:34:26 2016 daemon.info dnsmasq[5396]: query[A] storage.browserapps.amazon.com from 10.10.10.223 Mon Mar 14 19:34:27 2016 daemon.info dnsmasq[5396]: forwarded storage.browserapps.amazon.com to 192.168.1.1 Mon Mar 14 19:34:27 2016 daemon.info dnsmasq[5396]: query[A] reporter.browserapps.amazon.com from 10.10.10.223 Mon Mar 14 19:34:27 2016 daemon.info dnsmasq[5396]: forwarded reporter.browserapps.amazon.com to 192.168.1.1 Mon Mar 14 19:34:27 2016 daemon.info dnsmasq[5396]: query[A] dossier.browserapps.amazon.com from 10.10.10.223 Mon Mar 14 19:34:27 2016 daemon.info dnsmasq[5396]: forwarded dossier.browserapps.amazon.com to 192.168.1.1 Mon Mar 14 19:34:27 2016 daemon.info dnsmasq[5396]: reply storage.browserapps.amazon.com is Mon Mar 14 19:34:27 2016 daemon.info dnsmasq[5396]: reply identity.browserapps.amazon.com is 54.239.16.245 Mon Mar 14 19:34:27 2016 daemon.info dnsmasq[5396]: query[A] identity.browserapps.amazon.com from 10.10.10.223 Mon Mar 14 19:34:27 2016 daemon.info dnsmasq[5396]: cached identity.browserapps.amazon.com is 54.239.16.245 Mon Mar 14 19:34:27 2016 daemon.info dnsmasq[5396]: reply reporter.browserapps.amazon.com is Mon Mar 14 19:34:27 2016 daemon.info dnsmasq[5396]: reply identity.browserapps.amazon.com is 54.239.16.245 Mon Mar 14 19:34:27 2016 daemon.info dnsmasq[5396]: reply dossier.browserapps.amazon.com is Mon Mar 14 19:34:27 2016 daemon.info dnsmasq[5396]: reply identity.browserapps.amazon.com is 54.239.16.245 Mon Mar 14 19:34:57 2016 daemon.info dnsmasq[5396]: query[A] fls-na.amazon.com from 10.10.10.223 Mon Mar 14 19:34:57 2016 daemon.info dnsmasq[5396]: forwarded fls-na.amazon.com to 192.168.1.1 Mon Mar 14 19:34:57 2016 daemon.info dnsmasq[5396]: reply fls-na.amazon.com is 54.239.22.213 Mon Mar 14 19:34:58 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:34:58 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:35:02 2016 daemon.info dnsmasq[5396]: query[A] plus.google.com from 10.10.10.223 Mon Mar 14 19:35:03 2016 daemon.info dnsmasq[5396]: forwarded plus.google.com to 192.168.1.1 Mon Mar 14 19:35:03 2016 daemon.info dnsmasq[5396]: reply plus.google.com is 216.58.216.238 Mon Mar 14 19:35:04 2016 daemon.info dnsmasq[5396]: query[A] www.google-analytics.com from 10.10.10.223 Mon Mar 14 19:35:04 2016 daemon.info dnsmasq[5396]: cached www.google-analytics.com is Mon Mar 14 19:35:04 2016 daemon.info dnsmasq[5396]: forwarded www.google-analytics.com to 192.168.1.1 Mon Mar 14 19:35:04 2016 daemon.info dnsmasq[5396]: reply www.google-analytics.com is Mon Mar 14 19:35:04 2016 daemon.info dnsmasq[5396]: reply www-google-analytics.l.google.com is 216.58.216.238 Mon Mar 14 19:35:14 2016 daemon.info dnsmasq[5396]: query[AAAA] app.procentive.com from 10.10.10.223 Mon Mar 14 19:35:14 2016 daemon.info dnsmasq[5396]: forwarded app.procentive.com to 192.168.1.1 Mon Mar 14 19:35:18 2016 daemon.info dnsmasq[5396]: query[A] clients2.google.com from 10.10.10.228 Mon Mar 14 19:35:18 2016 daemon.info dnsmasq[5396]: forwarded clients2.google.com to 192.168.1.1 Mon Mar 14 19:35:18 2016 daemon.info dnsmasq[5396]: query[A] clients2.google.com from 10.10.10.229 Mon Mar 14 19:35:18 2016 daemon.info dnsmasq[5396]: forwarded clients2.google.com to 192.168.1.1 Mon Mar 14 19:35:18 2016 daemon.info dnsmasq[5396]: reply clients2.google.com is Mon Mar 14 19:35:18 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 216.58.216.110 Mon Mar 14 19:35:18 2016 daemon.info dnsmasq[5396]: reply clients2.google.com is Mon Mar 14 19:35:18 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 216.58.216.110 Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: query[A] o.aolcdn.com from 10.10.10.228 Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: forwarded o.aolcdn.com to 192.168.1.1 Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: query[AAAA] o.aolcdn.com from 10.10.10.228 Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: forwarded o.aolcdn.com to 192.168.1.1 Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: query[A] o.aolcdn.com from 10.10.10.229 Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: forwarded o.aolcdn.com to 192.168.1.1 Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: reply o.aolcdn.com is Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: reply o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 23.77.232.155 Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 23.77.232.170 Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: query[AAAA] o.aolcdn.com from 10.10.10.229 Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: cached o.aolcdn.com is Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: cached o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: forwarded o.aolcdn.com to 192.168.1.1 Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: reply o.aolcdn.com is Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: reply o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 2600:1404:e::174d:e869 Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 2600:1404:e::174d:e91b Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: reply o.aolcdn.com is Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: reply o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 23.77.232.155 Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 23.77.232.170 Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: reply o.aolcdn.com is Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: reply o.aolcdn-ds.com.edgesuite.net is Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 2600:1404:e::174d:e869 Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: reply a1123.dscg.akamai.net is 2600:1404:e::174d:e91b Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: reply pool2.moatads.com is 52.3.250.169 Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: cached pool2.moatads.com is 52.3.250.169 Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: reply pool2.moatads.com is NODATA-IPv6 Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: cached pool2.moatads.com is NODATA-IPv6 Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: cached pool2.moatads.com is 52.3.250.169 Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: cached pool2.moatads.com is NODATA-IPv6 Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: cached pool2.moatads.com is 52.3.250.169 Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:35:23 2016 daemon.info dnsmasq[5396]: cached pool2.moatads.com is NODATA-IPv6 Mon Mar 14 19:36:06 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:36:06 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:36:09 2016 daemon.info dnsmasq[5396]: query[A] clients2.google.com from 10.10.10.223 Mon Mar 14 19:36:09 2016 daemon.info dnsmasq[5396]: cached clients2.google.com is Mon Mar 14 19:36:09 2016 daemon.info dnsmasq[5396]: cached clients.l.google.com is 216.58.216.110 Mon Mar 14 19:36:30 2016 daemon.info dnsmasq[5396]: query[A] app.procentive.com from 10.10.10.223 Mon Mar 14 19:36:30 2016 daemon.info dnsmasq[5396]: cached app.procentive.com is 66.179.249.115 Mon Mar 14 19:36:30 2016 daemon.info dnsmasq[5396]: query[AAAA] app.procentive.com from 10.10.10.223 Mon Mar 14 19:36:30 2016 daemon.info dnsmasq[5396]: forwarded app.procentive.com to 192.168.1.1 Mon Mar 14 19:36:33 2016 daemon.info dnsmasq[5396]: query[AAAA] nexus.officeapps.live.com from 10.10.10.223 Mon Mar 14 19:36:33 2016 daemon.info dnsmasq[5396]: forwarded nexus.officeapps.live.com to 192.168.1.1 Mon Mar 14 19:36:33 2016 daemon.info dnsmasq[5396]: query[A] nexus.officeapps.live.com from 10.10.10.223 Mon Mar 14 19:36:33 2016 daemon.info dnsmasq[5396]: forwarded nexus.officeapps.live.com to 192.168.1.1 Mon Mar 14 19:36:33 2016 daemon.info dnsmasq[5396]: reply nexus.officeapps.live.com is Mon Mar 14 19:36:33 2016 daemon.info dnsmasq[5396]: reply prod-w.nexus.live.com.akadns.net is 104.43.140.223 Mon Mar 14 19:36:33 2016 daemon.info dnsmasq[5396]: reply nexus.officeapps.live.com is Mon Mar 14 19:36:33 2016 daemon.info dnsmasq[5396]: reply prod-w.nexus.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:36:34 2016 daemon.info dnsmasq[5396]: query[AAAA] prod-w.nexus.live.com.akadns.net from 10.10.10.223 Mon Mar 14 19:36:34 2016 daemon.info dnsmasq[5396]: forwarded prod-w.nexus.live.com.akadns.net to 192.168.1.1 Mon Mar 14 19:36:44 2016 daemon.info dnsmasq[5396]: query[A] clients6.google.com from 10.10.10.223 Mon Mar 14 19:36:44 2016 daemon.info dnsmasq[5396]: forwarded clients6.google.com to 192.168.1.1 Mon Mar 14 19:36:44 2016 daemon.info dnsmasq[5396]: query[AAAA] clients6.google.com from 10.10.10.223 Mon Mar 14 19:36:44 2016 daemon.info dnsmasq[5396]: forwarded clients6.google.com to 192.168.1.1 Mon Mar 14 19:36:44 2016 daemon.info dnsmasq[5396]: reply clients6.google.com is Mon Mar 14 19:36:44 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 216.58.216.110 Mon Mar 14 19:36:44 2016 daemon.info dnsmasq[5396]: reply clients6.google.com is Mon Mar 14 19:36:44 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 2607:f8b0:4009:80b::200e Mon Mar 14 19:36:44 2016 daemon.info dnsmasq[5396]: query[AAAA] clients.l.google.com from 10.10.10.223 Mon Mar 14 19:36:44 2016 daemon.info dnsmasq[5396]: cached clients.l.google.com is 2607:f8b0:4009:80b::200e Mon Mar 14 19:36:51 2016 daemon.info dnsmasq[5396]: query[A] plus.google.com from 10.10.10.223 Mon Mar 14 19:36:51 2016 daemon.info dnsmasq[5396]: cached plus.google.com is 216.58.216.238 Mon Mar 14 19:36:51 2016 daemon.info dnsmasq[5396]: query[AAAA] plus.google.com from 10.10.10.223 Mon Mar 14 19:36:51 2016 daemon.info dnsmasq[5396]: forwarded plus.google.com to 192.168.1.1 Mon Mar 14 19:36:51 2016 daemon.info dnsmasq[5396]: reply plus.google.com is 2607:f8b0:4009:809::200e Mon Mar 14 19:36:53 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:36:53 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:36:53 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:36:53 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:36:53 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:36:53 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:36:53 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:36:53 2016 daemon.info dnsmasq[5396]: cached pool2.moatads.com is NODATA-IPv6 Mon Mar 14 19:36:53 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:36:53 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:36:53 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:36:53 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:36:53 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:36:53 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:36:53 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:36:53 2016 daemon.info dnsmasq[5396]: cached pool2.moatads.com is NODATA-IPv6 Mon Mar 14 19:36:53 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:36:53 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:36:53 2016 daemon.info dnsmasq[5396]: reply pool2.moatads.com is 54.86.68.156 Mon Mar 14 19:36:53 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:36:53 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:36:53 2016 daemon.info dnsmasq[5396]: reply pool2.moatads.com is 54.86.68.156 Mon Mar 14 19:37:10 2016 daemon.info dnsmasq[5396]: query[A] 9.client-channel.google.com from 10.10.10.223 Mon Mar 14 19:37:10 2016 daemon.info dnsmasq[5396]: forwarded 9.client-channel.google.com to 192.168.1.1 Mon Mar 14 19:37:10 2016 daemon.info dnsmasq[5396]: query[AAAA] 9.client-channel.google.com from 10.10.10.223 Mon Mar 14 19:37:10 2016 daemon.info dnsmasq[5396]: forwarded 9.client-channel.google.com to 192.168.1.1 Mon Mar 14 19:37:10 2016 daemon.info dnsmasq[5396]: reply 9.client-channel.google.com is 74.125.193.189 Mon Mar 14 19:37:10 2016 daemon.info dnsmasq[5396]: reply 9.client-channel.google.com is 2607:f8b0:4001:c05::bd Mon Mar 14 19:37:21 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:37:21 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:37:25 2016 daemon.info dnsmasq[5396]: query[A] googlemail.l.google.com from 10.10.10.223 Mon Mar 14 19:37:25 2016 daemon.info dnsmasq[5396]: forwarded googlemail.l.google.com to 192.168.1.1 Mon Mar 14 19:37:25 2016 daemon.info dnsmasq[5396]: query[AAAA] googlemail.l.google.com from 10.10.10.223 Mon Mar 14 19:37:25 2016 daemon.info dnsmasq[5396]: forwarded googlemail.l.google.com to 192.168.1.1 Mon Mar 14 19:37:25 2016 daemon.info dnsmasq[5396]: reply googlemail.l.google.com is 216.58.216.229 Mon Mar 14 19:37:25 2016 daemon.info dnsmasq[5396]: reply googlemail.l.google.com is 2607:f8b0:4009:809::2005 Mon Mar 14 19:37:31 2016 daemon.info dnsmasq[5396]: query[A] app.procentive.com from 10.10.10.223 Mon Mar 14 19:37:31 2016 daemon.info dnsmasq[5396]: cached app.procentive.com is 66.179.249.115 Mon Mar 14 19:37:31 2016 daemon.info dnsmasq[5396]: query[AAAA] app.procentive.com from 10.10.10.223 Mon Mar 14 19:37:31 2016 daemon.info dnsmasq[5396]: forwarded app.procentive.com to 192.168.1.1 Mon Mar 14 19:37:50 2016 daemon.info dnsmasq[5396]: query[A] tools.google.com from 10.10.10.228 Mon Mar 14 19:37:50 2016 daemon.info dnsmasq[5396]: forwarded tools.google.com to 192.168.1.1 Mon Mar 14 19:37:50 2016 daemon.info dnsmasq[5396]: query[AAAA] tools.google.com from 10.10.10.228 Mon Mar 14 19:37:50 2016 daemon.info dnsmasq[5396]: forwarded tools.google.com to 192.168.1.1 Mon Mar 14 19:37:50 2016 daemon.info dnsmasq[5396]: query[A] tools.google.com from 10.10.10.229 Mon Mar 14 19:37:50 2016 daemon.info dnsmasq[5396]: forwarded tools.google.com to 192.168.1.1 Mon Mar 14 19:37:50 2016 daemon.info dnsmasq[5396]: reply tools.google.com is Mon Mar 14 19:37:50 2016 daemon.info dnsmasq[5396]: reply tools.l.google.com is 74.125.193.101 Mon Mar 14 19:37:50 2016 daemon.info dnsmasq[5396]: reply tools.l.google.com is 74.125.193.138 Mon Mar 14 19:37:50 2016 daemon.info dnsmasq[5396]: reply tools.l.google.com is 74.125.193.102 Mon Mar 14 19:37:50 2016 daemon.info dnsmasq[5396]: reply tools.l.google.com is 74.125.193.113 Mon Mar 14 19:37:50 2016 daemon.info dnsmasq[5396]: reply tools.l.google.com is 74.125.193.100 Mon Mar 14 19:37:50 2016 daemon.info dnsmasq[5396]: reply tools.l.google.com is 74.125.193.139 Mon Mar 14 19:37:50 2016 daemon.info dnsmasq[5396]: query[AAAA] tools.google.com from 10.10.10.229 Mon Mar 14 19:37:50 2016 daemon.info dnsmasq[5396]: cached tools.google.com is Mon Mar 14 19:37:50 2016 daemon.info dnsmasq[5396]: forwarded tools.google.com to 192.168.1.1 Mon Mar 14 19:37:50 2016 daemon.info dnsmasq[5396]: reply tools.google.com is Mon Mar 14 19:37:50 2016 daemon.info dnsmasq[5396]: reply tools.l.google.com is 2607:f8b0:4001:c05::65 Mon Mar 14 19:37:50 2016 daemon.info dnsmasq[5396]: reply tools.google.com is Mon Mar 14 19:37:50 2016 daemon.info dnsmasq[5396]: reply tools.l.google.com is 74.125.193.101 Mon Mar 14 19:37:50 2016 daemon.info dnsmasq[5396]: reply tools.l.google.com is 74.125.193.138 Mon Mar 14 19:37:50 2016 daemon.info dnsmasq[5396]: reply tools.l.google.com is 74.125.193.102 Mon Mar 14 19:37:50 2016 daemon.info dnsmasq[5396]: reply tools.l.google.com is 74.125.193.113 Mon Mar 14 19:37:50 2016 daemon.info dnsmasq[5396]: reply tools.l.google.com is 74.125.193.100 Mon Mar 14 19:37:50 2016 daemon.info dnsmasq[5396]: reply tools.l.google.com is 74.125.193.139 Mon Mar 14 19:37:50 2016 daemon.info dnsmasq[5396]: reply tools.google.com is Mon Mar 14 19:37:50 2016 daemon.info dnsmasq[5396]: reply tools.l.google.com is 2607:f8b0:4001:c05::65 Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: query[A] redirector.gvt1.com from 10.10.10.228 Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: forwarded redirector.gvt1.com to 192.168.1.1 Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: query[AAAA] redirector.gvt1.com from 10.10.10.228 Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: forwarded redirector.gvt1.com to 192.168.1.1 Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: query[A] redirector.gvt1.com from 10.10.10.229 Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: forwarded redirector.gvt1.com to 192.168.1.1 Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: reply redirector.gvt1.com is 173.194.192.138 Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: reply redirector.gvt1.com is 173.194.192.113 Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: reply redirector.gvt1.com is 173.194.192.102 Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: reply redirector.gvt1.com is 173.194.192.139 Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: reply redirector.gvt1.com is 173.194.192.101 Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: reply redirector.gvt1.com is 173.194.192.100 Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: query[AAAA] redirector.gvt1.com from 10.10.10.229 Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: forwarded redirector.gvt1.com to 192.168.1.1 Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: reply redirector.gvt1.com is 2607:f8b0:4001:c0e::8a Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: reply redirector.gvt1.com is 173.194.192.138 Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: reply redirector.gvt1.com is 173.194.192.113 Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: reply redirector.gvt1.com is 173.194.192.102 Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: reply redirector.gvt1.com is 173.194.192.139 Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: reply redirector.gvt1.com is 173.194.192.101 Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: reply redirector.gvt1.com is 173.194.192.100 Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: reply redirector.gvt1.com is 2607:f8b0:4001:c0e::8a Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: query[A] r3---sn-bvvbax-hn2d.gvt1.com from 10.10.10.228 Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: forwarded r3---sn-bvvbax-hn2d.gvt1.com to 192.168.1.1 Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: query[AAAA] r3---sn-bvvbax-hn2d.gvt1.com from 10.10.10.228 Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: forwarded r3---sn-bvvbax-hn2d.gvt1.com to 192.168.1.1 Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: query[A] r3---sn-bvvbax-hn2d.gvt1.com from 10.10.10.229 Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: forwarded r3---sn-bvvbax-hn2d.gvt1.com to 192.168.1.1 Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: reply r3---sn-bvvbax-hn2d.gvt1.com is Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: reply r3.sn-bvvbax-hn2d.gvt1.com is 208.117.253.86 Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: query[AAAA] r3---sn-bvvbax-hn2d.gvt1.com from 10.10.10.229 Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: cached r3---sn-bvvbax-hn2d.gvt1.com is Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: forwarded r3---sn-bvvbax-hn2d.gvt1.com to 192.168.1.1 Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: reply r3---sn-bvvbax-hn2d.gvt1.com is Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: reply r3.sn-bvvbax-hn2d.gvt1.com is 208.117.253.86 Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: reply r3---sn-bvvbax-hn2d.gvt1.com is Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: reply r3.sn-bvvbax-hn2d.gvt1.com is NODATA-IPv6 Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: reply r3---sn-bvvbax-hn2d.gvt1.com is Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: reply r3.sn-bvvbax-hn2d.gvt1.com is NODATA-IPv6 Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: query[AAAA] r3---sn-bvvbax-hn2d.gvt1.com from 10.10.10.228 Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: cached r3---sn-bvvbax-hn2d.gvt1.com is Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: cached r3.sn-bvvbax-hn2d.gvt1.com is NODATA-IPv6 Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: query[A] plus.google.com from 10.10.10.228 Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: forwarded plus.google.com to 192.168.1.1 Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: query[A] plus.google.com from 10.10.10.229 Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: forwarded plus.google.com to 192.168.1.1 Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: reply plus.google.com is 216.58.216.238 Mon Mar 14 19:37:51 2016 daemon.info dnsmasq[5396]: reply plus.google.com is 216.58.216.238 Mon Mar 14 19:37:52 2016 daemon.info dnsmasq[5396]: query[A] plus.google.com from 10.10.10.223 Mon Mar 14 19:37:52 2016 daemon.info dnsmasq[5396]: cached plus.google.com is 216.58.216.238 Mon Mar 14 19:37:52 2016 daemon.info dnsmasq[5396]: query[AAAA] plus.google.com from 10.10.10.223 Mon Mar 14 19:37:52 2016 daemon.info dnsmasq[5396]: forwarded plus.google.com to 192.168.1.1 Mon Mar 14 19:37:52 2016 daemon.info dnsmasq[5396]: reply plus.google.com is 2607:f8b0:4009:809::200e Mon Mar 14 19:37:52 2016 daemon.info dnsmasq[5396]: query[A] settings-win.data.microsoft.com from 10.10.10.228 Mon Mar 14 19:37:52 2016 daemon.info dnsmasq[5396]: forwarded settings-win.data.microsoft.com to 192.168.1.1 Mon Mar 14 19:37:52 2016 daemon.info dnsmasq[5396]: query[AAAA] settings-win.data.microsoft.com from 10.10.10.228 Mon Mar 14 19:37:52 2016 daemon.info dnsmasq[5396]: forwarded settings-win.data.microsoft.com to 192.168.1.1 Mon Mar 14 19:37:52 2016 daemon.info dnsmasq[5396]: query[A] settings-win.data.microsoft.com from 10.10.10.229 Mon Mar 14 19:37:52 2016 daemon.info dnsmasq[5396]: forwarded settings-win.data.microsoft.com to 192.168.1.1 Mon Mar 14 19:37:52 2016 daemon.info dnsmasq[5396]: reply settings-win.data.microsoft.com is Mon Mar 14 19:37:52 2016 daemon.info dnsmasq[5396]: reply settings.data.glbdns2.microsoft.com is Mon Mar 14 19:37:52 2016 daemon.info dnsmasq[5396]: reply onesettings-cy2.metron.live.com.nsatc.net is 64.4.54.253 Mon Mar 14 19:37:52 2016 daemon.info dnsmasq[5396]: query[AAAA] settings-win.data.microsoft.com from 10.10.10.229 Mon Mar 14 19:37:52 2016 daemon.info dnsmasq[5396]: cached settings-win.data.microsoft.com is Mon Mar 14 19:37:52 2016 daemon.info dnsmasq[5396]: cached settings.data.glbdns2.microsoft.com is Mon Mar 14 19:37:52 2016 daemon.info dnsmasq[5396]: forwarded settings-win.data.microsoft.com to 192.168.1.1 Mon Mar 14 19:37:53 2016 daemon.info dnsmasq[5396]: reply settings-win.data.microsoft.com is Mon Mar 14 19:37:53 2016 daemon.info dnsmasq[5396]: reply settings.data.glbdns2.microsoft.com is Mon Mar 14 19:37:53 2016 daemon.info dnsmasq[5396]: reply onesettings-cy2.metron.live.com.nsatc.net is 64.4.54.253 Mon Mar 14 19:37:53 2016 daemon.info dnsmasq[5396]: reply settings-win.data.microsoft.com is Mon Mar 14 19:37:53 2016 daemon.info dnsmasq[5396]: reply settings.data.glbdns2.microsoft.com is Mon Mar 14 19:37:53 2016 daemon.info dnsmasq[5396]: reply onesettings-cy2.metron.live.com.nsatc.net is NODATA-IPv6 Mon Mar 14 19:37:53 2016 daemon.info dnsmasq[5396]: reply settings-win.data.microsoft.com is Mon Mar 14 19:37:53 2016 daemon.info dnsmasq[5396]: reply settings.data.glbdns2.microsoft.com is Mon Mar 14 19:37:53 2016 daemon.info dnsmasq[5396]: reply onesettings-cy2.metron.live.com.nsatc.net is NODATA-IPv6 Mon Mar 14 19:37:53 2016 daemon.info dnsmasq[5396]: query[AAAA] settings-win.data.microsoft.com from 10.10.10.228 Mon Mar 14 19:37:53 2016 daemon.info dnsmasq[5396]: cached settings-win.data.microsoft.com is Mon Mar 14 19:37:53 2016 daemon.info dnsmasq[5396]: cached settings.data.glbdns2.microsoft.com is Mon Mar 14 19:37:53 2016 daemon.info dnsmasq[5396]: cached onesettings-cy2.metron.live.com.nsatc.net is NODATA-IPv6 Mon Mar 14 19:38:07 2016 daemon.info dnsmasq[5396]: query[A] v10.vortex-win.data.microsoft.com from 10.10.10.228 Mon Mar 14 19:38:07 2016 daemon.info dnsmasq[5396]: forwarded v10.vortex-win.data.microsoft.com to 192.168.1.1 Mon Mar 14 19:38:07 2016 daemon.info dnsmasq[5396]: query[AAAA] v10.vortex-win.data.microsoft.com from 10.10.10.228 Mon Mar 14 19:38:07 2016 daemon.info dnsmasq[5396]: forwarded v10.vortex-win.data.microsoft.com to 192.168.1.1 Mon Mar 14 19:38:07 2016 daemon.info dnsmasq[5396]: query[A] v10.vortex-win.data.microsoft.com from 10.10.10.229 Mon Mar 14 19:38:07 2016 daemon.info dnsmasq[5396]: forwarded v10.vortex-win.data.microsoft.com to 192.168.1.1 Mon Mar 14 19:38:07 2016 daemon.info dnsmasq[5396]: reply v10.vortex-win.data.microsoft.com is Mon Mar 14 19:38:07 2016 daemon.info dnsmasq[5396]: reply v10.vortex-win.data.metron.live.com.nsatc.net is Mon Mar 14 19:38:07 2016 daemon.info dnsmasq[5396]: reply vortex.data.glbdns2.microsoft.com is Mon Mar 14 19:38:07 2016 daemon.info dnsmasq[5396]: reply vortex-cy2.metron.live.com.nsatc.net is 64.4.54.254 Mon Mar 14 19:38:07 2016 daemon.info dnsmasq[5396]: query[AAAA] v10.vortex-win.data.microsoft.com from 10.10.10.229 Mon Mar 14 19:38:07 2016 daemon.info dnsmasq[5396]: cached v10.vortex-win.data.microsoft.com is Mon Mar 14 19:38:07 2016 daemon.info dnsmasq[5396]: cached v10.vortex-win.data.metron.live.com.nsatc.net is Mon Mar 14 19:38:07 2016 daemon.info dnsmasq[5396]: cached vortex.data.glbdns2.microsoft.com is Mon Mar 14 19:38:07 2016 daemon.info dnsmasq[5396]: forwarded v10.vortex-win.data.microsoft.com to 192.168.1.1 Mon Mar 14 19:38:07 2016 daemon.info dnsmasq[5396]: reply v10.vortex-win.data.microsoft.com is Mon Mar 14 19:38:07 2016 daemon.info dnsmasq[5396]: reply v10.vortex-win.data.metron.live.com.nsatc.net is Mon Mar 14 19:38:07 2016 daemon.info dnsmasq[5396]: reply vortex.data.glbdns2.microsoft.com is Mon Mar 14 19:38:07 2016 daemon.info dnsmasq[5396]: reply vortex-cy2.metron.live.com.nsatc.net is 64.4.54.254 Mon Mar 14 19:38:07 2016 daemon.info dnsmasq[5396]: reply v10.vortex-win.data.microsoft.com is Mon Mar 14 19:38:07 2016 daemon.info dnsmasq[5396]: reply v10.vortex-win.data.metron.live.com.nsatc.net is Mon Mar 14 19:38:07 2016 daemon.info dnsmasq[5396]: reply vortex.data.glbdns2.microsoft.com is Mon Mar 14 19:38:07 2016 daemon.info dnsmasq[5396]: reply vortex-cy2.metron.live.com.nsatc.net is NODATA-IPv6 Mon Mar 14 19:38:07 2016 daemon.info dnsmasq[5396]: reply v10.vortex-win.data.microsoft.com is Mon Mar 14 19:38:07 2016 daemon.info dnsmasq[5396]: reply v10.vortex-win.data.metron.live.com.nsatc.net is Mon Mar 14 19:38:07 2016 daemon.info dnsmasq[5396]: reply vortex.data.glbdns2.microsoft.com is Mon Mar 14 19:38:07 2016 daemon.info dnsmasq[5396]: reply vortex-cy2.metron.live.com.nsatc.net is NODATA-IPv6 Mon Mar 14 19:38:07 2016 daemon.info dnsmasq[5396]: query[AAAA] v10.vortex-win.data.microsoft.com from 10.10.10.228 Mon Mar 14 19:38:07 2016 daemon.info dnsmasq[5396]: cached v10.vortex-win.data.microsoft.com is Mon Mar 14 19:38:07 2016 daemon.info dnsmasq[5396]: cached v10.vortex-win.data.metron.live.com.nsatc.net is Mon Mar 14 19:38:07 2016 daemon.info dnsmasq[5396]: cached vortex.data.glbdns2.microsoft.com is Mon Mar 14 19:38:07 2016 daemon.info dnsmasq[5396]: cached vortex-cy2.metron.live.com.nsatc.net is NODATA-IPv6 Mon Mar 14 19:38:15 2016 daemon.info dnsmasq[5396]: query[A] sb.l.google.com from 10.10.10.223 Mon Mar 14 19:38:15 2016 daemon.info dnsmasq[5396]: forwarded sb.l.google.com to 192.168.1.1 Mon Mar 14 19:38:15 2016 daemon.info dnsmasq[5396]: reply sb.l.google.com is 216.58.192.206 Mon Mar 14 19:38:15 2016 daemon.info dnsmasq[5396]: query[A] safebrowsing.cache.l.google.com from 10.10.10.223 Mon Mar 14 19:38:15 2016 daemon.info dnsmasq[5396]: forwarded safebrowsing.cache.l.google.com to 192.168.1.1 Mon Mar 14 19:38:16 2016 daemon.info dnsmasq[5396]: reply safebrowsing.cache.l.google.com is 216.58.216.238 Mon Mar 14 19:38:19 2016 daemon.info dnsmasq[5396]: query[A] mybookworld.lan from 10.10.10.228 Mon Mar 14 19:38:19 2016 daemon.info dnsmasq[5396]: config mybookworld.lan is NXDOMAIN Mon Mar 14 19:38:19 2016 daemon.info dnsmasq[5396]: query[AAAA] mybookworld.lan from 10.10.10.228 Mon Mar 14 19:38:19 2016 daemon.info dnsmasq[5396]: config mybookworld.lan is NXDOMAIN Mon Mar 14 19:38:19 2016 daemon.info dnsmasq[5396]: query[A] mybookworld.lan from 10.10.10.229 Mon Mar 14 19:38:19 2016 daemon.info dnsmasq[5396]: config mybookworld.lan is NXDOMAIN Mon Mar 14 19:38:19 2016 daemon.info dnsmasq[5396]: query[AAAA] mybookworld.lan from 10.10.10.229 Mon Mar 14 19:38:19 2016 daemon.info dnsmasq[5396]: config mybookworld.lan is NXDOMAIN Mon Mar 14 19:38:23 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:38:23 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:38:23 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:38:23 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:38:23 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:38:23 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:38:23 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:38:23 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:38:23 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:38:23 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:38:23 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:38:23 2016 daemon.info dnsmasq[5396]: reply pool2.moatads.com is 54.174.109.88 Mon Mar 14 19:38:23 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:38:23 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:38:23 2016 daemon.info dnsmasq[5396]: reply pool2.moatads.com is NODATA-IPv6 Mon Mar 14 19:38:23 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:38:23 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:38:23 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:38:23 2016 daemon.info dnsmasq[5396]: cached pool2.moatads.com is NODATA-IPv6 Mon Mar 14 19:38:23 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:38:23 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:38:23 2016 daemon.info dnsmasq[5396]: reply pool2.moatads.com is 54.174.109.88 Mon Mar 14 19:38:24 2016 daemon.info dnsmasq[5396]: query[A] clients2.google.com from 10.10.10.223 Mon Mar 14 19:38:24 2016 daemon.info dnsmasq[5396]: forwarded clients2.google.com to 192.168.1.1 Mon Mar 14 19:38:24 2016 daemon.info dnsmasq[5396]: reply clients2.google.com is Mon Mar 14 19:38:24 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 216.58.216.110 Mon Mar 14 19:38:25 2016 daemon.info dnsmasq[5396]: query[AAAA] nexus.officeapps.live.com from 10.10.10.223 Mon Mar 14 19:38:25 2016 daemon.info dnsmasq[5396]: forwarded nexus.officeapps.live.com to 192.168.1.1 Mon Mar 14 19:38:25 2016 daemon.info dnsmasq[5396]: query[A] nexus.officeapps.live.com from 10.10.10.223 Mon Mar 14 19:38:25 2016 daemon.info dnsmasq[5396]: forwarded nexus.officeapps.live.com to 192.168.1.1 Mon Mar 14 19:38:25 2016 daemon.info dnsmasq[5396]: reply nexus.officeapps.live.com is Mon Mar 14 19:38:25 2016 daemon.info dnsmasq[5396]: reply prod-w.nexus.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:38:25 2016 daemon.info dnsmasq[5396]: reply nexus.officeapps.live.com is Mon Mar 14 19:38:25 2016 daemon.info dnsmasq[5396]: reply prod-w.nexus.live.com.akadns.net is 104.210.4.77 Mon Mar 14 19:38:25 2016 daemon.info dnsmasq[5396]: query[AAAA] prod-w.nexus.live.com.akadns.net from 10.10.10.223 Mon Mar 14 19:38:25 2016 daemon.info dnsmasq[5396]: cached prod-w.nexus.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:38:25 2016 daemon.info dnsmasq[5396]: query[A] prod-w.nexus.live.com.akadns.net from 10.10.10.223 Mon Mar 14 19:38:25 2016 daemon.info dnsmasq[5396]: cached prod-w.nexus.live.com.akadns.net is 104.210.4.77 Mon Mar 14 19:38:28 2016 daemon.info dnsmasq[5396]: query[AAAA] p44-keyvalueservice-current.edge.icloud.apple-dns.net from 10.10.10.211 Mon Mar 14 19:38:28 2016 daemon.info dnsmasq[5396]: forwarded p44-keyvalueservice-current.edge.icloud.apple-dns.net to 192.168.1.1 Mon Mar 14 19:38:28 2016 daemon.info dnsmasq[5396]: query[A] p44-keyvalueservice-current.edge.icloud.apple-dns.net from 10.10.10.211 Mon Mar 14 19:38:28 2016 daemon.info dnsmasq[5396]: forwarded p44-keyvalueservice-current.edge.icloud.apple-dns.net to 192.168.1.1 Mon Mar 14 19:38:28 2016 daemon.info dnsmasq[5396]: query[AAAA] e6858.dscc.akamaiedge.net from 10.10.10.211 Mon Mar 14 19:38:28 2016 daemon.info dnsmasq[5396]: forwarded e6858.dscc.akamaiedge.net to 192.168.1.1 Mon Mar 14 19:38:28 2016 daemon.info dnsmasq[5396]: query[A] e6858.dscc.akamaiedge.net from 10.10.10.211 Mon Mar 14 19:38:28 2016 daemon.info dnsmasq[5396]: forwarded e6858.dscc.akamaiedge.net to 192.168.1.1 Mon Mar 14 19:38:28 2016 daemon.info dnsmasq[5396]: reply p44-keyvalueservice-current.edge.icloud.apple-dns.net is 17.248.129.237 Mon Mar 14 19:38:28 2016 daemon.info dnsmasq[5396]: reply e6858.dscc.akamaiedge.net is 2600:1404:e:18d::1aca Mon Mar 14 19:38:28 2016 daemon.info dnsmasq[5396]: reply e6858.dscc.akamaiedge.net is 2600:1404:e:194::1aca Mon Mar 14 19:38:28 2016 daemon.info dnsmasq[5396]: reply e6858.dscc.akamaiedge.net is 23.12.245.148 Mon Mar 14 19:38:28 2016 daemon.info dnsmasq[5396]: query[AAAA] origin.guzzoni-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 19:38:28 2016 daemon.info dnsmasq[5396]: forwarded origin.guzzoni-apple.com.akadns.net to 192.168.1.1 Mon Mar 14 19:38:28 2016 daemon.info dnsmasq[5396]: query[A] origin.guzzoni-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 19:38:28 2016 daemon.info dnsmasq[5396]: forwarded origin.guzzoni-apple.com.akadns.net to 192.168.1.1 Mon Mar 14 19:38:28 2016 daemon.info dnsmasq[5396]: query[AAAA] api.smoot.apple.com from 10.10.10.211 Mon Mar 14 19:38:28 2016 daemon.info dnsmasq[5396]: forwarded api.smoot.apple.com to 192.168.1.1 Mon Mar 14 19:38:28 2016 daemon.info dnsmasq[5396]: query[A] api.smoot.apple.com from 10.10.10.211 Mon Mar 14 19:38:28 2016 daemon.info dnsmasq[5396]: forwarded api.smoot.apple.com to 192.168.1.1 Mon Mar 14 19:38:28 2016 daemon.info dnsmasq[5396]: reply origin.guzzoni-apple.com.akadns.net is Mon Mar 14 19:38:28 2016 daemon.info dnsmasq[5396]: reply st14p02sa.guzzoni-apple.com.akadns.net is 17.174.2.5 Mon Mar 14 19:38:28 2016 daemon.info dnsmasq[5396]: query[AAAA] www.apple.com.edgekey.net.globalredir.akadns.net from 10.10.10.211 Mon Mar 14 19:38:28 2016 daemon.info dnsmasq[5396]: forwarded www.apple.com.edgekey.net.globalredir.akadns.net to 192.168.1.1 Mon Mar 14 19:38:28 2016 daemon.info dnsmasq[5396]: reply origin.guzzoni-apple.com.akadns.net is Mon Mar 14 19:38:28 2016 daemon.info dnsmasq[5396]: reply st14p02sa.guzzoni-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:38:28 2016 daemon.info dnsmasq[5396]: reply api.smoot.apple.com is Mon Mar 14 19:38:28 2016 daemon.info dnsmasq[5396]: reply api.smoot-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:38:28 2016 daemon.info dnsmasq[5396]: reply api.smoot.apple.com is Mon Mar 14 19:38:28 2016 daemon.info dnsmasq[5396]: reply api.smoot-apple.com.akadns.net is 17.249.73.246 Mon Mar 14 19:38:28 2016 daemon.info dnsmasq[5396]: query[A] www.apple.com.edgekey.net.globalredir.akadns.net from 10.10.10.211 Mon Mar 14 19:38:28 2016 daemon.info dnsmasq[5396]: forwarded www.apple.com.edgekey.net.globalredir.akadns.net to 192.168.1.1 Mon Mar 14 19:38:28 2016 daemon.info dnsmasq[5396]: reply www.apple.com.edgekey.net.globalredir.akadns.net is Mon Mar 14 19:38:28 2016 daemon.info dnsmasq[5396]: reply e6858.dscc.akamaiedge.net is 2600:1404:e:18d::1aca Mon Mar 14 19:38:28 2016 daemon.info dnsmasq[5396]: reply e6858.dscc.akamaiedge.net is 2600:1404:e:194::1aca Mon Mar 14 19:38:28 2016 daemon.info dnsmasq[5396]: query[A] api.smoot-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 19:38:28 2016 daemon.info dnsmasq[5396]: cached api.smoot-apple.com.akadns.net is 17.249.73.246 Mon Mar 14 19:38:28 2016 daemon.info dnsmasq[5396]: reply www.apple.com.edgekey.net.globalredir.akadns.net is Mon Mar 14 19:38:28 2016 daemon.info dnsmasq[5396]: reply e6858.dscc.akamaiedge.net is 23.12.245.148 Mon Mar 14 19:38:28 2016 daemon.info dnsmasq[5396]: query[AAAA] apple.com from 10.10.10.211 Mon Mar 14 19:38:28 2016 daemon.info dnsmasq[5396]: forwarded apple.com to 192.168.1.1 Mon Mar 14 19:38:29 2016 daemon.info dnsmasq[5396]: query[AAAA] st14p02sa.guzzoni-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 19:38:29 2016 daemon.info dnsmasq[5396]: cached st14p02sa.guzzoni-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:38:32 2016 daemon.info dnsmasq[5396]: query[AAAA] api.smoot-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 19:38:32 2016 daemon.info dnsmasq[5396]: cached api.smoot-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:38:33 2016 daemon.info dnsmasq[5396]: query[AAAA] app.procentive.com from 10.10.10.223 Mon Mar 14 19:38:33 2016 daemon.info dnsmasq[5396]: forwarded app.procentive.com to 192.168.1.1 Mon Mar 14 19:38:33 2016 daemon.info dnsmasq[5396]: query[A] app.procentive.com from 10.10.10.223 Mon Mar 14 19:38:33 2016 daemon.info dnsmasq[5396]: cached app.procentive.com is 66.179.249.115 Mon Mar 14 19:38:33 2016 daemon.info dnsmasq[5396]: query[A] p25-quota.icloud.com from 10.10.10.228 Mon Mar 14 19:38:33 2016 daemon.info dnsmasq[5396]: forwarded p25-quota.icloud.com to 192.168.1.1 Mon Mar 14 19:38:33 2016 daemon.info dnsmasq[5396]: query[AAAA] p25-quota.icloud.com from 10.10.10.228 Mon Mar 14 19:38:33 2016 daemon.info dnsmasq[5396]: forwarded p25-quota.icloud.com to 192.168.1.1 Mon Mar 14 19:38:33 2016 daemon.info dnsmasq[5396]: query[A] p25-quota.icloud.com from 10.10.10.229 Mon Mar 14 19:38:33 2016 daemon.info dnsmasq[5396]: forwarded p25-quota.icloud.com to 192.168.1.1 Mon Mar 14 19:38:33 2016 daemon.info dnsmasq[5396]: query[AAAA] p25-quota.icloud.com from 10.10.10.229 Mon Mar 14 19:38:33 2016 daemon.info dnsmasq[5396]: forwarded p25-quota.icloud.com to 192.168.1.1 Mon Mar 14 19:38:33 2016 daemon.info dnsmasq[5396]: reply p25-quota.icloud.com is Mon Mar 14 19:38:33 2016 daemon.info dnsmasq[5396]: reply p25-quota-current.edge.icloud.apple-dns.net is NODATA-IPv6 Mon Mar 14 19:38:33 2016 daemon.info dnsmasq[5396]: reply p25-quota.icloud.com is Mon Mar 14 19:38:33 2016 daemon.info dnsmasq[5396]: reply p25-quota-current.edge.icloud.apple-dns.net is NODATA-IPv6 Mon Mar 14 19:38:33 2016 daemon.info dnsmasq[5396]: reply p25-quota.icloud.com is Mon Mar 14 19:38:33 2016 daemon.info dnsmasq[5396]: reply p25-quota-current.edge.icloud.apple-dns.net is 17.248.128.208 Mon Mar 14 19:38:33 2016 daemon.info dnsmasq[5396]: reply p25-quota.icloud.com is Mon Mar 14 19:38:33 2016 daemon.info dnsmasq[5396]: reply p25-quota-current.edge.icloud.apple-dns.net is 17.248.128.208 Mon Mar 14 19:38:33 2016 daemon.info dnsmasq[5396]: query[A] p25-quota.icloud.com from 10.10.10.228 Mon Mar 14 19:38:33 2016 daemon.info dnsmasq[5396]: cached p25-quota.icloud.com is Mon Mar 14 19:38:33 2016 daemon.info dnsmasq[5396]: cached p25-quota-current.edge.icloud.apple-dns.net is 17.248.128.208 Mon Mar 14 19:38:33 2016 daemon.info dnsmasq[5396]: query[A] p25-quota.icloud.com from 10.10.10.229 Mon Mar 14 19:38:33 2016 daemon.info dnsmasq[5396]: cached p25-quota.icloud.com is Mon Mar 14 19:38:33 2016 daemon.info dnsmasq[5396]: cached p25-quota-current.edge.icloud.apple-dns.net is 17.248.128.208 Mon Mar 14 19:38:47 2016 daemon.info dnsmasq[5396]: query[A] spynet2.microsoft.com from 10.10.10.228 Mon Mar 14 19:38:47 2016 daemon.info dnsmasq[5396]: forwarded spynet2.microsoft.com to 192.168.1.1 Mon Mar 14 19:38:47 2016 daemon.info dnsmasq[5396]: query[AAAA] spynet2.microsoft.com from 10.10.10.228 Mon Mar 14 19:38:47 2016 daemon.info dnsmasq[5396]: forwarded spynet2.microsoft.com to 192.168.1.1 Mon Mar 14 19:38:47 2016 daemon.info dnsmasq[5396]: query[A] spynet2.microsoft.com from 10.10.10.229 Mon Mar 14 19:38:47 2016 daemon.info dnsmasq[5396]: forwarded spynet2.microsoft.com to 192.168.1.1 Mon Mar 14 19:38:47 2016 daemon.info dnsmasq[5396]: reply spynet2.microsoft.com is Mon Mar 14 19:38:47 2016 daemon.info dnsmasq[5396]: reply spynet2.microsoft.akadns.net is Mon Mar 14 19:38:47 2016 daemon.info dnsmasq[5396]: reply spynetus.microsoft.akadns.net is 23.96.212.225 Mon Mar 14 19:38:47 2016 daemon.info dnsmasq[5396]: query[AAAA] spynet2.microsoft.com from 10.10.10.229 Mon Mar 14 19:38:47 2016 daemon.info dnsmasq[5396]: cached spynet2.microsoft.com is Mon Mar 14 19:38:47 2016 daemon.info dnsmasq[5396]: cached spynet2.microsoft.akadns.net is Mon Mar 14 19:38:47 2016 daemon.info dnsmasq[5396]: forwarded spynet2.microsoft.com to 192.168.1.1 Mon Mar 14 19:38:47 2016 daemon.info dnsmasq[5396]: reply spynet2.microsoft.com is Mon Mar 14 19:38:47 2016 daemon.info dnsmasq[5396]: reply spynet2.microsoft.akadns.net is Mon Mar 14 19:38:47 2016 daemon.info dnsmasq[5396]: reply spynetus.microsoft.akadns.net is 23.96.212.225 Mon Mar 14 19:38:47 2016 daemon.info dnsmasq[5396]: reply spynet2.microsoft.com is Mon Mar 14 19:38:47 2016 daemon.info dnsmasq[5396]: reply spynet2.microsoft.akadns.net is Mon Mar 14 19:38:47 2016 daemon.info dnsmasq[5396]: reply spynetus.microsoft.akadns.net is NODATA-IPv6 Mon Mar 14 19:38:47 2016 daemon.info dnsmasq[5396]: reply spynet2.microsoft.com is Mon Mar 14 19:38:47 2016 daemon.info dnsmasq[5396]: reply spynet2.microsoft.akadns.net is Mon Mar 14 19:38:47 2016 daemon.info dnsmasq[5396]: reply spynetus.microsoft.akadns.net is NODATA-IPv6 Mon Mar 14 19:38:47 2016 daemon.info dnsmasq[5396]: query[AAAA] spynet2.microsoft.com from 10.10.10.228 Mon Mar 14 19:38:47 2016 daemon.info dnsmasq[5396]: cached spynet2.microsoft.com is Mon Mar 14 19:38:47 2016 daemon.info dnsmasq[5396]: cached spynet2.microsoft.akadns.net is Mon Mar 14 19:38:47 2016 daemon.info dnsmasq[5396]: cached spynetus.microsoft.akadns.net is NODATA-IPv6 Mon Mar 14 19:38:47 2016 daemon.info dnsmasq[5396]: query[AAAA] spynet2.microsoft.com from 10.10.10.229 Mon Mar 14 19:38:47 2016 daemon.info dnsmasq[5396]: cached spynet2.microsoft.com is Mon Mar 14 19:38:47 2016 daemon.info dnsmasq[5396]: cached spynet2.microsoft.akadns.net is Mon Mar 14 19:38:47 2016 daemon.info dnsmasq[5396]: cached spynetus.microsoft.akadns.net is NODATA-IPv6 Mon Mar 14 19:38:50 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:38:50 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:38:50 2016 daemon.info dnsmasq[5396]: query[A] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:38:50 2016 daemon.info dnsmasq[5396]: forwarded skydocs.skyprod.akadns.net to 192.168.1.1 Mon Mar 14 19:38:50 2016 daemon.info dnsmasq[5396]: reply skydocs.skyprod.akadns.net is 134.170.108.200 Mon Mar 14 19:38:57 2016 daemon.info dnsmasq[5396]: query[AAAA] p03-ckdatabase-current.edge.icloud.apple-dns.net from 10.10.10.223 Mon Mar 14 19:38:57 2016 daemon.info dnsmasq[5396]: cached p03-ckdatabase-current.edge.icloud.apple-dns.net is NODATA-IPv6 Mon Mar 14 19:38:57 2016 daemon.info dnsmasq[5396]: query[A] p03-ckdatabase-current.edge.icloud.apple-dns.net from 10.10.10.223 Mon Mar 14 19:38:57 2016 daemon.info dnsmasq[5396]: forwarded p03-ckdatabase-current.edge.icloud.apple-dns.net to 192.168.1.1 Mon Mar 14 19:38:58 2016 daemon.info dnsmasq[5396]: reply p03-ckdatabase-current.edge.icloud.apple-dns.net is 17.248.131.170 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: query[AAAA] gsp10-ssl.apple.com from 10.10.10.143 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: forwarded gsp10-ssl.apple.com to 192.168.1.1 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: query[A] gsp10-ssl.apple.com from 10.10.10.143 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: forwarded gsp10-ssl.apple.com to 192.168.1.1 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: reply gsp10-ssl.apple.com is Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: reply gsp10-ssl.ls-apple.com.akadns.net is 17.167.195.12 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: reply gsp10-ssl.ls-apple.com.akadns.net is 17.167.194.208 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: reply gsp10-ssl.ls-apple.com.akadns.net is 17.167.193.162 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: reply gsp10-ssl.ls-apple.com.akadns.net is 17.167.194.205 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: reply gsp10-ssl.ls-apple.com.akadns.net is 17.167.192.126 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: reply gsp10-ssl.ls-apple.com.akadns.net is 17.167.192.244 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: reply gsp10-ssl.apple.com is Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: reply gsp10-ssl.ls-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: query[AAAA] init.itunes.apple.com from 10.10.10.143 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: forwarded init.itunes.apple.com to 192.168.1.1 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: query[A] init.itunes.apple.com from 10.10.10.143 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: forwarded init.itunes.apple.com to 192.168.1.1 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: reply init.itunes.apple.com is Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: reply init-cdn.itunes-apple.com.akadns.net is Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: reply itunes.apple.com.edgekey.net is Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: reply e673.e9.akamaiedge.net is 23.12.242.217 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: reply init.itunes.apple.com is Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: reply init-cdn.itunes-apple.com.akadns.net is Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: reply itunes.apple.com.edgekey.net is Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: reply e673.e9.akamaiedge.net is NODATA-IPv6 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: query[AAAA] gsp10-ssl.ls-apple.com.akadns.net from 10.10.10.143 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: cached gsp10-ssl.ls-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: query[AAAA] configuration.apple.com from 10.10.10.143 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: cached configuration.apple.com is Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: cached configuration.apple.com.edgekey.net is Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: cached e5153.a.akamaiedge.net is NODATA-IPv6 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: query[A] configuration.apple.com from 10.10.10.143 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: cached configuration.apple.com is Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: cached configuration.apple.com.edgekey.net is Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: forwarded configuration.apple.com to 192.168.1.1 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: query[A] e5153.a.akamaiedge.net from 10.10.10.143 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: forwarded e5153.a.akamaiedge.net to 192.168.1.1 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: query[AAAA] e5153.a.akamaiedge.net from 10.10.10.143 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: cached e5153.a.akamaiedge.net is NODATA-IPv6 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: query[AAAA] p44-ckdatabase.icloud.com from 10.10.10.211 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: forwarded p44-ckdatabase.icloud.com to 192.168.1.1 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: reply configuration.apple.com is Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: reply configuration.apple.com.edgekey.net is Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: reply e5153.a.akamaiedge.net is 23.5.170.224 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: reply e5153.a.akamaiedge.net is 23.5.170.224 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: query[A] p44-ckdatabase.icloud.com from 10.10.10.211 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: forwarded p44-ckdatabase.icloud.com to 192.168.1.1 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: query[AAAA] e6858.dscc.akamaiedge.net from 10.10.10.211 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: forwarded e6858.dscc.akamaiedge.net to 192.168.1.1 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: reply p44-ckdatabase.icloud.com is Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: reply p44-ckdatabase-current.edge.icloud.apple-dns.net is NODATA-IPv6 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: query[A] e6858.dscc.akamaiedge.net from 10.10.10.211 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: forwarded e6858.dscc.akamaiedge.net to 192.168.1.1 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: reply p44-ckdatabase.icloud.com is Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: reply p44-ckdatabase-current.edge.icloud.apple-dns.net is 17.248.128.175 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: reply e6858.dscc.akamaiedge.net is 2600:1404:e:194::1aca Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: reply e6858.dscc.akamaiedge.net is 2600:1404:e:18d::1aca Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: query[AAAA] sr.symcd.com from 10.10.10.143 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: forwarded sr.symcd.com to 192.168.1.1 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: reply e6858.dscc.akamaiedge.net is 23.12.245.148 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: query[A] sr.symcd.com from 10.10.10.143 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: forwarded sr.symcd.com to 192.168.1.1 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: reply sr.symcd.com is Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: reply ocsp-ds.ws.symantec.com.edgekey.net is Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: reply e8218.dscb1.akamaiedge.net is 2600:1404:e:193::201a Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: reply e8218.dscb1.akamaiedge.net is 2600:1404:e:18b::201a Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: reply sr.symcd.com is Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: reply ocsp-ds.ws.symantec.com.edgekey.net is Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: reply e8218.dscb1.akamaiedge.net is 23.4.59.27 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: query[AAAA] e673.e9.akamaiedge.net from 10.10.10.143 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: cached e673.e9.akamaiedge.net is NODATA-IPv6 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: query[A] p44-keyvalueservice-current.edge.icloud.apple-dns.net from 10.10.10.211 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: forwarded p44-keyvalueservice-current.edge.icloud.apple-dns.net to 192.168.1.1 Mon Mar 14 19:39:00 2016 daemon.info dnsmasq[5396]: reply p44-keyvalueservice-current.edge.icloud.apple-dns.net is 17.248.139.104 Mon Mar 14 19:39:01 2016 daemon.info dnsmasq[5396]: query[A] e8218.dscb1.akamaiedge.net from 10.10.10.143 Mon Mar 14 19:39:01 2016 daemon.info dnsmasq[5396]: cached e8218.dscb1.akamaiedge.net is 23.4.59.27 Mon Mar 14 19:39:01 2016 daemon.info dnsmasq[5396]: query[AAAA] p44-ckdatabase-current.edge.icloud.apple-dns.net from 10.10.10.211 Mon Mar 14 19:39:01 2016 daemon.info dnsmasq[5396]: cached p44-ckdatabase-current.edge.icloud.apple-dns.net is NODATA-IPv6 Mon Mar 14 19:39:01 2016 daemon.info dnsmasq[5396]: query[AAAA] p44-ckdatabase.icloud.com from 10.10.10.143 Mon Mar 14 19:39:01 2016 daemon.info dnsmasq[5396]: cached p44-ckdatabase.icloud.com is Mon Mar 14 19:39:01 2016 daemon.info dnsmasq[5396]: cached p44-ckdatabase-current.edge.icloud.apple-dns.net is NODATA-IPv6 Mon Mar 14 19:39:01 2016 daemon.info dnsmasq[5396]: query[A] p44-ckdatabase.icloud.com from 10.10.10.143 Mon Mar 14 19:39:01 2016 daemon.info dnsmasq[5396]: cached p44-ckdatabase.icloud.com is Mon Mar 14 19:39:01 2016 daemon.info dnsmasq[5396]: cached p44-ckdatabase-current.edge.icloud.apple-dns.net is 17.248.128.175 Mon Mar 14 19:39:01 2016 daemon.info dnsmasq[5396]: query[AAAA] p44-ckdatabase-current.edge.icloud.apple-dns.net from 10.10.10.143 Mon Mar 14 19:39:01 2016 daemon.info dnsmasq[5396]: cached p44-ckdatabase-current.edge.icloud.apple-dns.net is NODATA-IPv6 Mon Mar 14 19:39:01 2016 daemon.info dnsmasq[5396]: query[A] p44-ckdatabase-current.edge.icloud.apple-dns.net from 10.10.10.143 Mon Mar 14 19:39:01 2016 daemon.info dnsmasq[5396]: cached p44-ckdatabase-current.edge.icloud.apple-dns.net is 17.248.128.175 Mon Mar 14 19:39:01 2016 daemon.info dnsmasq[5396]: query[AAAA] play.itunes.apple.com from 10.10.10.143 Mon Mar 14 19:39:01 2016 daemon.info dnsmasq[5396]: forwarded play.itunes.apple.com to 192.168.1.1 Mon Mar 14 19:39:01 2016 daemon.info dnsmasq[5396]: query[A] play.itunes.apple.com from 10.10.10.143 Mon Mar 14 19:39:01 2016 daemon.info dnsmasq[5396]: forwarded play.itunes.apple.com to 192.168.1.1 Mon Mar 14 19:39:01 2016 daemon.info dnsmasq[5396]: reply play.itunes.apple.com is Mon Mar 14 19:39:01 2016 daemon.info dnsmasq[5396]: reply play-cdn.itunes-apple.com.akadns.net is Mon Mar 14 19:39:01 2016 daemon.info dnsmasq[5396]: reply itunes.apple.com.edgekey.net is Mon Mar 14 19:39:01 2016 daemon.info dnsmasq[5396]: reply e673.e9.akamaiedge.net is NODATA-IPv6 Mon Mar 14 19:39:01 2016 daemon.info dnsmasq[5396]: reply play.itunes.apple.com is Mon Mar 14 19:39:01 2016 daemon.info dnsmasq[5396]: reply play-cdn.itunes-apple.com.akadns.net is Mon Mar 14 19:39:01 2016 daemon.info dnsmasq[5396]: reply itunes.apple.com.edgekey.net is Mon Mar 14 19:39:01 2016 daemon.info dnsmasq[5396]: reply e673.e9.akamaiedge.net is 23.12.242.217 Mon Mar 14 19:39:01 2016 daemon.info dnsmasq[5396]: query[AAAA] xp.apple.com from 10.10.10.143 Mon Mar 14 19:39:01 2016 daemon.info dnsmasq[5396]: forwarded xp.apple.com to 192.168.1.1 Mon Mar 14 19:39:01 2016 daemon.info dnsmasq[5396]: query[A] xp.apple.com from 10.10.10.143 Mon Mar 14 19:39:01 2016 daemon.info dnsmasq[5396]: forwarded xp.apple.com to 192.168.1.1 Mon Mar 14 19:39:02 2016 daemon.info dnsmasq[5396]: reply xp.apple.com is Mon Mar 14 19:39:02 2016 daemon.info dnsmasq[5396]: reply mzuserxp.itunes-apple.com.akadns.net is 17.154.66.110 Mon Mar 14 19:39:02 2016 daemon.info dnsmasq[5396]: reply mzuserxp.itunes-apple.com.akadns.net is 17.154.66.108 Mon Mar 14 19:39:02 2016 daemon.info dnsmasq[5396]: reply mzuserxp.itunes-apple.com.akadns.net is 17.154.65.206 Mon Mar 14 19:39:02 2016 daemon.info dnsmasq[5396]: reply mzuserxp.itunes-apple.com.akadns.net is 17.154.66.109 Mon Mar 14 19:39:02 2016 daemon.info dnsmasq[5396]: reply mzuserxp.itunes-apple.com.akadns.net is 17.154.66.111 Mon Mar 14 19:39:02 2016 daemon.info dnsmasq[5396]: reply mzuserxp.itunes-apple.com.akadns.net is 17.154.65.207 Mon Mar 14 19:39:02 2016 daemon.info dnsmasq[5396]: reply xp.apple.com is Mon Mar 14 19:39:02 2016 daemon.info dnsmasq[5396]: reply mzuserxp.itunes-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:39:02 2016 daemon.info dnsmasq[5396]: query[AAAA] mzuserxp.itunes-apple.com.akadns.net from 10.10.10.143 Mon Mar 14 19:39:02 2016 daemon.info dnsmasq[5396]: cached mzuserxp.itunes-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:39:12 2016 daemon.info dnsmasq[5396]: query[A] chatenabled.mail.google.com from 10.10.10.228 Mon Mar 14 19:39:12 2016 daemon.info dnsmasq[5396]: forwarded chatenabled.mail.google.com to 192.168.1.1 Mon Mar 14 19:39:12 2016 daemon.info dnsmasq[5396]: query[A] chatenabled.mail.google.com from 10.10.10.229 Mon Mar 14 19:39:12 2016 daemon.info dnsmasq[5396]: forwarded chatenabled.mail.google.com to 192.168.1.1 Mon Mar 14 19:39:12 2016 daemon.info dnsmasq[5396]: reply chatenabled.mail.google.com is Mon Mar 14 19:39:12 2016 daemon.info dnsmasq[5396]: reply b.googlemail.l.google.com is 216.58.216.231 Mon Mar 14 19:39:12 2016 daemon.info dnsmasq[5396]: reply chatenabled.mail.google.com is Mon Mar 14 19:39:12 2016 daemon.info dnsmasq[5396]: reply b.googlemail.l.google.com is 216.58.216.231 Mon Mar 14 19:39:15 2016 daemon.info dnsmasq[5396]: query[A] play.google.com from 10.10.10.223 Mon Mar 14 19:39:15 2016 daemon.info dnsmasq[5396]: forwarded play.google.com to 192.168.1.1 Mon Mar 14 19:39:15 2016 daemon.info dnsmasq[5396]: query[AAAA] play.google.com from 10.10.10.223 Mon Mar 14 19:39:15 2016 daemon.info dnsmasq[5396]: forwarded play.google.com to 192.168.1.1 Mon Mar 14 19:39:15 2016 daemon.info dnsmasq[5396]: reply play.google.com is Mon Mar 14 19:39:15 2016 daemon.info dnsmasq[5396]: reply play.l.google.com is 216.58.216.238 Mon Mar 14 19:39:15 2016 daemon.info dnsmasq[5396]: reply play.google.com is Mon Mar 14 19:39:15 2016 daemon.info dnsmasq[5396]: reply play.l.google.com is 2607:f8b0:4009:809::200e Mon Mar 14 19:39:16 2016 daemon.info dnsmasq[5396]: query[AAAA] play.l.google.com from 10.10.10.223 Mon Mar 14 19:39:16 2016 daemon.info dnsmasq[5396]: cached play.l.google.com is 2607:f8b0:4009:809::200e Mon Mar 14 19:39:21 2016 daemon.info dnsmasq[5396]: query[A] ssl.google-analytics.com from 10.10.10.228 Mon Mar 14 19:39:21 2016 daemon.info dnsmasq[5396]: forwarded ssl.google-analytics.com to 192.168.1.1 Mon Mar 14 19:39:21 2016 daemon.info dnsmasq[5396]: query[AAAA] ssl.google-analytics.com from 10.10.10.228 Mon Mar 14 19:39:21 2016 daemon.info dnsmasq[5396]: forwarded ssl.google-analytics.com to 192.168.1.1 Mon Mar 14 19:39:21 2016 daemon.info dnsmasq[5396]: reply ssl.google-analytics.com is Mon Mar 14 19:39:21 2016 daemon.info dnsmasq[5396]: reply ssl-google-analytics.l.google.com is 216.58.216.232 Mon Mar 14 19:39:21 2016 daemon.info dnsmasq[5396]: query[A] ssl.google-analytics.com from 10.10.10.229 Mon Mar 14 19:39:21 2016 daemon.info dnsmasq[5396]: cached ssl.google-analytics.com is Mon Mar 14 19:39:21 2016 daemon.info dnsmasq[5396]: cached ssl-google-analytics.l.google.com is 216.58.216.232 Mon Mar 14 19:39:21 2016 daemon.info dnsmasq[5396]: query[AAAA] ssl.google-analytics.com from 10.10.10.229 Mon Mar 14 19:39:21 2016 daemon.info dnsmasq[5396]: cached ssl.google-analytics.com is Mon Mar 14 19:39:21 2016 daemon.info dnsmasq[5396]: forwarded ssl.google-analytics.com to 192.168.1.1 Mon Mar 14 19:39:21 2016 daemon.info dnsmasq[5396]: reply ssl.google-analytics.com is Mon Mar 14 19:39:21 2016 daemon.info dnsmasq[5396]: reply ssl-google-analytics.l.google.com is 2607:f8b0:4009:809::2008 Mon Mar 14 19:39:21 2016 daemon.info dnsmasq[5396]: reply ssl.google-analytics.com is Mon Mar 14 19:39:21 2016 daemon.info dnsmasq[5396]: reply ssl-google-analytics.l.google.com is 2607:f8b0:4009:809::2008 Mon Mar 14 19:39:34 2016 daemon.info dnsmasq[5396]: query[A] mscrl.microsoft.com from 10.10.10.228 Mon Mar 14 19:39:34 2016 daemon.info dnsmasq[5396]: forwarded mscrl.microsoft.com to 192.168.1.1 Mon Mar 14 19:39:34 2016 daemon.info dnsmasq[5396]: query[AAAA] mscrl.microsoft.com from 10.10.10.228 Mon Mar 14 19:39:34 2016 daemon.info dnsmasq[5396]: forwarded mscrl.microsoft.com to 192.168.1.1 Mon Mar 14 19:39:34 2016 daemon.info dnsmasq[5396]: query[A] mscrl.microsoft.com from 10.10.10.229 Mon Mar 14 19:39:34 2016 daemon.info dnsmasq[5396]: forwarded mscrl.microsoft.com to 192.168.1.1 Mon Mar 14 19:39:34 2016 daemon.info dnsmasq[5396]: reply mscrl.microsoft.com is Mon Mar 14 19:39:34 2016 daemon.info dnsmasq[5396]: reply certrevoc.vo.msecnd.net is Mon Mar 14 19:39:34 2016 daemon.info dnsmasq[5396]: reply cs3.wpc.v0cdn.net is 72.21.81.200 Mon Mar 14 19:39:34 2016 daemon.info dnsmasq[5396]: query[AAAA] mscrl.microsoft.com from 10.10.10.229 Mon Mar 14 19:39:34 2016 daemon.info dnsmasq[5396]: cached mscrl.microsoft.com is Mon Mar 14 19:39:34 2016 daemon.info dnsmasq[5396]: cached certrevoc.vo.msecnd.net is Mon Mar 14 19:39:34 2016 daemon.info dnsmasq[5396]: forwarded mscrl.microsoft.com to 192.168.1.1 Mon Mar 14 19:39:34 2016 daemon.info dnsmasq[5396]: reply mscrl.microsoft.com is Mon Mar 14 19:39:34 2016 daemon.info dnsmasq[5396]: reply certrevoc.vo.msecnd.net is Mon Mar 14 19:39:34 2016 daemon.info dnsmasq[5396]: reply cs3.wpc.v0cdn.net is 2606:2800:11f:17a5:191a:18d5:537:22f9 Mon Mar 14 19:39:34 2016 daemon.info dnsmasq[5396]: reply mscrl.microsoft.com is Mon Mar 14 19:39:34 2016 daemon.info dnsmasq[5396]: reply certrevoc.vo.msecnd.net is Mon Mar 14 19:39:34 2016 daemon.info dnsmasq[5396]: reply cs3.wpc.v0cdn.net is 72.21.81.200 Mon Mar 14 19:39:34 2016 daemon.info dnsmasq[5396]: reply mscrl.microsoft.com is Mon Mar 14 19:39:34 2016 daemon.info dnsmasq[5396]: reply certrevoc.vo.msecnd.net is Mon Mar 14 19:39:34 2016 daemon.info dnsmasq[5396]: reply cs3.wpc.v0cdn.net is 2606:2800:11f:17a5:191a:18d5:537:22f9 Mon Mar 14 19:39:34 2016 daemon.info dnsmasq[5396]: query[AAAA] mscrl.microsoft.com from 10.10.10.228 Mon Mar 14 19:39:34 2016 daemon.info dnsmasq[5396]: cached mscrl.microsoft.com is Mon Mar 14 19:39:34 2016 daemon.info dnsmasq[5396]: cached certrevoc.vo.msecnd.net is Mon Mar 14 19:39:34 2016 daemon.info dnsmasq[5396]: cached cs3.wpc.v0cdn.net is 2606:2800:11f:17a5:191a:18d5:537:22f9 Mon Mar 14 19:39:34 2016 daemon.info dnsmasq[5396]: query[A] mscrl.microsoft.com from 10.10.10.229 Mon Mar 14 19:39:34 2016 daemon.info dnsmasq[5396]: cached mscrl.microsoft.com is Mon Mar 14 19:39:34 2016 daemon.info dnsmasq[5396]: cached certrevoc.vo.msecnd.net is Mon Mar 14 19:39:34 2016 daemon.info dnsmasq[5396]: cached cs3.wpc.v0cdn.net is 72.21.81.200 Mon Mar 14 19:39:34 2016 daemon.info dnsmasq[5396]: query[AAAA] mscrl.microsoft.com from 10.10.10.229 Mon Mar 14 19:39:34 2016 daemon.info dnsmasq[5396]: cached mscrl.microsoft.com is Mon Mar 14 19:39:34 2016 daemon.info dnsmasq[5396]: cached certrevoc.vo.msecnd.net is Mon Mar 14 19:39:34 2016 daemon.info dnsmasq[5396]: cached cs3.wpc.v0cdn.net is 2606:2800:11f:17a5:191a:18d5:537:22f9 Mon Mar 14 19:39:35 2016 daemon.info dnsmasq[5396]: query[A] www.google-analytics.com from 10.10.10.228 Mon Mar 14 19:39:35 2016 daemon.info dnsmasq[5396]: forwarded www.google-analytics.com to 192.168.1.1 Mon Mar 14 19:39:35 2016 daemon.info dnsmasq[5396]: query[A] www.google-analytics.com from 10.10.10.229 Mon Mar 14 19:39:35 2016 daemon.info dnsmasq[5396]: forwarded www.google-analytics.com to 192.168.1.1 Mon Mar 14 19:39:35 2016 daemon.info dnsmasq[5396]: reply www.google-analytics.com is Mon Mar 14 19:39:35 2016 daemon.info dnsmasq[5396]: reply www-google-analytics.l.google.com is 216.58.216.238 Mon Mar 14 19:39:35 2016 daemon.info dnsmasq[5396]: reply www.google-analytics.com is Mon Mar 14 19:39:35 2016 daemon.info dnsmasq[5396]: reply www-google-analytics.l.google.com is 216.58.216.238 Mon Mar 14 19:39:37 2016 daemon.info dnsmasq[5396]: query[A] webhook.logentries.com from 10.10.10.228 Mon Mar 14 19:39:37 2016 daemon.info dnsmasq[5396]: forwarded webhook.logentries.com to 192.168.1.1 Mon Mar 14 19:39:37 2016 daemon.info dnsmasq[5396]: query[A] webhook.logentries.com from 10.10.10.229 Mon Mar 14 19:39:37 2016 daemon.info dnsmasq[5396]: forwarded webhook.logentries.com to 192.168.1.1 Mon Mar 14 19:39:37 2016 daemon.info dnsmasq[5396]: reply webhook.logentries.com is 54.246.209.52 Mon Mar 14 19:39:37 2016 daemon.info dnsmasq[5396]: reply webhook.logentries.com is 52.30.224.210 Mon Mar 14 19:39:37 2016 daemon.info dnsmasq[5396]: reply webhook.logentries.com is 54.229.19.14 Mon Mar 14 19:39:37 2016 daemon.info dnsmasq[5396]: reply webhook.logentries.com is 54.246.209.52 Mon Mar 14 19:39:37 2016 daemon.info dnsmasq[5396]: reply webhook.logentries.com is 52.30.224.210 Mon Mar 14 19:39:37 2016 daemon.info dnsmasq[5396]: reply webhook.logentries.com is 54.229.19.14 Mon Mar 14 19:39:37 2016 daemon.info dnsmasq[5396]: query[A] webhook.logentries.com from 10.10.10.228 Mon Mar 14 19:39:37 2016 daemon.info dnsmasq[5396]: cached webhook.logentries.com is 54.229.19.14 Mon Mar 14 19:39:37 2016 daemon.info dnsmasq[5396]: cached webhook.logentries.com is 52.30.224.210 Mon Mar 14 19:39:37 2016 daemon.info dnsmasq[5396]: cached webhook.logentries.com is 54.246.209.52 Mon Mar 14 19:39:37 2016 daemon.info dnsmasq[5396]: query[A] webhook.logentries.com from 10.10.10.229 Mon Mar 14 19:39:37 2016 daemon.info dnsmasq[5396]: cached webhook.logentries.com is 54.246.209.52 Mon Mar 14 19:39:37 2016 daemon.info dnsmasq[5396]: cached webhook.logentries.com is 54.229.19.14 Mon Mar 14 19:39:37 2016 daemon.info dnsmasq[5396]: cached webhook.logentries.com is 52.30.224.210 Mon Mar 14 19:39:44 2016 daemon.info dnsmasq[5396]: query[A] docs.google.com from 10.10.10.228 Mon Mar 14 19:39:44 2016 daemon.info dnsmasq[5396]: forwarded docs.google.com to 192.168.1.1 Mon Mar 14 19:39:44 2016 daemon.info dnsmasq[5396]: query[A] docs.google.com from 10.10.10.229 Mon Mar 14 19:39:44 2016 daemon.info dnsmasq[5396]: forwarded docs.google.com to 192.168.1.1 Mon Mar 14 19:39:44 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 74.125.193.113 Mon Mar 14 19:39:44 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 74.125.193.139 Mon Mar 14 19:39:44 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 74.125.193.101 Mon Mar 14 19:39:44 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 74.125.193.100 Mon Mar 14 19:39:44 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 74.125.193.138 Mon Mar 14 19:39:44 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 74.125.193.102 Mon Mar 14 19:39:44 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 74.125.193.113 Mon Mar 14 19:39:44 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 74.125.193.139 Mon Mar 14 19:39:44 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 74.125.193.101 Mon Mar 14 19:39:44 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 74.125.193.100 Mon Mar 14 19:39:44 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 74.125.193.138 Mon Mar 14 19:39:44 2016 daemon.info dnsmasq[5396]: reply docs.google.com is 74.125.193.102 Mon Mar 14 19:39:53 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:39:53 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:39:53 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:39:53 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:39:53 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:39:53 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:39:53 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:39:53 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:39:53 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:39:53 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:39:53 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:39:53 2016 daemon.info dnsmasq[5396]: reply pool2.moatads.com is 54.86.68.156 Mon Mar 14 19:39:53 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:39:53 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:39:53 2016 daemon.info dnsmasq[5396]: reply pool2.moatads.com is NODATA-IPv6 Mon Mar 14 19:39:53 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:39:53 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:39:53 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:39:53 2016 daemon.info dnsmasq[5396]: cached pool2.moatads.com is NODATA-IPv6 Mon Mar 14 19:39:53 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:39:53 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:39:53 2016 daemon.info dnsmasq[5396]: reply pool2.moatads.com is 54.86.68.156 Mon Mar 14 19:40:00 2016 cron.info crond[3202]: USER root pid 6116 cmd /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Mon Mar 14 19:40:00 2016 daemon.info dnsmasq[5396]: query[A] 0.us.pool.ntp.org from 127.0.0.1 Mon Mar 14 19:40:00 2016 daemon.info dnsmasq[5396]: forwarded 0.us.pool.ntp.org to 192.168.1.1 Mon Mar 14 19:40:00 2016 daemon.info dnsmasq[5396]: reply 0.us.pool.ntp.org is 208.75.89.4 Mon Mar 14 19:40:00 2016 daemon.info dnsmasq[5396]: reply 0.us.pool.ntp.org is 132.163.4.101 Mon Mar 14 19:40:00 2016 daemon.info dnsmasq[5396]: reply 0.us.pool.ntp.org is 129.250.35.250 Mon Mar 14 19:40:00 2016 daemon.info dnsmasq[5396]: reply 0.us.pool.ntp.org is 104.131.53.252 Mon Mar 14 19:40:01 2016 daemon.info dnsmasq[5396]: query[A] time-ios.apple.com from 10.10.10.216 Mon Mar 14 19:40:01 2016 daemon.info dnsmasq[5396]: forwarded time-ios.apple.com to 192.168.1.1 Mon Mar 14 19:40:01 2016 daemon.info dnsmasq[5396]: query[AAAA] time-ios.apple.com from 10.10.10.216 Mon Mar 14 19:40:01 2016 daemon.info dnsmasq[5396]: forwarded time-ios.apple.com to 192.168.1.1 Mon Mar 14 19:40:01 2016 daemon.info dnsmasq[5396]: reply time-ios.apple.com is Mon Mar 14 19:40:01 2016 daemon.info dnsmasq[5396]: reply time-ios.g.aaplimg.com is 17.253.2.125 Mon Mar 14 19:40:01 2016 daemon.info dnsmasq[5396]: reply time-ios.g.aaplimg.com is 17.253.24.253 Mon Mar 14 19:40:01 2016 daemon.info dnsmasq[5396]: reply time-ios.g.aaplimg.com is 17.253.2.253 Mon Mar 14 19:40:01 2016 daemon.info dnsmasq[5396]: query[A] partiality.itunes-apple.com.akadns.net from 10.10.10.216 Mon Mar 14 19:40:01 2016 daemon.info dnsmasq[5396]: forwarded partiality.itunes-apple.com.akadns.net to 192.168.1.1 Mon Mar 14 19:40:01 2016 daemon.info dnsmasq[5396]: query[AAAA] partiality.itunes-apple.com.akadns.net from 10.10.10.216 Mon Mar 14 19:40:01 2016 daemon.info dnsmasq[5396]: cached partiality.itunes-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:40:01 2016 daemon.info dnsmasq[5396]: reply time-ios.apple.com is Mon Mar 14 19:40:01 2016 daemon.info dnsmasq[5396]: reply time-ios.g.aaplimg.com is NODATA-IPv6 Mon Mar 14 19:40:01 2016 daemon.info dnsmasq[5396]: reply partiality.itunes-apple.com.akadns.net is 17.173.66.74 Mon Mar 14 19:40:01 2016 daemon.info dnsmasq[5396]: reply partiality.itunes-apple.com.akadns.net is 17.173.66.75 Mon Mar 14 19:40:01 2016 daemon.info dnsmasq[5396]: reply partiality.itunes-apple.com.akadns.net is 17.173.66.73 Mon Mar 14 19:40:01 2016 daemon.info dnsmasq[5396]: query[AAAA] time-ios.g.aaplimg.com from 10.10.10.216 Mon Mar 14 19:40:01 2016 daemon.info dnsmasq[5396]: cached time-ios.g.aaplimg.com is NODATA-IPv6 Mon Mar 14 19:40:02 2016 daemon.info dnsmasq[5396]: query[AAAA] e7542.e9.akamaiedge.net from 10.10.10.216 Mon Mar 14 19:40:02 2016 daemon.info dnsmasq[5396]: cached e7542.e9.akamaiedge.net is NODATA-IPv6 Mon Mar 14 19:40:02 2016 daemon.info dnsmasq[5396]: query[A] e7542.e9.akamaiedge.net from 10.10.10.216 Mon Mar 14 19:40:02 2016 daemon.info dnsmasq[5396]: forwarded e7542.e9.akamaiedge.net to 192.168.1.1 Mon Mar 14 19:40:02 2016 daemon.info dnsmasq[5396]: reply e7542.e9.akamaiedge.net is 23.211.186.161 Mon Mar 14 19:40:03 2016 daemon.info dnsmasq[5396]: query[AAAA] p29-keyvalueservice-current.edge.icloud.apple-dns.net from 10.10.10.216 Mon Mar 14 19:40:03 2016 daemon.info dnsmasq[5396]: forwarded p29-keyvalueservice-current.edge.icloud.apple-dns.net to 192.168.1.1 Mon Mar 14 19:40:03 2016 daemon.info dnsmasq[5396]: query[A] p29-keyvalueservice-current.edge.icloud.apple-dns.net from 10.10.10.216 Mon Mar 14 19:40:03 2016 daemon.info dnsmasq[5396]: forwarded p29-keyvalueservice-current.edge.icloud.apple-dns.net to 192.168.1.1 Mon Mar 14 19:40:03 2016 daemon.info dnsmasq[5396]: reply p29-keyvalueservice-current.edge.icloud.apple-dns.net is 17.248.139.44 Mon Mar 14 19:40:08 2016 daemon.info dnsmasq[5396]: query[A] ssl.gstatic.com from 10.10.10.228 Mon Mar 14 19:40:08 2016 daemon.info dnsmasq[5396]: forwarded ssl.gstatic.com to 192.168.1.1 Mon Mar 14 19:40:08 2016 daemon.info dnsmasq[5396]: query[A] ssl.gstatic.com from 10.10.10.229 Mon Mar 14 19:40:08 2016 daemon.info dnsmasq[5396]: forwarded ssl.gstatic.com to 192.168.1.1 Mon Mar 14 19:40:08 2016 daemon.info dnsmasq[5396]: reply ssl.gstatic.com is 216.58.216.227 Mon Mar 14 19:40:08 2016 daemon.info dnsmasq[5396]: reply ssl.gstatic.com is 216.58.216.227 Mon Mar 14 19:40:10 2016 daemon.info dnsmasq[5396]: query[SOA] local from 10.10.10.223 Mon Mar 14 19:40:10 2016 daemon.info dnsmasq[5396]: config local is NODATA Mon Mar 14 19:40:10 2016 daemon.info dnsmasq[5396]: query[SOA] local from 10.10.10.223 Mon Mar 14 19:40:10 2016 daemon.info dnsmasq[5396]: config local is NODATA Mon Mar 14 19:40:11 2016 daemon.info dnsmasq[5396]: query[A] MacBook_Denise.lan from 10.10.10.223 Mon Mar 14 19:40:11 2016 daemon.info dnsmasq[5396]: DHCP MacBook_Denise.lan is 10.10.10.223 Mon Mar 14 19:40:11 2016 daemon.info dnsmasq[5396]: query[AAAA] MacBook_Denise.lan from 10.10.10.223 Mon Mar 14 19:40:11 2016 daemon.info dnsmasq[5396]: config MacBook_Denise.lan is NODATA-IPv6 Mon Mar 14 19:40:16 2016 daemon.info dnsmasq[5396]: query[A] ubp-common-us-prod.s3.amazonaws.com from 10.10.10.223 Mon Mar 14 19:40:16 2016 daemon.info dnsmasq[5396]: forwarded ubp-common-us-prod.s3.amazonaws.com to 192.168.1.1 Mon Mar 14 19:40:16 2016 daemon.info dnsmasq[5396]: reply ubp-common-us-prod.s3.amazonaws.com is Mon Mar 14 19:40:16 2016 daemon.info dnsmasq[5396]: reply s3-us-west-2-w.amazonaws.com is 54.231.168.118 Mon Mar 14 19:40:18 2016 daemon.info dnsmasq[5396]: query[A] clients2.google.com from 10.10.10.228 Mon Mar 14 19:40:18 2016 daemon.info dnsmasq[5396]: cached clients2.google.com is Mon Mar 14 19:40:18 2016 daemon.info dnsmasq[5396]: cached clients.l.google.com is 216.58.216.110 Mon Mar 14 19:40:18 2016 daemon.info dnsmasq[5396]: query[A] clients2.google.com from 10.10.10.229 Mon Mar 14 19:40:18 2016 daemon.info dnsmasq[5396]: cached clients2.google.com is Mon Mar 14 19:40:18 2016 daemon.info dnsmasq[5396]: cached clients.l.google.com is 216.58.216.110 Mon Mar 14 19:40:31 2016 daemon.info dnsmasq[5396]: query[AAAA] app.procentive.com from 10.10.10.223 Mon Mar 14 19:40:31 2016 daemon.info dnsmasq[5396]: forwarded app.procentive.com to 192.168.1.1 Mon Mar 14 19:40:41 2016 daemon.info dnsmasq[5396]: query[A] lastpass.com from 10.10.10.223 Mon Mar 14 19:40:41 2016 daemon.info dnsmasq[5396]: forwarded lastpass.com to 192.168.1.1 Mon Mar 14 19:40:41 2016 daemon.info dnsmasq[5396]: reply lastpass.com is 128.121.22.176 Mon Mar 14 19:40:41 2016 daemon.info dnsmasq[5396]: reply lastpass.com is 38.127.167.48 Mon Mar 14 19:40:48 2016 daemon.info dnsmasq[5396]: query[AAAA] google.com from 10.10.10.223 Mon Mar 14 19:40:48 2016 daemon.info dnsmasq[5396]: forwarded google.com to 192.168.1.1 Mon Mar 14 19:40:48 2016 daemon.info dnsmasq[5396]: query[A] google.com from 10.10.10.223 Mon Mar 14 19:40:48 2016 daemon.info dnsmasq[5396]: forwarded google.com to 192.168.1.1 Mon Mar 14 19:40:48 2016 daemon.info dnsmasq[5396]: reply google.com is 2607:f8b0:4009:80b::200e Mon Mar 14 19:40:48 2016 daemon.info dnsmasq[5396]: reply google.com is 173.194.196.100 Mon Mar 14 19:40:48 2016 daemon.info dnsmasq[5396]: reply google.com is 173.194.196.113 Mon Mar 14 19:40:48 2016 daemon.info dnsmasq[5396]: reply google.com is 173.194.196.139 Mon Mar 14 19:40:48 2016 daemon.info dnsmasq[5396]: reply google.com is 173.194.196.101 Mon Mar 14 19:40:48 2016 daemon.info dnsmasq[5396]: reply google.com is 173.194.196.138 Mon Mar 14 19:40:48 2016 daemon.info dnsmasq[5396]: reply google.com is 173.194.196.102 Mon Mar 14 19:40:48 2016 daemon.info dnsmasq[5396]: query[AAAA] p44-contacts-current.edge.icloud.apple-dns.net from 10.10.10.223 Mon Mar 14 19:40:48 2016 daemon.info dnsmasq[5396]: cached p44-contacts-current.edge.icloud.apple-dns.net is NODATA-IPv6 Mon Mar 14 19:40:48 2016 daemon.info dnsmasq[5396]: query[A] p44-contacts-current.edge.icloud.apple-dns.net from 10.10.10.223 Mon Mar 14 19:40:48 2016 daemon.info dnsmasq[5396]: forwarded p44-contacts-current.edge.icloud.apple-dns.net to 192.168.1.1 Mon Mar 14 19:40:48 2016 daemon.info dnsmasq[5396]: reply p44-contacts-current.edge.icloud.apple-dns.net is 17.248.129.238 Mon Mar 14 19:40:50 2016 daemon.info dnsmasq[5396]: query[AAAA] p03-keyvalueservice-current.edge.icloud.apple-dns.net from 10.10.10.223 Mon Mar 14 19:40:50 2016 daemon.info dnsmasq[5396]: cached p03-keyvalueservice-current.edge.icloud.apple-dns.net is NODATA-IPv6 Mon Mar 14 19:40:50 2016 daemon.info dnsmasq[5396]: query[A] p03-keyvalueservice-current.edge.icloud.apple-dns.net from 10.10.10.223 Mon Mar 14 19:40:50 2016 daemon.info dnsmasq[5396]: forwarded p03-keyvalueservice-current.edge.icloud.apple-dns.net to 192.168.1.1 Mon Mar 14 19:40:50 2016 daemon.info dnsmasq[5396]: reply p03-keyvalueservice-current.edge.icloud.apple-dns.net is 17.248.129.241 Mon Mar 14 19:40:52 2016 daemon.info dnsmasq[5396]: query[AAAA] p44-keyvalueservice-current.edge.icloud.apple-dns.net from 10.10.10.211 Mon Mar 14 19:40:52 2016 daemon.info dnsmasq[5396]: forwarded p44-keyvalueservice-current.edge.icloud.apple-dns.net to 192.168.1.1 Mon Mar 14 19:40:52 2016 daemon.info dnsmasq[5396]: query[A] p44-keyvalueservice-current.edge.icloud.apple-dns.net from 10.10.10.211 Mon Mar 14 19:40:52 2016 daemon.info dnsmasq[5396]: forwarded p44-keyvalueservice-current.edge.icloud.apple-dns.net to 192.168.1.1 Mon Mar 14 19:40:52 2016 daemon.info dnsmasq[5396]: reply p44-keyvalueservice-current.edge.icloud.apple-dns.net is 17.248.131.144 Mon Mar 14 19:40:53 2016 daemon.info dnsmasq[5396]: query[AAAA] apple.com from 10.10.10.211 Mon Mar 14 19:40:53 2016 daemon.info dnsmasq[5396]: forwarded apple.com to 192.168.1.1 Mon Mar 14 19:40:53 2016 daemon.info dnsmasq[5396]: query[AAAA] st14p02sa.guzzoni-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 19:40:53 2016 daemon.info dnsmasq[5396]: cached st14p02sa.guzzoni-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:40:53 2016 daemon.info dnsmasq[5396]: query[AAAA] api.smoot-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 19:40:53 2016 daemon.info dnsmasq[5396]: cached api.smoot-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:40:53 2016 daemon.info dnsmasq[5396]: query[AAAA] e6858.dscc.akamaiedge.net from 10.10.10.211 Mon Mar 14 19:40:53 2016 daemon.info dnsmasq[5396]: forwarded e6858.dscc.akamaiedge.net to 192.168.1.1 Mon Mar 14 19:40:53 2016 daemon.info dnsmasq[5396]: query[A] e6858.dscc.akamaiedge.net from 10.10.10.211 Mon Mar 14 19:40:53 2016 daemon.info dnsmasq[5396]: forwarded e6858.dscc.akamaiedge.net to 192.168.1.1 Mon Mar 14 19:40:53 2016 daemon.info dnsmasq[5396]: reply e6858.dscc.akamaiedge.net is 2600:1404:e:194::1aca Mon Mar 14 19:40:53 2016 daemon.info dnsmasq[5396]: reply e6858.dscc.akamaiedge.net is 2600:1404:e:18d::1aca Mon Mar 14 19:40:53 2016 daemon.info dnsmasq[5396]: reply e6858.dscc.akamaiedge.net is 23.12.245.148 Mon Mar 14 19:40:53 2016 daemon.info dnsmasq[5396]: query[AAAA] p44-keyvalueservice-current.edge.icloud.apple-dns.net from 10.10.10.143 Mon Mar 14 19:40:53 2016 daemon.info dnsmasq[5396]: forwarded p44-keyvalueservice-current.edge.icloud.apple-dns.net to 192.168.1.1 Mon Mar 14 19:40:53 2016 daemon.info dnsmasq[5396]: query[A] p44-keyvalueservice-current.edge.icloud.apple-dns.net from 10.10.10.143 Mon Mar 14 19:40:53 2016 daemon.info dnsmasq[5396]: cached p44-keyvalueservice-current.edge.icloud.apple-dns.net is 17.248.131.144 Mon Mar 14 19:40:53 2016 kern.debug kernel: [ 3396.739871] Port 2 receive error code 10, packet dropped Mon Mar 14 19:40:53 2016 kern.debug kernel: [ 3396.739891] Port 2 receive error code 10, packet dropped Mon Mar 14 19:40:53 2016 kern.debug kernel: [ 3396.739924] Port 2 receive error code 10, packet dropped Mon Mar 14 19:40:55 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:40:55 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:41:00 2016 daemon.info dnsmasq[5396]: query[A] time-ios.apple.com from 10.10.10.143 Mon Mar 14 19:41:00 2016 daemon.info dnsmasq[5396]: cached time-ios.apple.com is Mon Mar 14 19:41:00 2016 daemon.info dnsmasq[5396]: forwarded time-ios.apple.com to 192.168.1.1 Mon Mar 14 19:41:00 2016 daemon.info dnsmasq[5396]: query[AAAA] time-ios.apple.com from 10.10.10.143 Mon Mar 14 19:41:00 2016 daemon.info dnsmasq[5396]: cached time-ios.apple.com is Mon Mar 14 19:41:00 2016 daemon.info dnsmasq[5396]: cached time-ios.g.aaplimg.com is NODATA-IPv6 Mon Mar 14 19:41:00 2016 daemon.info dnsmasq[5396]: query[AAAA] time-ios.g.aaplimg.com from 10.10.10.143 Mon Mar 14 19:41:00 2016 daemon.info dnsmasq[5396]: cached time-ios.g.aaplimg.com is NODATA-IPv6 Mon Mar 14 19:41:00 2016 daemon.info dnsmasq[5396]: query[A] time-ios.g.aaplimg.com from 10.10.10.143 Mon Mar 14 19:41:00 2016 daemon.info dnsmasq[5396]: forwarded time-ios.g.aaplimg.com to 192.168.1.1 Mon Mar 14 19:41:00 2016 daemon.info dnsmasq[5396]: reply time-ios.apple.com is Mon Mar 14 19:41:00 2016 daemon.info dnsmasq[5396]: reply time-ios.g.aaplimg.com is 17.253.24.253 Mon Mar 14 19:41:00 2016 daemon.info dnsmasq[5396]: reply time-ios.g.aaplimg.com is 17.253.2.253 Mon Mar 14 19:41:00 2016 daemon.info dnsmasq[5396]: reply time-ios.g.aaplimg.com is 17.253.2.125 Mon Mar 14 19:41:00 2016 daemon.info dnsmasq[5396]: reply time-ios.g.aaplimg.com is 17.253.24.253 Mon Mar 14 19:41:00 2016 daemon.info dnsmasq[5396]: reply time-ios.g.aaplimg.com is 17.253.2.253 Mon Mar 14 19:41:00 2016 daemon.info dnsmasq[5396]: reply time-ios.g.aaplimg.com is 17.253.2.125 Mon Mar 14 19:41:12 2016 daemon.info dnsmasq[5396]: query[A] 9.client-channel.google.com from 10.10.10.223 Mon Mar 14 19:41:12 2016 daemon.info dnsmasq[5396]: forwarded 9.client-channel.google.com to 192.168.1.1 Mon Mar 14 19:41:12 2016 daemon.info dnsmasq[5396]: reply 9.client-channel.google.com is 74.125.193.189 Mon Mar 14 19:41:23 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:41:23 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:41:23 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:41:23 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:41:23 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:41:23 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:41:23 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:41:23 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:41:23 2016 daemon.info dnsmasq[5396]: reply pool3.moatads.com is 54.209.55.182 Mon Mar 14 19:41:23 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:41:23 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:41:23 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:41:23 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:41:23 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:41:23 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:41:23 2016 daemon.info dnsmasq[5396]: reply pool3.moatads.com is 54.209.55.182 Mon Mar 14 19:41:23 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:41:23 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:41:23 2016 daemon.info dnsmasq[5396]: reply pool5.moatads.com is NODATA-IPv6 Mon Mar 14 19:41:23 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:41:23 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:41:23 2016 daemon.info dnsmasq[5396]: reply pool5.moatads.com is NODATA-IPv6 Mon Mar 14 19:41:23 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:41:23 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:41:23 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:41:23 2016 daemon.info dnsmasq[5396]: cached pool5.moatads.com is NODATA-IPv6 Mon Mar 14 19:41:23 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:41:23 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:41:23 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:41:23 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:41:23 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:41:23 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:41:23 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:41:23 2016 daemon.info dnsmasq[5396]: cached pool5.moatads.com is NODATA-IPv6 Mon Mar 14 19:41:23 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:41:23 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:41:23 2016 daemon.info dnsmasq[5396]: reply pool5.moatads.com is 54.172.26.13 Mon Mar 14 19:41:32 2016 daemon.info dnsmasq[5396]: query[AAAA] app.procentive.com from 10.10.10.223 Mon Mar 14 19:41:32 2016 daemon.info dnsmasq[5396]: forwarded app.procentive.com to 192.168.1.1 Mon Mar 14 19:41:32 2016 daemon.info dnsmasq[5396]: query[A] app.procentive.com from 10.10.10.223 Mon Mar 14 19:41:32 2016 daemon.info dnsmasq[5396]: cached app.procentive.com is 66.179.249.115 Mon Mar 14 19:41:58 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:41:58 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:42:33 2016 daemon.info dnsmasq[5396]: query[A] app.procentive.com from 10.10.10.223 Mon Mar 14 19:42:33 2016 daemon.info dnsmasq[5396]: cached app.procentive.com is 66.179.249.115 Mon Mar 14 19:42:33 2016 daemon.info dnsmasq[5396]: query[AAAA] app.procentive.com from 10.10.10.223 Mon Mar 14 19:42:33 2016 daemon.info dnsmasq[5396]: forwarded app.procentive.com to 192.168.1.1 Mon Mar 14 19:42:33 2016 daemon.info dnsmasq[5396]: query[A] clients4.google.com from 10.10.10.223 Mon Mar 14 19:42:33 2016 daemon.info dnsmasq[5396]: forwarded clients4.google.com to 192.168.1.1 Mon Mar 14 19:42:33 2016 daemon.info dnsmasq[5396]: query[AAAA] clients4.google.com from 10.10.10.223 Mon Mar 14 19:42:33 2016 daemon.info dnsmasq[5396]: forwarded clients4.google.com to 192.168.1.1 Mon Mar 14 19:42:33 2016 daemon.info dnsmasq[5396]: reply clients4.google.com is Mon Mar 14 19:42:33 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 74.125.193.100 Mon Mar 14 19:42:33 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 74.125.193.102 Mon Mar 14 19:42:33 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 74.125.193.138 Mon Mar 14 19:42:33 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 74.125.193.139 Mon Mar 14 19:42:33 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 74.125.193.113 Mon Mar 14 19:42:33 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 74.125.193.101 Mon Mar 14 19:42:33 2016 daemon.info dnsmasq[5396]: reply clients4.google.com is Mon Mar 14 19:42:33 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 2607:f8b0:4009:80b::200e Mon Mar 14 19:42:33 2016 daemon.info dnsmasq[5396]: query[AAAA] clients.l.google.com from 10.10.10.223 Mon Mar 14 19:42:33 2016 daemon.info dnsmasq[5396]: cached clients.l.google.com is 2607:f8b0:4009:80b::200e Mon Mar 14 19:42:36 2016 daemon.info dnsmasq[5396]: query[AAAA] nexus.officeapps.live.com from 10.10.10.223 Mon Mar 14 19:42:36 2016 daemon.info dnsmasq[5396]: forwarded nexus.officeapps.live.com to 192.168.1.1 Mon Mar 14 19:42:36 2016 daemon.info dnsmasq[5396]: query[A] nexus.officeapps.live.com from 10.10.10.223 Mon Mar 14 19:42:36 2016 daemon.info dnsmasq[5396]: forwarded nexus.officeapps.live.com to 192.168.1.1 Mon Mar 14 19:42:36 2016 daemon.info dnsmasq[5396]: reply nexus.officeapps.live.com is Mon Mar 14 19:42:36 2016 daemon.info dnsmasq[5396]: reply prod-w.nexus.live.com.akadns.net is 65.52.26.28 Mon Mar 14 19:42:36 2016 daemon.info dnsmasq[5396]: reply nexus.officeapps.live.com is Mon Mar 14 19:42:36 2016 daemon.info dnsmasq[5396]: reply prod-w.nexus.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:42:36 2016 daemon.info dnsmasq[5396]: query[AAAA] prod-w.nexus.live.com.akadns.net from 10.10.10.223 Mon Mar 14 19:42:36 2016 daemon.info dnsmasq[5396]: cached prod-w.nexus.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:42:49 2016 daemon.info dnsmasq[5396]: query[A] clients2.google.com from 10.10.10.228 Mon Mar 14 19:42:49 2016 daemon.info dnsmasq[5396]: forwarded clients2.google.com to 192.168.1.1 Mon Mar 14 19:42:49 2016 daemon.info dnsmasq[5396]: query[A] clients2.google.com from 10.10.10.229 Mon Mar 14 19:42:49 2016 daemon.info dnsmasq[5396]: forwarded clients2.google.com to 192.168.1.1 Mon Mar 14 19:42:49 2016 daemon.info dnsmasq[5396]: reply clients2.google.com is Mon Mar 14 19:42:49 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 74.125.193.138 Mon Mar 14 19:42:49 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 74.125.193.139 Mon Mar 14 19:42:49 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 74.125.193.113 Mon Mar 14 19:42:49 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 74.125.193.101 Mon Mar 14 19:42:49 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 74.125.193.100 Mon Mar 14 19:42:49 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 74.125.193.102 Mon Mar 14 19:42:49 2016 daemon.info dnsmasq[5396]: reply clients2.google.com is Mon Mar 14 19:42:49 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 74.125.193.138 Mon Mar 14 19:42:49 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 74.125.193.139 Mon Mar 14 19:42:49 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 74.125.193.113 Mon Mar 14 19:42:49 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 74.125.193.101 Mon Mar 14 19:42:49 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 74.125.193.100 Mon Mar 14 19:42:49 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 74.125.193.102 Mon Mar 14 19:42:53 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:42:53 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:42:53 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:42:53 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:42:53 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:42:53 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:42:53 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:42:53 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:42:53 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:42:53 2016 daemon.info dnsmasq[5396]: reply pool5.moatads.com is 54.84.25.136 Mon Mar 14 19:42:53 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:42:53 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:42:53 2016 daemon.info dnsmasq[5396]: reply pool5.moatads.com is NODATA-IPv6 Mon Mar 14 19:42:53 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:42:53 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:42:53 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:42:53 2016 daemon.info dnsmasq[5396]: cached pool5.moatads.com is NODATA-IPv6 Mon Mar 14 19:42:53 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:42:53 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:42:53 2016 daemon.info dnsmasq[5396]: reply pool5.moatads.com is 54.84.25.136 Mon Mar 14 19:43:06 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:43:06 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:43:30 2016 daemon.info dnsmasq[5396]: query[AAAA] prod.ocws.live.com.akadns.net from 10.10.10.223 Mon Mar 14 19:43:30 2016 daemon.info dnsmasq[5396]: forwarded prod.ocws.live.com.akadns.net to 192.168.1.1 Mon Mar 14 19:43:30 2016 daemon.info dnsmasq[5396]: query[A] prod.ocws.live.com.akadns.net from 10.10.10.223 Mon Mar 14 19:43:30 2016 daemon.info dnsmasq[5396]: forwarded prod.ocws.live.com.akadns.net to 192.168.1.1 Mon Mar 14 19:43:30 2016 daemon.info dnsmasq[5396]: reply prod.ocws.live.com.akadns.net is Mon Mar 14 19:43:30 2016 daemon.info dnsmasq[5396]: reply ncus-ocws.officeapps.live.com is Mon Mar 14 19:43:30 2016 daemon.info dnsmasq[5396]: reply osiprod-ncus-flax-000.cloudapp.net is 168.62.106.152 Mon Mar 14 19:43:30 2016 daemon.info dnsmasq[5396]: reply prod.ocws.live.com.akadns.net is Mon Mar 14 19:43:30 2016 daemon.info dnsmasq[5396]: reply ncus-ocws.officeapps.live.com is Mon Mar 14 19:43:30 2016 daemon.info dnsmasq[5396]: reply osiprod-ncus-flax-000.cloudapp.net is NODATA-IPv6 Mon Mar 14 19:43:31 2016 daemon.info dnsmasq[5396]: query[AAAA] osiprod-ncus-flax-000.cloudapp.net from 10.10.10.223 Mon Mar 14 19:43:31 2016 daemon.info dnsmasq[5396]: cached osiprod-ncus-flax-000.cloudapp.net is NODATA-IPv6 Mon Mar 14 19:44:15 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:44:15 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:44:15 2016 daemon.info dnsmasq[5396]: query[A] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:44:15 2016 daemon.info dnsmasq[5396]: forwarded skydocs.skyprod.akadns.net to 192.168.1.1 Mon Mar 14 19:44:15 2016 daemon.info dnsmasq[5396]: reply skydocs.skyprod.akadns.net is 134.170.106.24 Mon Mar 14 19:44:23 2016 daemon.info dnsmasq[5396]: query[A] chatenabled.mail.google.com from 10.10.10.228 Mon Mar 14 19:44:23 2016 daemon.info dnsmasq[5396]: forwarded chatenabled.mail.google.com to 192.168.1.1 Mon Mar 14 19:44:23 2016 daemon.info dnsmasq[5396]: query[A] chatenabled.mail.google.com from 10.10.10.229 Mon Mar 14 19:44:23 2016 daemon.info dnsmasq[5396]: forwarded chatenabled.mail.google.com to 192.168.1.1 Mon Mar 14 19:44:23 2016 daemon.info dnsmasq[5396]: reply chatenabled.mail.google.com is Mon Mar 14 19:44:23 2016 daemon.info dnsmasq[5396]: reply b.googlemail.l.google.com is 216.58.216.231 Mon Mar 14 19:44:23 2016 daemon.info dnsmasq[5396]: reply chatenabled.mail.google.com is Mon Mar 14 19:44:23 2016 daemon.info dnsmasq[5396]: reply b.googlemail.l.google.com is 216.58.216.231 Mon Mar 14 19:44:24 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:44:24 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:44:24 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:44:24 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:44:24 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:44:24 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:44:24 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:44:24 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:44:24 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:44:24 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:44:24 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:44:24 2016 daemon.info dnsmasq[5396]: reply pool5.moatads.com is 52.90.20.73 Mon Mar 14 19:44:24 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:44:24 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:44:24 2016 daemon.info dnsmasq[5396]: reply pool5.moatads.com is NODATA-IPv6 Mon Mar 14 19:44:24 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:44:24 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:44:24 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:44:24 2016 daemon.info dnsmasq[5396]: cached pool5.moatads.com is NODATA-IPv6 Mon Mar 14 19:44:24 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:44:24 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:44:24 2016 daemon.info dnsmasq[5396]: reply pool5.moatads.com is 52.90.20.73 Mon Mar 14 19:44:28 2016 daemon.info dnsmasq[5396]: query[AAAA] app.procentive.com from 10.10.10.223 Mon Mar 14 19:44:28 2016 daemon.info dnsmasq[5396]: forwarded app.procentive.com to 192.168.1.1 Mon Mar 14 19:44:59 2016 daemon.info dnsmasq[5396]: query[AAAA] 9.client-channel.google.com from 10.10.10.223 Mon Mar 14 19:44:59 2016 daemon.info dnsmasq[5396]: forwarded 9.client-channel.google.com to 192.168.1.1 Mon Mar 14 19:44:59 2016 daemon.info dnsmasq[5396]: reply 9.client-channel.google.com is 2607:f8b0:4001:c05::bd Mon Mar 14 19:45:22 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:45:22 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:45:26 2016 daemon.info dnsmasq[5396]: query[AAAA] outlook.office365.com from 10.10.10.143 Mon Mar 14 19:45:26 2016 daemon.info dnsmasq[5396]: forwarded outlook.office365.com to 192.168.1.1 Mon Mar 14 19:45:26 2016 daemon.info dnsmasq[5396]: query[A] outlook.office365.com from 10.10.10.143 Mon Mar 14 19:45:26 2016 daemon.info dnsmasq[5396]: forwarded outlook.office365.com to 192.168.1.1 Mon Mar 14 19:45:26 2016 daemon.info dnsmasq[5396]: reply outlook.office365.com is Mon Mar 14 19:45:26 2016 daemon.info dnsmasq[5396]: reply lb.geo.office365.com is Mon Mar 14 19:45:26 2016 daemon.info dnsmasq[5396]: reply outlook.office365.com.g.office365.com is Mon Mar 14 19:45:26 2016 daemon.info dnsmasq[5396]: reply outlook-namcentral2.office365.com is 2a01:111:f400:2dc5::2 Mon Mar 14 19:45:26 2016 daemon.info dnsmasq[5396]: reply outlook-namcentral2.office365.com is 2a01:111:f400:2cd4::2 Mon Mar 14 19:45:26 2016 daemon.info dnsmasq[5396]: reply outlook-namcentral2.office365.com is 2a01:111:f400:53e3::2 Mon Mar 14 19:45:26 2016 daemon.info dnsmasq[5396]: reply outlook-namcentral2.office365.com is 2a01:111:f400:2d75::2 Mon Mar 14 19:45:26 2016 daemon.info dnsmasq[5396]: reply outlook-namcentral2.office365.com is 2a01:111:f400:7021::2 Mon Mar 14 19:45:26 2016 daemon.info dnsmasq[5396]: reply outlook-namcentral2.office365.com is 2a01:111:f400:5173::2 Mon Mar 14 19:45:26 2016 daemon.info dnsmasq[5396]: reply outlook-namcentral2.office365.com is 2a01:111:f400:2cd5::2 Mon Mar 14 19:45:26 2016 daemon.info dnsmasq[5396]: reply outlook.office365.com is Mon Mar 14 19:45:26 2016 daemon.info dnsmasq[5396]: reply lb.geo.office365.com is Mon Mar 14 19:45:26 2016 daemon.info dnsmasq[5396]: reply outlook.office365.com.g.office365.com is Mon Mar 14 19:45:26 2016 daemon.info dnsmasq[5396]: reply outlook-namcentral2.office365.com is 132.245.36.50 Mon Mar 14 19:45:26 2016 daemon.info dnsmasq[5396]: reply outlook-namcentral2.office365.com is 132.245.247.210 Mon Mar 14 19:45:26 2016 daemon.info dnsmasq[5396]: reply outlook-namcentral2.office365.com is 132.245.247.194 Mon Mar 14 19:45:26 2016 daemon.info dnsmasq[5396]: reply outlook-namcentral2.office365.com is 132.245.75.98 Mon Mar 14 19:45:26 2016 daemon.info dnsmasq[5396]: reply outlook-namcentral2.office365.com is 132.245.253.114 Mon Mar 14 19:45:26 2016 daemon.info dnsmasq[5396]: reply outlook-namcentral2.office365.com is 132.245.79.194 Mon Mar 14 19:45:26 2016 daemon.info dnsmasq[5396]: reply outlook-namcentral2.office365.com is 40.96.0.114 Mon Mar 14 19:45:26 2016 daemon.info dnsmasq[5396]: query[A] outlook-namcentral2.office365.com from 10.10.10.143 Mon Mar 14 19:45:26 2016 daemon.info dnsmasq[5396]: cached outlook-namcentral2.office365.com is 40.96.0.114 Mon Mar 14 19:45:26 2016 daemon.info dnsmasq[5396]: cached outlook-namcentral2.office365.com is 132.245.79.194 Mon Mar 14 19:45:26 2016 daemon.info dnsmasq[5396]: cached outlook-namcentral2.office365.com is 132.245.253.114 Mon Mar 14 19:45:26 2016 daemon.info dnsmasq[5396]: cached outlook-namcentral2.office365.com is 132.245.75.98 Mon Mar 14 19:45:26 2016 daemon.info dnsmasq[5396]: cached outlook-namcentral2.office365.com is 132.245.247.194 Mon Mar 14 19:45:26 2016 daemon.info dnsmasq[5396]: cached outlook-namcentral2.office365.com is 132.245.247.210 Mon Mar 14 19:45:26 2016 daemon.info dnsmasq[5396]: cached outlook-namcentral2.office365.com is 132.245.36.50 Mon Mar 14 19:45:37 2016 daemon.info dnsmasq[5396]: query[AAAA] nexusrules.officeapps.live.com from 10.10.10.223 Mon Mar 14 19:45:37 2016 daemon.info dnsmasq[5396]: cached nexusrules.officeapps.live.com is Mon Mar 14 19:45:37 2016 daemon.info dnsmasq[5396]: cached prod.nexusrules.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:45:37 2016 daemon.info dnsmasq[5396]: query[A] nexusrules.officeapps.live.com from 10.10.10.223 Mon Mar 14 19:45:37 2016 daemon.info dnsmasq[5396]: cached nexusrules.officeapps.live.com is Mon Mar 14 19:45:37 2016 daemon.info dnsmasq[5396]: forwarded nexusrules.officeapps.live.com to 192.168.1.1 Mon Mar 14 19:45:37 2016 daemon.info dnsmasq[5396]: query[A] googlemail.l.google.com from 10.10.10.223 Mon Mar 14 19:45:37 2016 daemon.info dnsmasq[5396]: forwarded googlemail.l.google.com to 192.168.1.1 Mon Mar 14 19:45:37 2016 daemon.info dnsmasq[5396]: query[AAAA] googlemail.l.google.com from 10.10.10.223 Mon Mar 14 19:45:37 2016 daemon.info dnsmasq[5396]: forwarded googlemail.l.google.com to 192.168.1.1 Mon Mar 14 19:45:37 2016 daemon.info dnsmasq[5396]: reply nexusrules.officeapps.live.com is Mon Mar 14 19:45:37 2016 daemon.info dnsmasq[5396]: reply prod.nexusrules.live.com.akadns.net is 40.113.11.93 Mon Mar 14 19:45:37 2016 daemon.info dnsmasq[5396]: query[AAAA] prod.nexusrules.live.com.akadns.net from 10.10.10.223 Mon Mar 14 19:45:37 2016 daemon.info dnsmasq[5396]: cached prod.nexusrules.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:45:37 2016 daemon.info dnsmasq[5396]: reply googlemail.l.google.com is 74.125.193.18 Mon Mar 14 19:45:37 2016 daemon.info dnsmasq[5396]: reply googlemail.l.google.com is 74.125.193.19 Mon Mar 14 19:45:37 2016 daemon.info dnsmasq[5396]: reply googlemail.l.google.com is 74.125.193.83 Mon Mar 14 19:45:37 2016 daemon.info dnsmasq[5396]: reply googlemail.l.google.com is 74.125.193.17 Mon Mar 14 19:45:37 2016 daemon.info dnsmasq[5396]: query[A] prod.nexusrules.live.com.akadns.net from 10.10.10.223 Mon Mar 14 19:45:37 2016 daemon.info dnsmasq[5396]: cached prod.nexusrules.live.com.akadns.net is 40.113.11.93 Mon Mar 14 19:45:37 2016 daemon.info dnsmasq[5396]: reply googlemail.l.google.com is 2607:f8b0:4009:809::2005 Mon Mar 14 19:45:38 2016 daemon.info dnsmasq[5396]: query[AAAA] prod-w.nexus.live.com.akadns.net from 10.10.10.223 Mon Mar 14 19:45:38 2016 daemon.info dnsmasq[5396]: cached prod-w.nexus.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:45:54 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:45:54 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:45:54 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:45:54 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:45:54 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:45:54 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:45:54 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:45:54 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:45:54 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:45:54 2016 daemon.info dnsmasq[5396]: reply pool4.moatads.com is 52.90.227.144 Mon Mar 14 19:45:54 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:45:54 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:45:54 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:45:54 2016 daemon.info dnsmasq[5396]: cached pool4.moatads.com is 52.90.227.144 Mon Mar 14 19:45:54 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:45:54 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:45:54 2016 daemon.info dnsmasq[5396]: reply pool5.moatads.com is NODATA-IPv6 Mon Mar 14 19:45:54 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:45:54 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:45:54 2016 daemon.info dnsmasq[5396]: reply pool4.moatads.com is NODATA-IPv6 Mon Mar 14 19:45:54 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:45:54 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:45:54 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:45:54 2016 daemon.info dnsmasq[5396]: cached pool4.moatads.com is NODATA-IPv6 Mon Mar 14 19:45:54 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:45:54 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:45:54 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:45:54 2016 daemon.info dnsmasq[5396]: cached pool4.moatads.com is NODATA-IPv6 Mon Mar 14 19:46:27 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:46:27 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:46:29 2016 daemon.info dnsmasq[5396]: query[A] app.procentive.com from 10.10.10.223 Mon Mar 14 19:46:29 2016 daemon.info dnsmasq[5396]: forwarded app.procentive.com to 192.168.1.1 Mon Mar 14 19:46:29 2016 daemon.info dnsmasq[5396]: query[AAAA] app.procentive.com from 10.10.10.223 Mon Mar 14 19:46:29 2016 daemon.info dnsmasq[5396]: forwarded app.procentive.com to 192.168.1.1 Mon Mar 14 19:46:29 2016 daemon.info dnsmasq[5396]: reply app.procentive.com is 66.179.249.115 Mon Mar 14 19:47:02 2016 daemon.info dnsmasq[5396]: query[A] omt.garmin.com from 10.10.10.228 Mon Mar 14 19:47:02 2016 daemon.info dnsmasq[5396]: forwarded omt.garmin.com to 192.168.1.1 Mon Mar 14 19:47:02 2016 daemon.info dnsmasq[5396]: query[AAAA] omt.garmin.com from 10.10.10.228 Mon Mar 14 19:47:02 2016 daemon.info dnsmasq[5396]: forwarded omt.garmin.com to 192.168.1.1 Mon Mar 14 19:47:02 2016 daemon.info dnsmasq[5396]: query[A] omt.garmin.com from 10.10.10.229 Mon Mar 14 19:47:02 2016 daemon.info dnsmasq[5396]: forwarded omt.garmin.com to 192.168.1.1 Mon Mar 14 19:47:02 2016 daemon.info dnsmasq[5396]: reply omt.garmin.com is Mon Mar 14 19:47:02 2016 daemon.info dnsmasq[5396]: reply wildcard.garmin.com.edgekey.net is Mon Mar 14 19:47:02 2016 daemon.info dnsmasq[5396]: reply e3664.b.akamaiedge.net is 23.12.254.235 Mon Mar 14 19:47:02 2016 daemon.info dnsmasq[5396]: query[AAAA] omt.garmin.com from 10.10.10.229 Mon Mar 14 19:47:02 2016 daemon.info dnsmasq[5396]: cached omt.garmin.com is Mon Mar 14 19:47:02 2016 daemon.info dnsmasq[5396]: cached wildcard.garmin.com.edgekey.net is Mon Mar 14 19:47:02 2016 daemon.info dnsmasq[5396]: forwarded omt.garmin.com to 192.168.1.1 Mon Mar 14 19:47:02 2016 daemon.info dnsmasq[5396]: reply omt.garmin.com is Mon Mar 14 19:47:02 2016 daemon.info dnsmasq[5396]: reply wildcard.garmin.com.edgekey.net is Mon Mar 14 19:47:02 2016 daemon.info dnsmasq[5396]: reply e3664.b.akamaiedge.net is 23.12.254.235 Mon Mar 14 19:47:02 2016 daemon.info dnsmasq[5396]: reply omt.garmin.com is Mon Mar 14 19:47:02 2016 daemon.info dnsmasq[5396]: reply wildcard.garmin.com.edgekey.net is Mon Mar 14 19:47:02 2016 daemon.info dnsmasq[5396]: reply e3664.b.akamaiedge.net is NODATA-IPv6 Mon Mar 14 19:47:02 2016 daemon.info dnsmasq[5396]: reply omt.garmin.com is Mon Mar 14 19:47:02 2016 daemon.info dnsmasq[5396]: reply wildcard.garmin.com.edgekey.net is Mon Mar 14 19:47:02 2016 daemon.info dnsmasq[5396]: reply e3664.b.akamaiedge.net is NODATA-IPv6 Mon Mar 14 19:47:02 2016 daemon.info dnsmasq[5396]: query[AAAA] omt.garmin.com from 10.10.10.228 Mon Mar 14 19:47:02 2016 daemon.info dnsmasq[5396]: cached omt.garmin.com is Mon Mar 14 19:47:02 2016 daemon.info dnsmasq[5396]: cached wildcard.garmin.com.edgekey.net is Mon Mar 14 19:47:02 2016 daemon.info dnsmasq[5396]: cached e3664.b.akamaiedge.net is NODATA-IPv6 Mon Mar 14 19:47:02 2016 daemon.info dnsmasq[5396]: query[AAAA] omt.garmin.com from 10.10.10.229 Mon Mar 14 19:47:02 2016 daemon.info dnsmasq[5396]: cached omt.garmin.com is Mon Mar 14 19:47:02 2016 daemon.info dnsmasq[5396]: cached wildcard.garmin.com.edgekey.net is Mon Mar 14 19:47:02 2016 daemon.info dnsmasq[5396]: cached e3664.b.akamaiedge.net is NODATA-IPv6 Mon Mar 14 19:47:02 2016 daemon.info dnsmasq[5396]: query[A] omt.garmin.com from 10.10.10.229 Mon Mar 14 19:47:02 2016 daemon.info dnsmasq[5396]: cached omt.garmin.com is Mon Mar 14 19:47:02 2016 daemon.info dnsmasq[5396]: cached wildcard.garmin.com.edgekey.net is Mon Mar 14 19:47:02 2016 daemon.info dnsmasq[5396]: cached e3664.b.akamaiedge.net is 23.12.254.235 Mon Mar 14 19:47:02 2016 daemon.info dnsmasq[5396]: query[AAAA] omt.garmin.com from 10.10.10.228 Mon Mar 14 19:47:02 2016 daemon.info dnsmasq[5396]: cached omt.garmin.com is Mon Mar 14 19:47:02 2016 daemon.info dnsmasq[5396]: cached wildcard.garmin.com.edgekey.net is Mon Mar 14 19:47:02 2016 daemon.info dnsmasq[5396]: cached e3664.b.akamaiedge.net is NODATA-IPv6 Mon Mar 14 19:47:02 2016 daemon.info dnsmasq[5396]: query[A] omt.garmin.com from 10.10.10.229 Mon Mar 14 19:47:02 2016 daemon.info dnsmasq[5396]: cached omt.garmin.com is Mon Mar 14 19:47:02 2016 daemon.info dnsmasq[5396]: cached wildcard.garmin.com.edgekey.net is Mon Mar 14 19:47:02 2016 daemon.info dnsmasq[5396]: cached e3664.b.akamaiedge.net is 23.12.254.235 Mon Mar 14 19:47:02 2016 daemon.info dnsmasq[5396]: query[AAAA] omt.garmin.com from 10.10.10.229 Mon Mar 14 19:47:02 2016 daemon.info dnsmasq[5396]: cached omt.garmin.com is Mon Mar 14 19:47:02 2016 daemon.info dnsmasq[5396]: cached wildcard.garmin.com.edgekey.net is Mon Mar 14 19:47:02 2016 daemon.info dnsmasq[5396]: cached e3664.b.akamaiedge.net is NODATA-IPv6 Mon Mar 14 19:47:16 2016 daemon.info dnsmasq[5396]: query[A] googlemail.l.google.com from 10.10.10.223 Mon Mar 14 19:47:16 2016 daemon.info dnsmasq[5396]: forwarded googlemail.l.google.com to 192.168.1.1 Mon Mar 14 19:47:16 2016 daemon.info dnsmasq[5396]: reply googlemail.l.google.com is 216.58.216.229 Mon Mar 14 19:47:24 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:47:24 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:47:24 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:47:24 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:47:24 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:47:24 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:47:24 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:47:24 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:47:24 2016 daemon.info dnsmasq[5396]: reply pool3.moatads.com is 52.90.75.174 Mon Mar 14 19:47:24 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:47:24 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:47:24 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:47:24 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:47:24 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:47:24 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:47:24 2016 daemon.info dnsmasq[5396]: reply pool3.moatads.com is 52.90.75.174 Mon Mar 14 19:47:24 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:47:24 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:47:24 2016 daemon.info dnsmasq[5396]: reply pool3.moatads.com is NODATA-IPv6 Mon Mar 14 19:47:24 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:47:24 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:47:24 2016 daemon.info dnsmasq[5396]: reply pool3.moatads.com is NODATA-IPv6 Mon Mar 14 19:47:24 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:47:24 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:47:24 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:47:24 2016 daemon.info dnsmasq[5396]: cached pool3.moatads.com is NODATA-IPv6 Mon Mar 14 19:47:24 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:47:24 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:47:24 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:47:24 2016 daemon.info dnsmasq[5396]: cached pool3.moatads.com is NODATA-IPv6 Mon Mar 14 19:47:24 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:47:24 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:47:24 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:47:24 2016 daemon.info dnsmasq[5396]: cached pool3.moatads.com is 52.90.75.174 Mon Mar 14 19:47:36 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:47:36 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:47:36 2016 daemon.info dnsmasq[5396]: query[A] dns.msftncsi.com from 10.10.10.229 Mon Mar 14 19:47:36 2016 daemon.info dnsmasq[5396]: forwarded dns.msftncsi.com to 192.168.1.1 Mon Mar 14 19:47:36 2016 daemon.info dnsmasq[5396]: reply dns.msftncsi.com is 131.107.255.255 Mon Mar 14 19:48:07 2016 daemon.info dnsmasq[5396]: query[AAAA] guzzoni.apple.com from 10.10.10.211 Mon Mar 14 19:48:07 2016 daemon.info dnsmasq[5396]: forwarded guzzoni.apple.com to 192.168.1.1 Mon Mar 14 19:48:07 2016 daemon.info dnsmasq[5396]: query[A] guzzoni.apple.com from 10.10.10.211 Mon Mar 14 19:48:07 2016 daemon.info dnsmasq[5396]: forwarded guzzoni.apple.com to 192.168.1.1 Mon Mar 14 19:48:08 2016 daemon.info dnsmasq[5396]: reply guzzoni.apple.com is Mon Mar 14 19:48:08 2016 daemon.info dnsmasq[5396]: reply origin.guzzoni-apple.com.akadns.net is Mon Mar 14 19:48:08 2016 daemon.info dnsmasq[5396]: reply st14p02sa.guzzoni-apple.com.akadns.net is 17.174.2.5 Mon Mar 14 19:48:08 2016 daemon.info dnsmasq[5396]: reply guzzoni.apple.com is Mon Mar 14 19:48:08 2016 daemon.info dnsmasq[5396]: reply origin.guzzoni-apple.com.akadns.net is Mon Mar 14 19:48:08 2016 daemon.info dnsmasq[5396]: reply st14p02sa.guzzoni-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:48:08 2016 daemon.info dnsmasq[5396]: query[AAAA] p44-keyvalueservice-current.edge.icloud.apple-dns.net from 10.10.10.211 Mon Mar 14 19:48:08 2016 daemon.info dnsmasq[5396]: forwarded p44-keyvalueservice-current.edge.icloud.apple-dns.net to 192.168.1.1 Mon Mar 14 19:48:08 2016 daemon.info dnsmasq[5396]: query[A] p44-keyvalueservice-current.edge.icloud.apple-dns.net from 10.10.10.211 Mon Mar 14 19:48:08 2016 daemon.info dnsmasq[5396]: forwarded p44-keyvalueservice-current.edge.icloud.apple-dns.net to 192.168.1.1 Mon Mar 14 19:48:08 2016 daemon.info dnsmasq[5396]: query[AAAA] www.apple.com from 10.10.10.211 Mon Mar 14 19:48:08 2016 daemon.info dnsmasq[5396]: forwarded www.apple.com to 192.168.1.1 Mon Mar 14 19:48:08 2016 daemon.info dnsmasq[5396]: query[A] www.apple.com from 10.10.10.211 Mon Mar 14 19:48:08 2016 daemon.info dnsmasq[5396]: forwarded www.apple.com to 192.168.1.1 Mon Mar 14 19:48:08 2016 daemon.info dnsmasq[5396]: reply p44-keyvalueservice-current.edge.icloud.apple-dns.net is 17.248.139.79 Mon Mar 14 19:48:08 2016 daemon.info dnsmasq[5396]: reply www.apple.com is Mon Mar 14 19:48:08 2016 daemon.info dnsmasq[5396]: reply www.apple.com.edgekey.net is Mon Mar 14 19:48:08 2016 daemon.info dnsmasq[5396]: reply www.apple.com.edgekey.net.globalredir.akadns.net is Mon Mar 14 19:48:08 2016 daemon.info dnsmasq[5396]: reply e6858.dscc.akamaiedge.net is 2600:1404:e:194::1aca Mon Mar 14 19:48:08 2016 daemon.info dnsmasq[5396]: reply e6858.dscc.akamaiedge.net is 2600:1404:e:18d::1aca Mon Mar 14 19:48:08 2016 daemon.info dnsmasq[5396]: query[AAAA] api.smoot-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 19:48:08 2016 daemon.info dnsmasq[5396]: cached api.smoot-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:48:08 2016 daemon.info dnsmasq[5396]: reply www.apple.com is Mon Mar 14 19:48:08 2016 daemon.info dnsmasq[5396]: reply www.apple.com.edgekey.net is Mon Mar 14 19:48:08 2016 daemon.info dnsmasq[5396]: reply www.apple.com.edgekey.net.globalredir.akadns.net is Mon Mar 14 19:48:08 2016 daemon.info dnsmasq[5396]: reply e6858.dscc.akamaiedge.net is 23.12.245.148 Mon Mar 14 19:48:08 2016 daemon.info dnsmasq[5396]: query[A] api.smoot-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 19:48:08 2016 daemon.info dnsmasq[5396]: forwarded api.smoot-apple.com.akadns.net to 192.168.1.1 Mon Mar 14 19:48:08 2016 daemon.info dnsmasq[5396]: query[A] r3.sn-81fpgxaxnn-vgqe.googlevideo.com from 10.10.10.211 Mon Mar 14 19:48:08 2016 daemon.info dnsmasq[5396]: forwarded r3.sn-81fpgxaxnn-vgqe.googlevideo.com to 192.168.1.1 Mon Mar 14 19:48:08 2016 daemon.info dnsmasq[5396]: reply api.smoot-apple.com.akadns.net is 17.249.73.246 Mon Mar 14 19:48:08 2016 daemon.info dnsmasq[5396]: reply r3.sn-81fpgxaxnn-vgqe.googlevideo.com is 63.84.3.14 Mon Mar 14 19:48:08 2016 daemon.info dnsmasq[5396]: query[AAAA] apple.com from 10.10.10.211 Mon Mar 14 19:48:08 2016 daemon.info dnsmasq[5396]: forwarded apple.com to 192.168.1.1 Mon Mar 14 19:48:08 2016 daemon.info dnsmasq[5396]: query[AAAA] st14p02sa.guzzoni-apple.com.akadns.net from 10.10.10.211 Mon Mar 14 19:48:08 2016 daemon.info dnsmasq[5396]: cached st14p02sa.guzzoni-apple.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:48:08 2016 daemon.info dnsmasq[5396]: query[A] e6858.dscc.akamaiedge.net from 10.10.10.211 Mon Mar 14 19:48:08 2016 daemon.info dnsmasq[5396]: cached e6858.dscc.akamaiedge.net is 23.12.245.148 Mon Mar 14 19:48:09 2016 daemon.info dnsmasq[5396]: query[A] clients2.google.com from 10.10.10.228 Mon Mar 14 19:48:09 2016 daemon.info dnsmasq[5396]: forwarded clients2.google.com to 192.168.1.1 Mon Mar 14 19:48:09 2016 daemon.info dnsmasq[5396]: query[A] clients2.google.com from 10.10.10.229 Mon Mar 14 19:48:09 2016 daemon.info dnsmasq[5396]: forwarded clients2.google.com to 192.168.1.1 Mon Mar 14 19:48:09 2016 daemon.info dnsmasq[5396]: reply clients2.google.com is Mon Mar 14 19:48:09 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 216.58.216.110 Mon Mar 14 19:48:09 2016 daemon.info dnsmasq[5396]: reply clients2.google.com is Mon Mar 14 19:48:09 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 216.58.216.110 Mon Mar 14 19:48:33 2016 daemon.info dnsmasq[5396]: query[A] p25-quota.icloud.com from 10.10.10.228 Mon Mar 14 19:48:33 2016 daemon.info dnsmasq[5396]: forwarded p25-quota.icloud.com to 192.168.1.1 Mon Mar 14 19:48:33 2016 daemon.info dnsmasq[5396]: query[AAAA] p25-quota.icloud.com from 10.10.10.228 Mon Mar 14 19:48:33 2016 daemon.info dnsmasq[5396]: forwarded p25-quota.icloud.com to 192.168.1.1 Mon Mar 14 19:48:33 2016 daemon.info dnsmasq[5396]: query[A] p25-quota.icloud.com from 10.10.10.229 Mon Mar 14 19:48:33 2016 daemon.info dnsmasq[5396]: forwarded p25-quota.icloud.com to 192.168.1.1 Mon Mar 14 19:48:33 2016 daemon.info dnsmasq[5396]: query[AAAA] p25-quota.icloud.com from 10.10.10.229 Mon Mar 14 19:48:33 2016 daemon.info dnsmasq[5396]: forwarded p25-quota.icloud.com to 192.168.1.1 Mon Mar 14 19:48:33 2016 daemon.info dnsmasq[5396]: reply p25-quota.icloud.com is Mon Mar 14 19:48:33 2016 daemon.info dnsmasq[5396]: reply p25-quota-current.edge.icloud.apple-dns.net is NODATA-IPv6 Mon Mar 14 19:48:33 2016 daemon.info dnsmasq[5396]: reply p25-quota.icloud.com is Mon Mar 14 19:48:33 2016 daemon.info dnsmasq[5396]: reply p25-quota-current.edge.icloud.apple-dns.net is 17.248.131.168 Mon Mar 14 19:48:33 2016 daemon.info dnsmasq[5396]: reply p25-quota.icloud.com is Mon Mar 14 19:48:33 2016 daemon.info dnsmasq[5396]: reply p25-quota-current.edge.icloud.apple-dns.net is 17.248.131.168 Mon Mar 14 19:48:33 2016 daemon.info dnsmasq[5396]: reply p25-quota.icloud.com is Mon Mar 14 19:48:33 2016 daemon.info dnsmasq[5396]: reply p25-quota-current.edge.icloud.apple-dns.net is NODATA-IPv6 Mon Mar 14 19:48:33 2016 daemon.info dnsmasq[5396]: query[A] p25-quota.icloud.com from 10.10.10.228 Mon Mar 14 19:48:33 2016 daemon.info dnsmasq[5396]: cached p25-quota.icloud.com is Mon Mar 14 19:48:33 2016 daemon.info dnsmasq[5396]: cached p25-quota-current.edge.icloud.apple-dns.net is 17.248.131.168 Mon Mar 14 19:48:33 2016 daemon.info dnsmasq[5396]: query[AAAA] p25-quota.icloud.com from 10.10.10.229 Mon Mar 14 19:48:33 2016 daemon.info dnsmasq[5396]: cached p25-quota.icloud.com is Mon Mar 14 19:48:33 2016 daemon.info dnsmasq[5396]: cached p25-quota-current.edge.icloud.apple-dns.net is NODATA-IPv6 Mon Mar 14 19:48:33 2016 daemon.info dnsmasq[5396]: query[A] p25-quota.icloud.com from 10.10.10.229 Mon Mar 14 19:48:33 2016 daemon.info dnsmasq[5396]: cached p25-quota.icloud.com is Mon Mar 14 19:48:33 2016 daemon.info dnsmasq[5396]: cached p25-quota-current.edge.icloud.apple-dns.net is 17.248.131.168 Mon Mar 14 19:48:37 2016 daemon.info dnsmasq[5396]: query[AAAA] www3.l.google.com from 10.10.10.223 Mon Mar 14 19:48:37 2016 daemon.info dnsmasq[5396]: forwarded www3.l.google.com to 192.168.1.1 Mon Mar 14 19:48:37 2016 daemon.info dnsmasq[5396]: query[A] www3.l.google.com from 10.10.10.223 Mon Mar 14 19:48:37 2016 daemon.info dnsmasq[5396]: forwarded www3.l.google.com to 192.168.1.1 Mon Mar 14 19:48:38 2016 daemon.info dnsmasq[5396]: reply www3.l.google.com is 2607:f8b0:4009:80b::200e Mon Mar 14 19:48:38 2016 daemon.info dnsmasq[5396]: reply www3.l.google.com is 216.58.216.110 Mon Mar 14 19:48:38 2016 daemon.info dnsmasq[5396]: query[AAAA] app.procentive.com from 10.10.10.223 Mon Mar 14 19:48:38 2016 daemon.info dnsmasq[5396]: forwarded app.procentive.com to 192.168.1.1 Mon Mar 14 19:48:39 2016 daemon.info dnsmasq[5396]: query[A] 9.client-channel.google.com from 10.10.10.223 Mon Mar 14 19:48:39 2016 daemon.info dnsmasq[5396]: forwarded 9.client-channel.google.com to 192.168.1.1 Mon Mar 14 19:48:39 2016 daemon.info dnsmasq[5396]: reply 9.client-channel.google.com is 74.125.193.189 Mon Mar 14 19:48:41 2016 daemon.info dnsmasq[5396]: query[AAAA] nexus.officeapps.live.com from 10.10.10.223 Mon Mar 14 19:48:41 2016 daemon.info dnsmasq[5396]: forwarded nexus.officeapps.live.com to 192.168.1.1 Mon Mar 14 19:48:41 2016 daemon.info dnsmasq[5396]: query[A] nexus.officeapps.live.com from 10.10.10.223 Mon Mar 14 19:48:41 2016 daemon.info dnsmasq[5396]: forwarded nexus.officeapps.live.com to 192.168.1.1 Mon Mar 14 19:48:41 2016 daemon.info dnsmasq[5396]: reply nexus.officeapps.live.com is Mon Mar 14 19:48:41 2016 daemon.info dnsmasq[5396]: reply prod-w.nexus.live.com.akadns.net is 23.101.30.126 Mon Mar 14 19:48:41 2016 daemon.info dnsmasq[5396]: reply nexus.officeapps.live.com is Mon Mar 14 19:48:41 2016 daemon.info dnsmasq[5396]: reply prod-w.nexus.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:48:41 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:48:41 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:48:41 2016 daemon.info dnsmasq[5396]: query[AAAA] prod-w.nexus.live.com.akadns.net from 10.10.10.223 Mon Mar 14 19:48:41 2016 daemon.info dnsmasq[5396]: cached prod-w.nexus.live.com.akadns.net is NODATA-IPv6 Mon Mar 14 19:48:51 2016 daemon.info dnsmasq[5396]: query[A] clients6.google.com from 10.10.10.223 Mon Mar 14 19:48:51 2016 daemon.info dnsmasq[5396]: forwarded clients6.google.com to 192.168.1.1 Mon Mar 14 19:48:51 2016 daemon.info dnsmasq[5396]: query[AAAA] clients6.google.com from 10.10.10.223 Mon Mar 14 19:48:51 2016 daemon.info dnsmasq[5396]: forwarded clients6.google.com to 192.168.1.1 Mon Mar 14 19:48:51 2016 daemon.info dnsmasq[5396]: reply clients6.google.com is Mon Mar 14 19:48:51 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 216.58.216.110 Mon Mar 14 19:48:51 2016 daemon.info dnsmasq[5396]: reply clients6.google.com is Mon Mar 14 19:48:51 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 2607:f8b0:4009:80b::200e Mon Mar 14 19:48:52 2016 daemon.info dnsmasq[5396]: query[AAAA] clients.l.google.com from 10.10.10.223 Mon Mar 14 19:48:52 2016 daemon.info dnsmasq[5396]: cached clients.l.google.com is 2607:f8b0:4009:80b::200e Mon Mar 14 19:48:52 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:48:52 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:48:52 2016 daemon.info dnsmasq[5396]: query[A] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:48:52 2016 daemon.info dnsmasq[5396]: forwarded skydocs.skyprod.akadns.net to 192.168.1.1 Mon Mar 14 19:48:52 2016 daemon.info dnsmasq[5396]: reply skydocs.skyprod.akadns.net is 131.253.14.208 Mon Mar 14 19:48:58 2016 daemon.info dnsmasq[5396]: query[A] wpad.lan from 10.10.10.228 Mon Mar 14 19:48:58 2016 daemon.info dnsmasq[5396]: config wpad.lan is NXDOMAIN Mon Mar 14 19:48:58 2016 daemon.info dnsmasq[5396]: query[AAAA] wpad.lan from 10.10.10.228 Mon Mar 14 19:48:58 2016 daemon.info dnsmasq[5396]: config wpad.lan is NXDOMAIN Mon Mar 14 19:48:58 2016 daemon.info dnsmasq[5396]: query[A] wpad.lan from 10.10.10.229 Mon Mar 14 19:48:58 2016 daemon.info dnsmasq[5396]: config wpad.lan is NXDOMAIN Mon Mar 14 19:48:58 2016 daemon.info dnsmasq[5396]: query[AAAA] wpad.lan from 10.10.10.229 Mon Mar 14 19:48:58 2016 daemon.info dnsmasq[5396]: config wpad.lan is NXDOMAIN Mon Mar 14 19:49:34 2016 daemon.info dnsmasq[5396]: query[A] chatenabled.mail.google.com from 10.10.10.228 Mon Mar 14 19:49:34 2016 daemon.info dnsmasq[5396]: forwarded chatenabled.mail.google.com to 192.168.1.1 Mon Mar 14 19:49:34 2016 daemon.info dnsmasq[5396]: query[A] chatenabled.mail.google.com from 10.10.10.229 Mon Mar 14 19:49:35 2016 daemon.info dnsmasq[5396]: forwarded chatenabled.mail.google.com to 192.168.1.1 Mon Mar 14 19:49:35 2016 daemon.info dnsmasq[5396]: reply chatenabled.mail.google.com is Mon Mar 14 19:49:35 2016 daemon.info dnsmasq[5396]: reply b.googlemail.l.google.com is 216.58.216.231 Mon Mar 14 19:49:35 2016 daemon.info dnsmasq[5396]: reply chatenabled.mail.google.com is Mon Mar 14 19:49:35 2016 daemon.info dnsmasq[5396]: reply b.googlemail.l.google.com is 216.58.216.231 Mon Mar 14 19:49:53 2016 daemon.info dnsmasq[5396]: query[AAAA] skydocs.skyprod.akadns.net from 10.10.10.223 Mon Mar 14 19:49:53 2016 daemon.info dnsmasq[5396]: cached skydocs.skyprod.akadns.net is NODATA-IPv6 Mon Mar 14 19:49:54 2016 daemon.info dnsmasq[5396]: query[A] clients4.google.com from 10.10.10.223 Mon Mar 14 19:49:54 2016 daemon.info dnsmasq[5396]: forwarded clients4.google.com to 192.168.1.1 Mon Mar 14 19:49:54 2016 daemon.info dnsmasq[5396]: reply clients4.google.com is Mon Mar 14 19:49:54 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 216.58.216.110 Mon Mar 14 19:50:00 2016 cron.info crond[3202]: USER root pid 6118 cmd /usr/sbin/ntpclient -s -p 123 -h 0.us.pool.ntp.org || /etc/init.d/ntpclient restart Mon Mar 14 19:50:00 2016 daemon.info dnsmasq[5396]: query[A] 0.us.pool.ntp.org from 127.0.0.1 Mon Mar 14 19:50:00 2016 daemon.info dnsmasq[5396]: forwarded 0.us.pool.ntp.org to 192.168.1.1 Mon Mar 14 19:50:00 2016 daemon.info dnsmasq[5396]: reply 0.us.pool.ntp.org is 69.164.201.165 Mon Mar 14 19:50:00 2016 daemon.info dnsmasq[5396]: reply 0.us.pool.ntp.org is 142.54.181.202 Mon Mar 14 19:50:00 2016 daemon.info dnsmasq[5396]: reply 0.us.pool.ntp.org is 45.79.78.173 Mon Mar 14 19:50:00 2016 daemon.info dnsmasq[5396]: reply 0.us.pool.ntp.org is 192.241.206.171 Mon Mar 14 19:50:02 2016 daemon.info dnsmasq[5396]: query[A] plus.google.com from 10.10.10.223 Mon Mar 14 19:50:03 2016 daemon.info dnsmasq[5396]: forwarded plus.google.com to 192.168.1.1 Mon Mar 14 19:50:03 2016 daemon.info dnsmasq[5396]: reply plus.google.com is 216.58.216.238 Mon Mar 14 19:50:04 2016 daemon.info dnsmasq[5396]: query[A] www.google-analytics.com from 10.10.10.223 Mon Mar 14 19:50:04 2016 daemon.info dnsmasq[5396]: cached www.google-analytics.com is Mon Mar 14 19:50:04 2016 daemon.info dnsmasq[5396]: forwarded www.google-analytics.com to 192.168.1.1 Mon Mar 14 19:50:04 2016 daemon.info dnsmasq[5396]: reply www.google-analytics.com is Mon Mar 14 19:50:04 2016 daemon.info dnsmasq[5396]: reply www-google-analytics.l.google.com is 216.58.216.238 Mon Mar 14 19:50:09 2016 daemon.info dnsmasq[5396]: query[A] ubp-ubpextension-us-prod.s3-us-west-2.amazonaws.com from 10.10.10.223 Mon Mar 14 19:50:09 2016 daemon.info dnsmasq[5396]: forwarded ubp-ubpextension-us-prod.s3-us-west-2.amazonaws.com to 192.168.1.1 Mon Mar 14 19:50:09 2016 daemon.info dnsmasq[5396]: reply ubp-ubpextension-us-prod.s3-us-west-2.amazonaws.com is Mon Mar 14 19:50:09 2016 daemon.info dnsmasq[5396]: reply s3-us-west-2-r-w.amazonaws.com is 54.231.176.40 Mon Mar 14 19:50:16 2016 daemon.info dnsmasq[5396]: query[A] ubp-common-us-prod.s3.amazonaws.com from 10.10.10.223 Mon Mar 14 19:50:16 2016 daemon.info dnsmasq[5396]: forwarded ubp-common-us-prod.s3.amazonaws.com to 192.168.1.1 Mon Mar 14 19:50:16 2016 daemon.info dnsmasq[5396]: reply ubp-common-us-prod.s3.amazonaws.com is Mon Mar 14 19:50:16 2016 daemon.info dnsmasq[5396]: reply s3-us-west-2-w.amazonaws.com is 54.231.184.182 Mon Mar 14 19:50:24 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:50:24 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:50:24 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:50:24 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:50:24 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.228 Mon Mar 14 19:50:24 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:50:24 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:50:24 2016 daemon.info dnsmasq[5396]: cached pool3.moatads.com is NODATA-IPv6 Mon Mar 14 19:50:24 2016 daemon.info dnsmasq[5396]: query[A] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:50:24 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:50:24 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:50:24 2016 daemon.info dnsmasq[5396]: forwarded apx.moatads.com to 192.168.1.1 Mon Mar 14 19:50:24 2016 daemon.info dnsmasq[5396]: query[AAAA] apx.moatads.com from 10.10.10.229 Mon Mar 14 19:50:24 2016 daemon.info dnsmasq[5396]: cached apx.moatads.com is Mon Mar 14 19:50:24 2016 daemon.info dnsmasq[5396]: cached pixel.moatads.com is Mon Mar 14 19:50:24 2016 daemon.info dnsmasq[5396]: cached pool3.moatads.com is NODATA-IPv6 Mon Mar 14 19:50:24 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:50:24 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:50:24 2016 daemon.info dnsmasq[5396]: reply pool3.moatads.com is 52.90.201.189 Mon Mar 14 19:50:24 2016 daemon.info dnsmasq[5396]: reply apx.moatads.com is Mon Mar 14 19:50:24 2016 daemon.info dnsmasq[5396]: reply pixel.moatads.com is Mon Mar 14 19:50:24 2016 daemon.info dnsmasq[5396]: reply pool3.moatads.com is 52.90.201.189 Mon Mar 14 19:50:35 2016 daemon.info dnsmasq[5396]: query[AAAA] app.procentive.com from 10.10.10.223 Mon Mar 14 19:50:35 2016 daemon.info dnsmasq[5396]: forwarded app.procentive.com to 192.168.1.1 Mon Mar 14 19:51:11 2016 daemon.info dnsmasq[5396]: query[A] clients4.google.com from 10.10.10.228 Mon Mar 14 19:51:11 2016 daemon.info dnsmasq[5396]: forwarded clients4.google.com to 192.168.1.1 Mon Mar 14 19:51:11 2016 daemon.info dnsmasq[5396]: query[A] clients4.google.com from 10.10.10.229 Mon Mar 14 19:51:11 2016 daemon.info dnsmasq[5396]: forwarded clients4.google.com to 192.168.1.1 Mon Mar 14 19:51:11 2016 daemon.info dnsmasq[5396]: reply clients4.google.com is Mon Mar 14 19:51:11 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 64.233.191.102 Mon Mar 14 19:51:11 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 64.233.191.139 Mon Mar 14 19:51:11 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 64.233.191.138 Mon Mar 14 19:51:11 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 64.233.191.100 Mon Mar 14 19:51:11 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 64.233.191.101 Mon Mar 14 19:51:11 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 64.233.191.113 Mon Mar 14 19:51:11 2016 daemon.info dnsmasq[5396]: reply clients4.google.com is Mon Mar 14 19:51:11 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 64.233.191.102 Mon Mar 14 19:51:11 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 64.233.191.139 Mon Mar 14 19:51:11 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 64.233.191.138 Mon Mar 14 19:51:11 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 64.233.191.100 Mon Mar 14 19:51:11 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 64.233.191.101 Mon Mar 14 19:51:11 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 64.233.191.113 Mon Mar 14 19:51:11 2016 daemon.info dnsmasq[5396]: query[A] clients2.google.com from 10.10.10.228 Mon Mar 14 19:51:11 2016 daemon.info dnsmasq[5396]: forwarded clients2.google.com to 192.168.1.1 Mon Mar 14 19:51:11 2016 daemon.info dnsmasq[5396]: query[A] clients2.google.com from 10.10.10.229 Mon Mar 14 19:51:11 2016 daemon.info dnsmasq[5396]: forwarded clients2.google.com to 192.168.1.1 Mon Mar 14 19:51:11 2016 daemon.info dnsmasq[5396]: reply clients2.google.com is Mon Mar 14 19:51:11 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 64.233.191.101 Mon Mar 14 19:51:11 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 64.233.191.113 Mon Mar 14 19:51:11 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 64.233.191.102 Mon Mar 14 19:51:11 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 64.233.191.139 Mon Mar 14 19:51:11 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 64.233.191.138 Mon Mar 14 19:51:11 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 64.233.191.100 Mon Mar 14 19:51:11 2016 daemon.info dnsmasq[5396]: reply clients2.google.com is Mon Mar 14 19:51:11 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 64.233.191.101 Mon Mar 14 19:51:11 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 64.233.191.113 Mon Mar 14 19:51:11 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 64.233.191.102 Mon Mar 14 19:51:11 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 64.233.191.139 Mon Mar 14 19:51:11 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 64.233.191.138 Mon Mar 14 19:51:11 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 64.233.191.100 Mon Mar 14 19:51:54 2016 daemon.info dnsmasq[5396]: query[A] www.aim.com from 10.10.10.228 Mon Mar 14 19:51:54 2016 daemon.info dnsmasq[5396]: forwarded www.aim.com to 192.168.1.1 Mon Mar 14 19:51:54 2016 daemon.info dnsmasq[5396]: query[AAAA] www.aim.com from 10.10.10.228 Mon Mar 14 19:51:54 2016 daemon.info dnsmasq[5396]: forwarded www.aim.com to 192.168.1.1 Mon Mar 14 19:51:54 2016 daemon.info dnsmasq[5396]: query[A] www.aim.com from 10.10.10.229 Mon Mar 14 19:51:54 2016 daemon.info dnsmasq[5396]: forwarded www.aim.com to 192.168.1.1 Mon Mar 14 19:51:54 2016 daemon.info dnsmasq[5396]: query[AAAA] www.aim.com from 10.10.10.229 Mon Mar 14 19:51:54 2016 daemon.info dnsmasq[5396]: forwarded www.aim.com to 192.168.1.1 Mon Mar 14 19:51:54 2016 daemon.info dnsmasq[5396]: reply www.aim.com is Mon Mar 14 19:51:54 2016 daemon.info dnsmasq[5396]: reply www.aim.com.websys.akadns.net is 64.12.89.122 Mon Mar 14 19:51:54 2016 daemon.info dnsmasq[5396]: reply www.aim.com.websys.akadns.net is 64.12.89.250 Mon Mar 14 19:51:54 2016 daemon.info dnsmasq[5396]: reply www.aim.com is Mon Mar 14 19:51:54 2016 daemon.info dnsmasq[5396]: reply www.aim.com.websys.akadns.net is 64.12.89.122 Mon Mar 14 19:51:54 2016 daemon.info dnsmasq[5396]: reply www.aim.com.websys.akadns.net is 64.12.89.250 Mon Mar 14 19:51:54 2016 daemon.info dnsmasq[5396]: query[AAAA] www.aim.com from 10.10.10.228 Mon Mar 14 19:51:54 2016 daemon.info dnsmasq[5396]: cached www.aim.com is Mon Mar 14 19:51:54 2016 daemon.info dnsmasq[5396]: forwarded www.aim.com to 192.168.1.1 Mon Mar 14 19:51:54 2016 daemon.info dnsmasq[5396]: query[A] www.aim.com from 10.10.10.229 Mon Mar 14 19:51:54 2016 daemon.info dnsmasq[5396]: cached www.aim.com is Mon Mar 14 19:51:54 2016 daemon.info dnsmasq[5396]: cached www.aim.com.websys.akadns.net is 64.12.89.250 Mon Mar 14 19:51:54 2016 daemon.info dnsmasq[5396]: cached www.aim.com.websys.akadns.net is 64.12.89.122 Mon Mar 14 19:51:54 2016 daemon.info dnsmasq[5396]: query[AAAA] www.aim.com from 10.10.10.229 Mon Mar 14 19:51:54 2016 daemon.info dnsmasq[5396]: cached www.aim.com is Mon Mar 14 19:51:54 2016 daemon.info dnsmasq[5396]: forwarded www.aim.com to 192.168.1.1 Mon Mar 14 19:51:54 2016 daemon.info dnsmasq[5396]: reply www.aim.com is Mon Mar 14 19:51:54 2016 daemon.info dnsmasq[5396]: reply www.aim.com.websys.akadns.net is NODATA-IPv6 Mon Mar 14 19:51:54 2016 daemon.info dnsmasq[5396]: reply www.aim.com is Mon Mar 14 19:51:54 2016 daemon.info dnsmasq[5396]: reply www.aim.com.websys.akadns.net is NODATA-IPv6 Mon Mar 14 19:51:54 2016 daemon.info dnsmasq[5396]: reply www.aim.com is Mon Mar 14 19:51:54 2016 daemon.info dnsmasq[5396]: reply www.aim.com.websys.akadns.net is NODATA-IPv6 Mon Mar 14 19:51:55 2016 daemon.info dnsmasq[5396]: reply www.aim.com is Mon Mar 14 19:51:55 2016 daemon.info dnsmasq[5396]: reply www.aim.com.websys.akadns.net is NODATA-IPv6 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: query[A] service.weather.microsoft.com from 10.10.10.228 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: forwarded service.weather.microsoft.com to 192.168.1.1 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: query[A] cdn.content.prod.cms.msn.com from 10.10.10.228 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: forwarded cdn.content.prod.cms.msn.com to 192.168.1.1 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: query[AAAA] cdn.content.prod.cms.msn.com from 10.10.10.228 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: forwarded cdn.content.prod.cms.msn.com to 192.168.1.1 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: reply service.weather.microsoft.com is Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: reply wildcard.weather.microsoft.com.edgekey.net is Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: reply e7070.g.akamaiedge.net is 23.211.177.174 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: query[A] tile-service.weather.microsoft.com from 10.10.10.228 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: forwarded tile-service.weather.microsoft.com to 192.168.1.1 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: reply cdn.content.prod.cms.msn.com is Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: reply cdn.content.prod.cms.msn.com.edgesuite.net is Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: reply a1784.g2.akamai.net is 23.77.233.33 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: reply a1784.g2.akamai.net is 23.77.232.114 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: query[AAAA] tile-service.weather.microsoft.com from 10.10.10.228 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: forwarded tile-service.weather.microsoft.com to 192.168.1.1 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: reply tile-service.weather.microsoft.com is Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: reply wildcard.weather.microsoft.com.edgekey.net is Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: reply e7070.g.akamaiedge.net is 23.211.177.174 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: reply cdn.content.prod.cms.msn.com is Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: reply cdn.content.prod.cms.msn.com.edgesuite.net is Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: reply a1784.g2.akamai.net is NODATA-IPv6 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: query[AAAA] service.weather.microsoft.com from 10.10.10.228 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: forwarded service.weather.microsoft.com to 192.168.1.1 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: reply tile-service.weather.microsoft.com is Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: reply wildcard.weather.microsoft.com.edgekey.net is Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: reply e7070.g.akamaiedge.net is NODATA-IPv6 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: query[A] cdn.content.prod.cms.msn.com from 10.10.10.229 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: cached cdn.content.prod.cms.msn.com is Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: cached cdn.content.prod.cms.msn.com.edgesuite.net is Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: cached a1784.g2.akamai.net is 23.77.232.114 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: cached a1784.g2.akamai.net is 23.77.233.33 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: reply service.weather.microsoft.com is Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: reply wildcard.weather.microsoft.com.edgekey.net is Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: reply e7070.g.akamaiedge.net is NODATA-IPv6 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: query[AAAA] cdn.content.prod.cms.msn.com from 10.10.10.229 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: cached cdn.content.prod.cms.msn.com is Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: cached cdn.content.prod.cms.msn.com.edgesuite.net is Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: cached a1784.g2.akamai.net is NODATA-IPv6 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: query[A] tile-service.weather.microsoft.com from 10.10.10.229 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: forwarded tile-service.weather.microsoft.com to 192.168.1.1 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: query[AAAA] tile-service.weather.microsoft.com from 10.10.10.229 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: forwarded tile-service.weather.microsoft.com to 192.168.1.1 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: reply tile-service.weather.microsoft.com is Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: reply wildcard.weather.microsoft.com.edgekey.net is Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: reply e7070.g.akamaiedge.net is 23.211.177.174 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: query[A] service.weather.microsoft.com from 10.10.10.229 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: forwarded service.weather.microsoft.com to 192.168.1.1 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: reply tile-service.weather.microsoft.com is Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: reply wildcard.weather.microsoft.com.edgekey.net is Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: reply e7070.g.akamaiedge.net is NODATA-IPv6 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: query[AAAA] service.weather.microsoft.com from 10.10.10.229 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: forwarded service.weather.microsoft.com to 192.168.1.1 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: reply service.weather.microsoft.com is Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: reply wildcard.weather.microsoft.com.edgekey.net is Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: reply e7070.g.akamaiedge.net is 23.211.177.174 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: query[A] cdn.content.prod.cms.msn.com from 10.10.10.228 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: cached cdn.content.prod.cms.msn.com is Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: cached cdn.content.prod.cms.msn.com.edgesuite.net is Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: cached a1784.g2.akamai.net is 23.77.233.33 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: cached a1784.g2.akamai.net is 23.77.232.114 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: reply service.weather.microsoft.com is Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: reply wildcard.weather.microsoft.com.edgekey.net is Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: reply e7070.g.akamaiedge.net is NODATA-IPv6 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: query[AAAA] cdn.content.prod.cms.msn.com from 10.10.10.228 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: cached cdn.content.prod.cms.msn.com is Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: cached cdn.content.prod.cms.msn.com.edgesuite.net is Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: cached a1784.g2.akamai.net is NODATA-IPv6 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: query[AAAA] service.weather.microsoft.com from 10.10.10.228 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: cached service.weather.microsoft.com is Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: cached wildcard.weather.microsoft.com.edgekey.net is Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: cached e7070.g.akamaiedge.net is NODATA-IPv6 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: query[A] tile-service.weather.microsoft.com from 10.10.10.228 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: forwarded tile-service.weather.microsoft.com to 192.168.1.1 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: query[AAAA] tile-service.weather.microsoft.com from 10.10.10.228 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: forwarded tile-service.weather.microsoft.com to 192.168.1.1 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: reply tile-service.weather.microsoft.com is Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: reply wildcard.weather.microsoft.com.edgekey.net is Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: reply e7070.g.akamaiedge.net is 23.211.177.174 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: query[A] service.weather.microsoft.com from 10.10.10.229 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: forwarded service.weather.microsoft.com to 192.168.1.1 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: reply tile-service.weather.microsoft.com is Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: reply wildcard.weather.microsoft.com.edgekey.net is Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: reply e7070.g.akamaiedge.net is NODATA-IPv6 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: query[A] tile-service.weather.microsoft.com from 10.10.10.229 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: cached tile-service.weather.microsoft.com is Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: cached wildcard.weather.microsoft.com.edgekey.net is Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: cached e7070.g.akamaiedge.net is 23.211.177.174 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: reply service.weather.microsoft.com is Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: reply wildcard.weather.microsoft.com.edgekey.net is Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: reply e7070.g.akamaiedge.net is 23.211.177.174 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: query[A] cdn.content.prod.cms.msn.com from 10.10.10.229 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: cached cdn.content.prod.cms.msn.com is Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: cached cdn.content.prod.cms.msn.com.edgesuite.net is Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: cached a1784.g2.akamai.net is 23.77.232.114 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: cached a1784.g2.akamai.net is 23.77.233.33 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: query[AAAA] service.weather.microsoft.com from 10.10.10.229 Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: cached service.weather.microsoft.com is Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: cached wildcard.weather.microsoft.com.edgekey.net is Mon Mar 14 19:52:05 2016 daemon.info dnsmasq[5396]: cached e7070.g.akamaiedge.net is NODATA-IPv6 Mon Mar 14 19:52:11 2016 daemon.info dnsmasq[5396]: query[A] play.google.com from 10.10.10.228 Mon Mar 14 19:52:11 2016 daemon.info dnsmasq[5396]: forwarded play.google.com to 192.168.1.1 Mon Mar 14 19:52:11 2016 daemon.info dnsmasq[5396]: query[A] play.google.com from 10.10.10.229 Mon Mar 14 19:52:11 2016 daemon.info dnsmasq[5396]: forwarded play.google.com to 192.168.1.1 Mon Mar 14 19:52:11 2016 daemon.info dnsmasq[5396]: reply play.google.com is Mon Mar 14 19:52:11 2016 daemon.info dnsmasq[5396]: reply play.l.google.com is 216.58.216.238 Mon Mar 14 19:52:11 2016 daemon.info dnsmasq[5396]: reply play.google.com is Mon Mar 14 19:52:11 2016 daemon.info dnsmasq[5396]: reply play.l.google.com is 216.58.216.238 Mon Mar 14 19:52:11 2016 daemon.info dnsmasq[5396]: query[A] clients6.google.com from 10.10.10.228 Mon Mar 14 19:52:11 2016 daemon.info dnsmasq[5396]: forwarded clients6.google.com to 192.168.1.1 Mon Mar 14 19:52:11 2016 daemon.info dnsmasq[5396]: query[A] clients6.google.com from 10.10.10.229 Mon Mar 14 19:52:11 2016 daemon.info dnsmasq[5396]: forwarded clients6.google.com to 192.168.1.1 Mon Mar 14 19:52:11 2016 daemon.info dnsmasq[5396]: query[A] plus.google.com from 10.10.10.228 Mon Mar 14 19:52:11 2016 daemon.info dnsmasq[5396]: cached plus.google.com is 216.58.216.238 Mon Mar 14 19:52:11 2016 daemon.info dnsmasq[5396]: query[A] plus.google.com from 10.10.10.229 Mon Mar 14 19:52:11 2016 daemon.info dnsmasq[5396]: cached plus.google.com is 216.58.216.238 Mon Mar 14 19:52:11 2016 daemon.info dnsmasq[5396]: reply clients6.google.com is Mon Mar 14 19:52:11 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 64.233.191.139 Mon Mar 14 19:52:11 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 64.233.191.138 Mon Mar 14 19:52:11 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 64.233.191.100 Mon Mar 14 19:52:11 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 64.233.191.101 Mon Mar 14 19:52:11 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 64.233.191.113 Mon Mar 14 19:52:11 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 64.233.191.102 Mon Mar 14 19:52:11 2016 daemon.info dnsmasq[5396]: reply clients6.google.com is Mon Mar 14 19:52:11 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 64.233.191.139 Mon Mar 14 19:52:11 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 64.233.191.138 Mon Mar 14 19:52:11 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 64.233.191.100 Mon Mar 14 19:52:11 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 64.233.191.101 Mon Mar 14 19:52:11 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 64.233.191.113 Mon Mar 14 19:52:11 2016 daemon.info dnsmasq[5396]: reply clients.l.google.com is 64.233.191.102 Mon Mar 14 19:52:17 2016 daemon.info dnsmasq[5396]: query[AAAA] time.apple.com from 10.10.10.250 Mon Mar 14 19:52:17 2016 daemon.info dnsmasq[5396]: forwarded time.apple.com to 192.168.1.1 Mon Mar 14 19:52:17 2016 daemon.info dnsmasq[5396]: query[A] time.apple.com from 10.10.10.250 Mon Mar 14 19:52:17 2016 daemon.info dnsmasq[5396]: forwarded time.apple.com to 192.168.1.1 Mon Mar 14 19:52:17 2016 daemon.info dnsmasq[5396]: reply time.apple.com is 17.253.68.253 Mon Mar 14 19:52:17 2016 daemon.info dnsmasq[5396]: reply time.apple.com is 17.253.52.253 Mon Mar 14 19:52:17 2016 daemon.info dnsmasq[5396]: reply time.apple.com is 17.253.14.253 Mon Mar 14 19:52:17 2016 daemon.info dnsmasq[5396]: reply time.apple.com is 17.253.24.253 Mon Mar 14 19:52:17 2016 daemon.info dnsmasq[5396]: reply time.apple.com is 17.253.54.251 Mon Mar 14 19:52:17 2016 daemon.info dnsmasq[5396]: reply time.apple.com is 17.253.84.253 Mon Mar 14 19:52:17 2016 daemon.info dnsmasq[5396]: reply time.apple.com is 17.253.12.253 Mon Mar 14 19:52:17 2016 daemon.info dnsmasq[5396]: reply time.apple.com is 17.253.2.253 Mon Mar 14 19:52:17 2016 daemon.info dnsmasq[5396]: reply time.apple.com is 17.253.26.253 Mon Mar 14 19:52:17 2016 daemon.info dnsmasq[5396]: reply time.apple.com is 17.253.6.253 Mon Mar 14 19:52:17 2016 daemon.info dnsmasq[5396]: reply time.apple.com is 17.253.4.253 Mon Mar 14 19:52:17 2016 daemon.info dnsmasq[5396]: reply time.apple.com is 17.253.20.253 Mon Mar 14 19:52:17 2016 daemon.info dnsmasq[5396]: reply time.apple.com is 17.253.38.253 Mon Mar 14 19:52:17 2016 daemon.info dnsmasq[5396]: reply time.apple.com is 17.253.34.253 Mon Mar 14 19:52:17 2016 daemon.info dnsmasq[5396]: query[AAAA] time.apple.com from 10.10.10.250 Mon Mar 14 19:52:17 2016 daemon.info dnsmasq[5396]: forwarded time.apple.com to 192.168.1.1 Mon Mar 14 19:52:17 2016 daemon.info dnsmasq[5396]: query[A] time.apple.com from 10.10.10.250 Mon Mar 14 19:52:17 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.34.253 Mon Mar 14 19:52:17 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.38.253 Mon Mar 14 19:52:17 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.20.253 Mon Mar 14 19:52:17 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.4.253 Mon Mar 14 19:52:17 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.6.253 Mon Mar 14 19:52:17 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.26.253 Mon Mar 14 19:52:17 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.2.253 Mon Mar 14 19:52:17 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.12.253 Mon Mar 14 19:52:17 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.84.253 Mon Mar 14 19:52:17 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.54.251 Mon Mar 14 19:52:17 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.24.253 Mon Mar 14 19:52:17 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.14.253 Mon Mar 14 19:52:17 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.52.253 Mon Mar 14 19:52:17 2016 daemon.info dnsmasq[5396]: cached time.apple.com is 17.253.68.253 Mon Mar 14 19:52:23 2016 daemon.info dnsmasq[5396]: query[A] ssw.live.com from 10.10.10.228 Mon Mar 14 19:52:23 2016 daemon.info dnsmasq[5396]: cached ssw.live.com is Mon Mar 14 19:52:23 2016 daemon.info dnsmasq[5396]: forwarded ssw.live.com to 192.168.1.1 Mon Mar 14 19:52:23 2016 daemon.info dnsmasq[5396]: query[AAAA] ssw.live.com from 10.10.10.228 Mon Mar 14 19:52:23 2016 daemon.info dnsmasq[5396]: cached ssw.live.com is Mon Mar 14 19:52:23 2016 daemon.info dnsmasq[5396]: cached ssw.live.com.nsatc.net is NODATA-IPv6 Mon Mar 14 19:52:23 2016 daemon.info dnsmasq[5396]: query[A] ssw.live.com from 10.10.10.229 Mon Mar 14 19:52:23 2016 daemon.info dnsmasq[5396]: cached ssw.live.com is Mon Mar 14 19:52:23 2016 daemon.info dnsmasq[5396]: forwarded ssw.live.com to 192.168.1.1 Mon Mar 14 19:52:23 2016 daemon.info dnsmasq[5396]: reply ssw.live.com is Mon Mar 14 19:52:23 2016 daemon.info dnsmasq[5396]: reply ssw.live.com.nsatc.net is 207.46.101.29 Mon Mar 14 19:52:23 2016 daemon.info dnsmasq[5396]: query[AAAA] ssw.live.com from 10.10.10.229 Mon Mar 14 19:52:23 2016 daemon.info dnsmasq[5396]: cached ssw.live.com is Mon Mar 14 19:52:23 2016 daemon.info dnsmasq[5396]: cached ssw.live.com.nsatc.net is NODATA-IPv6 Mon Mar 14 19:52:23 2016 daemon.info dnsmasq[5396]: reply ssw.live.com is Mon Mar 14 19:52:23 2016 daemon.info dnsmasq[5396]: reply ssw.live.com.nsatc.net is 207.46.101.29 Mon Mar 14 19:52:33 2016 daemon.info dnsmasq[5396]: query[A] itus.accessinnov.com from 10.10.10.228 Mon Mar 14 19:52:33 2016 daemon.info dnsmasq[5396]: forwarded itus.accessinnov.com to 192.168.1.1 Mon Mar 14 19:52:33 2016 daemon.info dnsmasq[5396]: query[A] itus.accessinnov.com from 10.10.10.229 Mon Mar 14 19:52:33 2016 daemon.info dnsmasq[5396]: forwarded itus.accessinnov.com to 192.168.1.1 Mon Mar 14 19:52:33 2016 daemon.info dnsmasq[5396]: reply itus.accessinnov.com is 104.28.29.59 Mon Mar 14 19:52:33 2016 daemon.info dnsmasq[5396]: reply itus.accessinnov.com is 104.28.28.59 Mon Mar 14 19:52:33 2016 daemon.info dnsmasq[5396]: reply itus.accessinnov.com is 104.28.29.59 Mon Mar 14 19:52:33 2016 daemon.info dnsmasq[5396]: reply itus.accessinnov.com is 104.28.28.59 Mon Mar 14 19:52:33 2016 daemon.info dnsmasq[5396]: query[A] ajax.cloudflare.com from 10.10.10.228 Mon Mar 14 19:52:34 2016 daemon.info dnsmasq[5396]: forwarded ajax.cloudflare.com to 192.168.1.1 Mon Mar 14 19:52:34 2016 daemon.info dnsmasq[5396]: query[A] ajax.cloudflare.com from 10.10.10.229 Mon Mar 14 19:52:34 2016 daemon.info dnsmasq[5396]: forwarded ajax.cloudflare.com to 192.168.1.1 Mon Mar 14 19:52:34 2016 daemon.info dnsmasq[5396]: reply ajax.cloudflare.com is 198.41.214.67 Mon Mar 14 19:52:34 2016 daemon.info dnsmasq[5396]: reply ajax.cloudflare.com is 198.41.214.68 Mon Mar 14 19:52:34 2016 daemon.info dnsmasq[5396]: reply ajax.cloudflare.com is 198.41.215.67 Mon Mar 14 19:52:34 2016 daemon.info dnsmasq[5396]: reply ajax.cloudflare.com is 198.41.215.66 Mon Mar 14 19:52:34 2016 daemon.info dnsmasq[5396]: reply ajax.cloudflare.com is 198.41.215.68 Mon Mar 14 19:52:34 2016 daemon.info dnsmasq[5396]: reply ajax.cloudflare.com is 198.41.214.67 Mon Mar 14 19:52:34 2016 daemon.info dnsmasq[5396]: reply ajax.cloudflare.com is 198.41.214.68 Mon Mar 14 19:52:34 2016 daemon.info dnsmasq[5396]: reply ajax.cloudflare.com is 198.41.215.67 Mon Mar 14 19:52:34 2016 daemon.info dnsmasq[5396]: reply ajax.cloudflare.com is 198.41.215.66 Mon Mar 14 19:52:34 2016 daemon.info dnsmasq[5396]: reply ajax.cloudflare.com is 198.41.215.68 Mon Mar 14 19:52:34 2016 daemon.info dnsmasq[5396]: query[A] www.gravatar.com from 10.10.10.228 Mon Mar 14 19:52:34 2016 daemon.info dnsmasq[5396]: forwarded www.gravatar.com to 192.168.1.1 Mon Mar 14 19:52:34 2016 daemon.info dnsmasq[5396]: query[A] www.gravatar.com from 10.10.10.229 Mon Mar 14 19:52:34 2016 daemon.info dnsmasq[5396]: forwarded www.gravatar.com to 192.168.1.1 Mon Mar 14 19:52:34 2016 daemon.info dnsmasq[5396]: reply www.gravatar.com is Mon Mar 14 19:52:34 2016 daemon.info dnsmasq[5396]: reply cs91.wac.edgecastcdn.net is 72.21.91.121 Mon Mar 14 19:52:34 2016 daemon.info dnsmasq[5396]: reply www.gravatar.com is Mon Mar 14 19:52:34 2016 daemon.info dnsmasq[5396]: reply cs91.wac.edgecastcdn.net is 72.21.91.121 Mon Mar 14 19:52:34 2016 daemon.info dnsmasq[5396]: query[A] i2.wp.com from 10.10.10.228 Mon Mar 14 19:52:34 2016 daemon.info dnsmasq[5396]: forwarded i2.wp.com to 192.168.1.1 Mon Mar 14 19:52:34 2016 daemon.info dnsmasq[5396]: query[A] i2.wp.com from 10.10.10.229 Mon Mar 14 19:52:34 2016 daemon.info dnsmasq[5396]: forwarded i2.wp.com to 192.168.1.1 Mon Mar 14 19:52:34 2016 daemon.info dnsmasq[5396]: reply i2.wp.com is 192.0.77.2 Mon Mar 14 19:52:34 2016 daemon.info dnsmasq[5396]: reply i2.wp.com is 192.0.77.2 Mon Mar 14 19:52:34 2016 daemon.info dnsmasq[5396]: query[A] www.adbayes.com from 10.10.10.228 Mon Mar 14 19:52:34 2016 daemon.info dnsmasq[5396]: forwarded www.adbayes.com to 192.168.1.1 Mon Mar 14 19:52:34 2016 daemon.info dnsmasq[5396]: query[A] www.adbayes.com from 10.10.10.229 Mon Mar 14 19:52:34 2016 daemon.info dnsmasq[5396]: forwarded www.adbayes.com to 192.168.1.1 Mon Mar 14 19:52:35 2016 daemon.info dnsmasq[5396]: query[A] www.adbayes.com from 10.10.10.228 Mon Mar 14 19:52:35 2016 daemon.info dnsmasq[5396]: forwarded www.adbayes.com to 192.168.1.1 Mon Mar 14 19:52:35 2016 daemon.info dnsmasq[5396]: query[A] www.adbayes.com from 10.10.10.229 Mon Mar 14 19:52:35 2016 daemon.info dnsmasq[5396]: forwarded www.adbayes.com to 192.168.1.1 Mon Mar 14 19:52:35 2016 daemon.info dnsmasq[5396]: reply www.adbayes.com is 162.253.133.209 Mon Mar 14 19:52:35 2016 daemon.info dnsmasq[5396]: reply www.adbayes.com is 162.253.133.209 Mon Mar 14 19:52:35 2016 daemon.info dnsmasq[5396]: reply www.adbayes.com is 162.253.133.209 Mon Mar 14 19:52:35 2016 daemon.info dnsmasq[5396]: reply www.adbayes.com is 162.253.133.209 Mon Mar 14 19:52:42 2016 daemon.info dnsmasq[5396]: query[A] loglogin.lastpass.com from 10.10.10.228 Mon Mar 14 19:52:42 2016 daemon.info dnsmasq[5396]: forwarded loglogin.lastpass.com to 192.168.1.1 Mon Mar 14 19:52:42 2016 daemon.info dnsmasq[5396]: query[A] loglogin.lastpass.com from 10.10.10.229 Mon Mar 14 19:52:42 2016 daemon.info dnsmasq[5396]: forwarded loglogin.lastpass.com to 192.168.1.1 Mon Mar 14 19:52:42 2016 daemon.info dnsmasq[5396]: reply loglogin.lastpass.com is 38.127.167.38 Mon Mar 14 19:52:42 2016 daemon.info dnsmasq[5396]: reply loglogin.lastpass.com is 38.127.167.38 Mon Mar 14 19:52:43 2016 daemon.err uhttpd[5311]: cut: standard output: Broken pipe Mon Mar 14 19:52:44 2016 daemon.info dnsmasq[5396]: query[A] yourhost.example.com from 127.0.0.1 Mon Mar 14 19:52:44 2016 daemon.info dnsmasq[5396]: forwarded yourhost.example.com to 192.168.1.1 Mon Mar 14 19:52:44 2016 daemon.info dnsmasq[5396]: reply yourhost.example.com is 198.105.244.63 Mon Mar 14 19:52:44 2016 daemon.info dnsmasq[5396]: reply yourhost.example.com is 198.105.254.63 Mon Mar 14 19:52:44 2016 daemon.info dnsmasq[5396]: query[AAAA] yourhost.example.com from 127.0.0.1 Mon Mar 14 19:52:44 2016 daemon.info dnsmasq[5396]: forwarded yourhost.example.com to 192.168.1.1 Mon Mar 14 19:52:49 2016 daemon.info dnsmasq[5396]: query[A] yourhost.example.com from 127.0.0.1 Mon Mar 14 19:52:49 2016 daemon.info dnsmasq[5396]: cached yourhost.example.com is 198.105.254.63 Mon Mar 14 19:52:49 2016 daemon.info dnsmasq[5396]: cached yourhost.example.com is 198.105.244.63 Mon Mar 14 19:52:49 2016 daemon.info dnsmasq[5396]: query[AAAA] yourhost.example.com from 127.0.0.1 Mon Mar 14 19:52:49 2016 daemon.info dnsmasq[5396]: forwarded yourhost.example.com to 192.168.1.1 Mon Mar 14 19:52:50 2016 daemon.info dnsmasq[5396]: query[A] pollserver.lastpass.com from 10.10.10.228 Mon Mar 14 19:52:50 2016 daemon.info dnsmasq[5396]: forwarded pollserver.lastpass.com to 192.168.1.1 Mon Mar 14 19:52:50 2016 daemon.info dnsmasq[5396]: query[A] pollserver.lastpass.com from 10.10.10.229 Mon Mar 14 19:52:50 2016 daemon.info dnsmasq[5396]: forwarded pollserver.lastpass.com to 192.168.1.1 Mon Mar 14 19:52:50 2016 daemon.info dnsmasq[5396]: reply pollserver.lastpass.com is 38.127.167.50 Mon Mar 14 19:52:50 2016 daemon.info dnsmasq[5396]: reply pollserver.lastpass.com is 128.121.22.133 Mon Mar 14 19:52:50 2016 daemon.info dnsmasq[5396]: reply pollserver.lastpass.com is 38.127.167.50 Mon Mar 14 19:52:50 2016 daemon.info dnsmasq[5396]: reply pollserver.lastpass.com is 128.121.22.133 Mon Mar 14 19:53:03 2016 daemon.info dnsmasq[5396]: query[A] www.gstatic.com from 10.10.10.228 Mon Mar 14 19:53:03 2016 daemon.info dnsmasq[5396]: forwarded www.gstatic.com to 192.168.1.1 Mon Mar 14 19:53:03 2016 daemon.info dnsmasq[5396]: query[A] www.gstatic.com from 10.10.10.229 Mon Mar 14 19:53:03 2016 daemon.info dnsmasq[5396]: forwarded www.gstatic.com to 192.168.1.1 Mon Mar 14 19:53:03 2016 daemon.info dnsmasq[5396]: reply www.gstatic.com is 216.58.216.227 Mon Mar 14 19:53:03 2016 daemon.info dnsmasq[5396]: reply www.gstatic.com is 216.58.216.227 Mon Mar 14 19:53:03 2016 daemon.info dnsmasq[5396]: query[A] lh6.ggpht.com from 10.10.10.228 Mon Mar 14 19:53:03 2016 daemon.info dnsmasq[5396]: forwarded lh6.ggpht.com to 192.168.1.1 Mon Mar 14 19:53:03 2016 daemon.info dnsmasq[5396]: query[A] lh5.ggpht.com from 10.10.10.228 Mon Mar 14 19:53:03 2016 daemon.info dnsmasq[5396]: forwarded lh5.ggpht.com to 192.168.1.1 Mon Mar 14 19:53:03 2016 daemon.info dnsmasq[5396]: query[A] lh6.ggpht.com from 10.10.10.229 Mon Mar 14 19:53:03 2016 daemon.info dnsmasq[5396]: forwarded lh6.ggpht.com to 192.168.1.1 Mon Mar 14 19:53:03 2016 daemon.info dnsmasq[5396]: reply lh6.ggpht.com is Mon Mar 14 19:53:03 2016 daemon.info dnsmasq[5396]: reply photos-ugc.l.googleusercontent.com is 216.58.216.225 Mon Mar 14 19:53:03 2016 daemon.info dnsmasq[5396]: query[A] lh5.ggpht.com from 10.10.10.229 Mon Mar 14 19:53:03 2016 daemon.info dnsmasq[5396]: forwarded lh5.ggpht.com to 192.168.1.1 Mon Mar 14 19:53:03 2016 daemon.info dnsmasq[5396]: reply lh5.ggpht.com is Mon Mar 14 19:53:03 2016 daemon.info dnsmasq[5396]: reply photos-ugc.l.googleusercontent.com is 216.58.216.225 Mon Mar 14 19:53:03 2016 daemon.info dnsmasq[5396]: reply lh6.ggpht.com is Mon Mar 14 19:53:03 2016 daemon.info dnsmasq[5396]: reply photos-ugc.l.googleusercontent.com is 216.58.216.225 Mon Mar 14 19:53:03 2016 daemon.info dnsmasq[5396]: reply lh5.ggpht.com is Mon Mar 14 19:53:03 2016 daemon.info dnsmasq[5396]: reply photos-ugc.l.googleusercontent.com is 216.58.216.225 Mon Mar 14 19:53:03 2016 daemon.info dnsmasq[5396]: query[A] lh5.ggpht.com from 10.10.10.228 Mon Mar 14 19:53:03 2016 daemon.info dnsmasq[5396]: cached lh5.ggpht.com is Mon Mar 14 19:53:03 2016 daemon.info dnsmasq[5396]: cached photos-ugc.l.googleusercontent.com is 216.58.216.225 Mon Mar 14 19:53:03 2016 daemon.info dnsmasq[5396]: query[A] lh5.ggpht.com from 10.10.10.229 Mon Mar 14 19:53:03 2016 daemon.info dnsmasq[5396]: cached lh5.ggpht.com is Mon Mar 14 19:53:03 2016 daemon.info dnsmasq[5396]: cached photos-ugc.l.googleusercontent.com is 216.58.216.225 Mon Mar 14 19:53:04 2016 daemon.info dnsmasq[5396]: query[A] www.google-analytics.com from 10.10.10.228 Mon Mar 14 19:53:04 2016 daemon.info dnsmasq[5396]: cached www.google-analytics.com is Mon Mar 14 19:53:04 2016 daemon.info dnsmasq[5396]: cached www-google-analytics.l.google.com is 216.58.216.238 Mon Mar 14 19:53:04 2016 daemon.info dnsmasq[5396]: query[A] www.google-analytics.com from 10.10.10.229 Mon Mar 14 19:53:04 2016 daemon.info dnsmasq[5396]: cached www.google-analytics.com is Mon Mar 14 19:53:04 2016 daemon.info dnsmasq[5396]: cached www-google-analytics.l.google.com is 216.58.216.238 Mon Mar 14 19:53:04 2016 daemon.info dnsmasq[5396]: query[A] www.google.com from 10.10.10.228 Mon Mar 14 19:53:04 2016 daemon.info dnsmasq[5396]: forwarded www.google.com to 192.168.1.1 Mon Mar 14 19:53:04 2016 daemon.info dnsmasq[5396]: query[A] www.google.com from 10.10.10.229 Mon Mar 14 19:53:04 2016 daemon.info dnsmasq[5396]: forwarded www.google.com to 192.168.1.1 Mon Mar 14 19:53:04 2016 daemon.info dnsmasq[5396]: reply www.google.com is 74.125.141.147 Mon Mar 14 19:53:04 2016 daemon.info dnsmasq[5396]: reply www.google.com is 74.125.141.105 Mon Mar 14 19:53:04 2016 daemon.info dnsmasq[5396]: reply www.google.com is 74.125.141.99 Mon Mar 14 19:53:04 2016 daemon.info dnsmasq[5396]: reply www.google.com is 74.125.141.104 Mon Mar 14 19:53:04 2016 daemon.info dnsmasq[5396]: reply www.google.com is 74.125.141.103 Mon Mar 14 19:53:04 2016 daemon.info dnsmasq[5396]: reply www.google.com is 74.125.141.106 Mon Mar 14 19:53:04 2016 daemon.info dnsmasq[5396]: reply www.google.com is 74.125.141.147 Mon Mar 14 19:53:04 2016 daemon.info dnsmasq[5396]: reply www.google.com is 74.125.141.105 Mon Mar 14 19:53:04 2016 daemon.info dnsmasq[5396]: reply www.google.com is 74.125.141.99 Mon Mar 14 19:53:04 2016 daemon.info dnsmasq[5396]: reply www.google.com is 74.125.141.104 Mon Mar 14 19:53:04 2016 daemon.info dnsmasq[5396]: reply www.google.com is 74.125.141.103 Mon Mar 14 19:53:04 2016 daemon.info dnsmasq[5396]: reply www.google.com is 74.125.141.106 Mon Mar 14 19:53:08 2016 daemon.info dnsmasq[5396]: query[A] v10.vortex-win.data.microsoft.com from 10.10.10.228 Mon Mar 14 19:53:08 2016 daemon.info dnsmasq[5396]: forwarded v10.vortex-win.data.microsoft.com to 192.168.1.1 Mon Mar 14 19:53:08 2016 daemon.info dnsmasq[5396]: query[AAAA] v10.vortex-win.data.microsoft.com from 10.10.10.228 Mon Mar 14 19:53:08 2016 daemon.info dnsmasq[5396]: forwarded v10.vortex-win.data.microsoft.com to 192.168.1.1 Mon Mar 14 19:53:08 2016 daemon.info dnsmasq[5396]: query[A] v10.vortex-win.data.microsoft.com from 10.10.10.229 Mon Mar 14 19:53:08 2016 daemon.info dnsmasq[5396]: forwarded v10.vortex-win.data.microsoft.com to 192.168.1.1 Mon Mar 14 19:53:08 2016 daemon.info dnsmasq[5396]: reply v10.vortex-win.data.microsoft.com is Mon Mar 14 19:53:08 2016 daemon.info dnsmasq[5396]: reply v10.vortex-win.data.metron.live.com.nsatc.net is Mon Mar 14 19:53:08 2016 daemon.info dnsmasq[5396]: reply vortex.data.glbdns2.microsoft.com is Mon Mar 14 19:53:08 2016 daemon.info dnsmasq[5396]: reply vortex-cy2.metron.live.com.nsatc.net is 64.4.54.254 Mon Mar 14 19:53:08 2016 daemon.info dnsmasq[5396]: query[AAAA] v10.vortex-win.data.microsoft.com from 10.10.10.229 Mon Mar 14 19:53:08 2016 daemon.info dnsmasq[5396]: cached v10.vortex-win.data.microsoft.com is Mon Mar 14 19:53:08 2016 daemon.info dnsmasq[5396]: cached v10.vortex-win.data.metron.live.com.nsatc.net is Mon Mar 14 19:53:08 2016 daemon.info dnsmasq[5396]: cached vortex.data.glbdns2.microsoft.com is Mon Mar 14 19:53:08 2016 daemon.info dnsmasq[5396]: forwarded v10.vortex-win.data.microsoft.com to 192.168.1.1 Mon Mar 14 19:53:08 2016 daemon.info dnsmasq[5396]: reply v10.vortex-win.data.microsoft.com is Mon Mar 14 19:53:08 2016 daemon.info dnsmasq[5396]: reply v10.vortex-win.data.metron.live.com.nsatc.net is Mon Mar 14 19:53:08 2016 daemon.info dnsmasq[5396]: reply vortex.data.glbdns2.microsoft.com is Mon Mar 14 19:53:08 2016 daemon.info dnsmasq[5396]: reply vortex-cy2.metron.live.com.nsatc.net is NODATA-IPv6 Mon Mar 14 19:53:08 2016 daemon.info dnsmasq[5396]: reply v10.vortex-win.data.microsoft.com is Mon Mar 14 19:53:08 2016 daemon.info dnsmasq[5396]: reply v10.vortex-win.data.metron.live.com.nsatc.net is Mon Mar 14 19:53:08 2016 daemon.info dnsmasq[5396]: reply vortex.data.glbdns2.microsoft.com is Mon Mar 14 19:53:08 2016 daemon.info dnsmasq[5396]: reply vortex-cy2.metron.live.com.nsatc.net is 64.4.54.254 Mon Mar 14 19:53:08 2016 daemon.info dnsmasq[5396]: query[AAAA] v10.vortex-win.data.microsoft.com from 10.10.10.228 Mon Mar 14 19:53:08 2016 daemon.info dnsmasq[5396]: cached v10.vortex-win.data.microsoft.com is Mon Mar 14 19:53:08 2016 daemon.info dnsmasq[5396]: cached v10.vortex-win.data.metron.live.com.nsatc.net is Mon Mar 14 19:53:08 2016 daemon.info dnsmasq[5396]: cached vortex.data.glbdns2.microsoft.com is Mon Mar 14 19:53:08 2016 daemon.info dnsmasq[5396]: cached vortex-cy2.metron.live.com.nsatc.net is NODATA-IPv6 Mon Mar 14 19:53:08 2016 daemon.info dnsmasq[5396]: reply v10.vortex-win.data.microsoft.com is Mon Mar 14 19:53:08 2016 daemon.info dnsmasq[5396]: reply v10.vortex-win.data.metron.live.com.nsatc.net is Mon Mar 14 19:53:08 2016 daemon.info dnsmasq[5396]: reply vortex.data.glbdns2.microsoft.com is Mon Mar 14 19:53:08 2016 daemon.info dnsmasq[5396]: reply vortex-cy2.metron.live.com.nsatc.net is NODATA-IPv6 Mon Mar 14 19:53:08 2016 daemon.info dnsmasq[5396]: query[AAAA] v10.vortex-win.data.microsoft.com from 10.10.10.229 Mon Mar 14 19:53:08 2016 daemon.info dnsmasq[5396]: cached v10.vortex-win.data.microsoft.com is Mon Mar 14 19:53:08 2016 daemon.info dnsmasq[5396]: cached v10.vortex-win.data.metron.live.com.nsatc.net is Mon Mar 14 19:53:08 2016 daemon.info dnsmasq[5396]: cached vortex.data.glbdns2.microsoft.com is Mon Mar 14 19:53:08 2016 daemon.info dnsmasq[5396]: cached vortex-cy2.metron.live.com.nsatc.net is NODATA-IPv6 Mon Mar 14 19:53:10 2016 daemon.info dnsmasq[5396]: query[A] lh3.ggpht.com from 10.10.10.228 Mon Mar 14 19:53:10 2016 daemon.info dnsmasq[5396]: forwarded lh3.ggpht.com to 192.168.1.1 Mon Mar 14 19:53:10 2016 daemon.info dnsmasq[5396]: query[A] lh3.ggpht.com from 10.10.10.229 Mon Mar 14 19:53:10 2016 daemon.info dnsmasq[5396]: forwarded lh3.ggpht.com to 192.168.1.1 Mon Mar 14 19:53:10 2016 daemon.info dnsmasq[5396]: reply lh3.ggpht.com is Mon Mar 14 19:53:10 2016 daemon.info dnsmasq[5396]: reply photos-ugc.l.googleusercontent.com is 216.58.216.225 Mon Mar 14 19:53:10 2016 daemon.info dnsmasq[5396]: reply lh3.ggpht.com is Mon Mar 14 19:53:10 2016 daemon.info dnsmasq[5396]: reply photos-ugc.l.googleusercontent.com is 216.58.216.225 Mon Mar 14 19:53:10 2016 daemon.info dnsmasq[5396]: query[A] beacons2.gvt2.com from 10.10.10.228 Mon Mar 14 19:53:10 2016 daemon.info dnsmasq[5396]: forwarded beacons2.gvt2.com to 192.168.1.1 Mon Mar 14 19:53:10 2016 daemon.info dnsmasq[5396]: query[A] beacons2.gvt2.com from 10.10.10.229 Mon Mar 14 19:53:10 2016 daemon.info dnsmasq[5396]: forwarded beacons2.gvt2.com to 192.168.1.1 Mon Mar 14 19:53:10 2016 daemon.info dnsmasq[5396]: query[A] beacons2.gvt2.com from 10.10.10.228 Mon Mar 14 19:53:10 2016 daemon.info dnsmasq[5396]: forwarded beacons2.gvt2.com to 192.168.1.1 Mon Mar 14 19:53:10 2016 daemon.info dnsmasq[5396]: reply beacons2.gvt2.com is 108.177.8.94 Mon Mar 14 19:53:10 2016 daemon.info dnsmasq[5396]: reply beacons2.gvt2.com is 108.177.8.94 Mon Mar 14 19:53:10 2016 daemon.info dnsmasq[5396]: query[A] beacons2.gvt2.com from 10.10.10.229 Mon Mar 14 19:53:10 2016 daemon.info dnsmasq[5396]: cached beacons2.gvt2.com is 108.177.8.94 Mon Mar 14 19:53:10 2016 daemon.info dnsmasq[5396]: reply beacons2.gvt2.com is 108.177.8.94 Mon Mar 14 19:53:12 2016 daemon.info dnsmasq[5396]: query[A] apple.com from 10.10.10.228 Mon Mar 14 19:53:12 2016 daemon.info dnsmasq[5396]: cached apple.com is 17.172.224.47 Mon Mar 14 19:53:12 2016 daemon.info dnsmasq[5396]: cached apple.com is 17.142.160.59 Mon Mar 14 19:53:12 2016 daemon.info dnsmasq[5396]: cached apple.com is 17.178.96.59 Mon Mar 14 19:53:12 2016 daemon.info dnsmasq[5396]: query[A] apple.com from 10.10.10.229 Mon Mar 14 19:53:12 2016 daemon.info dnsmasq[5396]: cached apple.com is 17.178.96.59 Mon Mar 14 19:53:12 2016 daemon.info dnsmasq[5396]: cached apple.com is 17.172.224.47 Mon Mar 14 19:53:12 2016 daemon.info dnsmasq[5396]: cached apple.com is 17.142.160.59 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Enabling inline operation Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Found pid path directive (/var/run/) Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Running in IDS mode Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: --== Initializing Snort ==-- Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Initializing Output Plugins! Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Initializing Preprocessors! Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Initializing Plug-ins! Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Parsing Rules file "/etc/snort/snort8.conf" Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: PortVar 'HTTP_PORTS' defined : Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: [ 36 80:90 311 383 555 591 593 631 801 808 818 901 972 1158 1220 1414 1533 1741 1830 1942 2231 2301 2381 2809 2980 3029 3037 3057 3128 3443 3702 4000 4343 4848 5000 5117 5250 5600 6080 6173 6988 7000:7001 7071 7144:7145 7510 7770 7777:7779 8000 8008 8014 8028 8080:8082 8085 8088 8090 8118 8123 8180:8181 8222 8243 8280 8300 8333 8344 8500 8509 8800 8888 8899 8983 9000 9060 9080 9090:9091 9111 9290 9443 9999:10000 11371 12601 13014 15489 29991 33300 34412 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: PortVar 'SHELLCODE_PORTS' defined : Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: [ 1:65535 ] Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: PortVar 'ORACLE_PORTS' defined : Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: [ 1024:65535 ] Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: PortVar 'SSH_PORTS' defined : Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: [ 22 ] Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: PortVar 'FTP_PORTS' defined : Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: [ 21 2100 3535 ] Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: PortVar 'SIP_PORTS' defined : Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: [ 5060:5061 5600 ] Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: PortVar 'FILE_DATA_PORTS' defined : Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: [ 36 80:90 110 143 311 383 555 591 593 631 801 808 818 901 972 1158 1220 1414 1533 1741 1830 1942 2231 2301 2381 2809 2980 3029 3037 3057 3128 3443 3702 4000 4343 4848 5000 5117 5250 5600 6080 6173 6988 7000:7001 7071 7144:7145 7510 7770 7777:7779 8000 8008 8014 8028 8080:8082 8085 8088 8090 8118 8123 8180:8181 8222 8243 8280 8300 8333 8344 8500 8509 8800 8888 8899 8983 9000 9060 9080 9090:9091 9111 9290 9443 9999:10000 11371 12601 13014 15489 29991 3330Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: PortVar 'GTP_PORTS' defined : Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: [ 2123 2152 3386 ] Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Detection: Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Search-Method = AC-Full-Q Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Search-Method-Optimizations = enabled Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Maximum pattern length = 20 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Found pid path directive (/var/run/) Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Tagged Packet Limit: 256 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Loading dynamic engine /usr/lib/snort_dynamicengine/libsf_engine.so... Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: done Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Loading all dynamic preprocessor libs from /usr/lib/snort_dynamicpreprocessor/... Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_ssl_preproc.so... Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: done Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_dnp3_preproc.so... Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: done Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_sip_preproc.so... Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: done Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_ftptelnet_preproc.so... Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: done Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_smtp_preproc.so... Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: done Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_pop_preproc.so... Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: done Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_sdf_preproc.so... Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: done Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_imap_preproc.so... Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: done Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_dce2_preproc.so... Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: done Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_dns_preproc.so... Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: done Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_reputation_preproc.so... Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: done Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_modbus_preproc.so... Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: done Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_ssh_preproc.so... Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: done Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_gtp_preproc.so... Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: done Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Finished Loading all dynamic preprocessor libs from /usr/lib/snort_dynamicpreprocessor/ Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Log directory = /tmp/snort/ Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Normalizer config: Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: ip4: on Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: ip4::df: off Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: ip4::rf: off Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: ip4::tos: off Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: ip4::trim: off Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: ip4::ttl: on (min=1, new=5) Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Normalizer config: Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: tcp: on Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: tcp::ecn: stream Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: tcp::block: off Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: tcp::rsv: off Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: tcp::pad: off Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: tcp::req_urg: off Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: tcp::req_pay: off Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: tcp::req_urp: off Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: tcp::urp: off Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: tcp::opt: off Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: tcp::ips: on Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: tcp::trim_syn: off Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: tcp::trim_rst: off Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: tcp::trim_win: off Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: tcp::trim_mss: off Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Normalizer config: Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: icmp4: on Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Normalizer config: Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: ip6: on Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: ip6::hops: on (min=1, new=5) Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Normalizer config: Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: icmp6: on Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Frag3 global config: Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Max frags: 65536 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Fragment memory cap: 4194304 bytes Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Frag3 engine config: Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Bound Address: default Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Target-based policy: WINDOWS Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Fragment timeout: 180 seconds Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Fragment min_ttl: 1 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Fragment Anomalies: Alert Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Overlap Limit: 10 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Min fragment Length: 100 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Max Expected Streams: 39 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Stream global config: Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Track TCP sessions: ACTIVE Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Max TCP sessions: 10000 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: TCP cache pruning timeout: 30 seconds Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: TCP cache nominal timeout: 3600 seconds Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Memcap (for reassembly packet storage): 8388608 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Track UDP sessions: ACTIVE Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Max UDP sessions: 10000 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: UDP cache pruning timeout: 30 seconds Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: UDP cache nominal timeout: 180 seconds Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Track ICMP sessions: ACTIVE Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Max ICMP sessions: 65536 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Track IP sessions: INACTIVE Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Log info if session memory consumption exceeds 1048576 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Send up to 2 active responses Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Wait at least 5 seconds between responses Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Protocol Aware Flushing: ACTIVE Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Maximum Flush Point: 16000 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Stream TCP Policy config: Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Bound Address: default Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Reassembly Policy: WINDOWS Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Timeout: 180 seconds Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Limit on TCP Overlaps: 10 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Maximum number of bytes to queue per session: 1048576 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Maximum number of segs to queue per session: 2621 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Options: Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Require 3-Way Handshake: YES Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: 3-Way Handshake Timeout: 180 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Detect Anomalies: YES Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Reassembly Ports: Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: 21 client (Footprint-IPS) Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: 22 client (Footprint-IPS) Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: 23 client (Footprint-IPS) Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: 25 client (Footprint-IPS) Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: 36 client (Footprint-IPS) server (Footprint-IPS) Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: 42 client (Footprint-IPS) Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: 53 client (Footprint-IPS) Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: 70 client (Footprint-IPS) Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: 79 client (Footprint-IPS) Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: 80 client (Footprint-IPS) server (Footprint-IPS) Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: 81 client (Footprint-IPS) server (Footprint-IPS) Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: 82 client (Footprint-IPS) server (Footprint-IPS) Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: 83 client (Footprint-IPS) server (Footprint-IPS) Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: 84 client (Footprint-IPS) server (Footprint-IPS) Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: 85 client (Footprint-IPS) server (Footprint-IPS) Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: 86 client (Footprint-IPS) server (Footprint-IPS) Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: 87 client (Footprint-IPS) server (Footprint-IPS) Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: 88 client (Footprint-IPS) server (Footprint-IPS) Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: 89 client (Footprint-IPS) server (Footprint-IPS) Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: 90 client (Footprint-IPS) server (Footprint-IPS) Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: additional ports configured but not printed. Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Stream UDP Policy config: Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Timeout: 180 seconds Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: HttpInspect Config: Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: GLOBAL CONFIG Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Detect Proxy Usage: NO Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: IIS Unicode Map Filename: /etc/snort/unicode.map Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: IIS Unicode Map Codepage: 1252 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Memcap used for logging URI and Hostname: 150994944 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Max Gzip Memory: 838860 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Max Gzip Sessions: 1807 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Gzip Compress Depth: 65535 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Gzip Decompress Depth: 65535 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: DEFAULT SERVER CONFIG: Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Server profile: All Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Ports (PAF): 36 80 81 82 83 84 85 86 87 88 89 90 311 383 555 591 593 631 801 808 818 901 972 1158 1220 1414 1533 1741 1830 1942 2231 2301 2381 2809 2980 3029 3037 3057 3128 3443 3702 4000 4343 4848 5000 5117 5250 5600 6080 6173 6988 7000 7001 7071 7144 7145 7510 7770 7777 7778 7779 8000 8008 8014 8028 8080 8081 8082 8085 8088 8090 8118 8123 8180 8181 8222 8243 8280 8300 8333 8344 8500 8509 8800 8888 8899 8983 9000 9060 9080 9090 9091 9111 9290 9443 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Server Flow Depth: 0 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Client Flow Depth: 0 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Max Chunk Length: 500000 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Small Chunk Length Evasion: chunk size <= 10, threshold >= 5 times Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Max Header Field Length: 750 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Max Number Header Fields: 100 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Max Number of WhiteSpaces allowed with header folding: 200 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Inspect Pipeline Requests: YES Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: URI Discovery Strict Mode: NO Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Allow Proxy Usage: NO Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Disable Alerting: NO Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Oversize Dir Length: 500 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Only inspect URI: NO Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Normalize HTTP Headers: NO Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Inspect HTTP Cookies: YES Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Inspect HTTP Responses: YES Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Extract Gzip from responses: YES Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Decompress response files: Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Unlimited decompression of gzip data from responses: YES Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Normalize Javascripts in HTTP Responses: YES Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Max Number of WhiteSpaces allowed with Javascript Obfuscation in HTTP responses: 200 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Normalize HTTP Cookies: NO Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Enable XFF and True Client IP: NO Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Log HTTP URI data: NO Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Log HTTP Hostname data: NO Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Extended ASCII code support in URI: NO Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Ascii: YES alert: NO Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Double Decoding: YES alert: NO Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: %U Encoding: YES alert: YES Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Bare Byte: YES alert: NO Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: UTF 8: YES alert: NO Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: IIS Unicode: YES alert: NO Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Multiple Slash: YES alert: NO Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: IIS Backslash: YES alert: NO Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Directory Traversal: YES alert: NO Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Web Root Traversal: YES alert: NO Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Apache WhiteSpace: YES alert: NO Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: IIS Delimiter: YES alert: NO Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: IIS Unicode Map: GLOBAL IIS UNICODE MAP CONFIG Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Non-RFC Compliant Characters: 0x00 0x01 0x02 0x03 0x04 0x05 0x06 0x07 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Whitespace Characters: 0x09 0x0b 0x0c 0x0d Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: rpc_decode arguments: Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Ports to decode RPC on: 111 32770 32771 32772 32773 32774 32775 32776 32777 32778 32779 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: alert_fragments: INACTIVE Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: alert_large_fragments: INACTIVE Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: alert_incomplete: INACTIVE Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: alert_multiple_requests: INACTIVE Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Portscan Detection Config: Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Detect Protocols: TCP UDP ICMP IP Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Detect Scan Type: portscan portsweep decoy_portscan distributed_portscan Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Sensitivity Level: Medium Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Memcap (in bytes): 500000 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Number of Nodes: 978 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: FTPTelnet Config: Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: GLOBAL CONFIG Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Inspection Type: stateful Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Check for Encrypted Traffic: YES alert: NO Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Continue to check encrypted data: YES Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: TELNET CONFIG: Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Ports: 23 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Are You There Threshold: 20 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Normalize: YES Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Detect Anomalies: YES Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: FTP CONFIG: Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: FTP Server: default Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Ports (PAF): 21 2100 3535 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Check for Telnet Cmds: YES alert: YES Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Ignore Telnet Cmd Operations: YES alert: YES Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Ignore open data channels: NO Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: FTP Client: default Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Check for Bounce Attacks: YES alert: YES Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Check for Telnet Cmds: YES alert: YES Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Ignore Telnet Cmd Operations: YES alert: YES Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Max Response Length: 256 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: SSH config: Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Autodetection: ENABLED Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Challenge-Response Overflow Alert: ENABLED Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: SSH1 CRC32 Alert: ENABLED Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Server Version String Overflow Alert: ENABLED Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Protocol Mismatch Alert: ENABLED Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Bad Message Direction Alert: DISABLED Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Bad Payload Size Alert: DISABLED Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Unrecognized Version Alert: DISABLED Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Max Encrypted Packets: 20 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Max Server Version String Length: 100 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: MaxClientBytes: 19600 (Default) Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Ports: Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: 22 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: DCE/RPC 2 Preprocessor Configuration Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Global Configuration Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: DCE/RPC Defragmentation: Enabled Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Memcap: 102400 KB Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Events: co Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: SMB Fingerprint policy: Disabled Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Server Default Configuration Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Policy: WinXP Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Detect ports (PAF) Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: SMB: 139 445 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: TCP: 135 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: UDP: 135 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: RPC over HTTP server: 593 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: RPC over HTTP proxy: None Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Autodetect ports (PAF) Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: SMB: None Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: TCP: 1025-65535 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: UDP: 1025-65535 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: RPC over HTTP server: 1025-65535 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: RPC over HTTP proxy: None Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Invalid SMB shares: C$ D$ ADMIN$ Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Maximum SMB command chaining: 3 commands Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: SMB file inspection: Disabled Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: DNS config: Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: DNS Client rdata txt Overflow Alert: ACTIVE Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Obsolete DNS RR Types Alert: INACTIVE Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Experimental DNS RR Types Alert: INACTIVE Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Ports: Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: 53 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: SSLPP config: Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Encrypted packets: not inspected Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Ports: Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: 443 465 563 636 989 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: 992 993 994 995 7801 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: 7802 7900 7901 7902 7903 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: 7904 7905 7906 7907 7908 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: 7909 7910 7911 7912 7913 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: 7914 7915 7916 7917 7918 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: 7919 7920 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Server side data is trusted Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Maximum SSL Heartbeat length: 0 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Sensitive Data preprocessor config: Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Global Alert Threshold: 25 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Masked Output: DISABLED Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: SIP config: Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Max number of sessions: 1024 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Max number of dialogs in a session: 4 (Default) Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Status: ENABLED Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Ignore media channel: DISABLED Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Max URI length: 512 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Max Call ID length: 80 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Max Request name length: 20 (Default) Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Max From length: 256 (Default) Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Max To length: 256 (Default) Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Max Via length: 1024 (Default) Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Max Contact length: 512 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Max Content length: 2048 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Ports: Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: 5060 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: 5061 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: 5600 Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Methods: Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: invite Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: cancel Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: ack Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: bye Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: register Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: options Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: refer Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: subscribe Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: update Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: join Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: info Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: message Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: notify Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: benotify Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: do Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: qauth Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: sprack Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: publish Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: service Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: unsubscribe Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: prack Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: +++++++++++++++++++++++++++++++++++++++++++++++++++ Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: Initializing rule chains... Mon Mar 14 19:53:13 2016 daemon.notice snort[6731]: WARNING: /etc/snort/rules//snort.rules(1) threshold (in rule) is deprecated; use detection_filter instead. Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Enabling inline operation Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Found pid path directive (/var/snort/) Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Running in IDS mode Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: --== Initializing Snort ==-- Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Initializing Output Plugins! Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Initializing Preprocessors! Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Initializing Plug-ins! Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Parsing Rules file "/etc/snort/snort7.conf" Mon Mar 14 19:53:16 2016 daemon.notice snort[6731]: 4416 Snort rules read Mon Mar 14 19:53:16 2016 daemon.notice snort[6731]: 4264 detection rules Mon Mar 14 19:53:16 2016 daemon.notice snort[6731]: 152 decoder rules Mon Mar 14 19:53:16 2016 daemon.notice snort[6731]: 0 preprocessor rules Mon Mar 14 19:53:16 2016 daemon.notice snort[6731]: 4416 Option Chains linked into 619 Chain Headers Mon Mar 14 19:53:16 2016 daemon.notice snort[6731]: 0 Dynamic rules Mon Mar 14 19:53:16 2016 daemon.notice snort[6731]: +++++++++++++++++++++++++++++++++++++++++++++++++++ Mon Mar 14 19:53:16 2016 daemon.notice snort[6731]: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: PortVar 'HTTP_PORTS' defined : Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: [ 36 80:90 311 383 555 591 593 631 801 808 818 901 972 1158 1220 1414 1533 1741 1830 1942 2231 2301 2381 2809 2980 3029 3037 3057 3128 3443 3702 4000 4343 4848 5000 5117 5250 5600 6080 6173 6988 7000:7001 7071 7144:7145 7510 7770 7777:7779 8000 8008 8014 8028 8080:8082 8085 8088 8090 8118 8123 8180:8181 8222 8243 8280 8300 8333 8344 8500 8509 8800 8888 8899 8983 9000 9060 9080 9090:9091 9111 9290 9443 9999:10000 11371 12601 13014 15489 29991 33300 34412 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: PortVar 'SHELLCODE_PORTS' defined : Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: [ 1:65535 ] Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: PortVar 'ORACLE_PORTS' defined : Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: [ 1024:65535 ] Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: PortVar 'SSH_PORTS' defined : Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: [ 22 ] Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: PortVar 'FTP_PORTS' defined : Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: [ 21 2100 3535 ] Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: PortVar 'SIP_PORTS' defined : Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: [ 5060:5061 5600 ] Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: PortVar 'FILE_DATA_PORTS' defined : Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: [ 36 80:90 110 143 311 383 555 591 593 631 801 808 818 901 972 1158 1220 1414 1533 1741 1830 1942 2231 2301 2381 2809 2980 3029 3037 3057 3128 3443 3702 4000 4343 4848 5000 5117 5250 5600 6080 6173 6988 7000:7001 7071 7144:7145 7510 7770 7777:7779 8000 8008 8014 8028 8080:8082 8085 8088 8090 8118 8123 8180:8181 8222 8243 8280 8300 8333 8344 8500 8509 8800 8888 8899 8983 9000 9060 9080 9090:9091 9111 9290 9443 9999:10000 11371 12601 13014 15489 29991 3330Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: PortVar 'GTP_PORTS' defined : Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: [ 2123 2152 3386 ] Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Detection: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Search-Method = AC-Full-Q Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Search-Method-Optimizations = enabled Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Maximum pattern length = 20 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Found pid path directive (/var/snort/) Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Tagged Packet Limit: 256 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Loading dynamic engine /usr/lib/snort_dynamicengine/libsf_engine.so... Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: done Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Loading all dynamic preprocessor libs from /usr/lib/snort_dynamicpreprocessor/... Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_ssl_preproc.so... Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: done Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_dnp3_preproc.so... Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: done Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_sip_preproc.so... Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: done Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_ftptelnet_preproc.so... Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: done Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_smtp_preproc.so... Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: done Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_pop_preproc.so... Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: done Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_sdf_preproc.so... Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: done Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_imap_preproc.so... Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: done Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_dce2_preproc.so... Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: done Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_dns_preproc.so... Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: done Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_reputation_preproc.so... Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: done Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_modbus_preproc.so... Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: done Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_ssh_preproc.so... Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: done Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Loading dynamic preprocessor library /usr/lib/snort_dynamicpreprocessor//libsf_gtp_preproc.so... Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: done Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Finished Loading all dynamic preprocessor libs from /usr/lib/snort_dynamicpreprocessor/ Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Log directory = /tmp/snort/ Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Normalizer config: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: ip4: on Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: ip4::df: off Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: ip4::rf: off Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: ip4::tos: off Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: ip4::trim: off Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: ip4::ttl: on (min=1, new=5) Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Normalizer config: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: tcp: on Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: tcp::ecn: stream Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: tcp::block: off Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: tcp::rsv: off Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: tcp::pad: off Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: tcp::req_urg: off Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: tcp::req_pay: off Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: tcp::req_urp: off Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: tcp::urp: off Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: tcp::opt: off Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: tcp::ips: on Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: tcp::trim_syn: off Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: tcp::trim_rst: off Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: tcp::trim_win: off Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: tcp::trim_mss: off Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Normalizer config: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: icmp4: on Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Normalizer config: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: ip6: on Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: ip6::hops: on (min=1, new=5) Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Normalizer config: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: icmp6: on Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Frag3 global config: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Max frags: 65536 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Fragment memory cap: 4194304 bytes Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Frag3 engine config: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Bound Address: default Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Target-based policy: WINDOWS Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Fragment timeout: 180 seconds Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Fragment min_ttl: 1 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Fragment Anomalies: Alert Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Overlap Limit: 10 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Min fragment Length: 100 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Max Expected Streams: 39 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Stream global config: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Track TCP sessions: ACTIVE Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Max TCP sessions: 10000 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: TCP cache pruning timeout: 30 seconds Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: TCP cache nominal timeout: 3600 seconds Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Memcap (for reassembly packet storage): 8388608 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Track UDP sessions: ACTIVE Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Max UDP sessions: 10000 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: UDP cache pruning timeout: 30 seconds Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: UDP cache nominal timeout: 180 seconds Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Track ICMP sessions: ACTIVE Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Max ICMP sessions: 65536 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Track IP sessions: INACTIVE Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Log info if session memory consumption exceeds 1048576 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Send up to 2 active responses Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Wait at least 5 seconds between responses Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Protocol Aware Flushing: ACTIVE Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Maximum Flush Point: 16000 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Stream TCP Policy config: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Bound Address: default Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Reassembly Policy: WINDOWS Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Timeout: 180 seconds Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Limit on TCP Overlaps: 10 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Maximum number of bytes to queue per session: 1048576 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Maximum number of segs to queue per session: 2621 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Options: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Require 3-Way Handshake: YES Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: 3-Way Handshake Timeout: 180 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Detect Anomalies: YES Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Reassembly Ports: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: 21 client (Footprint-IPS) Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: 22 client (Footprint-IPS) Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: 23 client (Footprint-IPS) Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: 25 client (Footprint-IPS) Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: 36 client (Footprint-IPS) server (Footprint-IPS) Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: 42 client (Footprint-IPS) Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: 53 client (Footprint-IPS) Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: 70 client (Footprint-IPS) Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: 79 client (Footprint-IPS) Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: 80 client (Footprint-IPS) server (Footprint-IPS) Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: 81 client (Footprint-IPS) server (Footprint-IPS) Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: 82 client (Footprint-IPS) server (Footprint-IPS) Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: 83 client (Footprint-IPS) server (Footprint-IPS) Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: 84 client (Footprint-IPS) server (Footprint-IPS) Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: 85 client (Footprint-IPS) server (Footprint-IPS) Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: 86 client (Footprint-IPS) server (Footprint-IPS) Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: 87 client (Footprint-IPS) server (Footprint-IPS) Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: 88 client (Footprint-IPS) server (Footprint-IPS) Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: 89 client (Footprint-IPS) server (Footprint-IPS) Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: 90 client (Footprint-IPS) server (Footprint-IPS) Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: additional ports configured but not printed. Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Stream UDP Policy config: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Timeout: 180 seconds Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: HttpInspect Config: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: GLOBAL CONFIG Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Detect Proxy Usage: NO Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: IIS Unicode Map Filename: /etc/snort/unicode.map Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: IIS Unicode Map Codepage: 1252 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Memcap used for logging URI and Hostname: 150994944 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Max Gzip Memory: 838860 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Max Gzip Sessions: 1807 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Gzip Compress Depth: 65535 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Gzip Decompress Depth: 65535 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: DEFAULT SERVER CONFIG: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Server profile: All Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Ports (PAF): 36 80 81 82 83 84 85 86 87 88 89 90 311 383 555 591 593 631 801 808 818 901 972 1158 1220 1414 1533 1741 1830 1942 2231 2301 2381 2809 2980 3029 3037 3057 3128 3443 3702 4000 4343 4848 5000 5117 5250 5600 6080 6173 6988 7000 7001 7071 7144 7145 7510 7770 7777 7778 7779 8000 8008 8014 8028 8080 8081 8082 8085 8088 8090 8118 8123 8180 8181 8222 8243 8280 8300 8333 8344 8500 8509 8800 8888 8899 8983 9000 9060 9080 9090 9091 9111 9290 9443 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Server Flow Depth: 0 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Client Flow Depth: 0 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Max Chunk Length: 500000 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Small Chunk Length Evasion: chunk size <= 10, threshold >= 5 times Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Max Header Field Length: 750 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Max Number Header Fields: 100 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Max Number of WhiteSpaces allowed with header folding: 200 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Inspect Pipeline Requests: YES Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: URI Discovery Strict Mode: NO Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Allow Proxy Usage: NO Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Disable Alerting: NO Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Oversize Dir Length: 500 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Only inspect URI: NO Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Normalize HTTP Headers: NO Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Inspect HTTP Cookies: YES Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Inspect HTTP Responses: YES Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Extract Gzip from responses: YES Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Decompress response files: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Unlimited decompression of gzip data from responses: YES Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Normalize Javascripts in HTTP Responses: YES Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Max Number of WhiteSpaces allowed with Javascript Obfuscation in HTTP responses: 200 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Normalize HTTP Cookies: NO Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Enable XFF and True Client IP: NO Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Log HTTP URI data: NO Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Log HTTP Hostname data: NO Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Extended ASCII code support in URI: NO Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Ascii: YES alert: NO Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Double Decoding: YES alert: NO Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: %U Encoding: YES alert: YES Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Bare Byte: YES alert: NO Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: UTF 8: YES alert: NO Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: IIS Unicode: YES alert: NO Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Multiple Slash: YES alert: NO Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: IIS Backslash: YES alert: NO Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Directory Traversal: YES alert: NO Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Web Root Traversal: YES alert: NO Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Apache WhiteSpace: YES alert: NO Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: IIS Delimiter: YES alert: NO Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: IIS Unicode Map: GLOBAL IIS UNICODE MAP CONFIG Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Non-RFC Compliant Characters: 0x00 0x01 0x02 0x03 0x04 0x05 0x06 0x07 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Whitespace Characters: 0x09 0x0b 0x0c 0x0d Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: rpc_decode arguments: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Ports to decode RPC on: 111 32770 32771 32772 32773 32774 32775 32776 32777 32778 32779 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: alert_fragments: INACTIVE Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: alert_large_fragments: INACTIVE Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: alert_incomplete: INACTIVE Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: alert_multiple_requests: INACTIVE Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Portscan Detection Config: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Detect Protocols: TCP UDP ICMP IP Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Detect Scan Type: portscan portsweep decoy_portscan distributed_portscan Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Sensitivity Level: Medium Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Memcap (in bytes): 500000 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Number of Nodes: 978 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: FTPTelnet Config: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: GLOBAL CONFIG Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Inspection Type: stateful Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Check for Encrypted Traffic: YES alert: NO Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Continue to check encrypted data: YES Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: TELNET CONFIG: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Ports: 23 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Are You There Threshold: 20 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Normalize: YES Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Detect Anomalies: YES Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: FTP CONFIG: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: FTP Server: default Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Ports (PAF): 21 2100 3535 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Check for Telnet Cmds: YES alert: YES Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Ignore Telnet Cmd Operations: YES alert: YES Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Ignore open data channels: NO Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: FTP Client: default Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Check for Bounce Attacks: YES alert: YES Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Check for Telnet Cmds: YES alert: YES Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Ignore Telnet Cmd Operations: YES alert: YES Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Max Response Length: 256 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: SSH config: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Autodetection: ENABLED Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Challenge-Response Overflow Alert: ENABLED Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: SSH1 CRC32 Alert: ENABLED Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Server Version String Overflow Alert: ENABLED Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Protocol Mismatch Alert: ENABLED Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Bad Message Direction Alert: DISABLED Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Bad Payload Size Alert: DISABLED Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Unrecognized Version Alert: DISABLED Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Max Encrypted Packets: 20 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Max Server Version String Length: 100 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: MaxClientBytes: 19600 (Default) Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Ports: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: 22 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: DCE/RPC 2 Preprocessor Configuration Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Global Configuration Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: DCE/RPC Defragmentation: Enabled Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Memcap: 102400 KB Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Events: co Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: SMB Fingerprint policy: Disabled Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Server Default Configuration Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Policy: WinXP Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Detect ports (PAF) Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: SMB: 139 445 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: TCP: 135 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: UDP: 135 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: RPC over HTTP server: 593 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: RPC over HTTP proxy: None Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Autodetect ports (PAF) Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: SMB: None Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: TCP: 1025-65535 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: UDP: 1025-65535 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: RPC over HTTP server: 1025-65535 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: RPC over HTTP proxy: None Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Invalid SMB shares: C$ D$ ADMIN$ Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Maximum SMB command chaining: 3 commands Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: SMB file inspection: Disabled Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: DNS config: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: DNS Client rdata txt Overflow Alert: ACTIVE Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Obsolete DNS RR Types Alert: INACTIVE Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Experimental DNS RR Types Alert: INACTIVE Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Ports: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: 53 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: SSLPP config: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Encrypted packets: not inspected Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Ports: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: 443 465 563 636 989 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: 992 993 994 995 7801 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: 7802 7900 7901 7902 7903 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: 7904 7905 7906 7907 7908 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: 7909 7910 7911 7912 7913 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: 7914 7915 7916 7917 7918 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: 7919 7920 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Server side data is trusted Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Maximum SSL Heartbeat length: 0 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Sensitive Data preprocessor config: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Global Alert Threshold: 25 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Masked Output: DISABLED Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: SIP config: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Max number of sessions: 1024 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Max number of dialogs in a session: 4 (Default) Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Status: ENABLED Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Ignore media channel: DISABLED Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Max URI length: 512 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Max Call ID length: 80 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Max Request name length: 20 (Default) Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Max From length: 256 (Default) Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Max To length: 256 (Default) Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Max Via length: 1024 (Default) Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Max Contact length: 512 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Max Content length: 2048 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Ports: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: 5060 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: 5061 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: 5600 Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Methods: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: invite Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: cancel Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: ack Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: bye Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: register Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: options Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: refer Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: subscribe Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: update Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: join Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: info Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: message Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: notify Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: benotify Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: do Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: qauth Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: sprack Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: publish Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: service Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: unsubscribe Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: prack Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: +++++++++++++++++++++++++++++++++++++++++++++++++++ Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: Initializing rule chains... Mon Mar 14 19:53:16 2016 daemon.notice snort[6749]: WARNING: /etc/snort/rules//snort.rules(1) threshold (in rule) is deprecated; use detection_filter instead. Mon Mar 14 19:53:19 2016 daemon.notice snort[6749]: 4416 Snort rules read Mon Mar 14 19:53:19 2016 daemon.notice snort[6749]: 4264 detection rules Mon Mar 14 19:53:19 2016 daemon.notice snort[6749]: 152 decoder rules Mon Mar 14 19:53:19 2016 daemon.notice snort[6749]: 0 preprocessor rules Mon Mar 14 19:53:19 2016 daemon.notice snort[6749]: 4416 Option Chains linked into 619 Chain Headers Mon Mar 14 19:53:19 2016 daemon.notice snort[6749]: 0 Dynamic rules Mon Mar 14 19:53:19 2016 daemon.notice snort[6749]: +++++++++++++++++++++++++++++++++++++++++++++++++++ Mon Mar 14 19:53:19 2016 daemon.notice snort[6749]: Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: +-------------------[Rule Port Counts]--------------------------------------- Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | tcp udp icmp ip Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | src 1337 8 0 0 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | dst 2207 100 0 0 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | any 554 210 0 0 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | nc 408 206 0 0 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | s+d 28 0 0 0 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: +---------------------------------------------------------------------------- Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: +-----------------------[detection-filter-config]------------------------------ Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | memory-cap : 1048576 bytes Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: +-----------------------[detection-filter-rules]------------------------------- Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: ------------------------------------------------------------------------------- Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: +-----------------------[rate-filter-config]----------------------------------- Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | memory-cap : 1048576 bytes Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: +-----------------------[rate-filter-rules]------------------------------------ Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | none Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: ------------------------------------------------------------------------------- Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: +-----------------------[event-filter-config]---------------------------------- Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | memory-cap : 1048576 bytes Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: +-----------------------[event-filter-global]---------------------------------- Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | none Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: +-----------------------[event-filter-local]----------------------------------- Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404344 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404343 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404342 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404341 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404340 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404339 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404338 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404337 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404336 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404335 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404334 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2019922 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2021691 type=Limit tracking=src count=3 seconds=60 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2019950 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2008549 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2405012 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2405011 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2405010 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2405009 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2405008 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2405007 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2405006 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2405005 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2405004 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2405003 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2405002 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2405001 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2405000 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2405028 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2405027 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2405026 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2405025 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2405024 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2405023 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2405022 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2405021 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2405020 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2405019 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2405018 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2405017 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2405016 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2405015 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2405014 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2405013 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2405044 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2405043 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2405042 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2405041 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2405040 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2405039 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2405038 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2405037 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2405036 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2405035 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2405034 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2405033 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2405032 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2405031 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2405030 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2405029 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403305 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403304 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403303 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403302 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403301 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403300 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403321 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403320 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403319 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403318 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403317 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403316 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403315 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403314 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403313 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403312 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403311 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403310 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2020661 type=Limit tracking=dst count=1 seconds=1200 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403309 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403308 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403307 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403306 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403327 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403326 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403325 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403324 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403323 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403322 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2020712 type=Limit tracking=src count=2 seconds=60 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2022618 type=Limit tracking=src count=1 seconds=30 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2022617 type=Limit tracking=src count=1 seconds=30 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2022616 type=Limit tracking=src count=1 seconds=30 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2022615 type=Limit tracking=src count=1 seconds=30 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404000 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404016 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404015 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404014 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404013 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404012 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404011 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404010 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404009 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404008 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404007 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404006 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404005 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404004 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404003 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404002 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404001 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404032 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404031 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404030 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404029 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404028 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404027 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:21 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404026 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404025 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404024 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404023 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404022 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404021 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404020 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404019 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404018 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404017 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404048 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404047 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404046 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404045 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404044 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404043 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404042 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404041 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404040 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404039 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404038 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404037 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404036 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404035 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404034 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404033 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404064 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404063 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404062 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404061 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404060 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404059 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404058 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404057 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404056 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404055 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404054 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404053 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404052 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404051 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404050 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404049 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404080 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404079 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404078 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404077 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404076 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404075 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404074 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404073 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404072 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404071 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404070 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404069 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404068 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404067 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404066 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404065 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404095 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404094 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404093 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404092 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404091 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404090 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404089 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404088 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404087 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404086 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404085 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404084 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404083 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404082 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404081 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2019778 type=Both tracking=dst count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2021575 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2021574 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2021573 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2021572 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2001855 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2001864 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2001858 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2001872 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500009 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500008 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500007 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500006 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500005 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500004 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500003 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500002 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500001 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500000 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500025 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500024 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500023 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500022 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500021 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500020 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500019 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500018 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500017 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500016 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500015 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500014 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500013 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500012 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500011 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500010 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500041 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500040 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500039 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500038 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500037 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500036 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500035 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500034 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500033 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500032 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500031 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500030 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500029 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500028 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500027 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500026 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500057 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500056 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500055 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500054 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500053 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500052 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500051 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500050 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500049 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500048 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500047 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500046 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500045 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500044 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500043 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500042 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500073 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500072 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500071 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500070 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500069 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500068 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500067 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500066 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500065 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500064 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500063 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500062 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500061 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500060 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500059 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500058 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500075 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2500074 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2402001 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2402000 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2000929 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2008085 type=Limit tracking=src count=2 seconds=300 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2021410 type=Both tracking=src count=10 seconds=120 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2021409 type=Both tracking=src count=10 seconds=120 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2021444 type=Both tracking=src count=10 seconds=120 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2021443 type=Both tracking=src count=10 seconds=120 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2003497 type=Limit tracking=src count=3 seconds=300 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2003493 type=Limit tracking=src count=2 seconds=360 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2000031 type=Limit tracking=dst count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2000049 type=Limit tracking=dst count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2000048 type=Limit tracking=dst count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2003566 type=Limit tracking=src count=3 seconds=300 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2003585 type=Limit tracking=src count=3 seconds=300 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2003583 type=Limit tracking=src count=3 seconds=300 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2018569 type=Limit tracking=src count=1 seconds=120 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2018568 type=Limit tracking=src count=1 seconds=120 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2019418 type=Both tracking=src count=50 seconds=300 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2021333 type=Both tracking=src count=10 seconds=120 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2021332 type=Both tracking=src count=10 seconds=120 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2021331 type=Both tracking=src count=10 seconds=120 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2021330 type=Both tracking=src count=10 seconds=120 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2021329 type=Both tracking=src count=10 seconds=120 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2021328 type=Both tracking=src count=10 seconds=120 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2021327 type=Both tracking=src count=10 seconds=120 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2021326 type=Limit tracking=src count=3 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2003261 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2003260 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2003259 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2003258 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2003257 type=Both tracking=src count=2 seconds=900 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2003256 type=Both tracking=src count=2 seconds=900 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2003255 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2003254 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2003277 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2003276 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2003275 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2003274 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2003273 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2003272 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2003271 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2003270 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2003269 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2003268 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2003267 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2003266 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2003263 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2003262 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2003281 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2003280 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2003279 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2003278 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2001564 type=Limit tracking=src count=5 seconds=300 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2001562 type=Limit tracking=src count=2 seconds=300 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2003387 type=Limit tracking=src count=5 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2003384 type=Limit tracking=src count=1 seconds=300 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2003397 type=Both tracking=src count=1 seconds=300 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2018378 type=Limit tracking=src count=1 seconds=120 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2018377 type=Limit tracking=src count=1 seconds=120 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2018374 type=Limit tracking=src count=1 seconds=120 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2018373 type=Limit tracking=src count=1 seconds=120 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2018372 type=Limit tracking=src count=1 seconds=120 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2018389 type=Limit tracking=src count=1 seconds=120 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2018388 type=Limit tracking=src count=1 seconds=120 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2018383 type=Limit tracking=src count=1 seconds=120 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2018382 type=Limit tracking=dst count=1 seconds=120 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2018433 type=Limit tracking=src count=1 seconds=300 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2018432 type=Limit tracking=src count=1 seconds=300 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2018431 type=Limit tracking=src count=1 seconds=300 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2018430 type=Limit tracking=src count=1 seconds=300 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2020240 type=Limit tracking=src count=1 seconds=180 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403334 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403333 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403332 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403331 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403330 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403329 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403328 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403350 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403349 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403348 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403347 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403346 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403345 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403344 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403343 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403342 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403341 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403340 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403339 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403338 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403337 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403336 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403335 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403366 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403365 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403364 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403363 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403362 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403361 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403360 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403359 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403358 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403357 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403356 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403355 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403354 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403353 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403352 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403351 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403382 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403381 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403380 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403379 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2011146 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403378 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403377 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403376 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403375 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403374 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403373 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403372 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403371 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403370 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403369 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403368 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403367 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403398 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403397 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403396 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403395 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403394 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403393 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403392 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403391 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403390 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403389 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403388 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403387 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403386 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403385 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403384 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403383 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403414 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403413 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403412 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403411 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403410 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403409 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403408 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403407 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403406 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403405 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403404 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403403 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403402 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403401 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403400 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403399 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403430 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403429 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403428 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403427 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403426 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403425 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403424 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403423 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403422 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403421 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403420 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403419 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403418 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403417 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403416 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403415 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403446 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403445 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403444 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403443 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403442 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403441 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403440 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403439 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403438 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403437 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403436 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403435 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403434 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403433 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403432 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403431 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403462 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403461 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403460 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403459 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403458 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403457 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403456 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403455 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403454 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403453 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403452 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403451 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403450 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403449 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403448 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403447 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403477 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403476 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403475 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403474 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403473 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403472 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403471 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403470 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403469 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403468 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403467 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403466 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403465 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403464 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2403463 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2002402 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2002400 type=Limit tracking=src count=2 seconds=360 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2021018 type=Both tracking=dst count=10 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404097 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404096 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404205 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404204 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404203 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404202 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404201 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404200 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2001316 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2001315 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404207 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404206 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404301 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404300 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404317 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404316 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404315 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404314 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404313 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404312 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404311 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404310 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2018090 type=Limit tracking=src count=1 seconds=300 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404309 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404308 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2018088 type=Limit tracking=src count=1 seconds=300 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404307 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404306 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404305 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404304 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2019897 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404303 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404302 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404333 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404332 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404331 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404330 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404329 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404328 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404327 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404326 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404325 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404324 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404323 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404322 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404321 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404320 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404319 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404318 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404349 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404348 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404347 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404346 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=1 sig-id=2404345 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: +-----------------------[suppression]------------------------------------------ Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=129 sig-id=12 tracking=none Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: | gen-id=129 sig-id=20 tracking=none Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: ------------------------------------------------------------------------------- Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: Rule application order: activation->dynamic->pass->drop->sdrop->reject->alert->log Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: Verifying Preprocessor Configurations! Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: WARNING: flowbits key 'et.DocVBAProject' is set but not ever checked. Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: WARNING: flowbits key 'ET.JS.Obfus.Func' is checked but not ever set. Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: WARNING: flowbits key 'ET.Adobe.Site.Download' is checked but not ever set. Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: WARNING: flowbits key 'FlimKit.SWF.Redirect' is checked but not ever set. Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: WARNING: flowbits key 'ET.http.binary' is checked but not ever set. Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: WARNING: flowbits key 'et.MCOFF' is checked but not ever set. Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: WARNING: flowbits key 'ET.http.javaclient' is checked but not ever set. Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: WARNING: flowbits key 'ET.CottonCastle.Exploit' is set but not ever checked. Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: WARNING: flowbits key 'AnglerEK' is set but not ever checked. Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: WARNING: flowbits key 'et.JavaArchiveOrClass' is checked but not ever set. Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: WARNING: flowbits key 'et.http.PK' is checked but not ever set. Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: WARNING: flowbits key 'ET.pdf.in.http' is checked but not ever set. Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: WARNING: flowbits key 'ET.CompIP' is set but not ever checked. Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: WARNING: flowbits key 'ET.http.javaclient.vulnerable' is checked but not ever set. Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: WARNING: flowbits key 'EXE2' is set but not ever checked. Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: WARNING: flowbits key 'ET.ZoneAlarm.Site.Download' is checked but not ever set. Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: WARNING: flowbits key 'ETPRO.RTF' is set but not ever checked. Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: WARNING: flowbits key 'ET.http.rtf.download' is set but not ever checked. Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: WARNING: flowbits key 'ET.Evil' is set but not ever checked. Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: WARNING: flowbits key 'ET.wininet.UA' is checked but not ever set. Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: WARNING: flowbits key 'NuclearEK' is set but not ever checked. Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: WARNING: flowbits key 'ET.DshieldIP' is set but not ever checked. Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: WARNING: flowbits key 'ET.http.javaclient.SakuraPorts' is checked but not ever set. Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: WARNING: flowbits key 'et.WinHttpRequest' is checked but not ever set. Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: WARNING: flowbits key 'et.MS.XMLHTTP.no.exe.request' is checked but not ever set. Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: WARNING: flowbits key 'SunDown.EK' is set but not ever checked. Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: WARNING: flowbits key 'ET.BotccIP' is set but not ever checked. Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: WARNING: flowbits key 'et.MS.XMLHTTP.ip.request' is checked but not ever set. Mon Mar 14 19:53:22 2016 daemon.notice snort[6731]: 77 out of 1024 flowbits in use. Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: +-------------------[Rule Port Counts]--------------------------------------- Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | tcp udp icmp ip Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | src 1337 8 0 0 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | dst 2207 100 0 0 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | any 554 210 0 0 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | nc 408 206 0 0 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | s+d 28 0 0 0 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: +---------------------------------------------------------------------------- Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: +-----------------------[detection-filter-config]------------------------------ Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | memory-cap : 1048576 bytes Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: +-----------------------[detection-filter-rules]------------------------------- Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: ------------------------------------------------------------------------------- Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: +-----------------------[rate-filter-config]----------------------------------- Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | memory-cap : 1048576 bytes Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: +-----------------------[rate-filter-rules]------------------------------------ Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | none Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: ------------------------------------------------------------------------------- Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: +-----------------------[event-filter-config]---------------------------------- Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | memory-cap : 1048576 bytes Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: +-----------------------[event-filter-global]---------------------------------- Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | none Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: +-----------------------[event-filter-local]----------------------------------- Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403327 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403326 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2402001 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403325 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2402000 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403324 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403323 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403322 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403321 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403320 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403319 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403318 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403317 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403316 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403315 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403314 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403313 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403312 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403311 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403310 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403309 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403308 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403307 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403306 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403305 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403304 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403303 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403302 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403301 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403300 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2000031 type=Limit tracking=dst count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2001316 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2001315 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2000049 type=Limit tracking=dst count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2000048 type=Limit tracking=dst count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2020661 type=Limit tracking=dst count=1 seconds=1200 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2019418 type=Both tracking=src count=50 seconds=300 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2018090 type=Limit tracking=src count=1 seconds=300 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2018088 type=Limit tracking=src count=1 seconds=300 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403354 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403353 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403352 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403351 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403350 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403349 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2020712 type=Limit tracking=src count=2 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403348 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403347 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403346 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403345 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403344 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403343 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403342 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403341 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403340 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403339 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403338 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403337 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403336 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403335 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403334 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403333 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403332 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403331 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403330 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403329 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403328 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403418 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403417 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403416 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403415 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403414 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403413 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403412 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403411 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403410 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403409 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403408 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403407 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403406 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403405 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403404 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403403 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403402 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403401 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403400 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403399 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403398 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403397 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403396 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403395 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403394 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403393 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403392 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403391 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403390 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403389 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403388 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403387 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403386 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403385 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403384 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403383 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403382 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403381 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403380 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403379 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403378 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403377 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403376 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403375 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403374 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403373 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403372 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403371 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403370 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403369 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403368 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403367 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403366 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403365 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403364 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403363 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403362 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403361 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403360 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403359 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403358 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403357 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403356 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403355 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403477 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403476 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403475 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403474 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403473 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403472 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403471 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403470 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403469 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403468 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403467 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403466 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403465 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403464 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403463 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403462 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403461 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403460 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403459 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403458 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403457 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403456 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403455 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403454 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403453 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403452 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403451 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403450 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403449 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403448 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403447 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403446 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403445 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403444 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403443 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403442 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403441 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403440 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403439 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403438 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403437 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403436 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403435 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403434 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403433 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403432 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403431 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403430 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403429 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403428 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403427 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403426 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403425 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403424 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403423 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403422 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403421 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403420 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2403419 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2001564 type=Limit tracking=src count=5 seconds=300 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2001562 type=Limit tracking=src count=2 seconds=300 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2021018 type=Both tracking=dst count=10 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2018383 type=Limit tracking=src count=1 seconds=120 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2018382 type=Limit tracking=dst count=1 seconds=120 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2018378 type=Limit tracking=src count=1 seconds=120 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2018377 type=Limit tracking=src count=1 seconds=120 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2018374 type=Limit tracking=src count=1 seconds=120 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2018373 type=Limit tracking=src count=1 seconds=120 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2018372 type=Limit tracking=src count=1 seconds=120 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2018433 type=Limit tracking=src count=1 seconds=300 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2018432 type=Limit tracking=src count=1 seconds=300 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2018431 type=Limit tracking=src count=1 seconds=300 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2018430 type=Limit tracking=src count=1 seconds=300 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2018389 type=Limit tracking=src count=1 seconds=120 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2018388 type=Limit tracking=src count=1 seconds=120 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2405016 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2405015 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2405014 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2405013 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2405012 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2405011 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2405010 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2405009 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2405008 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2405007 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2405006 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2405005 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2405004 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2405003 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2405002 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2405001 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2405000 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2019778 type=Both tracking=dst count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2405044 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2405043 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2405042 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2405041 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2405040 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2405039 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2405038 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2405037 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2405036 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2405035 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2405034 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2405033 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2405032 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2405031 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2405030 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2405029 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2405028 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2405027 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2405026 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2405025 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2405024 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2405023 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2405022 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2405021 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2405020 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2405019 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2405018 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2405017 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2008085 type=Limit tracking=src count=2 seconds=300 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2001872 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2001864 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2001858 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2001855 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2019897 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2018569 type=Limit tracking=src count=1 seconds=120 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2018568 type=Limit tracking=src count=1 seconds=120 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2022618 type=Limit tracking=src count=1 seconds=30 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2022617 type=Limit tracking=src count=1 seconds=30 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2022616 type=Limit tracking=src count=1 seconds=30 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2022615 type=Limit tracking=src count=1 seconds=30 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2019950 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2019922 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2021333 type=Both tracking=src count=10 seconds=120 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2021332 type=Both tracking=src count=10 seconds=120 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2021331 type=Both tracking=src count=10 seconds=120 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2021330 type=Both tracking=src count=10 seconds=120 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2021329 type=Both tracking=src count=10 seconds=120 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2021328 type=Both tracking=src count=10 seconds=120 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2021327 type=Both tracking=src count=10 seconds=120 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2021326 type=Limit tracking=src count=3 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404036 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404035 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404034 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404033 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404032 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404031 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404030 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404029 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404028 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404027 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404026 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404025 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404024 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404023 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404022 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404021 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404020 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404019 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404018 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404017 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404016 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404015 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404014 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404013 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404012 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404011 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404010 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404009 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404008 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404007 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404006 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404005 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404004 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404003 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404002 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404001 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404000 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404095 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404094 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404093 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404092 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404091 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404090 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404089 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404088 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404087 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404086 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404085 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404084 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404083 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404082 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404081 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404080 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404079 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404078 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404077 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404076 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404075 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404074 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404073 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404072 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404071 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404070 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404069 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404068 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404067 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404066 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404065 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404064 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404063 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404062 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404061 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404060 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404059 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404058 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404057 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404056 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404055 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404054 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404053 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404052 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404051 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404050 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404049 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404048 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404047 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404046 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404045 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404044 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404043 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404042 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404041 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404040 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404039 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404038 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404037 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2003257 type=Both tracking=src count=2 seconds=900 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2003256 type=Both tracking=src count=2 seconds=900 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2003255 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2003254 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2003281 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2003280 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2003279 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2003278 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2003277 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2003276 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2003275 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2003274 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2003273 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2003272 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2003271 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2003270 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2003269 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2003268 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2003267 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2003266 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2003263 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2003262 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2003261 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2003260 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2003259 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2003258 type=Both tracking=src count=1 seconds=900 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2003384 type=Limit tracking=src count=1 seconds=300 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2008549 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2003397 type=Both tracking=src count=1 seconds=300 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2003387 type=Limit tracking=src count=5 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2021444 type=Both tracking=src count=10 seconds=120 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2021443 type=Both tracking=src count=10 seconds=120 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2021410 type=Both tracking=src count=10 seconds=120 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2021409 type=Both tracking=src count=10 seconds=120 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2021575 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2021574 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2021573 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2021572 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404097 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404096 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2020240 type=Limit tracking=src count=1 seconds=180 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404207 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404206 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404205 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404204 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404203 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404202 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404201 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404200 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404313 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404312 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404311 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404310 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404309 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404308 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404307 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404306 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404305 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404304 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404303 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404302 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404301 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404300 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2011146 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404349 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404348 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404347 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404346 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404345 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404344 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404343 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404342 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404341 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404340 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404339 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404338 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404337 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404336 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404335 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404334 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404333 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404332 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404331 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404330 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404329 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404328 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404327 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404326 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404325 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404324 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404323 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404322 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404321 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404320 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404319 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404318 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404317 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404316 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404315 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2404314 type=Limit tracking=src count=1 seconds=3600 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500053 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500052 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500051 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500050 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500049 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500048 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500047 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500046 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500045 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500044 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500043 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500042 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500041 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500040 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500039 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500038 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500037 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500036 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500035 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500034 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500033 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500032 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500031 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500030 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500029 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500028 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500027 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500026 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500025 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500024 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500023 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500022 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500021 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500020 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500019 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500018 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500017 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500016 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500015 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500014 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500013 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500012 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500011 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500010 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500009 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500008 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500007 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500006 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500005 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500004 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500003 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500002 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500001 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500000 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2003497 type=Limit tracking=src count=3 seconds=300 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2003493 type=Limit tracking=src count=2 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500075 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500074 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500073 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500072 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500071 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500070 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500069 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500068 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500067 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500066 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500065 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500064 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500063 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500062 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500061 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500060 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500059 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500058 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500057 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2003585 type=Limit tracking=src count=3 seconds=300 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500056 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500055 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2003583 type=Limit tracking=src count=3 seconds=300 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2500054 type=Limit tracking=src count=1 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2000929 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2003566 type=Limit tracking=src count=3 seconds=300 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2002402 type=Limit tracking=src count=1 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2002400 type=Limit tracking=src count=2 seconds=360 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=1 sig-id=2021691 type=Limit tracking=src count=3 seconds=60 Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: +-----------------------[suppression]------------------------------------------ Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=129 sig-id=20 tracking=none Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: | gen-id=129 sig-id=12 tracking=none Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: ------------------------------------------------------------------------------- Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: Rule application order: activation->dynamic->pass->drop->sdrop->reject->alert->log Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: Verifying Preprocessor Configurations! Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: WARNING: flowbits key 'ET.CottonCastle.Exploit' is set but not ever checked. Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: WARNING: flowbits key 'ET.BotccIP' is set but not ever checked. Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: WARNING: flowbits key 'et.MS.XMLHTTP.no.exe.request' is checked but not ever set. Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: WARNING: flowbits key 'ET.Adobe.Site.Download' is checked but not ever set. Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: WARNING: flowbits key 'EXE2' is set but not ever checked. Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: WARNING: flowbits key 'SunDown.EK' is set but not ever checked. Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: WARNING: flowbits key 'et.MCOFF' is checked but not ever set. Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: WARNING: flowbits key 'FlimKit.SWF.Redirect' is checked but not ever set. Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: WARNING: flowbits key 'AnglerEK' is set but not ever checked. Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: WARNING: flowbits key 'ET.http.javaclient.vulnerable' is checked but not ever set. Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: WARNING: flowbits key 'et.MS.XMLHTTP.ip.request' is checked but not ever set. Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: WARNING: flowbits key 'et.JavaArchiveOrClass' is checked but not ever set. Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: WARNING: flowbits key 'ETPRO.RTF' is set but not ever checked. Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: WARNING: flowbits key 'ET.http.rtf.download' is set but not ever checked. Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: WARNING: flowbits key 'ET.http.javaclient.SakuraPorts' is checked but not ever set. Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: WARNING: flowbits key 'et.DocVBAProject' is set but not ever checked. Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: WARNING: flowbits key 'ET.wininet.UA' is checked but not ever set. Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: WARNING: flowbits key 'ET.Evil' is set but not ever checked. Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: WARNING: flowbits key 'ET.pdf.in.http' is checked but not ever set. Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: WARNING: flowbits key 'ET.JS.Obfus.Func' is checked but not ever set. Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: WARNING: flowbits key 'ET.DshieldIP' is set but not ever checked. Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: WARNING: flowbits key 'ET.CompIP' is set but not ever checked. Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: WARNING: flowbits key 'ET.http.javaclient' is checked but not ever set. Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: WARNING: flowbits key 'et.http.PK' is checked but not ever set. Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: WARNING: flowbits key 'ET.http.binary' is checked but not ever set. Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: WARNING: flowbits key 'et.WinHttpRequest' is checked but not ever set. Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: WARNING: flowbits key 'ET.ZoneAlarm.Site.Download' is checked but not ever set. Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: WARNING: flowbits key 'NuclearEK' is set but not ever checked. Mon Mar 14 19:53:25 2016 daemon.notice snort[6749]: 77 out of 1024 flowbits in use.