PAR1:,1.1000001.100000(1.1000001.100000```034S @,Route 53Route 53(Route 53Route 53```/-IU05*@i .V,Resolver Query LogsResolver Query Logs(Resolver Query LogsResolver Query Logsf``J-)K-R,M-TO/\!w6,AWSAWS(AWSAWScf``p DTr,6(security_controlcloudcb```fb\ @*9'4E(NM.-,O+)h*D, 1.0.0-rc.2 1.0.0-rc.2( 1.0.0-rc.2 1.0.0-rc.2b``033-J3 ,P, 123456789012 123456789012( 123456789012 123456789012cb```fF&fFpj&J, us-east-1 us-east-1( us-east-1 us-east-1cb```fź%S746,AWSAWS(AWSAWScf``p D>F,vpc-00000000000000000vpc-00000000000000000(vpc-00000000000000000vpc-00000000000000000cb```feɺ"&.P, 10.200.21.100 10.200.21.100( 10.200.21.100 10.200.21.100cb```fzF@lgh`'<,::(::cb```f|m*E t  4,6cb```fkS'8,'Ӄ'Ӄ('Ӄ'Ӄ{Sr3#=\~,$ip-127-0-0-62.alert.firewall.canary.$ip-127-0-0-62.alert.firewall.canary.($ip-127-0-0-62.alert.firewall.canary.$ip-127-0-0-62.alert.firewall.canary.cb```fTF@hfZTYZXTq.:,AA(AAcb```fd <,ININ(ININcb```fd~wmB $B,AA(AAcb```B -6R, 127.0.0.62 127.0.0.62( 127.0.0.62 127.0.0.62cb```B  68 &D,ININ(ININcb```B <H>,UDPUDP(UDPUDPcb```fd.> >,UnknownUnknown(UnknownUnknowncg``/JK 0,(c```D!FP,rslvr-in-0000000000000000rslvr-in-0000000000000000(rslvr-in-0000000000000000rslvr-in-0000000000000000cb```fE9eEyh$#<F,rni-0000000000000000rni-0000000000000000(rni-0000000000000000rni-0000000000000000cb```fEyhK0,(cd``y"J, Informational Informational( Informational Informationale``K/M,K@ H, DNS Activity DNS Activity( DNS Activity DNS Activitya``p VpL.,,v-00,([.u(P,Network ActivityNetwork Activity(Network ActivityNetwork Activity```K-)/VpL.,,\L0,(ca``KH&8,(cb```f U\ "F,NoErrorNoError(NoErrorNoErrorcb```fd~EEE/0,(cb``M@,ResponseResponse(ResponseResponse```J-.+NU 4\,DNS Activity: ResponseDNS Activity: Response(DNS Activity: ResponseDNS Activity: Responsec``p VpL.,,RJ-.+NF0,(['=ZB, No Action No Action( No Action No Actiond``WpL.s7e 0,(```]q,6(firewall_rule_group_idfirewall_domain_list_idcb```fb\ b@*-(<1''4'5>( >3EY&%?713/>'(XBh,6(rslvr-frg-000000000000000rslvr-fdl-0000000000000cb```fb\ @8H7(]#$SrP%;E7H dns_activity.5metadata5product %version% %name%5feature %name% % vendor_name%5profiles %array% %version%5cloud % account_uid% %region% %provider%5 src_endpoint %vpc_uid% %ip%%port % instance_uid%%time5query %hostname% %type% %class%5answers5array %type% %rdata% %class%5connection_info % protocol_name% % direction%% direction_id5 dst_endpoint % instance_uid% % interface_uid%% severity_id %severity% % class_name%% class_uid % category_name%% category_uid%rcode_id %rcode%% activity_id % activity_name% % type_name%%type_uid % disposition%%disposition_id5unmapped5map %key% %value%)& %8metadataproductversion&<1.1000001.100000(1.1000001.100000& %8metadataproductname&<Route 53Route 53(Route 53Route 53& %Hmetadataproductfeaturename&<Resolver Query LogsResolver Query Logs(Resolver Query LogsResolver Query Logs& %8metadataproduct vendor_name`&<AWSAWS(AWSAWS& %8metadataprofilesarray&<6(security_controlcloud& %(metadataversion&< 1.0.0-rc.2 1.0.0-rc.2( 1.0.0-rc.2 1.0.0-rc.2&  5(cloud account_uid& < 123456789012 123456789012( 123456789012 123456789012&  5(cloudregion& < us-east-1 us-east-1( us-east-1 us-east-1&  %(cloudprovider`& <AWSAWS(AWSAWS& 5( src_endpointvpc_uid&<vpc-00000000000000000vpc-00000000000000000(vpc-00000000000000000vpc-00000000000000000& 5( src_endpointip&< 10.200.21.100 10.200.21.100( 10.200.21.100 10.200.21.100&5( src_endpointportn&<::(::& 5( src_endpoint instance_uid6^&<6&%time&<'Ӄ'Ӄ('Ӄ'Ӄ& 5(queryhostname&<$ip-127-0-0-62.alert.firewall.canary.$ip-127-0-0-62.alert.firewall.canary.($ip-127-0-0-62.alert.firewall.canary.$ip-127-0-0-62.alert.firewall.canary.& 5(querytypeX|&<AA(AA& 5(queryclassb&<ININ(ININ& %8answersarraytypef&<AA(AA& %8answersarrayrdata&< 127.0.0.62 127.0.0.62( 127.0.0.62 127.0.0.62& %8answersarrayclassp&<ININ(ININ& 5(connection_info protocol_namel&<UDPUDP(UDPUDP&  %(connection_info direction& <UnknownUnknown(UnknownUnknown&!%(connection_info direction_idb&!<(&" 5( dst_endpoint instance_uid&"<rslvr-in-0000000000000000rslvr-in-0000000000000000(rslvr-in-0000000000000000rslvr-in-0000000000000000&% 5( dst_endpoint interface_uid&%<rni-0000000000000000rni-0000000000000000(rni-0000000000000000rni-0000000000000000&'% severity_idb&'<(&( %severity&(< Informational Informational( Informational Informational&* % class_name&*< DNS Activity DNS Activity( DNS Activity DNS Activity&,% class_uidb&,<(&- % category_name&-<Network ActivityNetwork Activity(Network ActivityNetwork Activity&/% category_uidb&/<(&05rcode_idn&0<(&1 5rcode&1<NoErrorNoError(NoErrorNoError&3% activity_idb&3<(&4 % activity_name&4<ResponseResponse(ResponseResponse&5 % type_name&5<DNS Activity: ResponseDNS Activity: Response(DNS Activity: ResponseDNS Activity: Response&8%type_uidb&8<(&9 % disposition&9< No Action No Action( No Action No Action&:%disposition_idb&:<(&; %8unmappedmapkey&;<6(firewall_rule_group_idfirewall_domain_list_id&> %8unmappedmapvalue&><6(rslvr-frg-000000000000000rslvr-fdl-00000000000005,parquet.avro.schema{"type":"record","name":"dns_activity","fields":[{"name":"metadata","type":{"type":"record","name":"metadata_record","fields":[{"name":"product","type":{"type":"record","name":"metadataproduct_record","fields":[{"name":"version","type":"string"},{"name":"name","type":"string"},{"name":"feature","type":{"type":"record","name":"metadataproductfeature_record","fields":[{"name":"name","type":"string"}]}},{"name":"vendor_name","type":"string"}]}},{"name":"profiles","type":["null",{"type":"array","items":"string"}],"default":null},{"name":"version","type":"string"}]}},{"name":"cloud","type":{"type":"record","name":"cloud_record","fields":[{"name":"account_uid","type":["null","string"],"default":null},{"name":"region","type":["null","string"],"default":null},{"name":"provider","type":"string"}]}},{"name":"src_endpoint","type":{"type":"record","name":"src_endpoint_record","fields":[{"name":"vpc_uid","type":["null","string"],"default":null},{"name":"ip","type":["null","string"],"default":null},{"name":"port","type":["null","int"],"default":null},{"name":"instance_uid","type":["null","string"],"default":null}]}},{"name":"time","type":"long","logicalType":"timestamp-millis"},{"name":"query","type":{"type":"record","name":"query_record","fields":[{"name":"hostname","type":["null","string"],"default":null},{"name":"type","type":["null","string"],"default":null},{"name":"class","type":["null","string"],"default":null}]}},{"name":"answers","type":["null",{"type":"array","items":{"type":"record","name":"answers","fields":[{"name":"type","type":["null","string"],"default":null},{"name":"rdata","type":["null","string"],"default":null},{"name":"class","type":["null","string"],"default":null}]}}]},{"name":"connection_info","type":{"type":"record","name":"connection_info_record","fields":[{"name":"protocol_name","type":["null","string"],"default":null},{"name":"direction","type":"string"},{"name":"direction_id","type":"int"}]}},{"name":"dst_endpoint","type":{"type":"record","name":"dst_endpoint_record","fields":[{"name":"instance_uid","type":["null","string"],"default":null},{"name":"interface_uid","type":["null","string"],"default":null}]}},{"name":"severity_id","type":"int"},{"name":"severity","type":"string"},{"name":"class_name","type":"string"},{"name":"class_uid","type":"int"},{"name":"category_name","type":"string"},{"name":"category_uid","type":"int"},{"name":"rcode_id","type":["null","int"],"default":null},{"name":"rcode","type":["null","string"],"default":null},{"name":"activity_id","type":"int"},{"name":"activity_name","type":"string"},{"name":"type_name","type":"string"},{"name":"type_uid","type":"int"},{"name":"disposition","type":"string"},{"name":"disposition_id","type":"int"},{"name":"unmapped","type":["null",{"type":"map","values":"string","default":null}],"default":null}],"version":"1.0.0-rc.2"}writer.model.nameavro0parquet-mr version 1.10.0 (build ${buildNumber}))PAR1