DNS Forwarder - override an entire domain - high CPU usage ~80%

Nachtfalke

Hi,

I have got a problem with high CPU uasage of the dnsmasq process.

WAN –- pfsense1.localdomain1 --- 172.16.0.0/16 --- pfsense2.localdomain2 --- 172.17.0.0/16

pfsense1 and pfsense2:
DNS forwarder: enabled
Register DHCP leases in DNS forwarder: enabled
Register DHCP static mappings in DNS forwarder: enabled

pfsense1:
Domain IP Description
localdomain2 172.17.0.1 pfsense2 DNS Server

pfsense2:
Domain IP Description
localdomain1 172.16.0.1 pfsense1 DNS

If I remove this overrides, the CPU usage goes down to normal.
I had this problems with this two snapshots:
2.0-BETA5 (i386) built on Sun Feb 6 13:03:57 EST 2011
2.0-BETA5 (i386) built on Sun Feb 6 05:09:46 EST 2011

cmb

Not seeing that and I have domain overrides on several systems. You sure it's the dnsmasq process?

Nachtfalke

Hi,

I did two screenshots. I entered this overrides and there was no CPU increase for some minutes. Then I did a reboot of both boxes and then there was the CPU increasement.

The pictures are just from one pfsense, but the other is the same CPU increasement but like i said in my first post with an other IP adresse and domain

–-edit----
if I delete the override on ONE box, both boxes got down with CPU usage. If i reenter this override, it takes 2-3min and the the dnsmasq process goes up again.
I attached the DNS forwarder picture of the other pfsense, too.

system_activity.JPG_thumb

DNS_forwarder.JPG_thumb

DNS_forwarder1.JPG_thumb

system_information.JPG_thumb

SeventhSon

do they keep querying each other or something? because when you edit one out, both boxes drop in CPU usage…

Maybe make a pass rule for udp53 with logging and see?

Nachtfalke

Looks like this on both machines:


udp 	172.16.0.1:44303 -> 172.17.0.1:53         SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:46014 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:46541 -> 172.17.0.1:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:46754 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:48709 -> 172.17.0.1:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:55816 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:41773 -> 172.17.0.1:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:61171 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:4245 -> 172.17.0.1:53 	        SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:58154 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:51833 -> 172.17.0.1:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:56502 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:26841 -> 172.17.0.1:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:65365 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:18055 -> 172.17.0.1:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:33585 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:19284 -> 172.17.0.1:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:8098 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:63215 -> 172.17.0.1:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:30039 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:42102 -> 172.17.0.1:53 	SINGLE:NO_TRAFFIC

SeventhSon

but is it all happening in the same second? (i.e. do you get a boatload of queries when you do one lookup?)

Nachtfalke

Hi,

I do not need to make one lookup. After the CPU usage of dnsmasq is so high, there are 10 or more dns queries per second. I will try this again without any internet connection, just the two pfsense boxes and one client to view the webGUI.

–--edit----
same problem after unplugging WANs and rebooting both pfsense
now using 2.0-BETA5 (i386) built on Mon Feb 7 21:33:17 EST 2011

udp 	172.16.0.1:53 <- 172.16.0.254:56896 	MULTIPLE:MULTIPLE 	
udp 	172.16.0.1:15698 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:10262 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:39763 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:62404 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:55809 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:38984 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:26271 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:10971 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:1073 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:36523 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:57542 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:59429 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:55016 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:38452 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:9951 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:59776 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:45813 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:44081 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:46246 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:32200 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:11455 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:57304 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:48545 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:10668 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:32509 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:33256 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:46841 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:19732 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:7992 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:50413 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:8608 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:4597 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:50153 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:24806 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:17637 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:55932 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:3447 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:39706 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:30720 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:48190 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:6214 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:49122 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:42432 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:1753 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:41273 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:59908 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:46688 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:63474 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:50285 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53173 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:26126 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:15585 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:4035 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:29441 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:17255 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:3164 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:21954 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:57002 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:29015 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:48035 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:45146 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:14631 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:12902 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:56187 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:64501 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53038 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:12702 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:56473 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53735 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:48365 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:42882 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:56300 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:41611 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:44892 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:12782 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:62456 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:65445 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:21889 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:28233 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:61725 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:41660 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:37641 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:5010 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:17160 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:49234 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:36774 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:9008 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:3671 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:12914 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:49932 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:32767 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:52888 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:19366 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:22211 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:62580 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:28812 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:21755 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:28825 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:27749 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:24257 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:65293 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:7726 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:27318 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:48752 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:58420 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:65373 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:20299 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:11792 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:12817 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:25324 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:34282 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:27166 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:37042 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:48643 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:9429 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:19416 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:33719 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:33023 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:46758 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:59754 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:30151 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:21778 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:38001 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:4635 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:31969 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:52249 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:18553 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:1633 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:37680 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:23716 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:1185 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:51934 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:3502 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:32108 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:32070 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:9482 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:14362 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:18688 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:8225 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:4318 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:34534 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:45545 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:29874 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:48717 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:5974 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:36426 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:8246 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:45464 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:25371 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:45460 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:44330 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:38268 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:3693 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:28819 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:40003 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:28816 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:28923 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:20907 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:63440 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:13352 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:47388 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:30863 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:9970 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:56215 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:8463 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:58410 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:55800 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:44645 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:63929 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:2651 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:41086 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:1091 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:24878 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:10574 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:18577 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:27230 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:51427 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:62000 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:55166 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:40052 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:21448 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:20572 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:62167 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:23211 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:57831 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:61426 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:12234 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:29559 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:59035 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:22874 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:3338 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:38715 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:31477 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:45858 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:9069 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:30427 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:20239 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:50695 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:18682 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:43580 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:10700 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:43395 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:30446 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:18626 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:62311 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:61740 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:41613 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:7321 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:52746 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:26293 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:10831 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:55136 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:21393 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:44649 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:39387 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:18833 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:1710 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:41139 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:8825 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:5393 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:46512 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:25366 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:32867 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:36647 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:15513 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:43770 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:56484 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:44166 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:56487 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:8778 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:33322 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:11695 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:24239 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:31124 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:1538 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:62070 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:36925 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:48611 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:62548 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:10243 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:11569 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:1150 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:30642 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:50269 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:24328 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:53033 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:52566 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:4228 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:63155 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:4998 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:59890 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:65065 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:40327 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:7092 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:6368 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:46177 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:54504 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:45916 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:48656 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:4723 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:38638 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:5140 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:34547 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:43746 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:48617 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:16693 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:52126 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:55576 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:6771 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:19183 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:13332 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:21112 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:50399 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:38355 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:62480 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:23342 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:55605 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:11215 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:2581 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:17033 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53646 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:30873 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:59564 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:15228 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:16580 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:65340 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:45766 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:10417 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:31537 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:52039 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:11909 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:34049 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:28600 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:24027 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:23027 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:20801 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:39405 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:40771 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:5599 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:24259 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:4140 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:30338 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:52340 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:25427 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:5736 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:42911 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:13212 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:43643 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:63414 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:37208 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:34369 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:8160 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:17927 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:35172 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:31977 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:44866 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:51124 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:9401 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:26490 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:29010 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:3310 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:39498 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:34256 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:31787 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:1774 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:45124 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:63664 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:23408 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:43329 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:33621 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:13298 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:9405 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:17375 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:53146 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:23596 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:52999 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:46232 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:12030 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:53242 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:13087 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:5850 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:37406 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:8881 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:56187 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:47415 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:19555 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:26305 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:41005 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:59675 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:8557 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:64301 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:55265 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:7899 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:2340 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:3073 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:11709 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:57200 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:31962 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:47821 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:63212 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:49510 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:35041 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:53074 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:46216 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:10315 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:4306 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:59326 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:28407 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:20561 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:13102 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:23457 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:28149 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:58652 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:9317 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:1408 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:1902 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:13391 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:23182 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:29570 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:48796 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:14342 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:48621 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:18088 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:5277 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:6515 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:1668 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53124 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:24667 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:64678 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:37878 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:32030 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:60475 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:64574 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:19295 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:64497 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:40828 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:38257 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:34237 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:38885 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:21199 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:49310 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:4985 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:7526 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:47604 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:20856 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:26103 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:23750 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:41678 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:62667 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:17787 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:50748 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:42356 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:29033 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:2761 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:64862 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:29376 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:14812 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:21643 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:38380 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:51849 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:5259 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:9819 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:62836 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:29372 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:64705 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:40782 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:42389 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:15497 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:57560 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:53855 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:50920 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:65317 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:29377 -> 172.16.0.1:53 	MULTIPLE:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.1:29377 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:25783 -> 172.16.0.1:53 	MULTIPLE:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.1:25783 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:60735 -> 172.16.0.1:53 	MULTIPLE:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.1:60735 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:65038 -> 172.16.0.1:53 	MULTIPLE:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.1:65038 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:9949 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:27465 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:18084 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:7426 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:60745 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:36881 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53541 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:44363 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:49589 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:15541 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:21983 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:17553 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:13455 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:57619 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:35044 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:7996 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:55552 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:39271 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:34977 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:7960 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:58446 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:50441 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:51795 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:27662 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:4234 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:57506 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:6867 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:46146 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:43423 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:9811 -> 172.16.0.1:53 	MULTIPLE:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.1:9811 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:51155 -> 172.16.0.1:53 	MULTIPLE:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.1:51155 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:44805 -> 172.16.0.1:53 	MULTIPLE:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.1:44805 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:15500 -> 172.16.0.1:53 	MULTIPLE:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.1:15500 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:15723 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:35071 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:40018 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:34612 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:44893 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:34859 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:2558 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:14057 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:32351 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:6059 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:51092 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:18005 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:4996 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:61805 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:17726 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:7916 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:47846 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:23186 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:26512 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:1210 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:52329 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:33240 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:53881 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:48184 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:20315 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:39683 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:1129 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:25220 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:51868 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:12324 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:40927 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:52180 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:1604 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:23782 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:13755 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:57491 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:2330 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:29630 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:4423 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:37778 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:18684 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:26656 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:63967 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:14257 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:36588 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:35353 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:33564 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:41154 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:4370 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:43641 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:46637 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:64159 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:6848 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:3458 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:59728 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:9512 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:29492 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:54509 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:27820 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:15130 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:15124 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:44981 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:52556 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:49999 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:55482 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:11650 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:1594 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:27101 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:12182 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:55399 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:36484 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:40942 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:30954 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:22192 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:20948 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:64229 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:9649 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:58183 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:2133 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:21811 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:35626 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:64884 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:57795 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:2510 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:46148 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:63195 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:8520 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:35675 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:17790 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:24483 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:33878 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:34279 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:28684 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:46908 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:55351 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:35858 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:56312 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:44272 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:5238 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:18831 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:21569 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:63679 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:63259 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:48903 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:43745 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:56603 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:26185 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:6397 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:8243 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:29836 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:58965 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:7998 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:42143 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:64934 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:5268 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:45484 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:3580 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:2255 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:59400 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:11137 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:63075 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:64145 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:5899 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:50020 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:48620 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:12982 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:17775 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:42165 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:8386 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:14710 -> 172.16.0.1:53 	MULTIPLE:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.1:14710 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:15230 -> 172.16.0.1:53 	MULTIPLE:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.1:15230 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:41705 -> 172.16.0.1:53 	MULTIPLE:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.1:41705 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:46986 -> 172.16.0.1:53 	MULTIPLE:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.1:46986 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:3886 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:58562 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:52261 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:20863 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:21278 -> 172.16.0.1:53 	MULTIPLE:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.1:21278 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:22016 -> 172.16.0.1:53 	MULTIPLE:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.1:22016 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:40803 -> 172.16.0.1:53 	MULTIPLE:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.1:40803 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:54042 -> 172.16.0.1:53 	MULTIPLE:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.1:54042 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:26900 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:16205 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:56602 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:34629 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:21589 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:52680 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:49314 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:5215 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:10848 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:8056 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:49122 -> 172.16.0.1:53 	MULTIPLE:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.1:49122 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:8856 -> 172.16.0.1:53 	MULTIPLE:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.1:8856 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:9264 -> 172.16.0.1:53 	MULTIPLE:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.1:9264 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:44096 -> 172.16.0.1:53 	MULTIPLE:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.1:44096 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:38474 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:61587 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:43366 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:2318 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:54687 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:28386 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:59791 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:58778 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:60019 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:49937 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:62479 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:62796 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:36592 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:40274 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:29940 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:26032 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:31459 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:53492 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:6153 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:12291 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:13793 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:63674 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:37729 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:23062 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:47268 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:27409 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:34419 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:41969 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:59771 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:12605 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:33556 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:58811 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:10452 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:14605 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:42133 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:48164 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:54894 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:5640 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:10034 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:44647 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:9063 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:13038 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:58579 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:2987 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:22268 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:36435 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:26099 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:18236 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:55663 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:26363 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:6638 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:3071 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:43220 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:5081 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:18955 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:22391 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:33574 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:2099 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:63562 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:62434 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:23174 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:59973 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:22970 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:4808 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:13038 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:17367 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:29080 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:60090 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:45897 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:61171 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:52133 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:18719 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:26314 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:41549 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:31453 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:11292 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:2863 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:26653 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:21081 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:11400 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:29937 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:21420 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:34011 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:7464 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:46193 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:37836 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:64508 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:57947 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:34336 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:9077 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:60863 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:21742 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:50423 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:10727 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:50649 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:38331 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:43001 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:28604 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:25223 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:62509 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:39275 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:25541 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:14256 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:10186 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:58794 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:21572 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:31036 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:24799 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:11520 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:6817 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:15231 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:43806 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:3544 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:22283 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:22013 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:63500 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:17957 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:54981 -> 172.16.0.254:53 	SINGLE:NO_TRAFFIC 	
udp 	172.16.0.1:53 <- 172.16.0.254:63288 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:47715 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:45035 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:31280 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:9042 -> 172.16.0.1:53 	MULTIPLE:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.1:9042 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:35165 -> 172.16.0.1:53 	MULTIPLE:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.1:35165 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:59030 -> 172.16.0.1:53 	MULTIPLE:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.1:59030 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:16026 -> 172.16.0.1:53 	MULTIPLE:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.1:16026 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:21678 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:32293 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:56060 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:43190 	SINGLE:MULTIPLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:46972 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:6043 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:11215 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:32141 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:28264 	NO_TRAFFIC:SINGLE 	
udp 	172.16.0.1:53 <- 172.16.0.254:55870 	NO_TRAFFIC:SINGLE

Nachtfalke

I have to correct something:

If I delet domain override on pfsense1, then CPU usage goes down. If I delete it on pfsense2, the problem is still there.

Don't know, perhaps I am too stupid and did a misconfiguration. ???

cmb

Yeah you created a lookup loop, host A is using host B to resolve that domain, and host B is using host A, so it infinitely loops, hammering each other to death with lookups.

Nachtfalke

Aaahh, okay…..OSI Layer 8 problem ::)

jits

Aaahh, okay…..OSI Layer 8 problem Roll Eyes

??? Layer 8?? I didn't know they added a new Layer! When did this happen?

jits

Layer 8?? I didn't know they added a new Layer! When did this happen?

NEVER-MIND! :-[

[url=http://thecoffeedesk.com/news/index.php/2009/04/11/osi-model-layer-8/]http://thecoffeedesk.com/news/index.php/2009/04/11/osi-model-layer-8/