Frame 1: 70 bytes on wire (560 bits), 70 bytes captured (560 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 15, 2024 17:57:14.439382000 CET UTC Arrival Time: Nov 15, 2024 16:57:14.439382000 UTC Epoch Arrival Time: 1731689834.439382000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000000000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 0.000000000 seconds] Frame Number: 1 Frame Length: 70 bytes (560 bits) Capture Length: 70 bytes (560 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:udp:dns] Ethernet II, Src: Intel_7e:28:f9 (b0:a4:60:7e:28:f9), Dst: ArubaHewlett_56:f0:c6 (f0:1a:a0:56:f0:c6) Destination: ArubaHewlett_56:f0:c6 (f0:1a:a0:56:f0:c6) Address: ArubaHewlett_56:f0:c6 (f0:1a:a0:56:f0:c6) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Intel_7e:28:f9 (b0:a4:60:7e:28:f9) Address: Intel_7e:28:f9 (b0:a4:60:7e:28:f9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) Internet Protocol Version 4, Src: 10.10.156.82, Dst: 198.41.0.4 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 56 Identification: 0x6745 (26437) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 64 Protocol: UDP (17) Header Checksum: 0xa6e6 [validation disabled] [Header checksum status: Unverified] Source Address: 10.10.156.82 Destination Address: 198.41.0.4 User Datagram Protocol, Src Port: 51893 (51893), Dst Port: domain (53) Source Port: 51893 (51893) Destination Port: domain (53) Length: 36 Checksum: 0x6cbf [correct] (matches partial checksum, not 0x49dc, likely caused by "UDP checksum offload") [Expert Info (Note/Checksum): Partial (pseudo header) checksum (likely caused by "UDP checksum offload")] [Partial (pseudo header) checksum (likely caused by "UDP checksum offload")] [Severity level: Note] [Group: Checksum] [Calculated Checksum: 0x49dc] [Checksum Status: Good] [Stream index: 0] [Timestamps] [Time since first frame: 0.000000000 seconds] [Time since previous frame: 0.000000000 seconds] UDP payload (28 bytes) Domain Name System (query) Transaction ID: 0xf649 Flags: 0x0010 Standard query 0... .... .... .... = Response: Message is a query .000 0... .... .... = Opcode: Standard query (0) .... ..0. .... .... = Truncated: Message is not truncated .... ...0 .... .... = Recursion desired: Don't do query recursively .... .... .0.. .... = Z: reserved (0) .... .... ...1 .... = Non-authenticated data: Acceptable Questions: 1 Answer RRs: 0 Authority RRs: 0 Additional RRs: 1 Queries : type NS, class IN Name: [Name Length: 6] [Label Count: 1] Type: NS (2) (authoritative Name Server) Class: IN (0x0001) Additional records : type OPT Name: Type: OPT (41) UDP payload size: 1232 Higher bits in extended RCODE: 0x00 EDNS0 version: 0 Z: 0x8000 1... .... .... .... = DO bit: Accepts DNSSEC security RRs .000 0000 0000 0000 = Reserved: 0x0000 Data length: 0 Frame 2: 1139 bytes on wire (9112 bits), 1139 bytes captured (9112 bits) Encapsulation type: Ethernet (1) Arrival Time: Nov 15, 2024 17:57:14.451715000 CET UTC Arrival Time: Nov 15, 2024 16:57:14.451715000 UTC Epoch Arrival Time: 1731689834.451715000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.012333000 seconds] [Time delta from previous displayed frame: 0.012333000 seconds] [Time since reference or first frame: 0.012333000 seconds] Frame Number: 2 Frame Length: 1139 bytes (9112 bits) Capture Length: 1139 bytes (9112 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:udp:dns] Ethernet II, Src: ArubaHewlett_56:f0:c6 (f0:1a:a0:56:f0:c6), Dst: Intel_7e:28:f9 (b0:a4:60:7e:28:f9) Destination: Intel_7e:28:f9 (b0:a4:60:7e:28:f9) Address: Intel_7e:28:f9 (b0:a4:60:7e:28:f9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: ArubaHewlett_56:f0:c6 (f0:1a:a0:56:f0:c6) Address: ArubaHewlett_56:f0:c6 (f0:1a:a0:56:f0:c6) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) Internet Protocol Version 4, Src: 198.41.0.4, Dst: 10.10.156.82 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x40 (DSCP: CS2, ECN: Not-ECT) 0100 00.. = Differentiated Services Codepoint: Class Selector 2 (16) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1125 Identification: 0xb0f9 (45305) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 52 Protocol: UDP (17) Header Checksum: 0x64c5 [validation disabled] [Header checksum status: Unverified] Source Address: 198.41.0.4 Destination Address: 10.10.156.82 User Datagram Protocol, Src Port: domain (53), Dst Port: 51893 (51893) Source Port: domain (53) Destination Port: 51893 (51893) Length: 1105 Checksum: 0x5007 [correct] [Calculated Checksum: 0x5007] [Checksum Status: Good] [Stream index: 0] [Timestamps] [Time since first frame: 0.012333000 seconds] [Time since previous frame: 0.012333000 seconds] UDP payload (1097 bytes) Domain Name System (response) Transaction ID: 0xf649 Flags: 0x8410 Standard query response, No error 1... .... .... .... = Response: Message is a response .000 0... .... .... = Opcode: Standard query (0) .... .1.. .... .... = Authoritative: Server is an authority for domain .... ..0. .... .... = Truncated: Message is not truncated .... ...0 .... .... = Recursion desired: Don't do query recursively .... .... 0... .... = Recursion available: Server can't do recursive queries .... .... .0.. .... = Z: reserved (0) .... .... ..0. .... = Answer authenticated: Answer/authority portion was not authenticated by the server .... .... ...1 .... = Non-authenticated data: Acceptable .... .... .... 0000 = Reply code: No error (0) Questions: 1 Answer RRs: 14 Authority RRs: 0 Additional RRs: 27 Queries : type NS, class IN Name: [Name Length: 6] [Label Count: 1] Type: NS (2) (authoritative Name Server) Class: IN (0x0001) Answers : type NS, class IN, ns l.root-servers.net Name: Type: NS (2) (authoritative Name Server) Class: IN (0x0001) Time to live: 518400 (6 days) Data length: 20 Name Server: l.root-servers.net : type NS, class IN, ns j.root-servers.net Name: Type: NS (2) (authoritative Name Server) Class: IN (0x0001) Time to live: 518400 (6 days) Data length: 4 Name Server: j.root-servers.net : type NS, class IN, ns f.root-servers.net Name: Type: NS (2) (authoritative Name Server) Class: IN (0x0001) Time to live: 518400 (6 days) Data length: 4 Name Server: f.root-servers.net : type NS, class IN, ns h.root-servers.net Name: Type: NS (2) (authoritative Name Server) Class: IN (0x0001) Time to live: 518400 (6 days) Data length: 4 Name Server: h.root-servers.net : type NS, class IN, ns d.root-servers.net Name: Type: NS (2) (authoritative Name Server) Class: IN (0x0001) Time to live: 518400 (6 days) Data length: 4 Name Server: d.root-servers.net : type NS, class IN, ns b.root-servers.net Name: Type: NS (2) (authoritative Name Server) Class: IN (0x0001) Time to live: 518400 (6 days) Data length: 4 Name Server: b.root-servers.net : type NS, class IN, ns k.root-servers.net Name: Type: NS (2) (authoritative Name Server) Class: IN (0x0001) Time to live: 518400 (6 days) Data length: 4 Name Server: k.root-servers.net : type NS, class IN, ns i.root-servers.net Name: Type: NS (2) (authoritative Name Server) Class: IN (0x0001) Time to live: 518400 (6 days) Data length: 4 Name Server: i.root-servers.net : type NS, class IN, ns m.root-servers.net Name: Type: NS (2) (authoritative Name Server) Class: IN (0x0001) Time to live: 518400 (6 days) Data length: 4 Name Server: m.root-servers.net : type NS, class IN, ns e.root-servers.net Name: Type: NS (2) (authoritative Name Server) Class: IN (0x0001) Time to live: 518400 (6 days) Data length: 4 Name Server: e.root-servers.net : type NS, class IN, ns g.root-servers.net Name: Type: NS (2) (authoritative Name Server) Class: IN (0x0001) Time to live: 518400 (6 days) Data length: 4 Name Server: g.root-servers.net : type NS, class IN, ns c.root-servers.net Name: Type: NS (2) (authoritative Name Server) Class: IN (0x0001) Time to live: 518400 (6 days) Data length: 4 Name Server: c.root-servers.net : type NS, class IN, ns a.root-servers.net Name: Type: NS (2) (authoritative Name Server) Class: IN (0x0001) Time to live: 518400 (6 days) Data length: 4 Name Server: a.root-servers.net : type RRSIG, class IN Name: Type: RRSIG (46) (Resource Record Signature) Class: IN (0x0001) Time to live: 518400 (6 days) Data length: 275 Type Covered: NS (2) (authoritative Name Server) Algorithm: RSA/SHA-256 (8) Labels: 0 Original TTL: 518400 (6 days) Signature Expiration: Nov 28, 2024 06:00:00.000000000 CET Signature Inception: Nov 15, 2024 05:00:00.000000000 CET Key Tag: 61050 Signer's name: Signature [truncated]: a0bb18720ab09e641c507c0232455a03a1b706800e1ab80972f8b9727e0333ce64aafd86e94bc86403e7ddeb4dd6fc4f1964783374e3a8422d464dcb970d533ea36eea5ced1a9b0119d7a317352f7f0b4b55b08a3ef693f3d1b66f0949256c372e207e6f576c9fc3940e28cf Additional records l.root-servers.net: type A, class IN, addr 199.7.83.42 Name: l.root-servers.net Type: A (1) (Host Address) Class: IN (0x0001) Time to live: 518400 (6 days) Data length: 4 Address: 199.7.83.42 l.root-servers.net: type AAAA, class IN, addr 2001:500:9f::42 Name: l.root-servers.net Type: AAAA (28) (IP6 Address) Class: IN (0x0001) Time to live: 518400 (6 days) Data length: 16 AAAA Address: 2001:500:9f::42 j.root-servers.net: type A, class IN, addr 192.58.128.30 Name: j.root-servers.net Type: A (1) (Host Address) Class: IN (0x0001) Time to live: 518400 (6 days) Data length: 4 Address: 192.58.128.30 j.root-servers.net: type AAAA, class IN, addr 2001:503:c27::2:30 Name: j.root-servers.net Type: AAAA (28) (IP6 Address) Class: IN (0x0001) Time to live: 518400 (6 days) Data length: 16 AAAA Address: 2001:503:c27::2:30 f.root-servers.net: type A, class IN, addr 192.5.5.241 Name: f.root-servers.net Type: A (1) (Host Address) Class: IN (0x0001) Time to live: 518400 (6 days) Data length: 4 Address: 192.5.5.241 f.root-servers.net: type AAAA, class IN, addr 2001:500:2f::f Name: f.root-servers.net Type: AAAA (28) (IP6 Address) Class: IN (0x0001) Time to live: 518400 (6 days) Data length: 16 AAAA Address: 2001:500:2f::f h.root-servers.net: type A, class IN, addr 198.97.190.53 Name: h.root-servers.net Type: A (1) (Host Address) Class: IN (0x0001) Time to live: 518400 (6 days) Data length: 4 Address: 198.97.190.53 h.root-servers.net: type AAAA, class IN, addr 2001:500:1::53 Name: h.root-servers.net Type: AAAA (28) (IP6 Address) Class: IN (0x0001) Time to live: 518400 (6 days) Data length: 16 AAAA Address: 2001:500:1::53 d.root-servers.net: type A, class IN, addr 199.7.91.13 Name: d.root-servers.net Type: A (1) (Host Address) Class: IN (0x0001) Time to live: 518400 (6 days) Data length: 4 Address: 199.7.91.13 d.root-servers.net: type AAAA, class IN, addr 2001:500:2d::d Name: d.root-servers.net Type: AAAA (28) (IP6 Address) Class: IN (0x0001) Time to live: 518400 (6 days) Data length: 16 AAAA Address: 2001:500:2d::d b.root-servers.net: type A, class IN, addr 170.247.170.2 Name: b.root-servers.net Type: A (1) (Host Address) Class: IN (0x0001) Time to live: 518400 (6 days) Data length: 4 Address: 170.247.170.2 b.root-servers.net: type AAAA, class IN, addr 2801:1b8:10::b Name: b.root-servers.net Type: AAAA (28) (IP6 Address) Class: IN (0x0001) Time to live: 518400 (6 days) Data length: 16 AAAA Address: 2801:1b8:10::b k.root-servers.net: type A, class IN, addr 193.0.14.129 Name: k.root-servers.net Type: A (1) (Host Address) Class: IN (0x0001) Time to live: 518400 (6 days) Data length: 4 Address: 193.0.14.129 k.root-servers.net: type AAAA, class IN, addr 2001:7fd::1 Name: k.root-servers.net Type: AAAA (28) (IP6 Address) Class: IN (0x0001) Time to live: 518400 (6 days) Data length: 16 AAAA Address: 2001:7fd::1 i.root-servers.net: type A, class IN, addr 192.36.148.17 Name: i.root-servers.net Type: A (1) (Host Address) Class: IN (0x0001) Time to live: 518400 (6 days) Data length: 4 Address: 192.36.148.17 i.root-servers.net: type AAAA, class IN, addr 2001:7fe::53 Name: i.root-servers.net Type: AAAA (28) (IP6 Address) Class: IN (0x0001) Time to live: 518400 (6 days) Data length: 16 AAAA Address: 2001:7fe::53 m.root-servers.net: type A, class IN, addr 202.12.27.33 Name: m.root-servers.net Type: A (1) (Host Address) Class: IN (0x0001) Time to live: 518400 (6 days) Data length: 4 Address: 202.12.27.33 m.root-servers.net: type AAAA, class IN, addr 2001:dc3::35 Name: m.root-servers.net Type: AAAA (28) (IP6 Address) Class: IN (0x0001) Time to live: 518400 (6 days) Data length: 16 AAAA Address: 2001:dc3::35 e.root-servers.net: type A, class IN, addr 192.203.230.10 Name: e.root-servers.net Type: A (1) (Host Address) Class: IN (0x0001) Time to live: 518400 (6 days) Data length: 4 Address: 192.203.230.10 e.root-servers.net: type AAAA, class IN, addr 2001:500:a8::e Name: e.root-servers.net Type: AAAA (28) (IP6 Address) Class: IN (0x0001) Time to live: 518400 (6 days) Data length: 16 AAAA Address: 2001:500:a8::e g.root-servers.net: type A, class IN, addr 192.112.36.4 Name: g.root-servers.net Type: A (1) (Host Address) Class: IN (0x0001) Time to live: 518400 (6 days) Data length: 4 Address: 192.112.36.4 g.root-servers.net: type AAAA, class IN, addr 2001:500:12::d0d Name: g.root-servers.net Type: AAAA (28) (IP6 Address) Class: IN (0x0001) Time to live: 518400 (6 days) Data length: 16 AAAA Address: 2001:500:12::d0d c.root-servers.net: type A, class IN, addr 192.33.4.12 Name: c.root-servers.net Type: A (1) (Host Address) Class: IN (0x0001) Time to live: 518400 (6 days) Data length: 4 Address: 192.33.4.12 c.root-servers.net: type AAAA, class IN, addr 2001:500:2::c Name: c.root-servers.net Type: AAAA (28) (IP6 Address) Class: IN (0x0001) Time to live: 518400 (6 days) Data length: 16 AAAA Address: 2001:500:2::c a.root-servers.net: type A, class IN, addr 198.41.0.4 Name: a.root-servers.net Type: A (1) (Host Address) Class: IN (0x0001) Time to live: 518400 (6 days) Data length: 4 Address: 198.41.0.4 a.root-servers.net: type AAAA, class IN, addr 2001:503:ba3e::2:30 Name: a.root-servers.net Type: AAAA (28) (IP6 Address) Class: IN (0x0001) Time to live: 518400 (6 days) Data length: 16 AAAA Address: 2001:503:ba3e::2:30 : type OPT Name: Type: OPT (41) UDP payload size: 4096 Higher bits in extended RCODE: 0x00 EDNS0 version: 0 Z: 0x8000 1... .... .... .... = DO bit: Accepts DNSSEC security RRs .000 0000 0000 0000 = Reserved: 0x0000 Data length: 0 [Request In: 1] [Time: 0.012333000 seconds]