The first packet is a DNS request sent by a client. Can you provide the transaction identifier in the response sent by the server ?
0000 603d269b37def4f2 6d0e485f86dd600d
0010 1fde003211402a02 2788048407b4f158
0020 eaad36aa84f32001 4860486000000000
0030 000000008888da9b 003500322ef4860f
0040 0120000100000000 000013636f6d7075
0050 7465722d6e657477 6f726b696e670469
0060 6e666f0000020001
0000 `=&.7Þôòm.H_.Ý`.
0010 .Þ.2.@*.'....´ñX
0020 ê.6ª.ó .H`H`....
0030 ......Ú..5.2.ô..
0040 . .........compu
0050 ter-networking.i
0060 nfo.....
- Frame 1: 104 bytes on wire (832 bits), 104 bytes captured (832 bits) on interface 0
- Ethernet II, Src: Tp-LinkT_0e:48:5f (f4:f2:6d:0e:48:5f), Dst: Technico_9b:37:de (60:3d:26:9b:37:de)
- Destination: Technico_9b:37:de (60:3d:26:9b:37:de)
- Address: Technico_9b:37:de (60:3d:26:9b:37:de)
- .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
- .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
- Source: Tp-LinkT_0e:48:5f (f4:f2:6d:0e:48:5f)
- Address: Tp-LinkT_0e:48:5f (f4:f2:6d:0e:48:5f)
- .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
- .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
- Type: IPv6 (0x86dd)
- Internet Protocol Version 6, Src: 2a02:2788:484:7b4:f158:eaad:36aa:84f3, Dst: 2001:4860:4860::8888
- 0110 .... = Version: 6
- .... 0000 0000 .... .... .... .... .... = Traffic Class: 0x00 (DSCP: CS0, ECN: Not-ECT)
- .... 0000 00.. .... .... .... .... .... = Differentiated Services Codepoint: Default (0)
- .... .... ..00 .... .... .... .... .... = Explicit Congestion Notification: Not ECN-Capable Transport (0)
- .... .... .... 1101 0001 1111 1101 1110 = Flow Label: 0xd1fde
- Payload Length: 50
- Next Header: UDP (17)
- Hop Limit: 64
- Source: 2a02:2788:484:7b4:f158:eaad:36aa:84f3
- Destination: 2001:4860:4860::8888
- User Datagram Protocol, Src Port: 55963, Dst Port: 53
- Source Port: 55963
- Destination Port: 53
- Length: 50
- Checksum: 0x2ef4 [unverified]
- Domain Name System (query)
- Transaction ID: 0x860f
- Flags: 0x0120 Standard query
- 0... .... .... .... = Response: Message is a query
- .000 0... .... .... = Opcode: Standard query (0)
- .... ..0. .... .... = Truncated: Message is not truncated
- .... ...1 .... .... = Recursion desired: Do query recursively
- .... .... .0.. .... = Z: reserved (0)
- .... .... ..1. .... = AD bit: Set
- .... .... ...0 .... = Non-authenticated data: Unacceptable
- Questions: 1
- Answer RRs: 0
- Authority RRs: 0
- Additional RRs: 0
- Queries
- computer-networking.info: type NS, class IN
- Name: computer-networking.info
- Name Length: 24
- Label Count: 2
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
0000 f4f26d0e485f603d 269b37de86dd600e
0010 1952006011752001 4860486000000000
0020 0000000088882a02 2788048407b4f158
0030 eaad36aa84f30035 da9b0060288c860f
0040 81a0000100020000 000013636f6d7075
0050 7465722d6e657477 6f726b696e670469
0060 6e666f0000020001 c00c000200010000
0070 0e0f000f05646e73 3230036f7668036e
0080 657400c00c000200 0100000e0f000704
0090 6e733230c03c
0000 ôòm.H_`=&.7Þ.Ý`.
0010 .R.`.u .H`H`....
0020 ......*.'....´ñX
0030 ê.6ª.ó.5Ú..`(...
0040 ...........compu
0050 ter-networking.i
0060 nfo.....À.......
0070 .....dns20.ovh.n
0080 et.À............
0090 ns20À<
- Frame 2: 150 bytes on wire (1200 bits), 150 bytes captured (1200 bits) on interface 0
- Ethernet II, Src: Technico_9b:37:de (60:3d:26:9b:37:de), Dst: Tp-LinkT_0e:48:5f (f4:f2:6d:0e:48:5f)
- Destination: Tp-LinkT_0e:48:5f (f4:f2:6d:0e:48:5f)
- Address: Tp-LinkT_0e:48:5f (f4:f2:6d:0e:48:5f)
- .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
- .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
- Source: Technico_9b:37:de (60:3d:26:9b:37:de)
- Address: Technico_9b:37:de (60:3d:26:9b:37:de)
- .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
- .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
- Type: IPv6 (0x86dd)
- Internet Protocol Version 6, Src: 2001:4860:4860::8888, Dst: 2a02:2788:484:7b4:f158:eaad:36aa:84f3
- 0110 .... = Version: 6
- .... 0000 0000 .... .... .... .... .... = Traffic Class: 0x00 (DSCP: CS0, ECN: Not-ECT)
- .... 0000 00.. .... .... .... .... .... = Differentiated Services Codepoint: Default (0)
- .... .... ..00 .... .... .... .... .... = Explicit Congestion Notification: Not ECN-Capable Transport (0)
- .... .... .... 1110 0001 1001 0101 0010 = Flow Label: 0xe1952
- Payload Length: 96
- Next Header: UDP (17)
- Hop Limit: 117
- Source: 2001:4860:4860::8888
- Destination: 2a02:2788:484:7b4:f158:eaad:36aa:84f3
- User Datagram Protocol, Src Port: 53, Dst Port: 55963
- Source Port: 53
- Destination Port: 55963
- Length: 96
- Checksum: 0x288c [unverified]
- Domain Name System (response)
- Transaction ID: 0x860f
- Flags: 0x81a0 Standard query response, No error
- 1... .... .... .... = Response: Message is a response
- .000 0... .... .... = Opcode: Standard query (0)
- .... .0.. .... .... = Authoritative: Server is not an authority for domain
- .... ..0. .... .... = Truncated: Message is not truncated
- .... ...1 .... .... = Recursion desired: Do query recursively
- .... .... 1... .... = Recursion available: Server can do recursive queries
- .... .... .0.. .... = Z: reserved (0)
- .... .... ..1. .... = Answer authenticated: Answer/authority portion was authenticated by the server
- .... .... ...0 .... = Non-authenticated data: Unacceptable
- .... .... .... 0000 = Reply code: No error (0)
- Questions: 1
- Answer RRs: 2
- Authority RRs: 0
- Additional RRs: 0
- Queries
- computer-networking.info: type NS, class IN
- Name: computer-networking.info
- Name Length: 24
- Label Count: 2
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
- Answers
- computer-networking.info: type NS, class IN, ns dns20.ovh.net
- Name: computer-networking.info
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
- Time to live: 3599
- Data length: 15
- Name Server: dns20.ovh.net
- computer-networking.info: type NS, class IN, ns ns20.ovh.net
- Name: computer-networking.info
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
- Time to live: 3599
- Data length: 7
- Name Server: ns20.ovh.net
INGInious