The first packet is a DNS request sent by a client. Can you provide the transaction identifier in the response sent by the server ?
# |
Length |
Summary |
Status |
0 |
104 bytes |
Domain Name System (query) |
|
1 |
150 bytes |
Domain Name System (response) |
|
0000
60
3d
26
9b
37
de
f4
f2
6d
0e
48
5f
86
dd
60
0d
0010
1f
de
00
32
11
40
2a
02
27
88
04
84
07
b4
f1
58
0020
ea
ad
36
aa
84
f3
20
01
48
60
48
60
00
00
00
00
0030
00
00
00
00
88
88
da
9b
00
35
00
32
2e
f4
86
0f
0040
01
20
00
01
00
00
00
00
00
00
13
63
6f
6d
70
75
0050
74
65
72
2d
6e
65
74
77
6f
72
6b
69
6e
67
04
69
0060
6e
66
6f
00
00
02
00
01
0000
`
=
&
.
7
Þ
ô
ò
m
.
H
_
.
Ý
`
.
0010
.
Þ
.
2
.
@
*
.
'
.
.
.
.
´
ñ
X
0020
ê
.
6
ª
.
ó
.
H
`
H
`
.
.
.
.
0030
.
.
.
.
.
.
Ú
.
.
5
.
2
.
ô
.
.
0040
.
.
.
.
.
.
.
.
.
.
c
o
m
p
u
0050
t
e
r
-
n
e
t
w
o
r
k
i
n
g
.
i
0060
n
f
o
.
.
.
.
.
- Frame 1: 104 bytes on wire (832 bits), 104 bytes captured (832 bits) on interface 0
- Ethernet II, Src: Tp-LinkT_0e:48:5f (f4:f2:6d:0e:48:5f), Dst: Technico_9b:37:de (60:3d:26:9b:37:de)
- Destination: Technico_9b:37:de (60:3d:26:9b:37:de)
- Address: Technico_9b:37:de (60:3d:26:9b:37:de)
- .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
- .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
- Source: Tp-LinkT_0e:48:5f (f4:f2:6d:0e:48:5f)
- Address: Tp-LinkT_0e:48:5f (f4:f2:6d:0e:48:5f)
- .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
- .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
- Type: IPv6 (0x86dd)
- Internet Protocol Version 6, Src: 2a02:2788:484:7b4:f158:eaad:36aa:84f3, Dst: 2001:4860:4860::8888
- 0110 .... = Version: 6
- .... 0000 0000 .... .... .... .... .... = Traffic Class: 0x00 (DSCP: CS0, ECN: Not-ECT)
- .... 0000 00.. .... .... .... .... .... = Differentiated Services Codepoint: Default (0)
- .... .... ..00 .... .... .... .... .... = Explicit Congestion Notification: Not ECN-Capable Transport (0)
- .... .... .... 1101 0001 1111 1101 1110 = Flow Label: 0xd1fde
- Payload Length: 50
- Next Header: UDP (17)
- Hop Limit: 64
- Source: 2a02:2788:484:7b4:f158:eaad:36aa:84f3
- Destination: 2001:4860:4860::8888
- User Datagram Protocol, Src Port: 55963, Dst Port: 53
- Source Port: 55963
- Destination Port: 53
- Length: 50
- Checksum: 0x2ef4 [unverified]
- Domain Name System (query)
- Transaction ID: 0x860f
- Flags: 0x0120 Standard query
- 0... .... .... .... = Response: Message is a query
- .000 0... .... .... = Opcode: Standard query (0)
- .... ..0. .... .... = Truncated: Message is not truncated
- .... ...1 .... .... = Recursion desired: Do query recursively
- .... .... .0.. .... = Z: reserved (0)
- .... .... ..1. .... = AD bit: Set
- .... .... ...0 .... = Non-authenticated data: Unacceptable
- Questions: 1
- Answer RRs: 0
- Authority RRs: 0
- Additional RRs: 0
- Queries
- computer-networking.info: type NS, class IN
- Name: computer-networking.info
- Name Length: 24
- Label Count: 2
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
0000
f4
f2
6d
0e
48
5f
60
3d
26
9b
37
de
86
dd
60
0e
0010
19
52
00
60
11
75
20
01
48
60
48
60
00
00
00
00
0020
00
00
00
00
88
88
2a
02
27
88
04
84
07
b4
f1
58
0030
ea
ad
36
aa
84
f3
00
35
da
9b
00
60
28
8c
86
0f
0040
81
a0
00
01
00
02
00
00
00
00
13
63
6f
6d
70
75
0050
74
65
72
2d
6e
65
74
77
6f
72
6b
69
6e
67
04
69
0060
6e
66
6f
00
00
02
00
01
c0
0c
00
02
00
01
00
00
0070
0e
0f
00
0f
05
64
6e
73
32
30
03
6f
76
68
03
6e
0080
65
74
00
c0
0c
00
02
00
01
00
00
0e
0f
00
07
04
0090
6e
73
32
30
c0
3c
0000
ô
ò
m
.
H
_
`
=
&
.
7
Þ
.
Ý
`
.
0010
.
R
.
`
.
u
.
H
`
H
`
.
.
.
.
0020
.
.
.
.
.
.
*
.
'
.
.
.
.
´
ñ
X
0030
ê
.
6
ª
.
ó
.
5
Ú
.
.
`
(
.
.
.
0040
.
.
.
.
.
.
.
.
.
.
.
c
o
m
p
u
0050
t
e
r
-
n
e
t
w
o
r
k
i
n
g
.
i
0060
n
f
o
.
.
.
.
.
À
.
.
.
.
.
.
.
0070
.
.
.
.
.
d
n
s
2
0
.
o
v
h
.
n
0080
e
t
.
À
.
.
.
.
.
.
.
.
.
.
.
.
0090
n
s
2
0
À
<
- Frame 2: 150 bytes on wire (1200 bits), 150 bytes captured (1200 bits) on interface 0
- Ethernet II, Src: Technico_9b:37:de (60:3d:26:9b:37:de), Dst: Tp-LinkT_0e:48:5f (f4:f2:6d:0e:48:5f)
- Destination: Tp-LinkT_0e:48:5f (f4:f2:6d:0e:48:5f)
- Address: Tp-LinkT_0e:48:5f (f4:f2:6d:0e:48:5f)
- .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
- .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
- Source: Technico_9b:37:de (60:3d:26:9b:37:de)
- Address: Technico_9b:37:de (60:3d:26:9b:37:de)
- .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
- .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
- Type: IPv6 (0x86dd)
- Internet Protocol Version 6, Src: 2001:4860:4860::8888, Dst: 2a02:2788:484:7b4:f158:eaad:36aa:84f3
- 0110 .... = Version: 6
- .... 0000 0000 .... .... .... .... .... = Traffic Class: 0x00 (DSCP: CS0, ECN: Not-ECT)
- .... 0000 00.. .... .... .... .... .... = Differentiated Services Codepoint: Default (0)
- .... .... ..00 .... .... .... .... .... = Explicit Congestion Notification: Not ECN-Capable Transport (0)
- .... .... .... 1110 0001 1001 0101 0010 = Flow Label: 0xe1952
- Payload Length: 96
- Next Header: UDP (17)
- Hop Limit: 117
- Source: 2001:4860:4860::8888
- Destination: 2a02:2788:484:7b4:f158:eaad:36aa:84f3
- User Datagram Protocol, Src Port: 53, Dst Port: 55963
- Source Port: 53
- Destination Port: 55963
- Length: 96
- Checksum: 0x288c [unverified]
- Domain Name System (response)
- Transaction ID: 0x860f
- Flags: 0x81a0 Standard query response, No error
- 1... .... .... .... = Response: Message is a response
- .000 0... .... .... = Opcode: Standard query (0)
- .... .0.. .... .... = Authoritative: Server is not an authority for domain
- .... ..0. .... .... = Truncated: Message is not truncated
- .... ...1 .... .... = Recursion desired: Do query recursively
- .... .... 1... .... = Recursion available: Server can do recursive queries
- .... .... .0.. .... = Z: reserved (0)
- .... .... ..1. .... = Answer authenticated: Answer/authority portion was authenticated by the server
- .... .... ...0 .... = Non-authenticated data: Unacceptable
- .... .... .... 0000 = Reply code: No error (0)
- Questions: 1
- Answer RRs: 2
- Authority RRs: 0
- Additional RRs: 0
- Queries
- computer-networking.info: type NS, class IN
- Name: computer-networking.info
- Name Length: 24
- Label Count: 2
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
- Answers
- computer-networking.info: type NS, class IN, ns dns20.ovh.net
- Name: computer-networking.info
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
- Time to live: 3599
- Data length: 15
- Name Server: dns20.ovh.net
- computer-networking.info: type NS, class IN, ns ns20.ovh.net
- Name: computer-networking.info
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
- Time to live: 3599
- Data length: 7
- Name Server: ns20.ovh.net