A student collected a packet trace while running the following command:
dig -t AAAA www.example.com
This trace was collected with a resolver that does not store any record in its cache. Can you reorder the packets of this trace by looking at the succession of the types of DNS requests starting from the root ?
# |
Length |
Summary |
Status |
0 |
497 bytes |
Domain Name System (response) |
|
1 |
240 bytes |
Domain Name System (response) |
|
2 |
21 bytes |
Domain Name System (query) |
|
3 |
29 bytes |
Domain Name System (query) |
|
4 |
34 bytes |
Domain Name System (query) |
|
5 |
506 bytes |
Domain Name System (response) |
|
6 |
77 bytes |
Domain Name System (response) |
|
7 |
61 bytes |
Domain Name System (response) |
|
8 |
33 bytes |
Domain Name System (query) |
|
9 |
21 bytes |
Domain Name System (query) |
|
0000
4e
c9
81
00
00
01
00
00
00
0d
00
09
03
63
6f
6d
0010
00
00
02
00
01
c0
0c
00
02
00
01
00
02
a3
00
00
0020
14
01
63
0c
67
74
6c
64
2d
73
65
72
76
65
72
73
0030
03
6e
65
74
00
c0
0c
00
02
00
01
00
02
a3
00
00
0040
04
01
61
c0
23
c0
0c
00
02
00
01
00
02
a3
00
00
0050
04
01
64
c0
23
c0
0c
00
02
00
01
00
02
a3
00
00
0060
04
01
65
c0
23
c0
0c
00
02
00
01
00
02
a3
00
00
0070
04
01
69
c0
23
c0
0c
00
02
00
01
00
02
a3
00
00
0080
04
01
6b
c0
23
c0
0c
00
02
00
01
00
02
a3
00
00
0090
04
01
67
c0
23
c0
0c
00
02
00
01
00
02
a3
00
00
00A0
04
01
62
c0
23
c0
0c
00
02
00
01
00
02
a3
00
00
00B0
04
01
6a
c0
23
c0
0c
00
02
00
01
00
02
a3
00
00
00C0
04
01
66
c0
23
c0
0c
00
02
00
01
00
02
a3
00
00
00D0
04
01
6c
c0
23
c0
0c
00
02
00
01
00
02
a3
00
00
00E0
04
01
6d
c0
23
c0
0c
00
02
00
01
00
02
a3
00
00
00F0
04
01
68
c0
23
c0
e1
00
1c
00
01
00
02
a3
00
00
0100
10
20
01
05
01
b1
f9
00
00
00
00
00
00
00
00
00
0110
30
c0
d1
00
1c
00
01
00
02
a3
00
00
10
20
01
05
0120
00
d9
37
00
00
00
00
00
00
00
00
00
30
c0
81
00
0130
1c
00
01
00
02
a3
00
00
10
20
01
05
03
0d
2d
00
0140
00
00
00
00
00
00
00
00
30
c0
b1
00
1c
00
01
00
0150
02
a3
00
00
10
20
01
05
02
70
94
00
00
00
00
00
0160
00
00
00
00
30
c0
71
00
1c
00
01
00
02
a3
00
00
0170
10
20
01
05
03
39
c1
00
00
00
00
00
00
00
00
00
0180
30
c0
f1
00
1c
00
01
00
02
a3
00
00
10
20
01
05
0190
02
08
cc
00
00
00
00
00
00
00
00
00
30
c0
91
00
01A0
1c
00
01
00
02
a3
00
00
10
20
01
05
03
ee
a3
00
01B0
00
00
00
00
00
00
00
00
30
c0
c1
00
1c
00
01
00
01C0
02
a3
00
00
10
20
01
05
03
d4
14
00
00
00
00
00
01D0
00
00
00
00
30
c0
61
00
1c
00
01
00
02
a3
00
00
01E0
10
20
01
05
02
1c
a1
00
00
00
00
00
00
00
00
00
01F0
30
0000
N
É
.
.
.
.
.
.
.
.
.
.
.
c
o
m
0010
.
.
.
.
.
À
.
.
.
.
.
.
.
£
.
.
0020
.
.
c
.
g
t
l
d
-
s
e
r
v
e
r
s
0030
.
n
e
t
.
À
.
.
.
.
.
.
.
£
.
.
0040
.
.
a
À
#
À
.
.
.
.
.
.
.
£
.
.
0050
.
.
d
À
#
À
.
.
.
.
.
.
.
£
.
.
0060
.
.
e
À
#
À
.
.
.
.
.
.
.
£
.
.
0070
.
.
i
À
#
À
.
.
.
.
.
.
.
£
.
.
0080
.
.
k
À
#
À
.
.
.
.
.
.
.
£
.
.
0090
.
.
g
À
#
À
.
.
.
.
.
.
.
£
.
.
00A0
.
.
b
À
#
À
.
.
.
.
.
.
.
£
.
.
00B0
.
.
j
À
#
À
.
.
.
.
.
.
.
£
.
.
00C0
.
.
f
À
#
À
.
.
.
.
.
.
.
£
.
.
00D0
.
.
l
À
#
À
.
.
.
.
.
.
.
£
.
.
00E0
.
.
m
À
#
À
.
.
.
.
.
.
.
£
.
.
00F0
.
.
h
À
#
À
á
.
.
.
.
.
.
£
.
.
0100
.
.
.
.
±
ù
.
.
.
.
.
.
.
.
.
0110
0
À
Ñ
.
.
.
.
.
.
£
.
.
.
.
.
0120
.
Ù
7
.
.
.
.
.
.
.
.
.
0
À
.
.
0130
.
.
.
.
.
£
.
.
.
.
.
.
.
-
.
0140
.
.
.
.
.
.
.
.
0
À
±
.
.
.
.
.
0150
.
£
.
.
.
.
.
.
p
.
.
.
.
.
.
0160
.
.
.
.
0
À
q
.
.
.
.
.
.
£
.
.
0170
.
.
.
.
9
Á
.
.
.
.
.
.
.
.
.
0180
0
À
ñ
.
.
.
.
.
.
£
.
.
.
.
.
0190
.
.
Ì
.
.
.
.
.
.
.
.
.
0
À
.
.
01A0
.
.
.
.
.
£
.
.
.
.
.
.
î
£
.
01B0
.
.
.
.
.
.
.
.
0
À
Á
.
.
.
.
.
01C0
.
£
.
.
.
.
.
.
Ô
.
.
.
.
.
.
01D0
.
.
.
.
0
À
a
.
.
.
.
.
.
£
.
.
01E0
.
.
.
.
.
¡
.
.
.
.
.
.
.
.
.
01F0
0
- Domain Name System (response)
- Transaction ID: 0x4ec9
- Flags: 0x8100 Standard query response, No error
- 1... .... .... .... = Response: Message is a response
- .000 0... .... .... = Opcode: Standard query (0)
- .... .0.. .... .... = Authoritative: Server is not an authority for domain
- .... ..0. .... .... = Truncated: Message is not truncated
- .... ...1 .... .... = Recursion desired: Do query recursively
- .... .... 0... .... = Recursion available: Server can't do recursive queries
- .... .... .0.. .... = Z: reserved (0)
- .... .... ..0. .... = Answer authenticated: Answer/authority portion was not authenticated by the server
- .... .... ...0 .... = Non-authenticated data: Unacceptable
- .... .... .... 0000 = Reply code: No error (0)
- Questions: 1
- Answer RRs: 0
- Authority RRs: 13
- Additional RRs: 9
- Queries
- com: type NS, class IN
- Name: com
- Name Length: 3
- Label Count: 1
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
- Authoritative nameservers
- com: type NS, class IN, ns c.gtld-servers.net
- Name: com
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 20
- Name Server: c.gtld-servers.net
- com: type NS, class IN, ns a.gtld-servers.net
- Name: com
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 4
- Name Server: a.gtld-servers.net
- com: type NS, class IN, ns d.gtld-servers.net
- Name: com
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 4
- Name Server: d.gtld-servers.net
- com: type NS, class IN, ns e.gtld-servers.net
- Name: com
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 4
- Name Server: e.gtld-servers.net
- com: type NS, class IN, ns i.gtld-servers.net
- Name: com
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 4
- Name Server: i.gtld-servers.net
- com: type NS, class IN, ns k.gtld-servers.net
- Name: com
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 4
- Name Server: k.gtld-servers.net
- com: type NS, class IN, ns g.gtld-servers.net
- Name: com
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 4
- Name Server: g.gtld-servers.net
- com: type NS, class IN, ns b.gtld-servers.net
- Name: com
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 4
- Name Server: b.gtld-servers.net
- com: type NS, class IN, ns j.gtld-servers.net
- Name: com
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 4
- Name Server: j.gtld-servers.net
- com: type NS, class IN, ns f.gtld-servers.net
- Name: com
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 4
- Name Server: f.gtld-servers.net
- com: type NS, class IN, ns l.gtld-servers.net
- Name: com
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 4
- Name Server: l.gtld-servers.net
- com: type NS, class IN, ns m.gtld-servers.net
- Name: com
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 4
- Name Server: m.gtld-servers.net
- com: type NS, class IN, ns h.gtld-servers.net
- Name: com
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 4
- Name Server: h.gtld-servers.net
- Additional records
- m.gtld-servers.net: type AAAA, class IN, addr 2001:501:b1f9::30
- Name: m.gtld-servers.net
- Type: AAAA (IPv6 Address) (28)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 16
- AAAA Address: 2001:501:b1f9::30
- l.gtld-servers.net: type AAAA, class IN, addr 2001:500:d937::30
- Name: l.gtld-servers.net
- Type: AAAA (IPv6 Address) (28)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 16
- AAAA Address: 2001:500:d937::30
- k.gtld-servers.net: type AAAA, class IN, addr 2001:503:d2d::30
- Name: k.gtld-servers.net
- Type: AAAA (IPv6 Address) (28)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 16
- AAAA Address: 2001:503:d2d::30
- j.gtld-servers.net: type AAAA, class IN, addr 2001:502:7094::30
- Name: j.gtld-servers.net
- Type: AAAA (IPv6 Address) (28)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 16
- AAAA Address: 2001:502:7094::30
- i.gtld-servers.net: type AAAA, class IN, addr 2001:503:39c1::30
- Name: i.gtld-servers.net
- Type: AAAA (IPv6 Address) (28)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 16
- AAAA Address: 2001:503:39c1::30
- h.gtld-servers.net: type AAAA, class IN, addr 2001:502:8cc::30
- Name: h.gtld-servers.net
- Type: AAAA (IPv6 Address) (28)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 16
- AAAA Address: 2001:502:8cc::30
- g.gtld-servers.net: type AAAA, class IN, addr 2001:503:eea3::30
- Name: g.gtld-servers.net
- Type: AAAA (IPv6 Address) (28)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 16
- AAAA Address: 2001:503:eea3::30
- f.gtld-servers.net: type AAAA, class IN, addr 2001:503:d414::30
- Name: f.gtld-servers.net
- Type: AAAA (IPv6 Address) (28)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 16
- AAAA Address: 2001:503:d414::30
- e.gtld-servers.net: type AAAA, class IN, addr 2001:502:1ca1::30
- Name: e.gtld-servers.net
- Type: AAAA (IPv6 Address) (28)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 16
- AAAA Address: 2001:502:1ca1::30
0000
f3
de
81
00
00
01
00
00
00
04
00
06
0c
69
61
6e
0010
61
2d
73
65
72
76
65
72
73
03
6e
65
74
00
00
02
0020
00
01
c0
0c
00
02
00
01
00
02
a3
00
00
0e
02
6e
0030
73
05
69
63
61
6e
6e
03
6f
72
67
00
c0
0c
00
02
0040
00
01
00
02
a3
00
00
04
01
61
c0
0c
c0
0c
00
02
0050
00
01
00
02
a3
00
00
04
01
62
c0
0c
c0
0c
00
02
0060
00
01
00
02
a3
00
00
04
01
63
c0
0c
c0
48
00
01
0070
00
01
00
02
a3
00
00
04
c7
2b
87
35
c0
48
00
1c
0080
00
01
00
02
a3
00
00
10
20
01
05
00
00
8f
00
00
0090
00
00
00
00
00
00
00
53
c0
58
00
01
00
01
00
02
00A0
a3
00
00
04
c7
2b
85
35
c0
58
00
1c
00
01
00
02
00B0
a3
00
00
10
20
01
05
00
00
8d
00
00
00
00
00
00
00C0
00
00
00
53
c0
68
00
01
00
01
00
02
a3
00
00
04
00D0
c7
2b
86
35
c0
68
00
1c
00
01
00
02
a3
00
00
10
00E0
20
01
05
00
00
8e
00
00
00
00
00
00
00
00
00
53
0000
ó
Þ
.
.
.
.
.
.
.
.
.
.
.
i
a
n
0010
a
-
s
e
r
v
e
r
s
.
n
e
t
.
.
.
0020
.
.
À
.
.
.
.
.
.
.
£
.
.
.
.
n
0030
s
.
i
c
a
n
n
.
o
r
g
.
À
.
.
.
0040
.
.
.
.
£
.
.
.
.
a
À
.
À
.
.
.
0050
.
.
.
.
£
.
.
.
.
b
À
.
À
.
.
.
0060
.
.
.
.
£
.
.
.
.
c
À
.
À
H
.
.
0070
.
.
.
.
£
.
.
.
Ç
+
.
5
À
H
.
.
0080
.
.
.
.
£
.
.
.
.
.
.
.
.
.
.
0090
.
.
.
.
.
.
.
S
À
X
.
.
.
.
.
.
00A0
£
.
.
.
Ç
+
.
5
À
X
.
.
.
.
.
.
00B0
£
.
.
.
.
.
.
.
.
.
.
.
.
.
.
00C0
.
.
.
S
À
h
.
.
.
.
.
.
£
.
.
.
00D0
Ç
+
.
5
À
h
.
.
.
.
.
.
£
.
.
.
00E0
.
.
.
.
.
.
.
.
.
.
.
.
.
.
S
- Domain Name System (response)
- Transaction ID: 0xf3de
- Flags: 0x8100 Standard query response, No error
- 1... .... .... .... = Response: Message is a response
- .000 0... .... .... = Opcode: Standard query (0)
- .... .0.. .... .... = Authoritative: Server is not an authority for domain
- .... ..0. .... .... = Truncated: Message is not truncated
- .... ...1 .... .... = Recursion desired: Do query recursively
- .... .... 0... .... = Recursion available: Server can't do recursive queries
- .... .... .0.. .... = Z: reserved (0)
- .... .... ..0. .... = Answer authenticated: Answer/authority portion was not authenticated by the server
- .... .... ...0 .... = Non-authenticated data: Unacceptable
- .... .... .... 0000 = Reply code: No error (0)
- Questions: 1
- Answer RRs: 0
- Authority RRs: 4
- Additional RRs: 6
- Queries
- iana-servers.net: type NS, class IN
- Name: iana-servers.net
- Name Length: 16
- Label Count: 2
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
- Authoritative nameservers
- iana-servers.net: type NS, class IN, ns ns.icann.org
- Name: iana-servers.net
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 14
- Name Server: ns.icann.org
- iana-servers.net: type NS, class IN, ns a.iana-servers.net
- Name: iana-servers.net
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 4
- Name Server: a.iana-servers.net
- iana-servers.net: type NS, class IN, ns b.iana-servers.net
- Name: iana-servers.net
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 4
- Name Server: b.iana-servers.net
- iana-servers.net: type NS, class IN, ns c.iana-servers.net
- Name: iana-servers.net
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 4
- Name Server: c.iana-servers.net
- Additional records
- a.iana-servers.net: type A, class IN, addr 199.43.135.53
- Name: a.iana-servers.net
- Type: A (Host Address) (1)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 4
- Address: 199.43.135.53
- a.iana-servers.net: type AAAA, class IN, addr 2001:500:8f::53
- Name: a.iana-servers.net
- Type: AAAA (IPv6 Address) (28)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 16
- AAAA Address: 2001:500:8f::53
- b.iana-servers.net: type A, class IN, addr 199.43.133.53
- Name: b.iana-servers.net
- Type: A (Host Address) (1)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 4
- Address: 199.43.133.53
- b.iana-servers.net: type AAAA, class IN, addr 2001:500:8d::53
- Name: b.iana-servers.net
- Type: AAAA (IPv6 Address) (28)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 16
- AAAA Address: 2001:500:8d::53
- c.iana-servers.net: type A, class IN, addr 199.43.134.53
- Name: c.iana-servers.net
- Type: A (Host Address) (1)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 4
- Address: 199.43.134.53
- c.iana-servers.net: type AAAA, class IN, addr 2001:500:8e::53
- Name: c.iana-servers.net
- Type: AAAA (IPv6 Address) (28)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 16
- AAAA Address: 2001:500:8e::53
0000
4e
c9
01
20
00
01
00
00
00
00
00
00
03
63
6f
6d
0010
00
00
02
00
01
0000
N
É
.
.
.
.
.
.
.
.
.
.
c
o
m
0010
.
.
.
.
.
- Domain Name System (query)
- Transaction ID: 0x4ec9
- Flags: 0x0120 Standard query
- 0... .... .... .... = Response: Message is a query
- .000 0... .... .... = Opcode: Standard query (0)
- .... ..0. .... .... = Truncated: Message is not truncated
- .... ...1 .... .... = Recursion desired: Do query recursively
- .... .... .0.. .... = Z: reserved (0)
- .... .... ..1. .... = AD bit: Set
- .... .... ...0 .... = Non-authenticated data: Unacceptable
- Questions: 1
- Answer RRs: 0
- Authority RRs: 0
- Additional RRs: 0
- Queries
- com: type NS, class IN
- Name: com
- Name Length: 3
- Label Count: 1
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
0000
24
86
01
20
00
01
00
00
00
00
00
00
07
65
78
61
0010
6d
70
6c
65
03
63
6f
6d
00
00
02
00
01
0000
$
.
.
.
.
.
.
.
.
.
.
.
e
x
a
0010
m
p
l
e
.
c
o
m
.
.
.
.
.
- Domain Name System (query)
- Transaction ID: 0x2486
- Flags: 0x0120 Standard query
- 0... .... .... .... = Response: Message is a query
- .000 0... .... .... = Opcode: Standard query (0)
- .... ..0. .... .... = Truncated: Message is not truncated
- .... ...1 .... .... = Recursion desired: Do query recursively
- .... .... .0.. .... = Z: reserved (0)
- .... .... ..1. .... = AD bit: Set
- .... .... ...0 .... = Non-authenticated data: Unacceptable
- Questions: 1
- Answer RRs: 0
- Authority RRs: 0
- Additional RRs: 0
- Queries
- example.com: type NS, class IN
- Name: example.com
- Name Length: 11
- Label Count: 2
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
0000
f3
de
01
20
00
01
00
00
00
00
00
00
0c
69
61
6e
0010
61
2d
73
65
72
76
65
72
73
03
6e
65
74
00
00
02
0020
00
01
0000
ó
Þ
.
.
.
.
.
.
.
.
.
.
i
a
n
0010
a
-
s
e
r
v
e
r
s
.
n
e
t
.
.
.
0020
.
.
- Domain Name System (query)
- Transaction ID: 0xf3de
- Flags: 0x0120 Standard query
- 0... .... .... .... = Response: Message is a query
- .000 0... .... .... = Opcode: Standard query (0)
- .... ..0. .... .... = Truncated: Message is not truncated
- .... ...1 .... .... = Recursion desired: Do query recursively
- .... .... .0.. .... = Z: reserved (0)
- .... .... ..1. .... = AD bit: Set
- .... .... ...0 .... = Non-authenticated data: Unacceptable
- Questions: 1
- Answer RRs: 0
- Authority RRs: 0
- Additional RRs: 0
- Queries
- iana-servers.net: type NS, class IN
- Name: iana-servers.net
- Name Length: 16
- Label Count: 2
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
0000
bb
4e
83
00
00
01
00
00
00
0d
00
0c
03
6e
65
74
0010
00
00
02
00
01
c0
0c
00
02
00
01
00
02
a3
00
00
0020
11
01
61
0c
67
74
6c
64
2d
73
65
72
76
65
72
73
0030
c0
0c
c0
0c
00
02
00
01
00
02
a3
00
00
04
01
62
0040
c0
23
c0
0c
00
02
00
01
00
02
a3
00
00
04
01
63
0050
c0
23
c0
0c
00
02
00
01
00
02
a3
00
00
04
01
64
0060
c0
23
c0
0c
00
02
00
01
00
02
a3
00
00
04
01
65
0070
c0
23
c0
0c
00
02
00
01
00
02
a3
00
00
04
01
66
0080
c0
23
c0
0c
00
02
00
01
00
02
a3
00
00
04
01
67
0090
c0
23
c0
0c
00
02
00
01
00
02
a3
00
00
04
01
68
00A0
c0
23
c0
0c
00
02
00
01
00
02
a3
00
00
04
01
69
00B0
c0
23
c0
0c
00
02
00
01
00
02
a3
00
00
04
01
6a
00C0
c0
23
c0
0c
00
02
00
01
00
02
a3
00
00
04
01
6b
00D0
c0
23
c0
0c
00
02
00
01
00
02
a3
00
00
04
01
6c
00E0
c0
23
c0
0c
00
02
00
01
00
02
a3
00
00
04
01
6d
00F0
c0
23
c0
21
00
01
00
01
00
02
a3
00
00
04
c0
05
0100
06
1e
c0
21
00
1c
00
01
00
02
a3
00
00
10
20
01
0110
05
03
a8
3e
00
00
00
00
00
00
00
02
00
30
c0
3e
0120
00
01
00
01
00
02
a3
00
00
04
c0
21
0e
1e
c0
3e
0130
00
1c
00
01
00
02
a3
00
00
10
20
01
05
03
23
1d
0140
00
00
00
00
00
00
00
02
00
30
c0
4e
00
01
00
01
0150
00
02
a3
00
00
04
c0
1a
5c
1e
c0
4e
00
1c
00
01
0160
00
02
a3
00
00
10
20
01
05
03
83
eb
00
00
00
00
0170
00
00
00
00
00
30
c0
5e
00
01
00
01
00
02
a3
00
0180
00
04
c0
1f
50
1e
c0
5e
00
1c
00
01
00
02
a3
00
0190
00
10
20
01
05
00
85
6e
00
00
00
00
00
00
00
00
01A0
00
30
c0
6e
00
01
00
01
00
02
a3
00
00
04
c0
0c
01B0
5e
1e
c0
6e
00
1c
00
01
00
02
a3
00
00
10
20
01
01C0
05
02
1c
a1
00
00
00
00
00
00
00
00
00
30
c0
7e
01D0
00
01
00
01
00
02
a3
00
00
04
c0
23
33
1e
c0
7e
01E0
00
1c
00
01
00
02
a3
00
00
10
20
01
05
03
d4
14
01F0
00
00
00
00
00
00
00
00
00
30
0000
»
N
.
.
.
.
.
.
.
.
.
.
.
n
e
t
0010
.
.
.
.
.
À
.
.
.
.
.
.
.
£
.
.
0020
.
.
a
.
g
t
l
d
-
s
e
r
v
e
r
s
0030
À
.
À
.
.
.
.
.
.
.
£
.
.
.
.
b
0040
À
#
À
.
.
.
.
.
.
.
£
.
.
.
.
c
0050
À
#
À
.
.
.
.
.
.
.
£
.
.
.
.
d
0060
À
#
À
.
.
.
.
.
.
.
£
.
.
.
.
e
0070
À
#
À
.
.
.
.
.
.
.
£
.
.
.
.
f
0080
À
#
À
.
.
.
.
.
.
.
£
.
.
.
.
g
0090
À
#
À
.
.
.
.
.
.
.
£
.
.
.
.
h
00A0
À
#
À
.
.
.
.
.
.
.
£
.
.
.
.
i
00B0
À
#
À
.
.
.
.
.
.
.
£
.
.
.
.
j
00C0
À
#
À
.
.
.
.
.
.
.
£
.
.
.
.
k
00D0
À
#
À
.
.
.
.
.
.
.
£
.
.
.
.
l
00E0
À
#
À
.
.
.
.
.
.
.
£
.
.
.
.
m
00F0
À
#
À
!
.
.
.
.
.
.
£
.
.
.
À
.
0100
.
.
À
!
.
.
.
.
.
.
£
.
.
.
.
0110
.
.
¨
>
.
.
.
.
.
.
.
.
.
0
À
>
0120
.
.
.
.
.
.
£
.
.
.
À
!
.
.
À
>
0130
.
.
.
.
.
.
£
.
.
.
.
.
.
#
.
0140
.
.
.
.
.
.
.
.
.
0
À
N
.
.
.
.
0150
.
.
£
.
.
.
À
.
\
.
À
N
.
.
.
.
0160
.
.
£
.
.
.
.
.
.
.
ë
.
.
.
.
0170
.
.
.
.
.
0
À
^
.
.
.
.
.
.
£
.
0180
.
.
À
.
P
.
À
^
.
.
.
.
.
.
£
.
0190
.
.
.
.
.
.
n
.
.
.
.
.
.
.
.
01A0
.
0
À
n
.
.
.
.
.
.
£
.
.
.
À
.
01B0
^
.
À
n
.
.
.
.
.
.
£
.
.
.
.
01C0
.
.
.
¡
.
.
.
.
.
.
.
.
.
0
À
~
01D0
.
.
.
.
.
.
£
.
.
.
À
#
3
.
À
~
01E0
.
.
.
.
.
.
£
.
.
.
.
.
.
Ô
.
01F0
.
.
.
.
.
.
.
.
.
0
- Domain Name System (response)
- Transaction ID: 0xbb4e
- Flags: 0x8300 Standard query response, No error
- 1... .... .... .... = Response: Message is a response
- .000 0... .... .... = Opcode: Standard query (0)
- .... .0.. .... .... = Authoritative: Server is not an authority for domain
- .... ..1. .... .... = Truncated: Message is truncated
- .... ...1 .... .... = Recursion desired: Do query recursively
- .... .... 0... .... = Recursion available: Server can't do recursive queries
- .... .... .0.. .... = Z: reserved (0)
- .... .... ..0. .... = Answer authenticated: Answer/authority portion was not authenticated by the server
- .... .... ...0 .... = Non-authenticated data: Unacceptable
- .... .... .... 0000 = Reply code: No error (0)
- Questions: 1
- Answer RRs: 0
- Authority RRs: 13
- Additional RRs: 12
- Queries
- net: type NS, class IN
- Name: net
- Name Length: 3
- Label Count: 1
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
- Authoritative nameservers
- net: type NS, class IN, ns a.gtld-servers.net
- Name: net
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 17
- Name Server: a.gtld-servers.net
- net: type NS, class IN, ns b.gtld-servers.net
- Name: net
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 4
- Name Server: b.gtld-servers.net
- net: type NS, class IN, ns c.gtld-servers.net
- Name: net
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 4
- Name Server: c.gtld-servers.net
- net: type NS, class IN, ns d.gtld-servers.net
- Name: net
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 4
- Name Server: d.gtld-servers.net
- net: type NS, class IN, ns e.gtld-servers.net
- Name: net
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 4
- Name Server: e.gtld-servers.net
- net: type NS, class IN, ns f.gtld-servers.net
- Name: net
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 4
- Name Server: f.gtld-servers.net
- net: type NS, class IN, ns g.gtld-servers.net
- Name: net
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 4
- Name Server: g.gtld-servers.net
- net: type NS, class IN, ns h.gtld-servers.net
- Name: net
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 4
- Name Server: h.gtld-servers.net
- net: type NS, class IN, ns i.gtld-servers.net
- Name: net
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 4
- Name Server: i.gtld-servers.net
- net: type NS, class IN, ns j.gtld-servers.net
- Name: net
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 4
- Name Server: j.gtld-servers.net
- net: type NS, class IN, ns k.gtld-servers.net
- Name: net
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 4
- Name Server: k.gtld-servers.net
- net: type NS, class IN, ns l.gtld-servers.net
- Name: net
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 4
- Name Server: l.gtld-servers.net
- net: type NS, class IN, ns m.gtld-servers.net
- Name: net
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 4
- Name Server: m.gtld-servers.net
- Additional records
- a.gtld-servers.net: type A, class IN, addr 192.5.6.30
- Name: a.gtld-servers.net
- Type: A (Host Address) (1)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 4
- Address: 192.5.6.30
- a.gtld-servers.net: type AAAA, class IN, addr 2001:503:a83e::2:30
- Name: a.gtld-servers.net
- Type: AAAA (IPv6 Address) (28)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 16
- AAAA Address: 2001:503:a83e::2:30
- b.gtld-servers.net: type A, class IN, addr 192.33.14.30
- Name: b.gtld-servers.net
- Type: A (Host Address) (1)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 4
- Address: 192.33.14.30
- b.gtld-servers.net: type AAAA, class IN, addr 2001:503:231d::2:30
- Name: b.gtld-servers.net
- Type: AAAA (IPv6 Address) (28)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 16
- AAAA Address: 2001:503:231d::2:30
- c.gtld-servers.net: type A, class IN, addr 192.26.92.30
- Name: c.gtld-servers.net
- Type: A (Host Address) (1)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 4
- Address: 192.26.92.30
- c.gtld-servers.net: type AAAA, class IN, addr 2001:503:83eb::30
- Name: c.gtld-servers.net
- Type: AAAA (IPv6 Address) (28)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 16
- AAAA Address: 2001:503:83eb::30
- d.gtld-servers.net: type A, class IN, addr 192.31.80.30
- Name: d.gtld-servers.net
- Type: A (Host Address) (1)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 4
- Address: 192.31.80.30
- d.gtld-servers.net: type AAAA, class IN, addr 2001:500:856e::30
- Name: d.gtld-servers.net
- Type: AAAA (IPv6 Address) (28)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 16
- AAAA Address: 2001:500:856e::30
- e.gtld-servers.net: type A, class IN, addr 192.12.94.30
- Name: e.gtld-servers.net
- Type: A (Host Address) (1)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 4
- Address: 192.12.94.30
- e.gtld-servers.net: type AAAA, class IN, addr 2001:502:1ca1::30
- Name: e.gtld-servers.net
- Type: AAAA (IPv6 Address) (28)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 16
- AAAA Address: 2001:502:1ca1::30
- f.gtld-servers.net: type A, class IN, addr 192.35.51.30
- Name: f.gtld-servers.net
- Type: A (Host Address) (1)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 4
- Address: 192.35.51.30
- f.gtld-servers.net: type AAAA, class IN, addr 2001:503:d414::30
- Name: f.gtld-servers.net
- Type: AAAA (IPv6 Address) (28)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 16
- AAAA Address: 2001:503:d414::30
0000
24
86
81
00
00
01
00
00
00
02
00
00
07
65
78
61
0010
6d
70
6c
65
03
63
6f
6d
00
00
02
00
01
c0
0c
00
0020
02
00
01
00
02
a3
00
00
14
01
61
0c
69
61
6e
61
0030
2d
73
65
72
76
65
72
73
03
6e
65
74
00
c0
0c
00
0040
02
00
01
00
02
a3
00
00
04
01
62
c0
2b
0000
$
.
.
.
.
.
.
.
.
.
.
.
.
e
x
a
0010
m
p
l
e
.
c
o
m
.
.
.
.
.
À
.
.
0020
.
.
.
.
.
£
.
.
.
.
a
.
i
a
n
a
0030
-
s
e
r
v
e
r
s
.
n
e
t
.
À
.
.
0040
.
.
.
.
.
£
.
.
.
.
b
À
+
- Domain Name System (response)
- Transaction ID: 0x2486
- Flags: 0x8100 Standard query response, No error
- 1... .... .... .... = Response: Message is a response
- .000 0... .... .... = Opcode: Standard query (0)
- .... .0.. .... .... = Authoritative: Server is not an authority for domain
- .... ..0. .... .... = Truncated: Message is not truncated
- .... ...1 .... .... = Recursion desired: Do query recursively
- .... .... 0... .... = Recursion available: Server can't do recursive queries
- .... .... .0.. .... = Z: reserved (0)
- .... .... ..0. .... = Answer authenticated: Answer/authority portion was not authenticated by the server
- .... .... ...0 .... = Non-authenticated data: Unacceptable
- .... .... .... 0000 = Reply code: No error (0)
- Questions: 1
- Answer RRs: 0
- Authority RRs: 2
- Additional RRs: 0
- Queries
- example.com: type NS, class IN
- Name: example.com
- Name Length: 11
- Label Count: 2
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
- Authoritative nameservers
- example.com: type NS, class IN, ns a.iana-servers.net
- Name: example.com
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 20
- Name Server: a.iana-servers.net
- example.com: type NS, class IN, ns b.iana-servers.net
- Name: example.com
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)
- Time to live: 172800
- Data length: 4
- Name Server: b.iana-servers.net
0000
69
40
85
00
00
01
00
01
00
00
00
00
03
77
77
77
0010
07
65
78
61
6d
70
6c
65
03
63
6f
6d
00
00
1c
00
0020
01
c0
0c
00
1c
00
01
00
01
51
80
00
10
26
06
28
0030
00
02
20
00
01
02
48
18
93
25
c8
19
46
0000
i
@
.
.
.
.
.
.
.
.
.
.
.
w
w
w
0010
.
e
x
a
m
p
l
e
.
c
o
m
.
.
.
.
0020
.
À
.
.
.
.
.
.
.
Q
.
.
.
&
.
(
0030
.
.
.
.
.
H
.
.
%
È
.
F
- Domain Name System (response)
- Transaction ID: 0x6940
- Flags: 0x8500 Standard query response, No error
- 1... .... .... .... = Response: Message is a response
- .000 0... .... .... = Opcode: Standard query (0)
- .... .1.. .... .... = Authoritative: Server is an authority for domain
- .... ..0. .... .... = Truncated: Message is not truncated
- .... ...1 .... .... = Recursion desired: Do query recursively
- .... .... 0... .... = Recursion available: Server can't do recursive queries
- .... .... .0.. .... = Z: reserved (0)
- .... .... ..0. .... = Answer authenticated: Answer/authority portion was not authenticated by the server
- .... .... ...0 .... = Non-authenticated data: Unacceptable
- .... .... .... 0000 = Reply code: No error (0)
- Questions: 1
- Answer RRs: 1
- Authority RRs: 0
- Additional RRs: 0
- Queries
- www.example.com: type AAAA, class IN
- Name: www.example.com
- Name Length: 15
- Label Count: 3
- Type: AAAA (IPv6 Address) (28)
- Class: IN (0x0001)
- Answers
- www.example.com: type AAAA, class IN, addr 2606:2800:220:1:248:1893:25c8:1946
- Name: www.example.com
- Type: AAAA (IPv6 Address) (28)
- Class: IN (0x0001)
- Time to live: 86400
- Data length: 16
- AAAA Address: 2606:2800:220:1:248:1893:25c8:1946
0000
69
40
01
20
00
01
00
00
00
00
00
00
03
77
77
77
0010
07
65
78
61
6d
70
6c
65
03
63
6f
6d
00
00
1c
00
0020
01
0000
i
@
.
.
.
.
.
.
.
.
.
.
w
w
w
0010
.
e
x
a
m
p
l
e
.
c
o
m
.
.
.
.
0020
.
- Domain Name System (query)
- Transaction ID: 0x6940
- Flags: 0x0120 Standard query
- 0... .... .... .... = Response: Message is a query
- .000 0... .... .... = Opcode: Standard query (0)
- .... ..0. .... .... = Truncated: Message is not truncated
- .... ...1 .... .... = Recursion desired: Do query recursively
- .... .... .0.. .... = Z: reserved (0)
- .... .... ..1. .... = AD bit: Set
- .... .... ...0 .... = Non-authenticated data: Unacceptable
- Questions: 1
- Answer RRs: 0
- Authority RRs: 0
- Additional RRs: 0
- Queries
- www.example.com: type AAAA, class IN
- Name: www.example.com
- Name Length: 15
- Label Count: 3
- Type: AAAA (IPv6 Address) (28)
- Class: IN (0x0001)
0000
bb
4e
01
20
00
01
00
00
00
00
00
00
03
6e
65
74
0010
00
00
02
00
01
0000
»
N
.
.
.
.
.
.
.
.
.
.
n
e
t
0010
.
.
.
.
.
- Domain Name System (query)
- Transaction ID: 0xbb4e
- Flags: 0x0120 Standard query
- 0... .... .... .... = Response: Message is a query
- .000 0... .... .... = Opcode: Standard query (0)
- .... ..0. .... .... = Truncated: Message is not truncated
- .... ...1 .... .... = Recursion desired: Do query recursively
- .... .... .0.. .... = Z: reserved (0)
- .... .... ..1. .... = AD bit: Set
- .... .... ...0 .... = Non-authenticated data: Unacceptable
- Questions: 1
- Answer RRs: 0
- Authority RRs: 0
- Additional RRs: 0
- Queries
- net: type NS, class IN
- Name: net
- Name Length: 3
- Label Count: 1
- Type: NS (authoritative Name Server) (2)
- Class: IN (0x0001)