Frame 14 (69 bytes on wire, 69 bytes captured) Arrival Time: Jun 18, 2008 21:21:06.572943000 [Time delta from previous captured frame: 3.299054000 seconds] [Time delta from previous displayed frame: 3.299054000 seconds] [Time since reference or first frame: 9.173662000 seconds] Frame Number: 14 Frame Length: 69 bytes Capture Length: 69 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:dns] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Ethernet II, Src: Apple_c5:73:02 (00:1c:b3:c5:73:02), Dst: Cisco-Li_05:44:b2 (00:1c:10:05:44:b2) Destination: Cisco-Li_05:44:b2 (00:1c:10:05:44:b2) Address: Cisco-Li_05:44:b2 (00:1c:10:05:44:b2) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Apple_c5:73:02 (00:1c:b3:c5:73:02) Address: Apple_c5:73:02 (00:1c:b3:c5:73:02) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 192.168.1.100 (192.168.1.100), Dst: cns.sanjose.ca.sanfran.comcast.net (68.87.76.178) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 55 Identification: 0xc457 (50263) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0x6349 [correct] [Good: True] [Bad : False] Source: 192.168.1.100 (192.168.1.100) Destination: cns.sanjose.ca.sanfran.comcast.net (68.87.76.178) User Datagram Protocol, Src Port: 52003 (52003), Dst Port: domain (53) Source port: 52003 (52003) Destination port: domain (53) Length: 35 Checksum: 0x1173 [correct] [Good Checksum: True] [Bad Checksum: False] Domain Name System (query) [Response In: 15] Transaction ID: 0x75a4 Flags: 0x0100 (Standard query) 0... .... .... .... = Response: Message is a query .000 0... .... .... = Opcode: Standard query (0) .... ..0. .... .... = Truncated: Message is not truncated .... ...1 .... .... = Recursion desired: Do query recursively .... .... .0.. .... = Z: reserved (0) .... .... ...0 .... = Non-authenticated data OK: Non-authenticated data is unacceptable Questions: 1 Answer RRs: 0 Authority RRs: 0 Additional RRs: 0 Queries yahoo.com: type MX, class IN Name: yahoo.com Type: MX (Mail exchange) Class: IN (0x0001) 0000 00 1c 10 05 44 b2 00 1c b3 c5 73 02 08 00 45 00 ....D.....s...E. 0010 00 37 c4 57 00 00 40 11 63 49 c0 a8 01 64 44 57 .7.W..@.cI...dDW 0020 4c b2 cb 23 00 35 00 23 11 73 75 a4 01 00 00 01 L..#.5.#.su..... 0030 00 00 00 00 00 00 05 79 61 68 6f 6f 03 63 6f 6d .......yahoo.com 0040 00 00 0f 00 01 .....