Frame 3440: 148 bytes on wire (1184 bits), 148 bytes captured (1184 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:50:09.009916000 UTC UTC Arrival Time: Jul 22, 2017 02:50:09.009916000 UTC Epoch Arrival Time: 1500691809.009916000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000146000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 394.484567000 seconds] Frame Number: 3440 Frame Length: 148 bytes (1184 bits) Capture Length: 148 bytes (1184 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:udp:dns] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 172.16.45.1, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 134 Identification: 0x08a0 (2208) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: UDP (17) Header Checksum: 0x0000 [validation disabled] [Header checksum status: Unverified] Source Address: 172.16.45.1 Destination Address: 172.16.45.52 [Stream index: 4] User Datagram Protocol, Src Port: 53, Dst Port: 65045 Source Port: 53 Destination Port: 65045 Length: 114 Checksum: 0x940c [unverified] [Checksum Status: Unverified] [Stream index: 47] [Stream Packet Number: 2] [Timestamps] [Time since first frame: 0.065601000 seconds] [Time since previous frame: 0.065601000 seconds] UDP payload (106 bytes) Domain Name System (response) Transaction ID: 0xfd15 Flags: 0x8180 Standard query response, No error 1... .... .... .... = Response: Message is a response .000 0... .... .... = Opcode: Standard query (0) .... .0.. .... .... = Authoritative: Server is not an authority for domain .... ..0. .... .... = Truncated: Message is not truncated .... ...1 .... .... = Recursion desired: Do query recursively .... .... 1... .... = Recursion available: Server can do recursive queries .... .... .0.. .... = Z: reserved (0) .... .... ..0. .... = Answer authenticated: Answer/authority portion was not authenticated by the server .... .... ...0 .... = Non-authenticated data: Unacceptable .... .... .... 0000 = Reply code: No error (0) Questions: 1 Answer RRs: 3 Authority RRs: 0 Additional RRs: 0 Queries api.bing.com: type A, class IN Name: api.bing.com [Name Length: 12] [Label Count: 3] Type: A (1) (Host Address) Class: IN (0x0001) Answers api.bing.com: type CNAME, class IN, cname api-bing-com.e-0001.e-msedge.net Name: api.bing.com Type: CNAME (5) (Canonical NAME for an alias) Class: IN (0x0001) Time to live: 3063 (51 minutes, 3 seconds) Data length: 34 CNAME: api-bing-com.e-0001.e-msedge.net api-bing-com.e-0001.e-msedge.net: type CNAME, class IN, cname e-0001.e-msedge.net Name: api-bing-com.e-0001.e-msedge.net Type: CNAME (5) (Canonical NAME for an alias) Class: IN (0x0001) Time to live: 39 (39 seconds) Data length: 2 CNAME: e-0001.e-msedge.net e-0001.e-msedge.net: type A, class IN, addr 13.107.5.80 Name: e-0001.e-msedge.net Type: A (1) (Host Address) Class: IN (0x0001) Time to live: 131 (2 minutes, 11 seconds) Data length: 4 Address: 13.107.5.80 [Request In: 3379] [Time: 0.065601000 seconds]