Frame 3451: 164 bytes on wire (1312 bits), 164 bytes captured (1312 bits) Encapsulation type: Ethernet (1) Arrival Time: Jul 22, 2017 02:50:09.012565000 UTC UTC Arrival Time: Jul 22, 2017 02:50:09.012565000 UTC Epoch Arrival Time: 1500691809.012565000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000447000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 394.487216000 seconds] Frame Number: 3451 Frame Length: 164 bytes (1312 bits) Capture Length: 164 bytes (1312 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:udp:dns] Ethernet II, Src: Cisco_01:e9:5c (00:09:e8:01:e9:5c), Dst: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) Destination: Dell_c3:1b:e9 (00:26:b9:c3:1b:e9) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Cisco_01:e9:5c (00:09:e8:01:e9:5c) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) [Stream index: 3] Internet Protocol Version 4, Src: 172.16.45.1, Dst: 172.16.45.52 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 150 Identification: 0x08a5 (2213) 000. .... = Flags: 0x0 0... .... = Reserved bit: Not set .0.. .... = Don't fragment: Not set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 128 Protocol: UDP (17) Header Checksum: 0x0000 [validation disabled] [Header checksum status: Unverified] Source Address: 172.16.45.1 Destination Address: 172.16.45.52 [Stream index: 4] User Datagram Protocol, Src Port: 53, Dst Port: 60357 Source Port: 53 Destination Port: 60357 Length: 130 Checksum: 0x941c [unverified] [Checksum Status: Unverified] [Stream index: 52] [Stream Packet Number: 2] [Timestamps] [Time since first frame: 0.067340000 seconds] [Time since previous frame: 0.067340000 seconds] UDP payload (122 bytes) Domain Name System (response) Transaction ID: 0x2926 Flags: 0x8180 Standard query response, No error 1... .... .... .... = Response: Message is a response .000 0... .... .... = Opcode: Standard query (0) .... .0.. .... .... = Authoritative: Server is not an authority for domain .... ..0. .... .... = Truncated: Message is not truncated .... ...1 .... .... = Recursion desired: Do query recursively .... .... 1... .... = Recursion available: Server can do recursive queries .... .... .0.. .... = Z: reserved (0) .... .... ..0. .... = Answer authenticated: Answer/authority portion was not authenticated by the server .... .... ...0 .... = Non-authenticated data: Unacceptable .... .... .... 0000 = Reply code: No error (0) Questions: 1 Answer RRs: 4 Authority RRs: 0 Additional RRs: 0 Queries www.bing.com: type A, class IN Name: www.bing.com [Name Length: 12] [Label Count: 3] Type: A (1) (Host Address) Class: IN (0x0001) Answers www.bing.com: type CNAME, class IN, cname www-bing-com.a-0001.a-msedge.net Name: www.bing.com Type: CNAME (5) (Canonical NAME for an alias) Class: IN (0x0001) Time to live: 41 (41 seconds) Data length: 34 CNAME: www-bing-com.a-0001.a-msedge.net www-bing-com.a-0001.a-msedge.net: type CNAME, class IN, cname a-0001.a-msedge.net Name: www-bing-com.a-0001.a-msedge.net Type: CNAME (5) (Canonical NAME for an alias) Class: IN (0x0001) Time to live: 41 (41 seconds) Data length: 2 CNAME: a-0001.a-msedge.net a-0001.a-msedge.net: type A, class IN, addr 13.107.21.200 Name: a-0001.a-msedge.net Type: A (1) (Host Address) Class: IN (0x0001) Time to live: 60 (1 minute) Data length: 4 Address: 13.107.21.200 a-0001.a-msedge.net: type A, class IN, addr 204.79.197.200 Name: a-0001.a-msedge.net Type: A (1) (Host Address) Class: IN (0x0001) Time to live: 60 (1 minute) Data length: 4 Address: 204.79.197.200 [Request In: 3384] [Time: 0.067340000 seconds]