Sponsored Content
Special Forums Cybersecurity Need Help with this TCPDUMP output... Post 302908014 by RudiC on Thursday 3rd of July 2014 05:02:57 AM
Old 07-03-2014
I'd say it's not a query but the answer from a DNS server holding all the A records for a domain that has been queried.
 

10 More Discussions You Might Find Interesting

1. Programming

How To Use tcpdump

I have two net-card. one is 172.16.24.99(ENG) ,another is 172.16.25.99(ENG-B). Both masks is 255.255.255.0. I will monitor data on the tcp port 8055 in ENG, How do I set option of tcpdump command (2 Replies)
Discussion started by: chenhao_no1
2 Replies

2. UNIX for Dummies Questions & Answers

tcpdump

does anybody know what the -d -dd and -ddd options are used for ? thanks (2 Replies)
Discussion started by: ant04
2 Replies

3. Shell Programming and Scripting

Tcpdump in cron

I wrote a short BASH script to run tcpdump and save the output to a log file for when I'm away from my desk. The script runs fine normally, but fails to start in cron. Any ideas? #!/bin/bash today=`date +%Y%m%d` tcpdump -i eth0 -s 1500 -w ${today}.cap & exit (5 Replies)
Discussion started by: paulzeromi
5 Replies

4. Shell Programming and Scripting

analyzing tcpdump output

hello, i have a lot of pcap files (tcpdump output) that i want to compare. every tcpdump output has two file, server and client. what i want to do is: 1. take timestamp, source address, destination address, and packet id from each file (server and client) 2. find the packets sent from... (0 Replies)
Discussion started by: slumpia
0 Replies

5. Cybersecurity

i would like to know about tcpdump

i would like to know about tcpdump i would like to use tcpdump to get information about these - Date - time - source hostname - source mac address - source ip address - destination ip address - see outbound only then i use command like this tcpdump -i le0 -n -q -tttt -e src net... (0 Replies)
Discussion started by: chamnanpol
0 Replies

6. IP Networking

i would like to know about tcpdump

i would like to know about tcpdump i would like to use tcpdump to get information about these - Date - time - source hostname - source mac address - source ip address - destination ip address - see outbound only then i use command like this tcpdump -i le0 -n -q -tttt -e src net... (2 Replies)
Discussion started by: chamnanpol
2 Replies

7. Shell Programming and Scripting

write a script to parse some tcpdump output

i am trying to write a script to parse some tcpdump output, in each line of the tcpdump output, I know for sure there are 3 keywords exist: User{different usernamehere} NAS_ipaddr{different ip here} Calling_station{ip or dns name here} But the positions for these 3 keywords in the... (4 Replies)
Discussion started by: fedora
4 Replies

8. IP Networking

tcpdump vs. wireshark

Hi, I am trying to capture manually crafted IP packets, created using Scapy, to a pcap file that can later be replayed using tcpreplay. When using wireshark, I can successfully capture these packets and view them in wireshark. However, when using tcpdump, these packets are then shown in... (2 Replies)
Discussion started by: yotamhc
2 Replies

9. Debian

Tcpdump Help !

Hi. Need Help with TcpDump Trying to sniff associatio-request with tcpdump but when i run this tcpdump -i eth0 wlan subtype assoc-req i get this error can anyone help me with this error ? Thanks alot !!:) (1 Reply)
Discussion started by: SoulZB
1 Replies

10. IP Networking

TCPdump

I've recently started learning to use TCPdump, and I find it pretty interesting. There's one thing I don't understand. When I tell it to capture packets on, say, the WiFi interface en1, it often captures packets sent or received by other hosts on the network. How can it do this? My... (3 Replies)
Discussion started by: Ultrix
3 Replies
dns(n)								 Tnm Tcl Extension							    dns(n)

__________________________________________________________________________________________________________________________________________________

NAME
dns - Query the Domain Name System of the Internet. _________________________________________________________________ DESCRIPTION
The dns command allows to query the Internet Domain Name System (DNS) (RFC 1034, RFC 1035, RFC 974, RFC 1912) for host information. The main purpose of this command is to convert host names into IP addresses and vice versa. The dns command also allows to retrieve host infor- mation records as well as mail exchanger records. DNS COMMAND
dns [options] Invoking the dns command with options but without any command arguments allows to retrieve and change the default values. See the description of supported options below. Default values are bound to a Tcl interpreter which allows to have multiple Tcl interpreter with different defaults. dns [options] address host The dns address command sends a query to retrieve the address record for the specified host. The command returns the list of IP addresses for the given host name. dns [options] name address The dns name command sends a query to retrieve the domain name pointer record. A pointer record maps an IP address to a fully quali- fied domain name (FQDN). The command returns the fully qualified domain name for the given IP address. dns [options] hinfo name The dns hinfo command sends a query to retrieve the host information record. The command returns a list containing two elements. The first element describes the hardware type and the second element the operating system. dns [options] mx name The dns mx command sends a query to retrieve the mail exchanger record. The command returns a list of mail exchanger records if name is a domain name for which one or more MX records exist. Each element of this list contains a full qualified domain name (FQDN) and its priority. dns [options] soa name The dns soa command sends a query to retrieve the start of authority record for a DNS domain. The command returns the name of the authoritative DNS server of the DNS domain name. DNS OPTIONS
-server server The -server option defines the DNS server which will be used to process the request. The default value is the default DNS server configured on the local system. -timeout time The -timeout option defines the time the dns command will wait for a response. The time is defined in seconds with a default of 2 seconds. -retries number The -retries option defines how many times a request is retransmitted during the timeout interval. The default number of retries is 2. Please note, that many resolver double the last timeout after every retry. SEE ALSO
scotty(1), Tnm(n), Tcl(n) AUTHORS
Erik Schoenfelder <schoenfr@gaertner.de> Juergen Schoenwaelder <schoenw@cs.utwente.nl> Tnm dns(n)
All times are GMT -4. The time now is 04:16 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy