Code:
localhost ppp # tcpdump -i ppp0
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on ppp0, link-type LINUX_SLL (Linux cooked), capture size 96 bytes
===> a) telnet 10.74.49.22 135
===> Trying 10.74.49.22... ^C After about a minute.
19:12:22.558271 IP 10.74.49.117.20558 > 10.74.49.22.epmap: S 2892706931:2892706931(0) win 5824 <mss 1456,sackOK,timestamp 230700 0,nop,wscale 7>
19:12:22.577869 IP 10.74.49.117.1108 > 212.216.112.112.domain: 482+ PTR? 22.49.74.10.in-addr.arpa. (42)
19:12:25.559651 IP 10.74.49.117.20558 > 10.74.49.22.epmap: S 2892706931:2892706931(0) win 5824 <mss 1456,sackOK,timestamp 231450 0,nop,wscale 7>
===> b) telnet 10.74.49.22 137
===> Trying 10.74.49.22... ^C After about a minute.
19:12:27.579538 IP 10.74.49.117.1109 > 212.216.172.62.domain: 482+ PTR? 22.49.74.10.in-addr.arpa. (42)
19:12:31.559229 IP 10.74.49.117.20558 > 10.74.49.22.epmap: S 2892706931:2892706931(0) win 5824 <mss 1456,sackOK,timestamp 232950 0,nop,wscale 7>
19:12:32.579169 IP 10.74.49.117.1108 > 212.216.112.112.domain: 482+ PTR? 22.49.74.10.in-addr.arpa. (42)
19:12:37.578815 IP 10.74.49.117.1109 > 212.216.172.62.domain: 482+ PTR? 22.49.74.10.in-addr.arpa. (42)
19:12:42.597124 IP 10.74.49.117.1109 > 212.216.112.112.domain: 47546+ PTR? 117.49.74.10.in-addr.arpa. (43)
19:12:43.558381 IP 10.74.49.117.20558 > 10.74.49.22.epmap: S 2892706931:2892706931(0) win 5824 <mss 1456,sackOK,timestamp 235950 0,nop,wscale 7>
19:12:47.598123 IP 10.74.49.117.1110 > 212.216.172.62.domain: 47546+ PTR? 117.49.74.10.in-addr.arpa. (43)
19:12:52.597753 IP 10.74.49.117.1109 > 212.216.112.112.domain: 47546+ PTR? 117.49.74.10.in-addr.arpa. (43)
19:12:57.597400 IP 10.74.49.117.1110 > 212.216.172.62.domain: 47546+ PTR? 117.49.74.10.in-addr.arpa. (43)
19:13:02.615452 IP 10.74.49.117.1110 > 212.216.112.112.domain: 35246+ PTR? 112.112.216.212.in-addr.arpa. (46)
19:13:07.556689 IP 10.74.49.117.20558 > 10.74.49.22.epmap: S 2892706931:2892706931(0) win 5824 <mss 1456,sackOK,timestamp 241950 0,nop,wscale 7>
19:13:07.616720 IP 10.74.49.117.1111 > 212.216.172.62.domain: 35246+ PTR? 112.112.216.212.in-addr.arpa. (46)
19:13:12.616348 IP 10.74.49.117.1110 > 212.216.112.112.domain: 35246+ PTR? 112.112.216.212.in-addr.arpa. (46)
19:13:17.615996 IP 10.74.49.117.1111 > 212.216.172.62.domain: 35246+ PTR? 112.112.216.212.in-addr.arpa. (46)
19:13:22.634064 IP 10.74.49.117.1111 > 212.216.112.112.domain: 23012+ PTR? 62.172.216.212.in-addr.arpa. (45)
19:13:27.631300 IP 10.74.49.117.1112 > 212.216.172.62.domain: 23012+ PTR? 62.172.216.212.in-addr.arpa. (45)
19:13:32.630932 IP 10.74.49.117.1111 > 212.216.112.112.domain: 23012+ PTR? 62.172.216.212.in-addr.arpa. (45)
19:13:37.630579 IP 10.74.49.117.1112 > 212.216.172.62.domain: 23012+ PTR? 62.172.216.212.in-addr.arpa. (45)
19:13:44.019252 IP 10.74.49.117.4918 > 10.74.49.22.netbios-ns: S 2969828930:2969828930(0) win 5824 <mss 1456,sackOK,timestamp 251066 0,nop,wscale 7>
19:13:47.017902 IP 10.74.49.117.4918 > 10.74.49.22.netbios-ns: S 2969828930:2969828930(0) win 5824 <mss 1456,sackOK,timestamp 251816 0,nop,wscale 7>
19:13:53.017478 IP 10.74.49.117.4918 > 10.74.49.22.netbios-ns: S 2969828930:2969828930(0) win 5824 <mss 1456,sackOK,timestamp 253316 0,nop,wscale 7>
19:14:05.020633 IP 10.74.49.117.4918 > 10.74.49.22.netbios-ns: S 2969828930:2969828930(0) win 5824 <mss 1456,sackOK,timestamp 256316 0,nop,wscale 7>
===> c1) nslookup test1 10.68.25.1
===> ;; connection timed out; no servers could be reached
19:15:05.767605 IP 10.74.49.117.1112 > d1y10001.domain: 26814+ A? test1.homenetwork. (37)
19:15:10.768021 IP 10.74.49.117.1112 > d1y10001.domain: 26814+ A? test1.homenetwork. (37)
19:15:15.771660 IP 10.74.49.117.1112 > d1y10001.domain: 26814+ A? test1.homenetwork. (37)
===> c2) nslookup test1 10.68.25.2
===> ;; connection timed out; no servers could be reached
19:15:37.783807 IP 10.74.49.117.1112 > d2u10001.domain: 48180+ A? test1.homenetwork. (37)
19:15:42.785752 IP 10.74.49.117.1112 > d2u10001.domain: 48180+ A? test1.homenetwork. (37)
19:15:47.789400 IP 10.74.49.117.1112 > d2u10001.domain: 48180+ A? test1.homenetwork. (37)
31 packets captured
31 packets received by filter
0 packets dropped by kernel