OT: Again, sorry for the noise
Hughes Net DNS issue. I am 72.169.156.122. Notice the Source is port 53, destination is 20xx. Because I am not a large company like McDonalds this apparently cannot be resolved. No. Time Source Destination Protocol Info 190 51.553317 72.169.156.121 72.169.156.122 DNS Standard query response[Packet size limited during capture] Frame 190 (122 bytes on wire, 96 bytes captured) Ethernet II, Src: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a), Dst: Intel_a6:bb:04 (00:d0:b7:a6:bb:04) Internet Protocol, Src: 72.169.156.121 (72.169.156.121), Dst: 72.169.156.122 (72.169.156.122) User Datagram Protocol, Src Port: domain (53), Dst Port: raid-sf (2014) Domain Name System (response) [Packet size limited during capture: DNS truncated] No. Time Source Destination Protocol Info 191 51.553759 72.169.156.122 72.169.156.121 ICMP Destination unreachable (Port unreachable)[Packet size limited during capture] Frame 191 (150 bytes on wire, 96 bytes captured) Ethernet II, Src: Intel_a6:bb:04 (00:d0:b7:a6:bb:04), Dst: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a) Internet Protocol, Src: 72.169.156.122 (72.169.156.122), Dst: 72.169.156.121 (72.169.156.121) Internet Control Message Protocol [Packet size limited during capture: IP truncated] No. Time Source Destination Protocol Info 192 51.643105 194.72.238.11 72.169.156.122 DNS Standard query response A 83.138.190.203 Frame 192 (96 bytes on wire, 96 bytes captured) Ethernet II, Src: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a), Dst: Intel_a6:bb:04 (00:d0:b7:a6:bb:04) Internet Protocol, Src: 194.72.238.11 (194.72.238.11), Dst: 72.169.156.122 (72.169.156.122) User Datagram Protocol, Src Port: domain (53), Dst Port: 11603 (11603) Domain Name System (response) No. Time Source Destination Protocol Info 193 51.648410 192.168.1.20 83.138.190.203 TCP vsat-control > http [SYN] Seq=0 Win=65535 Len=0 MSS=1460 Frame 193 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Intel_a6:bb:04 (00:d0:b7:a6:bb:04), Dst: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: 83.138.190.203 (83.138.190.203) Transmission Control Protocol, Src Port: vsat-control (1880), Dst Port: http (80), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 194 51.650140 83.138.190.203 72.169.156.122 TCP http > 23230 [SYN, ACK] Seq=0 Ack=0 Win=8192 Len=0 MSS=1460 Frame 194 (64 bytes on wire, 64 bytes captured) Ethernet II, Src: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a), Dst: Intel_a6:bb:04 (00:d0:b7:a6:bb:04) Internet Protocol, Src: 83.138.190.203 (83.138.190.203), Dst: 72.169.156.122 (72.169.156.122) Transmission Control Protocol, Src Port: http (80), Dst Port: 23230 (23230), Seq: 0, Ack: 0, Len: 0 No. Time Source Destination Protocol Info 195 51.650489 192.168.1.20 83.138.190.203 TCP vsat-control > http [ACK] Seq=1 Ack=1 Win=65535 Len=0 Frame 195 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Intel_a6:bb:04 (00:d0:b7:a6:bb:04), Dst: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: 83.138.190.203 (83.138.190.203) Transmission Control Protocol, Src Port: vsat-control (1880), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 196 51.651024 192.168.1.20 83.138.190.203 HTTP GET /site_report?url=http://www.rocknyou.c [Packet size limited during capture] Frame 196 (728 bytes on wire, 96 bytes captured) Ethernet II, Src: Intel_a6:bb:04 (00:d0:b7:a6:bb:04), Dst: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: 83.138.190.203 (83.138.190.203) Transmission Control Protocol, Src Port: vsat-control (1880), Dst Port: http (80), Seq: 1, Ack: 1, Len: 674 Hypertext Transfer Protocol [Packet size limited during capture: HTTP truncated] No. Time Source Destination Protocol Info 197 51.753050 83.138.190.203 72.169.156.122 TCP http > 23230 [ACK] Seq=1 Ack=674 Win=8192 Len=0 Frame 197 (64 bytes on wire, 64 bytes captured) Ethernet II, Src: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a), Dst: Intel_a6:bb:04 (00:d0:b7:a6:bb:04) Internet Protocol, Src: 83.138.190.203 (83.138.190.203), Dst: 72.169.156.122 (72.169.156.122) Transmission Control Protocol, Src Port: http (80), Dst Port: 23230 (23230), Seq: 1, Ack: 674, Len: 0 No. Time Source Destination Protocol Info 198 51.882510 72.169.156.121 72.169.156.122 DNS Standard query response[Packet size limited during capture] Frame 198 (122 bytes on wire, 96 bytes captured) Ethernet II, Src: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a), Dst: Intel_a6:bb:04 (00:d0:b7:a6:bb:04) Internet Protocol, Src: 72.169.156.121 (72.169.156.121), Dst: 72.169.156.122 (72.169.156.122) User Datagram Protocol, Src Port: domain (53), Dst Port: bootclient (2017) Domain Name System (response) [Packet size limited during capture: DNS truncated] No. Time Source Destination Protocol Info 199 51.882889 72.169.156.122 72.169.156.121 ICMP Destination unreachable (Port unreachable)[Packet size limited during capture] Frame 199 (150 bytes on wire, 96 bytes captured) Ethernet II, Src: Intel_a6:bb:04 (00:d0:b7:a6:bb:04), Dst: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a) Internet Protocol, Src: 72.169.156.122 (72.169.156.122), Dst: 72.169.156.121 (72.169.156.121) Internet Control Message Protocol [Packet size limited during capture: IP truncated] No. Time Source Destination Protocol Info 200 52.292437 72.169.156.121 72.169.156.122 DNS Standard query response[Packet size limited during capture] Frame 200 (111 bytes on wire, 96 bytes captured) Ethernet II, Src: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a), Dst: Intel_a6:bb:04 (00:d0:b7:a6:bb:04) Internet Protocol, Src: 72.169.156.121 (72.169.156.121), Dst: 72.169.156.122 (72.169.156.122) User Datagram Protocol, Src Port: domain (53), Dst Port: rellpack (2018) Domain Name System (response) [Packet size limited during capture: DNS truncated] No. Time Source Destination Protocol Info 201 52.292895 72.169.156.122 72.169.156.121 ICMP Destination unreachable (Port unreachable)[Packet size limited during capture] Frame 201 (139 bytes on wire, 96 bytes captured) Ethernet II, Src: Intel_a6:bb:04 (00:d0:b7:a6:bb:04), Dst: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a) Internet Protocol, Src: 72.169.156.122 (72.169.156.122), Dst: 72.169.156.121 (72.169.156.121) Internet Control Message Protocol [Packet size limited during capture: IP truncated] No. Time Source Destination Protocol Info 202 53.168141 192.168.1.52 64.233.179.9 DNS Standard query A sb.l.google.com Frame 202 (86 bytes on wire, 86 bytes captured) Ethernet II, Src: Intel_a6:bb:04 (00:d0:b7:a6:bb:04), Dst: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a) Internet Protocol, Src: 192.168.1.52 (192.168.1.52), Dst: 64.233.179.9 (64.233.179.9) User Datagram Protocol, Src Port: 32876 (32876), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Info 203 53.302397 72.169.156.121 72.169.156.122 DNS Standard query response[Packet size limited during capture] Frame 203 (111 bytes on wire, 96 bytes captured) Ethernet II, Src: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a), Dst: Intel_a6:bb:04 (00:d0:b7:a6:bb:04) Internet Protocol, Src: 72.169.156.121 (72.169.156.121), Dst: 72.169.156.122 (72.169.156.122) User Datagram Protocol, Src Port: domain (53), Dst Port: raid-cs (2015) Domain Name System (response) [Packet size limited during capture: DNS truncated] No. Time Source Destination Protocol Info 204 53.302775 72.169.156.122 72.169.156.121 ICMP Destination unreachable (Port unreachable)[Packet size limited during capture] Frame 204 (139 bytes on wire, 96 bytes captured) Ethernet II, Src: Intel_a6:bb:04 (00:d0:b7:a6:bb:04), Dst: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a) Internet Protocol, Src: 72.169.156.122 (72.169.156.122), Dst: 72.169.156.121 (72.169.156.121) Internet Control Message Protocol [Packet size limited during capture: IP truncated] No. Time Source Destination Protocol Info 205 53.313593 72.169.156.121 72.169.156.122 DNS Standard query response[Packet size limited during capture] Frame 205 (122 bytes on wire, 96 bytes captured) Ethernet II, Src: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a), Dst: Intel_a6:bb:04 (00:d0:b7:a6:bb:04) Internet Protocol, Src: 72.169.156.121 (72.169.156.121), Dst: 72.169.156.122 (72.169.156.122) User Datagram Protocol, Src Port: domain (53), Dst Port: about (2019) Domain Name System (response) [Packet size limited during capture: DNS truncated] No. Time Source Destination Protocol Info 206 53.313916 72.169.156.122 72.169.156.121 ICMP Destination unreachable (Port unreachable)[Packet size limited during capture] Frame 206 (150 bytes on wire, 96 bytes captured) Ethernet II, Src: Intel_a6:bb:04 (00:d0:b7:a6:bb:04), Dst: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a) Internet Protocol, Src: 72.169.156.122 (72.169.156.122), Dst: 72.169.156.121 (72.169.156.121) Internet Control Message Protocol [Packet size limited during capture: IP truncated] No. Time Source Destination Protocol Info 207 53.972359 72.169.156.121 72.169.156.122 DNS Standard query response[Packet size limited during capture] Frame 207 (122 bytes on wire, 96 bytes captured) Ethernet II, Src: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a), Dst: Intel_a6:bb:04 (00:d0:b7:a6:bb:04) Internet Protocol, Src: 72.169.156.121 (72.169.156.121), Dst: 72.169.156.122 (72.169.156.122) User Datagram Protocol, Src Port: domain (53), Dst Port: emce (2004) Domain Name System (response) [Packet size limited during capture: DNS truncated] No. Time Source Destination Protocol Info 208 53.972751 72.169.156.122 72.169.156.121 ICMP Destination unreachable (Port unreachable)[Packet size limited during capture] Frame 208 (150 bytes on wire, 96 bytes captured) Ethernet II, Src: Intel_a6:bb:04 (00:d0:b7:a6:bb:04), Dst: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a) Internet Protocol, Src: 72.169.156.122 (72.169.156.122), Dst: 72.169.156.121 (72.169.156.121) Internet Control Message Protocol [Packet size limited during capture: IP truncated] No. Time Source Destination Protocol Info 209 53.992561 64.233.179.9 72.169.156.122 DNS Standard query response A 209.85.135.136 Frame 209 (91 bytes on wire, 91 bytes captured) Ethernet II, Src: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a), Dst: Intel_a6:bb:04 (00:d0:b7:a6:bb:04) Internet Protocol, Src: 64.233.179.9 (64.233.179.9), Dst: 72.169.156.122 (72.169.156.122) User Datagram Protocol, Src Port: domain (53), Dst Port: 11604 (11604) Domain Name System (response) No. Time Source Destination Protocol Info 210 53.994612 192.168.1.20 209.85.135.136 TCP ibm-mqseries2 > http [SYN] Seq=0 Win=65535 Len=0 MSS=1460 Frame 210 (62 bytes on wire, 62 bytes captured) Ethernet II, Src: Intel_a6:bb:04 (00:d0:b7:a6:bb:04), Dst: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: 209.85.135.136 (209.85.135.136) Transmission Control Protocol, Src Port: ibm-mqseries2 (1881), Dst Port: http (80), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 211 53.996267 209.85.135.136 72.169.156.122 TCP http > 23231 [SYN, ACK] Seq=0 Ack=0 Win=8192 Len=0 MSS=1460 Frame 211 (64 bytes on wire, 64 bytes captured) Ethernet II, Src: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a), Dst: Intel_a6:bb:04 (00:d0:b7:a6:bb:04) Internet Protocol, Src: 209.85.135.136 (209.85.135.136), Dst: 72.169.156.122 (72.169.156.122) Transmission Control Protocol, Src Port: http (80), Dst Port: 23231 (23231), Seq: 0, Ack: 0, Len: 0 No. Time Source Destination Protocol Info 212 53.996581 192.168.1.20 209.85.135.136 TCP ibm-mqseries2 > http [ACK] Seq=1 Ack=1 Win=65535 Len=0 Frame 212 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Intel_a6:bb:04 (00:d0:b7:a6:bb:04), Dst: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: 209.85.135.136 (209.85.135.136) Transmission Control Protocol, Src Port: ibm-mqseries2 (1881), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 213 53.997152 192.168.1.20 209.85.135.136 HTTP GET /safebrowsing/update?client=navclient- [Packet size limited during capture] Frame 213 (858 bytes on wire, 96 bytes captured) Ethernet II, Src: Intel_a6:bb:04 (00:d0:b7:a6:bb:04), Dst: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: 209.85.135.136 (209.85.135.136) Transmission Control Protocol, Src Port: ibm-mqseries2 (1881), Dst Port: http (80), Seq: 1, Ack: 1, Len: 804 Hypertext Transfer Protocol [Packet size limited during capture: HTTP truncated] No. Time Source Destination Protocol Info 214 54.092336 209.85.135.136 72.169.156.122 TCP http > 23231 [ACK] Seq=1 Ack=804 Win=8192 Len=0 Frame 214 (64 bytes on wire, 64 bytes captured) Ethernet II, Src: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a), Dst: Intel_a6:bb:04 (00:d0:b7:a6:bb:04) Internet Protocol, Src: 209.85.135.136 (209.85.135.136), Dst: 72.169.156.122 (72.169.156.122) Transmission Control Protocol, Src Port: http (80), Dst Port: 23231 (23231), Seq: 1, Ack: 804, Len: 0 No. Time Source Destination Protocol Info 215 54.242631 72.169.156.121 72.169.156.122 DNS Standard query response[Packet size limited during capture] Frame 215 (111 bytes on wire, 96 bytes captured) Ethernet II, Src: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a), Dst: Intel_a6:bb:04 (00:d0:b7:a6:bb:04) Internet Protocol, Src: 72.169.156.121 (72.169.156.121), Dst: 72.169.156.122 (72.169.156.122) User Datagram Protocol, Src Port: domain (53), Dst Port: wizard (2001) Domain Name System (response) [Packet size limited during capture: DNS truncated] No. Time Source Destination Protocol Info 216 54.242992 72.169.156.122 72.169.156.121 ICMP Destination unreachable (Port unreachable)[Packet size limited during capture] Frame 216 (139 bytes on wire, 96 bytes captured) Ethernet II, Src: Intel_a6:bb:04 (00:d0:b7:a6:bb:04), Dst: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a) Internet Protocol, Src: 72.169.156.122 (72.169.156.122), Dst: 72.169.156.121 (72.169.156.121) Internet Control Message Protocol [Packet size limited during capture: IP truncated] No. Time Source Destination Protocol Info 217 55.342315 72.169.156.121 72.169.156.122 DNS Standard query response[Packet size limited during capture] Frame 217 (111 bytes on wire, 96 bytes captured) Ethernet II, Src: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a), Dst: Intel_a6:bb:04 (00:d0:b7:a6:bb:04) Internet Protocol, Src: 72.169.156.121 (72.169.156.121), Dst: 72.169.156.122 (72.169.156.122) User Datagram Protocol, Src Port: domain (53), Dst Port: raid-ac (2012) Domain Name System (response) [Packet size limited during capture: DNS truncated] No. Time Source Destination Protocol Info 218 55.342717 72.169.156.122 72.169.156.121 ICMP Destination unreachable (Port unreachable)[Packet size limited during capture] Frame 218 (139 bytes on wire, 96 bytes captured) Ethernet II, Src: Intel_a6:bb:04 (00:d0:b7:a6:bb:04), Dst: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a) Internet Protocol, Src: 72.169.156.122 (72.169.156.122), Dst: 72.169.156.121 (72.169.156.121) Internet Control Message Protocol [Packet size limited during capture: IP truncated] No. Time Source Destination Protocol Info 219 55.352865 72.169.156.121 72.169.156.122 DNS Standard query response[Packet size limited during capture] Frame 219 (111 bytes on wire, 96 bytes captured) Ethernet II, Src: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a), Dst: Intel_a6:bb:04 (00:d0:b7:a6:bb:04) Internet Protocol, Src: 72.169.156.121 (72.169.156.121), Dst: 72.169.156.122 (72.169.156.122) User Datagram Protocol, Src Port: domain (53), Dst Port: raid-cd (2006) Domain Name System (response) [Packet size limited during capture: DNS truncated] No. Time Source Destination Protocol Info 220 55.353181 72.169.156.122 72.169.156.121 ICMP Destination unreachable (Port unreachable)[Packet size limited during capture] Frame 220 (139 bytes on wire, 96 bytes captured) Ethernet II, Src: Intel_a6:bb:04 (00:d0:b7:a6:bb:04), Dst: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a) Internet Protocol, Src: 72.169.156.122 (72.169.156.122), Dst: 72.169.156.121 (72.169.156.121) Internet Control Message Protocol [Packet size limited during capture: IP truncated] No. Time Source Destination Protocol Info 221 55.702595 83.138.189.101 72.169.156.122 TCP http > 23229 [FIN, ACK] Seq=641 Ack=489 Win=8192 Len=0 Frame 221 (64 bytes on wire, 64 bytes captured) Ethernet II, Src: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a), Dst: Intel_a6:bb:04 (00:d0:b7:a6:bb:04) Internet Protocol, Src: 83.138.189.101 (83.138.189.101), Dst: 72.169.156.122 (72.169.156.122) Transmission Control Protocol, Src Port: http (80), Dst Port: 23229 (23229), Seq: 641, Ack: 489, Len: 0 No. Time Source Destination Protocol Info 222 55.702868 192.168.1.20 83.138.189.101 TCP nettgain-nms > http [ACK] Seq=490 Ack=642 Win=64895 Len=0 Frame 222 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Intel_a6:bb:04 (00:d0:b7:a6:bb:04), Dst: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: 83.138.189.101 (83.138.189.101) Transmission Control Protocol, Src Port: nettgain-nms (1879), Dst Port: http (80), Seq: 490, Ack: 642, Len: 0 No. Time Source Destination Protocol Info 223 55.927018 209.85.135.136 72.169.156.122 HTTP HTTP/1.1 200 OK [Packet size limited during capture] Frame 223 (277 bytes on wire, 96 bytes captured) Ethernet II, Src: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a), Dst: Intel_a6:bb:04 (00:d0:b7:a6:bb:04) Internet Protocol, Src: 209.85.135.136 (209.85.135.136), Dst: 72.169.156.122 (72.169.156.122) Transmission Control Protocol, Src Port: http (80), Dst Port: 23231 (23231), Seq: 1, Ack: 804, Len: 223 Hypertext Transfer Protocol [Packet size limited during capture: HTTP truncated] No. Time Source Destination Protocol Info 224 56.102125 192.168.1.20 209.85.135.136 TCP ibm-mqseries2 > http [ACK] Seq=805 Ack=224 Win=65312 Len=0 Frame 224 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Intel_a6:bb:04 (00:d0:b7:a6:bb:04), Dst: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: 209.85.135.136 (209.85.135.136) Transmission Control Protocol, Src Port: ibm-mqseries2 (1881), Dst Port: http (80), Seq: 805, Ack: 224, Len: 0 No. Time Source Destination Protocol Info 225 56.549076 Intel_a6:bb:04 HughesNe_b1:d4:3a ARP Who has 72.169.156.121? Tell 72.169.156.122 Frame 225 (42 bytes on wire, 42 bytes captured) Ethernet II, Src: Intel_a6:bb:04 (00:d0:b7:a6:bb:04), Dst: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 226 56.549636 HughesNe_b1:d4:3a Intel_a6:bb:04 ARP 72.169.156.121 is at 00:80:ae:b1:d4:3a Frame 226 (64 bytes on wire, 64 bytes captured) Ethernet II, Src: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a), Dst: Intel_a6:bb:04 (00:d0:b7:a6:bb:04) Address Resolution Protocol (reply) No. Time Source Destination Protocol Info 227 56.739182 192.168.1.20 83.138.189.101 TCP nettgain-nms > http [FIN, ACK] Seq=490 Ack=642 Win=64895 Len=0 Frame 227 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Intel_a6:bb:04 (00:d0:b7:a6:bb:04), Dst: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: 83.138.189.101 (83.138.189.101) Transmission Control Protocol, Src Port: nettgain-nms (1879), Dst Port: http (80), Seq: 490, Ack: 642, Len: 0 No. Time Source Destination Protocol Info 228 56.740833 83.138.189.101 72.169.156.122 TCP http > 23229 [ACK] Seq=642 Ack=490 Win=8192 Len=0 Frame 228 (64 bytes on wire, 64 bytes captured) Ethernet II, Src: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a), Dst: Intel_a6:bb:04 (00:d0:b7:a6:bb:04) Internet Protocol, Src: 83.138.189.101 (83.138.189.101), Dst: 72.169.156.122 (72.169.156.122) Transmission Control Protocol, Src Port: http (80), Dst Port: 23229 (23229), Seq: 642, Ack: 490, Len: 0 No. Time Source Destination Protocol Info 229 57.422373 72.169.156.121 72.169.156.122 DNS Standard query response[Packet size limited during capture] Frame 229 (111 bytes on wire, 96 bytes captured) Ethernet II, Src: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a), Dst: Intel_a6:bb:04 (00:d0:b7:a6:bb:04) Internet Protocol, Src: 72.169.156.121 (72.169.156.121), Dst: 72.169.156.122 (72.169.156.122) User Datagram Protocol, Src Port: domain (53), Dst Port: terminaldb (2008) Domain Name System (response) [Packet size limited during capture: DNS truncated] No. Time Source Destination Protocol Info 230 57.422849 72.169.156.122 72.169.156.121 ICMP Destination unreachable (Port unreachable)[Packet size limited during capture] Frame 230 (139 bytes on wire, 96 bytes captured) Ethernet II, Src: Intel_a6:bb:04 (00:d0:b7:a6:bb:04), Dst: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a) Internet Protocol, Src: 72.169.156.122 (72.169.156.122), Dst: 72.169.156.121 (72.169.156.121) Internet Control Message Protocol [Packet size limited during capture: IP truncated] No. Time Source Destination Protocol Info 231 57.536738 192.168.1.52 192.203.230.10 DNS Standard query PTR 9.179.233.64.in-addr.arpa Frame 231 (96 bytes on wire, 96 bytes captured) Ethernet II, Src: Intel_a6:bb:04 (00:d0:b7:a6:bb:04), Dst: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a) Internet Protocol, Src: 192.168.1.52 (192.168.1.52), Dst: 192.203.230.10 (192.203.230.10) User Datagram Protocol, Src Port: 32876 (32876), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Info 232 57.537106 192.168.1.52 192.203.230.10 DNS Standard query PTR 136.135.85.209.in-addr.arpa[Packet size limited during capture] Frame 232 (98 bytes on wire, 96 bytes captured) Ethernet II, Src: Intel_a6:bb:04 (00:d0:b7:a6:bb:04), Dst: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a) Internet Protocol, Src: 192.168.1.52 (192.168.1.52), Dst: 192.203.230.10 (192.203.230.10) User Datagram Protocol, Src Port: 32876 (32876), Dst Port: domain (53) Domain Name System (query) [Packet size limited during capture: DNS truncated] No. Time Source Destination Protocol Info 233 58.242859 192.203.230.10 72.169.156.122 DNS Standard query response[Packet size limited during capture] Frame 233 (265 bytes on wire, 96 bytes captured) Ethernet II, Src: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a), Dst: Intel_a6:bb:04 (00:d0:b7:a6:bb:04) Internet Protocol, Src: 192.203.230.10 (192.203.230.10), Dst: 72.169.156.122 (72.169.156.122) User Datagram Protocol, Src Port: domain (53), Dst Port: 11583 (11583) Domain Name System (response) [Packet size limited during capture: DNS truncated] No. Time Source Destination Protocol Info 234 58.452318 192.203.230.10 72.169.156.122 DNS Standard query response[Packet size limited during capture] Frame 234 (244 bytes on wire, 96 bytes captured) Ethernet II, Src: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a), Dst: Intel_a6:bb:04 (00:d0:b7:a6:bb:04) Internet Protocol, Src: 192.203.230.10 (192.203.230.10), Dst: 72.169.156.122 (72.169.156.122) User Datagram Protocol, Src Port: domain (53), Dst Port: 11583 (11583) Domain Name System (response) [Packet size limited during capture: DNS truncated] No. Time Source Destination Protocol Info 235 58.453303 192.168.1.52 216.239.36.10 DNS Standard query PTR 136.135.85.209.in-addr.arpa[Packet size limited during capture] Frame 235 (98 bytes on wire, 96 bytes captured) Ethernet II, Src: Intel_a6:bb:04 (00:d0:b7:a6:bb:04), Dst: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a) Internet Protocol, Src: 192.168.1.52 (192.168.1.52), Dst: 216.239.36.10 (216.239.36.10) User Datagram Protocol, Src Port: 32876 (32876), Dst Port: domain (53) Domain Name System (query) [Packet size limited during capture: DNS truncated] No. Time Source Destination Protocol Info 236 59.262026 216.239.36.10 72.169.156.122 DNS Standard query response[Packet size limited during capture] Frame 236 (269 bytes on wire, 96 bytes captured) Ethernet II, Src: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a), Dst: Intel_a6:bb:04 (00:d0:b7:a6:bb:04) Internet Protocol, Src: 216.239.36.10 (216.239.36.10), Dst: 72.169.156.122 (72.169.156.122) User Datagram Protocol, Src Port: domain (53), Dst Port: 11598 (11598) Domain Name System (response) [Packet size limited during capture: DNS truncated] No. Time Source Destination Protocol Info 237 59.461851 72.169.156.121 72.169.156.122 DNS Standard query response[Packet size limited during capture] Frame 237 (111 bytes on wire, 96 bytes captured) Ethernet II, Src: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a), Dst: Intel_a6:bb:04 (00:d0:b7:a6:bb:04) Internet Protocol, Src: 72.169.156.121 (72.169.156.121), Dst: 72.169.156.122 (72.169.156.122) User Datagram Protocol, Src Port: domain (53), Dst Port: raid-am (2007) Domain Name System (response) [Packet size limited during capture: DNS truncated] No. Time Source Destination Protocol Info 238 59.462284 72.169.156.122 72.169.156.121 ICMP Destination unreachable (Port unreachable)[Packet size limited during capture] Frame 238 (139 bytes on wire, 96 bytes captured) Ethernet II, Src: Intel_a6:bb:04 (00:d0:b7:a6:bb:04), Dst: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a) Internet Protocol, Src: 72.169.156.122 (72.169.156.122), Dst: 72.169.156.121 (72.169.156.121) Internet Control Message Protocol [Packet size limited during capture: IP truncated] No. Time Source Destination Protocol Info 239 59.471614 72.169.156.121 72.169.156.122 DNS Standard query response[Packet size limited during capture] Frame 239 (122 bytes on wire, 96 bytes captured) Ethernet II, Src: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a), Dst: Intel_a6:bb:04 (00:d0:b7:a6:bb:04) Internet Protocol, Src: 72.169.156.121 (72.169.156.121), Dst: 72.169.156.122 (72.169.156.122) User Datagram Protocol, Src Port: domain (53), Dst Port: bootserver (2016) Domain Name System (response) [Packet size limited during capture: DNS truncated] No. Time Source Destination Protocol Info 240 59.471954 72.169.156.122 72.169.156.121 ICMP Destination unreachable (Port unreachable)[Packet size limited during capture] Frame 240 (150 bytes on wire, 96 bytes captured) Ethernet II, Src: Intel_a6:bb:04 (00:d0:b7:a6:bb:04), Dst: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a) Internet Protocol, Src: 72.169.156.122 (72.169.156.122), Dst: 72.169.156.121 (72.169.156.121) Internet Control Message Protocol [Packet size limited during capture: IP truncated] No. Time Source Destination Protocol Info 241 60.921159 209.85.135.136 72.169.156.122 TCP http > 23231 [FIN, ACK] Seq=224 Ack=804 Win=8192 Len=0 Frame 241 (64 bytes on wire, 64 bytes captured) Ethernet II, Src: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a), Dst: Intel_a6:bb:04 (00:d0:b7:a6:bb:04) Internet Protocol, Src: 209.85.135.136 (209.85.135.136), Dst: 72.169.156.122 (72.169.156.122) Transmission Control Protocol, Src Port: http (80), Dst Port: 23231 (23231), Seq: 224, Ack: 804, Len: 0 No. Time Source Destination Protocol Info 242 60.921564 192.168.1.20 209.85.135.136 TCP ibm-mqseries2 > http [ACK] Seq=805 Ack=225 Win=65312 Len=0 Frame 242 (54 bytes on wire, 54 bytes captured) Ethernet II, Src: Intel_a6:bb:04 (00:d0:b7:a6:bb:04), Dst: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a) Internet Protocol, Src: 192.168.1.20 (192.168.1.20), Dst: 209.85.135.136 (209.85.135.136) Transmission Control Protocol, Src Port: ibm-mqseries2 (1881), Dst Port: http (80), Seq: 805, Ack: 225, Len: 0 No. Time Source Destination Protocol Info 243 61.351603 72.169.156.121 72.169.156.122 DNS Standard query response[Packet size limited during capture] Frame 243 (111 bytes on wire, 96 bytes captured) Ethernet II, Src: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a), Dst: Intel_a6:bb:04 (00:d0:b7:a6:bb:04) Internet Protocol, Src: 72.169.156.121 (72.169.156.121), Dst: 72.169.156.122 (72.169.156.122) User Datagram Protocol, Src Port: domain (53), Dst Port: globe (2002) Domain Name System (response) [Packet size limited during capture: DNS truncated] No. Time Source Destination Protocol Info 244 61.352031 72.169.156.122 72.169.156.121 ICMP Destination unreachable (Port unreachable)[Packet size limited during capture] Frame 244 (139 bytes on wire, 96 bytes captured) Ethernet II, Src: Intel_a6:bb:04 (00:d0:b7:a6:bb:04), Dst: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a) Internet Protocol, Src: 72.169.156.122 (72.169.156.122), Dst: 72.169.156.121 (72.169.156.121) Internet Control Message Protocol [Packet size limited during capture: IP truncated] No. Time Source Destination Protocol Info 245 61.361436 72.169.156.121 72.169.156.122 DNS Standard query response[Packet size limited during capture] Frame 245 (126 bytes on wire, 96 bytes captured) Ethernet II, Src: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a), Dst: Intel_a6:bb:04 (00:d0:b7:a6:bb:04) Internet Protocol, Src: 72.169.156.121 (72.169.156.121), Dst: 72.169.156.122 (72.169.156.122) User Datagram Protocol, Src Port: domain (53), Dst Port: raid-cd (2013) Domain Name System (response) [Packet size limited during capture: DNS truncated] No. Time Source Destination Protocol Info 246 61.361771 72.169.156.122 72.169.156.121 ICMP Destination unreachable (Port unreachable)[Packet size limited during capture] Frame 246 (154 bytes on wire, 96 bytes captured) Ethernet II, Src: Intel_a6:bb:04 (00:d0:b7:a6:bb:04), Dst: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a) Internet Protocol, Src: 72.169.156.122 (72.169.156.122), Dst: 72.169.156.121 (72.169.156.121) Internet Control Message Protocol [Packet size limited during capture: IP truncated] No. Time Source Destination Protocol Info 247 61.381786 72.169.156.121 72.169.156.122 DNS Standard query response[Packet size limited during capture] Frame 247 (122 bytes on wire, 96 bytes captured) Ethernet II, Src: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a), Dst: Intel_a6:bb:04 (00:d0:b7:a6:bb:04) Internet Protocol, Src: 72.169.156.121 (72.169.156.121), Dst: 72.169.156.122 (72.169.156.122) User Datagram Protocol, Src Port: domain (53), Dst Port: servserv (2011) Domain Name System (response) [Packet size limited during capture: DNS truncated] No. Time Source Destination Protocol Info 248 61.382100 72.169.156.122 72.169.156.121 ICMP Destination unreachable (Port unreachable)[Packet size limited during capture] Frame 248 (150 bytes on wire, 96 bytes captured) Ethernet II, Src: Intel_a6:bb:04 (00:d0:b7:a6:bb:04), Dst: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a) Internet Protocol, Src: 72.169.156.122 (72.169.156.122), Dst: 72.169.156.121 (72.169.156.121) Internet Control Message Protocol [Packet size limited during capture: IP truncated] No. Time Source Destination Protocol Info 249 63.311326 72.169.156.121 72.169.156.122 DNS Standard query response[Packet size limited during capture] Frame 249 (126 bytes on wire, 96 bytes captured) Ethernet II, Src: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a), Dst: Intel_a6:bb:04 (00:d0:b7:a6:bb:04) Internet Protocol, Src: 72.169.156.121 (72.169.156.121), Dst: 72.169.156.122 (72.169.156.122) User Datagram Protocol, Src Port: domain (53), Dst Port: oracle (2005) Domain Name System (response) [Packet size limited during capture: DNS truncated] No. Time Source Destination Protocol Info 250 63.311777 72.169.156.122 72.169.156.121 ICMP Destination unreachable (Port unreachable)[Packet size limited during capture] Frame 250 (154 bytes on wire, 96 bytes captured) Ethernet II, Src: Intel_a6:bb:04 (00:d0:b7:a6:bb:04), Dst: HughesNe_b1:d4:3a (00:80:ae:b1:d4:3a) Internet Protocol, Src: 72.169.156.122 (72.169.156.122), Dst: 72.169.156.121 (72.169.156.121) Internet Control Message Protocol [Packet size limited during capture: IP truncated]
On Tue, Aug 19, 2008 at 2:47 PM, Joe Blanchard <joe@sumless.net> wrote:
Hughes Net DNS issue. I am 72.169.156.122. Notice the Source is port 53, destination is 20xx. Because I am not a large company like McDonalds this apparently cannot be resolved.
wow that was a lot of really hard to read packet capture.. .maybe next time just use tcpdump?? What exactly is the problem you are seeing and one assumes you called your ISP for an attempted resolution? It seems like your 122 host is spending a goodly amount of time making DNS requests to .121, is .121 your default-gw + dns-server + dhcp-server ? (and thus supposed to be getting this traffic?) -Chris
participants (2)
-
Christopher Morrow -
Joe Blanchard