0000 c8 69 cd 98 b4 b0 00 1a dd 31 82 60 08 00 45 00 .i.......1.`..E. 0010 00 a4 6f b6 00 00 73 11 b2 c6 08 08 08 08 c0 a8 ..o...s......... 0020 54 14 00 35 f4 82 00 90 03 ab 48 33 81 80 00 01 T..5......H3.... 0030 00 03 00 00 00 00 02 78 70 0c 69 74 75 6e 65 73 .......xp.itunes 0040 2d 61 70 70 6c 65 03 63 6f 6d 06 61 6b 61 64 6e -apple.com.akadn 0050 73 03 6e 65 74 00 00 01 00 01 c0 0c 00 05 00 01 s.net........... 0060 00 00 01 2b 00 17 02 78 70 05 61 70 70 6c 65 03 ...+...xp.apple. 0070 63 6f 6d 07 65 64 67 65 6b 65 79 c0 27 c0 3c 00 com.edgekey.'.<. 0080 05 00 01 00 00 09 59 00 19 06 65 31 37 34 33 37 ......Y...e17437 0090 04 64 73 63 62 0a 61 6b 61 6d 61 69 65 64 67 65 .dscb.akamaiedge 00a0 c0 27 c0 5f 00 01 00 01 00 00 00 13 00 04 b8 1b .'._............ 00b0 1c 49 .I No. Time Source Destination Protocol Length Info 1 0.000000 192.168.84.20 8.8.8.8 DNS 90 Standard query 0x4833 A xp.itunes-apple.com.akadns.net Frame 1: 90 bytes on wire (720 bits), 90 bytes captured (720 bits) Encapsulation type: Ethernet (1) Arrival Time: Jan 17, 2020 07:18:53.955180000 PST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1579274333.955180000 seconds [Time delta from previous captured frame: 0.000000000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 0.000000000 seconds] Frame Number: 1 Frame Length: 90 bytes (720 bits) Capture Length: 90 bytes (720 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:udp:dns] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Ethernet II, Src: Apple_98:b4:b0 (c8:69:cd:98:b4:b0), Dst: PePWave_31:82:60 (00:1a:dd:31:82:60) Destination: PePWave_31:82:60 (00:1a:dd:31:82:60) Address: PePWave_31:82:60 (00:1a:dd:31:82:60) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Apple_98:b4:b0 (c8:69:cd:98:b4:b0) Address: Apple_98:b4:b0 (c8:69:cd:98:b4:b0) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.84.20, Dst: 8.8.8.8 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 76 Identification: 0xe0b2 (57522) Flags: 0x0000 0... .... .... .... = Reserved bit: Not set .0.. .... .... .... = Don't fragment: Not set ..0. .... .... .... = More fragments: Not set ...0 0000 0000 0000 = Fragment offset: 0 Time to live: 255 Protocol: UDP (17) Header checksum: 0xb621 [validation disabled] [Header checksum status: Unverified] Source: 192.168.84.20 Destination: 8.8.8.8 User Datagram Protocol, Src Port: 62594, Dst Port: 53 Source Port: 62594 Destination Port: 53 Length: 56 Checksum: 0x3d47 [unverified] [Checksum Status: Unverified] [Stream index: 0] [Timestamps] [Time since first frame: 0.000000000 seconds] [Time since previous frame: 0.000000000 seconds] Domain Name System (query) Transaction ID: 0x4833 Flags: 0x0100 Standard query 0... .... .... .... = Response: Message is a query .000 0... .... .... = Opcode: Standard query (0) .... ..0. .... .... = Truncated: Message is not truncated .... ...1 .... .... = Recursion desired: Do query recursively .... .... .0.. .... = Z: reserved (0) .... .... ...0 .... = Non-authenticated data: Unacceptable Questions: 1 Answer RRs: 0 Authority RRs: 0 Additional RRs: 0 Queries xp.itunes-apple.com.akadns.net: type A, class IN Name: xp.itunes-apple.com.akadns.net [Name Length: 30] [Label Count: 5] Type: A (Host Address) (1) Class: IN (0x0001) [Response In: 2] 0000 00 1a dd 31 82 60 c8 69 cd 98 b4 b0 08 00 45 00 ...1.`.i......E. 0010 00 4c e0 b2 00 00 ff 11 b6 21 c0 a8 54 14 08 08 .L.......!..T... 0020 08 08 f4 82 00 35 00 38 3d 47 48 33 01 00 00 01 .....5.8=GH3.... 0030 00 00 00 00 00 00 02 78 70 0c 69 74 75 6e 65 73 .......xp.itunes 0040 2d 61 70 70 6c 65 03 63 6f 6d 06 61 6b 61 64 6e -apple.com.akadn 0050 73 03 6e 65 74 00 00 01 00 01 s.net..... No. Time Source Destination Protocol Length Info 2 0.047126 8.8.8.8 192.168.84.20 DNS 178 Standard query response 0x4833 A xp.itunes-apple.com.akadns.net CNAME xp.apple.com.edgekey.net CNAME e17437.dscb.akamaiedge.net A 184.27.28.73 Frame 2: 178 bytes on wire (1424 bits), 178 bytes captured (1424 bits) Encapsulation type: Ethernet (1) Arrival Time: Jan 17, 2020 07:18:54.002306000 PST [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1579274334.002306000 seconds [Time delta from previous captured frame: 0.047126000 seconds] [Time delta from previous displayed frame: 0.047126000 seconds] [Time since reference or first frame: 0.047126000 seconds] Frame Number: 2 Frame Length: 178 bytes (1424 bits) Capture Length: 178 bytes (1424 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:udp:dns] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Ethernet II, Src: PePWave_31:82:60 (00:1a:dd:31:82:60), Dst: Apple_98:b4:b0 (c8:69:cd:98:b4:b0) Destination: Apple_98:b4:b0 (c8:69:cd:98:b4:b0) Address: Apple_98:b4:b0 (c8:69:cd:98:b4:b0) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: PePWave_31:82:60 (00:1a:dd:31:82:60) Address: PePWave_31:82:60 (00:1a:dd:31:82:60) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) Internet Protocol Version 4, Src: 8.8.8.8, Dst: 192.168.84.20 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 164 Identification: 0x6fb6 (28598) Flags: 0x0000 0... .... .... .... = Reserved bit: Not set .0.. .... .... .... = Don't fragment: Not set ..0. .... .... .... = More fragments: Not set ...0 0000 0000 0000 = Fragment offset: 0 Time to live: 115 Protocol: UDP (17) Header checksum: 0xb2c6 [validation disabled] [Header checksum status: Unverified] Source: 8.8.8.8 Destination: 192.168.84.20 User Datagram Protocol, Src Port: 53, Dst Port: 62594 Source Port: 53 Destination Port: 62594 Length: 144 Checksum: 0x03ab [unverified] [Checksum Status: Unverified] [Stream index: 0] [Timestamps] [Time since first frame: 0.047126000 seconds] [Time since previous frame: 0.047126000 seconds] Domain Name System (response) Transaction ID: 0x4833 Flags: 0x8180 Standard query response, No error 1... .... .... .... = Response: Message is a response .000 0... .... .... = Opcode: Standard query (0) .... .0.. .... .... = Authoritative: Server is not an authority for domain .... ..0. .... .... = Truncated: Message is not truncated .... ...1 .... .... = Recursion desired: Do query recursively .... .... 1... .... = Recursion available: Server can do recursive queries .... .... .0.. .... = Z: reserved (0) .... .... ..0. .... = Answer authenticated: Answer/authority portion was not authenticated by the server .... .... ...0 .... = Non-authenticated data: Unacceptable .... .... .... 0000 = Reply code: No error (0) Questions: 1 Answer RRs: 3 Authority RRs: 0 Additional RRs: 0 Queries xp.itunes-apple.com.akadns.net: type A, class IN Name: xp.itunes-apple.com.akadns.net [Name Length: 30] [Label Count: 5] Type: A (Host Address) (1) Class: IN (0x0001) Answers xp.itunes-apple.com.akadns.net: type CNAME, class IN, cname xp.apple.com.edgekey.net Name: xp.itunes-apple.com.akadns.net Type: CNAME (Canonical NAME for an alias) (5) Class: IN (0x0001) Time to live: 299 (4 minutes, 59 seconds) Data length: 23 CNAME: xp.apple.com.edgekey.net xp.apple.com.edgekey.net: type CNAME, class IN, cname e17437.dscb.akamaiedge.net Name: xp.apple.com.edgekey.net Type: CNAME (Canonical NAME for an alias) (5) Class: IN (0x0001) Time to live: 2393 (39 minutes, 53 seconds) Data length: 25 CNAME: e17437.dscb.akamaiedge.net e17437.dscb.akamaiedge.net: type A, class IN, addr 184.27.28.73 Name: e17437.dscb.akamaiedge.net Type: A (Host Address) (1) Class: IN (0x0001) Time to live: 19 (19 seconds) Data length: 4 Address: 184.27.28.73 [Request In: 1] [Time: 0.047126000 seconds] 0000 c8 69 cd 98 b4 b0 00 1a dd 31 82 60 08 00 45 00 .i.......1.`..E. 0010 00 a4 6f b6 00 00 73 11 b2 c6 08 08 08 08 c0 a8 ..o...s......... 0020 54 14 00 35 f4 82 00 90 03 ab 48 33 81 80 00 01 T..5......H3.... 0030 00 03 00 00 00 00 02 78 70 0c 69 74 75 6e 65 73 .......xp.itunes 0040 2d 61 70 70 6c 65 03 63 6f 6d 06 61 6b 61 64 6e -apple.com.akadn 0050 73 03 6e 65 74 00 00 01 00 01 c0 0c 00 05 00 01 s.net........... 0060 00 00 01 2b 00 17 02 78 70 05 61 70 70 6c 65 03 ...+...xp.apple. 0070 63 6f 6d 07 65 64 67 65 6b 65 79 c0 27 c0 3c 00 com.edgekey.'.<. 0080 05 00 01 00 00 09 59 00 19 06 65 31 37 34 33 37 ......Y...e17437 0090 04 64 73 63 62 0a 61 6b 61 6d 61 69 65 64 67 65 .dscb.akamaiedge 00a0 c0 27 c0 5f 00 01 00 01 00 00 00 13 00 04 b8 1b .'._............ 00b0 1c 49 .I