Frame 15 (77 on wire, 77 captured) Arrival Time: Apr 10, 2003 11:07:33.510967000 Time delta from previous packet: 0.029699000 seconds Time relative to first packet: 5.386392000 seconds Frame Number: 15 Packet Length: 77 bytes Capture Length: 77 bytes Ethernet II Destination: 00:03:6c:4d:40:54 (Cisco_4d:40:54) Source: 00:a0:24:2a:e6:75 (3Com_2a:e6:75) Type: IP (0x0800) Internet Protocol, Src Addr: 24.208.193.175 (24.208.193.175), Dst Addr: dns1.weather.com (63.111.66.15) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 63 Identification: 0x6cd1 Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 62 Protocol: UDP (0x11) Header checksum: 0x73df (correct) Source: 24.208.193.175 (24.208.193.175) Destination: dns1.weather.com (63.111.66.15) User Datagram Protocol, Src Port: 46135 (46135), Dst Port: domain (53) Source port: 46135 (46135) Destination port: domain (53) Length: 43 Checksum: 0x042b (correct) Domain Name System (query) Transaction ID: 0x544e Flags: 0x0100 (Standard query) 0... .... .... .... = Response: Message is a query .000 0... .... .... = Opcode: Standard query (0) .... ..0. .... .... = Truncated: Message is not truncated .... ...1 .... .... = Recursion desired: Do query recursively .... .... ...0 .... = Non-authenticated data OK: Non-authenticated data is unacceptable Questions: 1 Answer RRs: 0 Authority RRs: 0 Additional RRs: 0 Queries image.weather.com: type A, class inet Name: image.weather.com Type: Host address Class: inet Frame 16 (77 on wire, 77 captured) Arrival Time: Apr 10, 2003 11:07:33.578151000 Time delta from previous packet: 0.067184000 seconds Time relative to first packet: 5.453576000 seconds Frame Number: 16 Packet Length: 77 bytes Capture Length: 77 bytes Ethernet II Destination: 00:a0:24:2a:e6:75 (3Com_2a:e6:75) Source: 00:03:6c:4d:40:8c (Cisco_4d:40:8c) Type: IP (0x0800) Internet Protocol, Src Addr: dns1.weather.com (63.111.66.15), Dst Addr: 24.208.193.175 (24.208.193.175) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 63 Identification: 0x0000 Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 44 Protocol: UDP (0x11) Header checksum: 0xf2b0 (correct) Source: dns1.weather.com (63.111.66.15) Destination: 24.208.193.175 (24.208.193.175) User Datagram Protocol, Src Port: domain (53), Dst Port: 46135 (46135) Source port: domain (53) Destination port: 46135 (46135) Length: 43 Checksum: 0x83a4 (correct) Domain Name System (response) Transaction ID: 0x544e Flags: 0x8185 (Standard query response, Refused) 1... .... .... .... = Response: Message is a response .000 0... .... .... = Opcode: Standard query (0) .... .0.. .... .... = Authoritative: Server is not an authority for domain .... ..0. .... .... = Truncated: Message is not truncated .... ...1 .... .... = Recursion desired: Do query recursively .... .... 1... .... = Recursion available: Server can do recursive queries .... .... ..0. .... = Answer authenticated: Answer/authority portion was not authenticated by the server .... .... .... 0101 = Reply code: Refused (5) Questions: 1 Answer RRs: 1 Authority RRs: 0 Additional RRs: 0 Queries image.weather.com: type A, class inet Name: image.weather.com Type: Host address Class: inet Answers [Malformed Packet: DNS]