Adguard und Unbound DNS zusammen mal nicht

Started by loaded, October 03, 2024, 11:13:10 AM

Previous topic - Next topic
Du hast da eine Filterregel drauf - mach die doch mal weg ...
Deciso DEC750
People who think they know everything are a great annoyance to those of us who do. (Isaac Asimov)

die sagen ja nur: nichts blocken.

egal, hier ohne:
Nochmal Fritzbox und PC

Das sieht doch alles einwandfrei aus. Schneid mal eine Abfrage mit tcpdump mit.
Deciso DEC750
People who think they know everything are a great annoyance to those of us who do. (Isaac Asimov)


April 03, 2025, 06:14:12 PM #34 Last Edit: April 03, 2025, 06:15:55 PM by RES217AIII
Quote from: cottec on April 03, 2025, 05:37:16 PMKannst du damit was anfangen?


Auch wenn ich nicht gemeint bin und Patrick der sicherlich sehr viel bessere Helfer ist, möchte ich mich doch in einer Interpretation versuchen, auch um mitzulernen:
Da Adguard scheinbar funktioniert, aber in den tcdump Mitschnitt ein nxdomain auftaucht, kann das Problem in unbound und seiner Konfiguration liegen
Supermicro M11SDV-4C-LN4F AMD EPYC 3151 4x 2.7GHz RAM 8GB DDR4-2666 SSD 250GB

Die NXDOMAIN-Antwort bezieht auf auf den FQDN mit angehängtem .localdomain - das ist vollkommen richtig so, das gibt es nicht.

Ich habe einen Verdacht, aber dazu brauche ich einen Mitschnitt einer Abfrage.
Deciso DEC750
People who think they know everything are a great annoyance to those of us who do. (Isaac Asimov)


Ich hatte eigentlich einfach den Text einer tcpdump-Session gemeint, damit wir hier drüber reden können. Etwa so:
33 164.773239 10.10.100.20 10.10.100.1 DNS 77 Standard query 0x027b AAAA sip.alice-voip.de
34 164.773376 10.10.100.1 10.10.100.20 DNS 156 Standard query response 0x027b AAAA sip.alice-voip.de SOA ns1.telefonica.de
35 164.773666 10.10.100.20 10.10.100.1 DNS 77 Standard query 0x98f7 A sip.alice-voip.de
36 164.773775 10.10.100.1 10.10.100.20 DNS 156 Standard query response 0x98f7 A sip.alice-voip.de SOA ns1.telefonica.de

Das sind die Anfragen auf dem internen Netz? Zwischen dem Client und dem AGH? Ich frag mich, weshalb da nur der SOA zurückkommt und kein AAAA oder A ...
Deciso DEC750
People who think they know everything are a great annoyance to those of us who do. (Isaac Asimov)

1    0.000000    10.10.100.20    255.255.255.255    UDP    60    53805 → 53805 Len=12
2    0.201723    10.10.100.20    255.255.255.255    UDP    60    53805 → 53805 Len=12
3    5.023511    10.10.100.20    239.255.255.250    SSDP    167    M-SEARCH * HTTP/1.1
4    11.390696    10.10.100.20    224.0.0.251    MDNS    74    Standard query 0xc558 A fritzbox.local, "QM" question
5    11.391079    10.10.100.20    224.0.0.251    MDNS    216    Standard query response 0x0000 AAAA fd00::3681:c4ff:fea5:1d82 AAAA fe80::3681:c4ff:fea5:1d82 A 10.10.100.20 AAAA fd00::3681:c4ff:fea5:1d82 AAAA fe80::3681:c4ff:fea5:1d82 A 10.10.100.20
6    15.022460    10.10.100.20    239.255.255.250    SSDP    167    M-SEARCH * HTTP/1.1
7    25.033630    10.10.100.20    239.255.255.250    SSDP    167    M-SEARCH * HTTP/1.1
8    26.089213    10.10.100.20    10.10.100.255    BROWSER    251    Host Announcement FRITZBOX, Server
9    35.040288    10.10.100.20    239.255.255.250    SSDP    167    M-SEARCH * HTTP/1.1
10    45.047046    10.10.100.20    239.255.255.250    SSDP    167    M-SEARCH * HTTP/1.1
11    55.055307    10.10.100.20    239.255.255.250    SSDP    167    M-SEARCH * HTTP/1.1
12    71.415765    10.10.100.20    224.0.0.251    MDNS    74    Standard query 0xf123 A fritzbox.local, "QM" question
13    71.416155    10.10.100.20    224.0.0.251    MDNS    216    Standard query response 0x0000 AAAA fd00::3681:c4ff:fea5:1d82 AAAA fe80::3681:c4ff:fea5:1d82 A 10.10.100.20 AAAA fd00::3681:c4ff:fea5:1d82 AAAA fe80::3681:c4ff:fea5:1d82 A 10.10.100.20
14    86.189287    10.10.100.20    10.10.100.255    BROWSER    251    Host Announcement FRITZBOX, Server
15    109.111021    10.10.100.20    10.10.100.1    DNS    104    Dynamic update 0x9404 SOA myfritz.net A 10.10.100.20
16    109.111526    10.10.100.1    10.10.100.20    DNS    104    Dynamic update response 0x9404 Not implemented SOA myfritz.net A 10.10.100.20
17    109.111980    10.10.100.20    10.10.100.1    ICMP    132    Destination unreachable (Port unreachable)
18    114.118526    AVM_a5:1d:82    Protectli_f:0f:0c    ARP    60    Who has 10.10.100.1? Tell 10.10.100.20
19    114.118535    Protectli_f:0f:0c    AVM_a5:1d:82    ARP    42    10.10.100.1 is at 64:62:66:2f:0f:0c
20    125.040630    10.10.100.20    255.255.255.255    UDP    60    53805 → 53805 Len=12
21    125.240948    10.10.100.20    255.255.255.255    UDP    60    53805 → 53805 Len=12
22    130.054588    10.10.100.20    239.255.255.250    SSDP    167    M-SEARCH * HTTP/1.1
23    131.439897    10.10.100.20    224.0.0.251    MDNS    74    Standard query 0xf85c A fritzbox.local, "QM" question
24    131.440277    10.10.100.20    224.0.0.251    MDNS    216    Standard query response 0x0000 AAAA fd00::3681:c4ff:fea5:1d82 AAAA fe80::3681:c4ff:fea5:1d82 A 10.10.100.20 AAAA fd00::3681:c4ff:fea5:1d82 AAAA fe80::3681:c4ff:fea5:1d82 A 10.10.100.20
25    140.054351    10.10.100.20    239.255.255.250    SSDP    167    M-SEARCH * HTTP/1.1
26    146.289370    10.10.100.20    10.10.100.255    BROWSER    251    Host Announcement FRITZBOX, Server
27    150.062437    10.10.100.20    239.255.255.250    SSDP    167    M-SEARCH * HTTP/1.1
28    160.069346    10.10.100.20    239.255.255.250    SSDP    167    M-SEARCH * HTTP/1.1
29    164.770944    10.10.100.20    10.10.100.1    DNS    77    Standard query 0x3f6f NAPTR sip.alice-voip.de
30    164.771261    10.10.100.1    10.10.100.20    DNS    156    Standard query response 0x3f6f NAPTR sip.alice-voip.de SOA ns1.telefonica.de
31    164.772240    10.10.100.20    10.10.100.1    DNS    87    Standard query 0x2d94 SRV _sip._udp.sip.alice-voip.de
32    164.772388    10.10.100.1    10.10.100.20    DNS    166    Standard query response 0x2d94 No such name SRV _sip._udp.sip.alice-voip.de SOA ns1.telefonica.de
33    164.773239    10.10.100.20    10.10.100.1    DNS    77    Standard query 0x027b AAAA sip.alice-voip.de
34    164.773376    10.10.100.1    10.10.100.20    DNS    156    Standard query response 0x027b AAAA sip.alice-voip.de SOA ns1.telefonica.de
35    164.773666    10.10.100.20    10.10.100.1    DNS    77    Standard query 0x98f7 A sip.alice-voip.de
36    164.773775    10.10.100.1    10.10.100.20    DNS    156    Standard query response 0x98f7 A sip.alice-voip.de SOA ns1.telefonica.de
37    169.778536    AVM_a5:1d:82    Protectli_f:0f:0c    ARP    60    Who has 10.10.100.1? Tell 10.10.100.20
38    169.778545    Protectli_f:0f:0c    AVM_a5:1d:82    ARP    42    10.10.100.1 is at 64:62:66:2f:0f:0c
39    170.079954    10.10.100.20    239.255.255.250    SSDP    167    M-SEARCH * HTTP/1.1
40    179.739040    10.10.100.20    195.71.45.248    NTP    90    NTP Version 4, client
41    179.750915    195.71.45.248    10.10.100.20    NTP    90    NTP Version 4, server
42    180.090637    10.10.100.20    239.255.255.250    SSDP    167    M-SEARCH * HTTP/1.1
43    191.464756    10.10.100.20    224.0.0.251    MDNS    74    Standard query 0xfdd5 A fritzbox.local, "QM" question
44    191.465148    10.10.100.20    224.0.0.251    MDNS    216    Standard query response 0x0000 AAAA fd00::3681:c4ff:fea5:1d82 AAAA fe80::3681:c4ff:fea5:1d82 A 10.10.100.20 AAAA fd00::3681:c4ff:fea5:1d82 AAAA fe80::3681:c4ff:fea5:1d82 A 10.10.100.20
45    206.389238    10.10.100.20    10.10.100.255    BROWSER    251    Host Announcement FRITZBOX, Server
46    235.734145    10.10.100.20    239.255.255.250    SSDP    330    NOTIFY * HTTP/1.1
47    235.736166    10.10.100.20    239.255.255.250    SSDP    340    NOTIFY * HTTP/1.1
48    235.738153    10.10.100.20    239.255.255.250    SSDP    376    NOTIFY * HTTP/1.1
49    235.746880    10.10.100.20    239.255.255.250    SSDP    376    NOTIFY * HTTP/1.1
50    250.066649    10.10.100.20    255.255.255.255    UDP    60    53805 → 53805 Len=12
51    250.267941    10.10.100.20    255.255.255.255    UDP    60    53805 → 53805 Len=12
52    251.489360    10.10.100.20    224.0.0.251    MDNS    74    Standard query 0x4da7 A fritzbox.local, "QM" question
53    251.489749    10.10.100.20    224.0.0.251    MDNS    216    Standard query response 0x0000 AAAA fd00::3681:c4ff:fea5:1d82 AAAA fe80::3681:c4ff:fea5:1d82 A 10.10.100.20 AAAA fd00::3681:c4ff:fea5:1d82 AAAA fe80::3681:c4ff:fea5:1d82 A 10.10.100.20
54    255.079776    10.10.100.20    239.255.255.250    SSDP    167    M-SEARCH * HTTP/1.1
55    265.080169    10.10.100.20    239.255.255.250    SSDP    167    M-SEARCH * HTTP/1.1
56    266.489244    10.10.100.20    10.10.100.255    BROWSER    251    Host Announcement FRITZBOX, Server
57    275.088756    10.10.100.20    239.255.255.250    SSDP    167    M-SEARCH * HTTP/1.1
58    285.099165    10.10.100.20    239.255.255.250    SSDP    167    M-SEARCH * HTTP/1.1
59    287.008011    10.10.100.20    239.255.255.250    SSDP    329    NOTIFY * HTTP/1.1
60    287.009046    10.10.100.20    239.255.255.250    SSDP    338    NOTIFY * HTTP/1.1
61    287.009709    10.10.100.20    239.255.255.250    SSDP    401    NOTIFY * HTTP/1.1
62    287.035468    10.10.100.20    239.255.255.250    SSDP    338    NOTIFY * HTTP/1.1
63    287.037643    10.10.100.20    239.255.255.250    SSDP    377    NOTIFY * HTTP/1.1
64    287.061186    10.10.100.20    239.255.255.250    SSDP    338    NOTIFY * HTTP/1.1
65    287.063356    10.10.100.20    239.255.255.250    SSDP    397    NOTIFY * HTTP/1.1
66    287.074955    10.10.100.20    239.255.255.250    SSDP    365    NOTIFY * HTTP/1.1
67    287.090581    10.10.100.20    239.255.255.250    SSDP    409    NOTIFY * HTTP/1.1
68    287.104045    10.10.100.20    239.255.255.250    SSDP    393    NOTIFY * HTTP/1.1
69    287.117775    10.10.100.20    239.255.255.250    SSDP    391    NOTIFY * HTTP/1.1
70    287.128322    10.10.100.20    239.255.255.250    SSDP    405    NOTIFY * HTTP/1.1
71    288.687143    10.10.100.20    239.255.255.250    SSDP    328    NOTIFY * HTTP/1.1
72    288.687569    10.10.100.20    239.255.255.250    SSDP    337    NOTIFY * HTTP/1.1
73    288.688009    10.10.100.20    239.255.255.250    SSDP    400    NOTIFY * HTTP/1.1
74    288.717483    10.10.100.20    239.255.255.250    SSDP    337    NOTIFY * HTTP/1.1
75    288.719132    10.10.100.20    239.255.255.250    SSDP    376    NOTIFY * HTTP/1.1
76    288.742637    10.10.100.20    239.255.255.250    SSDP    337    NOTIFY * HTTP/1.1
77    288.744786    10.10.100.20    239.255.255.250    SSDP    396    NOTIFY * HTTP/1.1
78    288.758590    10.10.100.20    239.255.255.250    SSDP    364    NOTIFY * HTTP/1.1
79    288.772502    10.10.100.20    239.255.255.250    SSDP    408    NOTIFY * HTTP/1.1
80    288.787224    10.10.100.20    239.255.255.250    SSDP    392    NOTIFY * HTTP/1.1
81    288.798500    10.10.100.20    239.255.255.250    SSDP    390    NOTIFY * HTTP/1.1
82    288.814559    10.10.100.20    239.255.255.250    SSDP    404    NOTIFY * HTTP/1.1
83    295.109941    10.10.100.20    239.255.255.250    SSDP    167    M-SEARCH * HTTP/1.1
84    305.120657    10.10.100.20    239.255.255.250    SSDP    167    M-SEARCH * HTTP/1.1
85    311.514116    10.10.100.20    224.0.0.251    MDNS    74    Standard query 0xb86a A fritzbox.local, "QM" question
86    311.514537    10.10.100.20    224.0.0.251    MDNS    216    Standard query response 0x0000 AAAA fd00::3681:c4ff:fea5:1d82 AAAA fe80::3681:c4ff:fea5:1d82 A 10.10.100.20 AAAA fd00::3681:c4ff:fea5:1d82 AAAA fe80::3681:c4ff:fea5:1d82 A 10.10.100.20
87    326.589326    10.10.100.20    10.10.100.255    BROWSER    251    Host Announcement FRITZBOX, Server
88    326.648395    10.10.100.20    239.255.255.250    SSDP    339    NOTIFY * HTTP/1.1
89    326.650682    10.10.100.20    239.255.255.250    SSDP    348    NOTIFY * HTTP/1.1
90    326.652670    10.10.100.20    239.255.255.250    SSDP    391    NOTIFY * HTTP/1.1
91    326.656719    10.10.100.20    239.255.255.250    SSDP    403    NOTIFY * HTTP/1.1
92    326.660953    10.10.100.20    239.255.255.250    SSDP    405    NOTIFY * HTTP/1.1
93    326.664974    10.10.100.20    239.255.255.250    SSDP    419    NOTIFY * HTTP/1.1
94    326.669288    10.10.100.20    239.255.255.250    SSDP    383    NOTIFY * HTTP/1.1
95    340.356798    10.10.100.20    195.71.234.176    NTP    90    NTP Version 4, client
96    345.358533    AVM_a5:1d:82    Protectli_f:0f:0c    ARP    60    Who has 10.10.100.1? Tell 10.10.100.20
97    345.358542    Protectli_f:0f:0c    AVM_a5:1d:82    ARP    42    10.10.100.1 is at 64:62:66:2f:0f:0c
98    371.539729    10.10.100.20    224.0.0.251    MDNS    74    Standard query 0x7e7a A fritzbox.local, "QM" question
99    371.540137    10.10.100.20    224.0.0.251    MDNS    216    Standard query response 0x0000 AAAA fd00::3681:c4ff:fea5:1d82 AAAA fe80::3681:c4ff:fea5:1d82 A 10.10.100.20 AAAA fd00::3681:c4ff:fea5:1d82 AAAA fe80::3681:c4ff:fea5:1d82 A 10.10.100.20

Nochmal: sind das die Anfragen auf dem internen Netz? Dann mach mal Trace auf dem lo0, um zu sehen, was der Unbound dem AGH schickt, und dann auf dem externen, was der Unbound im Internet einsammelt.
Deciso DEC750
People who think they know everything are a great annoyance to those of us who do. (Isaac Asimov)

ja das sind die Anfragen der Clients bis zur OPNsense.
Also das sieht alles richtig aus, ja?
Sorry, ich mach die anderen traces gleich, ich musste erst mal verstehen was ich überhaupt zu tun hab, sorry :D

tcpdump -v -i lo0 -n port 53
tcpdump -v -i <wan interface> -n port 53

Und nein, das sieht eben nicht normal aus. Da sollte eigentlich eine Antwort mit einer IPv6- oder IPv4-Adresse zurück an den Client gehen, tut es aber nicht.
Deciso DEC750
People who think they know everything are a great annoyance to those of us who do. (Isaac Asimov)

Ich mach die Abfragen gerade mit dem package  caputure aus den OPNsense diagnostics, das tcpdump finde ich nicht für Windows.
Windump gäbe es da wohl noch, wenn ich das richtig sehe?!

Aber ich glaube die settings wie du sie beschreibst kriege ich auch in Opnsense rein, mach ich gleich

Auf der OPNsense tcpdump ausführen ... wir brauchen doch den Trace vom externen Interface der Sense - was willst du da auf dem Windows?
Deciso DEC750
People who think they know everything are a great annoyance to those of us who do. (Isaac Asimov)

okay auf lo0 bleibt das logfile leer
auf wan gibts (ich hab am Client jetzt mal keine Abfrage gestartet. Das was hier im Log ist müsste die Fritzbox sein)

1 0.000000 2a02:3100:3203:4c12:6662:66ff:fe2f:f0a 2001:668:1f:11::105 DNS 94 Standard query 0x15a5 A telefonica.de OPT
2 0.000001 XXX.XXX.98.73 195.243.137.26 DNS 74 Standard query 0x750f A telefonica.de OPT
3 0.000036 XXX.XXX.98.73 194.0.0.53 DNS 74 Standard query 0x416a A telefonica.de OPT
4 0.000042 2a02:3100:3203:4c12:6662:66ff:fe2f:f0a 2001:67c:1011:1::53 DNS 94 Standard query 0x379a A telefonica.de OPT
5 0.000070 2a02:3100:3203:4c12:6662:66ff:fe2f:f0a 2a02:568:0:2::53 DNS 94 Standard query 0x0f1f A telefonica.de OPT
6 0.010749 2a02:568:0:2::53 2a02:3100:3203:4c12:6662:66ff:fe2f:f0a DNS 695 Standard query response 0x0f1f A telefonica.de NS ns1.telefonica.de NS ns2.telefonica.de NS ns3.telefonica.de NSEC3 NSEC3 RRSIG RRSIG A 62.52.156.92 A 213.191.76.196 A 62.52.156.84 OPT
7 0.010862 XXX.XXX.98.73 62.52.156.92 DNS 78 Standard query 0x515a A ns3.telefonica.de OPT
8 0.011981 2001:67c:1011:1::53 2a02:3100:3203:4c12:6662:66ff:fe2f:f0a DNS 695 Standard query response 0x379a A telefonica.de NS ns1.telefonica.de NS ns2.telefonica.de NS ns3.telefonica.de NSEC3 RRSIG NSEC3 RRSIG A 62.52.156.92 A 213.191.76.196 A 62.52.156.84 OPT
9 0.012075 XXX.XXX.98.73 62.52.156.92 DNS 78 Standard query 0x836f A ns1.telefonica.de OPT
10 0.012097 XXX.XXX.98.73 62.52.156.92 DNS 78 Standard query 0xc42d A ns3.telefonica.de OPT
11 0.015486 195.243.137.26 XXX.XXX.98.73 DNS 675 Standard query response 0x750f A telefonica.de NS ns1.telefonica.de NS ns2.telefonica.de NS ns3.telefonica.de NSEC3 NSEC3 RRSIG RRSIG A 62.52.156.92 A 213.191.76.196 A 62.52.156.84 OPT
12 0.015550 XXX.XXX.98.73 213.191.76.196 DNS 78 Standard query 0x426b A ns2.telefonica.de OPT
13 0.017729 194.0.0.53 XXX.XXX.98.73 DNS 675 Standard query response 0x416a A telefonica.de NS ns1.telefonica.de NS ns2.telefonica.de NS ns3.telefonica.de NSEC3 NSEC3 RRSIG RRSIG A 62.52.156.92 A 213.191.76.196 A 62.52.156.84 OPT
14 0.017788 XXX.XXX.98.73 62.52.156.92 DNS 78 Standard query 0x242e A ns1.telefonica.de OPT
15 0.018088 2001:668:1f:11::105 2a02:3100:3203:4c12:6662:66ff:fe2f:f0a DNS 695 Standard query response 0x15a5 A telefonica.de NS ns1.telefonica.de NS ns2.telefonica.de NS ns3.telefonica.de NSEC3 NSEC3 RRSIG RRSIG A 62.52.156.92 A 213.191.76.196 A 62.52.156.84 OPT
16 0.018145 XXX.XXX.98.73 213.191.76.196 DNS 78 Standard query 0x0d29 A ns2.telefonica.de OPT
17 0.022472 62.52.156.92 XXX.XXX.98.73 DNS 176 Standard query response 0x836f A ns1.telefonica.de A 62.52.156.92 NS ns1.telefonica.de NS ns2.telefonica.de NS ns3.telefonica.de A 213.191.76.196 A 62.52.156.84 OPT
18 0.022606 XXX.XXX.98.73 62.52.156.92 DNS 78 Standard query 0xed7c A sip.alice-voip.de OPT
19 0.022951 62.52.156.92 XXX.XXX.98.73 DNS 176 Standard query response 0x515a A ns3.telefonica.de A 62.52.156.84 NS ns1.telefonica.de NS ns2.telefonica.de NS ns3.telefonica.de A 62.52.156.92 A 213.191.76.196 OPT
20 0.023028 XXX.XXX.98.73 62.52.156.84 DNS 78 Standard query 0x13dd A sip.alice-voip.de OPT
21 0.024208 62.52.156.92 XXX.XXX.98.73 DNS 176 Standard query response 0xc42d A ns3.telefonica.de A 62.52.156.84 NS ns2.telefonica.de NS ns3.telefonica.de NS ns1.telefonica.de A 213.191.76.196 A 62.52.156.92 OPT
22 0.029458 62.52.156.84 XXX.XXX.98.73 DNS 157 Standard query response 0x13dd A sip.alice-voip.de SOA ns1.telefonica.de OPT
23 0.029519 XXX.XXX.98.73 62.52.156.84 DNS 78 Standard query 0xd483 NAPTR sip.alice-voip.de OPT
24 0.031466 62.52.156.92 XXX.XXX.98.73 DNS 176 Standard query response 0x242e A ns1.telefonica.de A 62.52.156.92 NS ns2.telefonica.de NS ns3.telefonica.de NS ns1.telefonica.de A 213.191.76.196 A 62.52.156.84 OPT
25 0.032700 62.52.156.92 XXX.XXX.98.73 DNS 157 Standard query response 0xed7c A sip.alice-voip.de SOA ns1.telefonica.de OPT
26 0.032760 XXX.XXX.98.73 62.52.156.84 DNS 78 Standard query 0x0595 NAPTR sip.alice-voip.de OPT
27 0.034968 213.191.76.196 XXX.XXX.98.73 DNS 176 Standard query response 0x426b A ns2.telefonica.de A 213.191.76.196 NS ns1.telefonica.de NS ns2.telefonica.de NS ns3.telefonica.de A 62.52.156.92 A 62.52.156.84 OPT
28 0.035953 62.52.156.84 XXX.XXX.98.73 DNS 157 Standard query response 0xd483 NAPTR sip.alice-voip.de SOA ns1.telefonica.de OPT
29 0.036205 213.191.76.196 XXX.XXX.98.73 DNS 176 Standard query response 0x0d29 A ns2.telefonica.de A 213.191.76.196 NS ns1.telefonica.de NS ns2.telefonica.de NS ns3.telefonica.de A 62.52.156.92 A 62.52.156.84 OPT
30 0.037717 XXX.XXX.98.73 62.52.156.84 DNS 78 Standard query 0xac10 A sip.alice-voip.de OPT
31 0.037767 XXX.XXX.98.73 62.52.156.84 DNS 78 Standard query 0x8425 A sip.alice-voip.de OPT
32 0.039463 62.52.156.84 XXX.XXX.98.73 DNS 157 Standard query response 0x0595 NAPTR sip.alice-voip.de SOA ns1.telefonica.de OPT
33 0.044480 62.52.156.84 XXX.XXX.98.73 DNS 157 Standard query response 0x8425 A sip.alice-voip.de SOA ns1.telefonica.de OPT
34 0.044616 XXX.XXX.98.73 213.191.76.196 DNS 83 Standard query 0xfeb0 A _udp.sip.alice-voip.de OPT
35 0.044680 62.52.156.84 XXX.XXX.98.73 DNS 157 Standard query response 0xac10 A sip.alice-voip.de SOA ns1.telefonica.de OPT
36 0.044738 XXX.XXX.98.73 213.191.76.196 DNS 83 Standard query 0x56df A _udp.sip.alice-voip.de OPT
37 0.062468 213.191.76.196 XXX.XXX.98.73 DNS 162 Standard query response 0x56df No such name A _udp.sip.alice-voip.de SOA ns1.telefonica.de OPT
38 0.062475 213.191.76.196 XXX.XXX.98.73 DNS 162 Standard query response 0xfeb0 No such name A _udp.sip.alice-voip.de SOA ns1.telefonica.de OPT
39 0.062542 XXX.XXX.98.73 62.52.156.84 DNS 88 Standard query 0x4326 SRV _sip._udp.sip.alice-voip.de OPT
40 0.062543 XXX.XXX.98.73 62.52.156.84 DNS 88 Standard query 0x76d3 SRV _sip._udp.sip.alice-voip.de OPT
41 0.069059 2a02:3100:3203:4c12:6662:66ff:fe2f:f0a 2001:4860:4802:38::a DNS 95 Standard query 0x107a A www.google.com OPT
42 0.069102 2a02:3100:3203:4c12:6662:66ff:fe2f:f0a 2001:4860:4802:36::a DNS 95 Standard query 0x3db2 A www.google.com OPT
43 0.069270 62.52.156.84 XXX.XXX.98.73 DNS 167 Standard query response 0x4326 No such name SRV _sip._udp.sip.alice-voip.de SOA ns1.telefonica.de OPT
44 0.069280 62.52.156.84 XXX.XXX.98.73 DNS 167 Standard query response 0x76d3 No such name SRV _sip._udp.sip.alice-voip.de SOA ns1.telefonica.de OPT
45 0.070777 XXX.XXX.98.73 62.52.156.92 DNS 78 Standard query 0x701a A sip.alice-voip.de OPT
46 0.070826 XXX.XXX.98.73 62.52.156.84 DNS 78 Standard query 0xf183 A sip.alice-voip.de OPT
47 0.071050 XXX.XXX.98.73 62.52.156.84 DNS 78 Standard query 0x12e0 A sip.alice-voip.de OPT
48 0.077206 62.52.156.84 XXX.XXX.98.73 DNS 157 Standard query response 0xf183 A sip.alice-voip.de SOA ns1.telefonica.de OPT
49 0.077277 XXX.XXX.98.73 62.52.156.92 DNS 78 Standard query 0x725d AAAA sip.alice-voip.de OPT
50 0.077461 62.52.156.84 XXX.XXX.98.73 DNS 157 Standard query response 0x12e0 A sip.alice-voip.de SOA ns1.telefonica.de OPT
51 0.082951 2001:4860:4802:38::a 2a02:3100:3203:4c12:6662:66ff:fe2f:f0a DNS 111 Standard query response 0x107a A www.google.com A 142.250.185.228 OPT
52 0.084712 62.52.156.92 XXX.XXX.98.73 DNS 157 Standard query response 0x701a A sip.alice-voip.de SOA ns1.telefonica.de OPT
53 0.084788 XXX.XXX.98.73 62.52.156.84 DNS 78 Standard query 0x4d07 AAAA sip.alice-voip.de OPT
54 0.087716 2001:4860:4802:36::a 2a02:3100:3203:4c12:6662:66ff:fe2f:f0a DNS 111 Standard query response 0x3db2 A www.google.com A 142.250.185.228 OPT
55 0.091215 62.52.156.92 XXX.XXX.98.73 DNS 157 Standard query response 0x725d AAAA sip.alice-voip.de SOA ns1.telefonica.de OPT
56 0.091450 62.52.156.84 XXX.XXX.98.73 DNS 157 Standard query response 0x4d07 AAAA sip.alice-voip.de SOA ns1.telefonica.de OPT
57 21.705023 XXX.XXX.98.73 23.211.133.67 DNS 81 Standard query 0x50a1 A s-overseer.avcdn.net OPT
58 21.705059 XXX.XXX.98.73 23.211.133.67 DNS 81 Standard query 0x8d13 A s-overseer.avcdn.net OPT