No. Time Source Destination Protocol Info 1 0.000000 192.168.1.102 192.168.0.1 DNS Standard query A pool.ntp.org Frame 1 (72 bytes on wire, 72 bytes captured) Arrival Time: Jun 23, 2007 00:53:40.425425000 [Time delta from previous packet: 0.000000000 seconds] [Time since reference or first frame: 0.000000000 seconds] Frame Number: 1 Packet Length: 72 bytes Capture Length: 72 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:dns] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Ethernet II, Src: D-Link_bc:e4:e3 (00:11:95:bc:e4:e3), Dst: Cisco-Li_cb:8d:42 (00:18:f8:cb:8d:42) Destination: Cisco-Li_cb:8d:42 (00:18:f8:cb:8d:42) Address: Cisco-Li_cb:8d:42 (00:18:f8:cb:8d:42) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: D-Link_bc:e4:e3 (00:11:95:bc:e4:e3) Address: D-Link_bc:e4:e3 (00:11:95:bc:e4:e3) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 192.168.0.1 (192.168.0.1) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 58 Identification: 0xf25b (62043) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc59f [correct] [Good: True] [Bad : False] Source: 192.168.1.102 (192.168.1.102) Destination: 192.168.0.1 (192.168.0.1) User Datagram Protocol, Src Port: 32787 (32787), Dst Port: domain (53) Source port: 32787 (32787) Destination port: domain (53) Length: 38 Checksum: 0x82c2 [correct] Domain Name System (query) [Response In: 4] Transaction ID: 0xe40e Flags: 0x0100 (Standard query) 0... .... .... .... = Response: Message is a query .000 0... .... .... = Opcode: Standard query (0) .... ..0. .... .... = Truncated: Message is not truncated .... ...1 .... .... = Recursion desired: Do query recursively .... .... .0.. .... = Z: reserved (0) .... .... ...0 .... = Non-authenticated data OK: Non-authenticated data is unacceptable Questions: 1 Answer RRs: 0 Authority RRs: 0 Additional RRs: 0 Queries pool.ntp.org: type A, class IN Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) 0000 00 18 f8 cb 8d 42 00 11 95 bc e4 e3 08 00 45 00 .....B........E. 0010 00 3a f2 5b 40 00 40 11 c5 9f c0 a8 01 66 c0 a8 .:.[@.@......f.. 0020 00 01 80 13 00 35 00 26 82 c2 e4 0e 01 00 00 01 .....5.&........ 0030 00 00 00 00 00 00 04 70 6f 6f 6c 03 6e 74 70 03 .......pool.ntp. 0040 6f 72 67 00 00 01 00 01 org..... No. Time Source Destination Protocol Info 2 0.078757 192.168.0.1 192.168.1.102 DNS Standard query response A 163.25.109.18 A 24.57.70.74 A 80.121.153.134 A 205.201.152.51 A 124.10.47.8 A 82.135.28.90 A 129.215.160.240 A 84.16.227.218 A 62.112.194.60 A 81.209.167.2 A 24.34.79.42 A 204.9.55.254 A 72.249.38.88 A 195.234.188.26 Frame 2 (462 bytes on wire, 462 bytes captured) Arrival Time: Jun 23, 2007 00:53:40.504182000 [Time delta from previous packet: 0.078757000 seconds] [Time since reference or first frame: 0.078757000 seconds] Frame Number: 2 Packet Length: 462 bytes Capture Length: 462 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:dns] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Ethernet II, Src: Cisco-Li_cb:8d:42 (00:18:f8:cb:8d:42), Dst: D-Link_bc:e4:e3 (00:11:95:bc:e4:e3) Destination: D-Link_bc:e4:e3 (00:11:95:bc:e4:e3) Address: D-Link_bc:e4:e3 (00:11:95:bc:e4:e3) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Cisco-Li_cb:8d:42 (00:18:f8:cb:8d:42) Address: Cisco-Li_cb:8d:42 (00:18:f8:cb:8d:42) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 192.168.0.1 (192.168.0.1), Dst: 192.168.1.102 (192.168.1.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 448 Identification: 0xf1c6 (61894) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 63 Protocol: UDP (0x11) Header checksum: 0x05af [correct] [Good: True] [Bad : False] Source: 192.168.0.1 (192.168.0.1) Destination: 192.168.1.102 (192.168.1.102) User Datagram Protocol, Src Port: domain (53), Dst Port: 32787 (32787) Source port: domain (53) Destination port: 32787 (32787) Length: 428 Checksum: 0xe3b1 [correct] Domain Name System (response) [Request In: 1] [Time: 0.078757000 seconds] Transaction ID: 0xe40e Flags: 0x8180 (Standard query response, No error) 1... .... .... .... = Response: Message is a response .000 0... .... .... = Opcode: Standard query (0) .... .0.. .... .... = Authoritative: Server is not an authority for domain .... ..0. .... .... = Truncated: Message is not truncated .... ...1 .... .... = Recursion desired: Do query recursively .... .... 1... .... = Recursion available: Server can do recursive queries .... .... .0.. .... = Z: reserved (0) .... .... ..0. .... = Answer authenticated: Answer/authority portion was not authenticated by the server .... .... .... 0000 = Reply code: No error (0) Questions: 1 Answer RRs: 14 Authority RRs: 5 Additional RRs: 5 Queries pool.ntp.org: type A, class IN Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Answers pool.ntp.org: type A, class IN, addr 163.25.109.18 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 21 minutes, 27 seconds Data length: 4 Addr: 163.25.109.18 pool.ntp.org: type A, class IN, addr 24.57.70.74 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 21 minutes, 27 seconds Data length: 4 Addr: 24.57.70.74 pool.ntp.org: type A, class IN, addr 80.121.153.134 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 21 minutes, 27 seconds Data length: 4 Addr: 80.121.153.134 pool.ntp.org: type A, class IN, addr 205.201.152.51 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 21 minutes, 27 seconds Data length: 4 Addr: 205.201.152.51 pool.ntp.org: type A, class IN, addr 124.10.47.8 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 21 minutes, 27 seconds Data length: 4 Addr: 124.10.47.8 pool.ntp.org: type A, class IN, addr 82.135.28.90 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 21 minutes, 27 seconds Data length: 4 Addr: 82.135.28.90 pool.ntp.org: type A, class IN, addr 129.215.160.240 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 21 minutes, 27 seconds Data length: 4 Addr: 129.215.160.240 pool.ntp.org: type A, class IN, addr 84.16.227.218 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 21 minutes, 27 seconds Data length: 4 Addr: 84.16.227.218 pool.ntp.org: type A, class IN, addr 62.112.194.60 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 21 minutes, 27 seconds Data length: 4 Addr: 62.112.194.60 pool.ntp.org: type A, class IN, addr 81.209.167.2 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 21 minutes, 27 seconds Data length: 4 Addr: 81.209.167.2 pool.ntp.org: type A, class IN, addr 24.34.79.42 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 21 minutes, 27 seconds Data length: 4 Addr: 24.34.79.42 pool.ntp.org: type A, class IN, addr 204.9.55.254 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 21 minutes, 27 seconds Data length: 4 Addr: 204.9.55.254 pool.ntp.org: type A, class IN, addr 72.249.38.88 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 21 minutes, 27 seconds Data length: 4 Addr: 72.249.38.88 pool.ntp.org: type A, class IN, addr 195.234.188.26 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 21 minutes, 27 seconds Data length: 4 Addr: 195.234.188.26 Authoritative nameservers pool.ntp.org: type NS, class IN, ns a.ntpns.org Name: pool.ntp.org Type: NS (Authoritative name server) Class: IN (0x0001) Time to live: 2 days, 3 hours, 12 minutes, 20 seconds Data length: 10 Name server: a.ntpns.org pool.ntp.org: type NS, class IN, ns c.ntpns.org Name: pool.ntp.org Type: NS (Authoritative name server) Class: IN (0x0001) Time to live: 2 days, 3 hours, 12 minutes, 20 seconds Data length: 4 Name server: c.ntpns.org pool.ntp.org: type NS, class IN, ns e.ntpns.org Name: pool.ntp.org Type: NS (Authoritative name server) Class: IN (0x0001) Time to live: 2 days, 3 hours, 12 minutes, 20 seconds Data length: 4 Name server: e.ntpns.org pool.ntp.org: type NS, class IN, ns d.ntpns.org Name: pool.ntp.org Type: NS (Authoritative name server) Class: IN (0x0001) Time to live: 2 days, 3 hours, 12 minutes, 20 seconds Data length: 4 Name server: d.ntpns.org pool.ntp.org: type NS, class IN, ns b.ntpns.org Name: pool.ntp.org Type: NS (Authoritative name server) Class: IN (0x0001) Time to live: 2 days, 3 hours, 12 minutes, 20 seconds Data length: 4 Name server: b.ntpns.org Additional records e.ntpns.org: type A, class IN, addr 70.63.21.246 Name: e.ntpns.org Type: A (Host address) Class: IN (0x0001) Time to live: 3 hours, 12 minutes, 19 seconds Data length: 4 Addr: 70.63.21.246 a.ntpns.org: type A, class IN, addr 216.52.237.236 Name: a.ntpns.org Type: A (Host address) Class: IN (0x0001) Time to live: 3 hours, 12 minutes, 19 seconds Data length: 4 Addr: 216.52.237.236 b.ntpns.org: type A, class IN, addr 67.19.103.171 Name: b.ntpns.org Type: A (Host address) Class: IN (0x0001) Time to live: 3 hours, 12 minutes, 19 seconds Data length: 4 Addr: 67.19.103.171 c.ntpns.org: type A, class IN, addr 193.138.215.60 Name: c.ntpns.org Type: A (Host address) Class: IN (0x0001) Time to live: 3 hours, 12 minutes, 19 seconds Data length: 4 Addr: 193.138.215.60 d.ntpns.org: type A, class IN, addr 217.114.97.98 Name: d.ntpns.org Type: A (Host address) Class: IN (0x0001) Time to live: 3 hours, 12 minutes, 19 seconds Data length: 4 Addr: 217.114.97.98 0000 00 11 95 bc e4 e3 00 18 f8 cb 8d 42 08 00 45 00 ...........B..E. 0010 01 c0 f1 c6 00 00 3f 11 05 af c0 a8 00 01 c0 a8 ......?......... 0020 01 66 00 35 80 13 01 ac e3 b1 e4 0e 81 80 00 01 .f.5............ 0030 00 0e 00 05 00 05 04 70 6f 6f 6c 03 6e 74 70 03 .......pool.ntp. 0040 6f 72 67 00 00 01 00 01 c0 0c 00 01 00 01 00 00 org............. 0050 05 07 00 04 a3 19 6d 12 c0 0c 00 01 00 01 00 00 ......m......... 0060 05 07 00 04 18 39 46 4a c0 0c 00 01 00 01 00 00 .....9FJ........ 0070 05 07 00 04 50 79 99 86 c0 0c 00 01 00 01 00 00 ....Py.......... 0080 05 07 00 04 cd c9 98 33 c0 0c 00 01 00 01 00 00 .......3........ 0090 05 07 00 04 7c 0a 2f 08 c0 0c 00 01 00 01 00 00 ....|./......... 00a0 05 07 00 04 52 87 1c 5a c0 0c 00 01 00 01 00 00 ....R..Z........ 00b0 05 07 00 04 81 d7 a0 f0 c0 0c 00 01 00 01 00 00 ................ 00c0 05 07 00 04 54 10 e3 da c0 0c 00 01 00 01 00 00 ....T........... 00d0 05 07 00 04 3e 70 c2 3c c0 0c 00 01 00 01 00 00 ....>p.<........ 00e0 05 07 00 04 51 d1 a7 02 c0 0c 00 01 00 01 00 00 ....Q........... 00f0 05 07 00 04 18 22 4f 2a c0 0c 00 01 00 01 00 00 ....."O*........ 0100 05 07 00 04 cc 09 37 fe c0 0c 00 01 00 01 00 00 ......7......... 0110 05 07 00 04 48 f9 26 58 c0 0c 00 01 00 01 00 00 ....H.&X........ 0120 05 07 00 04 c3 ea bc 1a c0 0c 00 02 00 01 00 02 ................ 0130 d0 14 00 0a 01 61 05 6e 74 70 6e 73 c0 15 c0 0c .....a.ntpns.... 0140 00 02 00 01 00 02 d0 14 00 04 01 63 c1 0c c0 0c ...........c.... 0150 00 02 00 01 00 02 d0 14 00 04 01 65 c1 0c c0 0c ...........e.... 0160 00 02 00 01 00 02 d0 14 00 04 01 64 c1 0c c0 0c ...........d.... 0170 00 02 00 01 00 02 d0 14 00 04 01 62 c1 0c c1 30 ...........b...0 0180 00 01 00 01 00 00 2d 13 00 04 46 3f 15 f6 c1 0a ......-...F?.... 0190 00 01 00 01 00 00 2d 13 00 04 d8 34 ed ec c1 50 ......-....4...P 01a0 00 01 00 01 00 00 2d 13 00 04 43 13 67 ab c1 20 ......-...C.g.. 01b0 00 01 00 01 00 00 2d 13 00 04 c1 8a d7 3c c1 40 ......-......<.@ 01c0 00 01 00 01 00 00 2d 13 00 04 d9 72 61 62 ......-....rab No. Time Source Destination Protocol Info 3 0.079229 192.168.1.102 195.234.188.26 NTP NTP Frame 3 (90 bytes on wire, 90 bytes captured) Arrival Time: Jun 23, 2007 00:53:40.504654000 [Time delta from previous packet: 0.000472000 seconds] [Time since reference or first frame: 0.079229000 seconds] Frame Number: 3 Packet Length: 90 bytes Capture Length: 90 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:ntp] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Ethernet II, Src: D-Link_bc:e4:e3 (00:11:95:bc:e4:e3), Dst: Cisco-Li_cb:8d:42 (00:18:f8:cb:8d:42) Destination: Cisco-Li_cb:8d:42 (00:18:f8:cb:8d:42) Address: Cisco-Li_cb:8d:42 (00:18:f8:cb:8d:42) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: D-Link_bc:e4:e3 (00:11:95:bc:e4:e3) Address: D-Link_bc:e4:e3 (00:11:95:bc:e4:e3) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 195.234.188.26 (195.234.188.26) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 76 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xf88d [correct] [Good: True] [Bad : False] Source: 192.168.1.102 (192.168.1.102) Destination: 195.234.188.26 (195.234.188.26) User Datagram Protocol, Src Port: 32787 (32787), Dst Port: ntp (123) Source port: 32787 (32787) Destination port: ntp (123) Length: 56 Checksum: 0x21dc [correct] Network Time Protocol Flags: 0x1b 00.. .... = Leap Indicator: no warning (0) ..01 1... = Version number: NTP Version 3 (3) .... .011 = Mode: client (3) Peer Clock Stratum: unspecified or unavailable (0) Peer Polling Interval: invalid (0) Peer Clock Precision: 1.000000 sec Root Delay: 0.0000 sec Clock Dispersion: 0.0000 sec Reference Clock ID: NULL Reference Clock Update Time: NULL Originate Time Stamp: NULL Receive Time Stamp: NULL Transmit Time Stamp: NULL 0000 00 18 f8 cb 8d 42 00 11 95 bc e4 e3 08 00 45 00 .....B........E. 0010 00 4c 00 00 40 00 40 11 f8 8d c0 a8 01 66 c3 ea .L..@.@......f.. 0020 bc 1a 80 13 00 7b 00 38 21 dc 1b 00 00 00 00 00 .....{.8!....... 0030 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0040 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0050 00 00 00 00 00 00 00 00 00 00 .......... No. Time Source Destination Protocol Info 4 0.090594 192.168.0.1 192.168.1.102 DNS Standard query response A 195.234.188.26 A 205.201.152.51 A 62.112.194.60 A 24.57.70.74 A 129.215.160.240 A 80.121.153.134 A 84.16.227.218 A 82.135.28.90 A 24.34.79.42 A 81.209.167.2 A 124.10.47.8 A 204.9.55.254 A 72.249.38.88 A 163.25.109.18 Frame 4 (462 bytes on wire, 462 bytes captured) Arrival Time: Jun 23, 2007 00:53:40.516019000 [Time delta from previous packet: 0.011365000 seconds] [Time since reference or first frame: 0.090594000 seconds] Frame Number: 4 Packet Length: 462 bytes Capture Length: 462 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:dns] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Ethernet II, Src: Cisco-Li_cb:8d:42 (00:18:f8:cb:8d:42), Dst: D-Link_bc:e4:e3 (00:11:95:bc:e4:e3) Destination: D-Link_bc:e4:e3 (00:11:95:bc:e4:e3) Address: D-Link_bc:e4:e3 (00:11:95:bc:e4:e3) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Cisco-Li_cb:8d:42 (00:18:f8:cb:8d:42) Address: Cisco-Li_cb:8d:42 (00:18:f8:cb:8d:42) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 192.168.0.1 (192.168.0.1), Dst: 192.168.1.102 (192.168.1.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 448 Identification: 0xf1c7 (61895) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 63 Protocol: UDP (0x11) Header checksum: 0x05ae [correct] [Good: True] [Bad : False] Source: 192.168.0.1 (192.168.0.1) Destination: 192.168.1.102 (192.168.1.102) User Datagram Protocol, Src Port: domain (53), Dst Port: 32787 (32787) Source port: domain (53) Destination port: 32787 (32787) Length: 428 Checksum: 0x98a9 [correct] Domain Name System (response) [Request In: 1] [Time: 0.090594000 seconds] Transaction ID: 0xe40e Flags: 0x8180 (Standard query response, No error) 1... .... .... .... = Response: Message is a response .000 0... .... .... = Opcode: Standard query (0) .... .0.. .... .... = Authoritative: Server is not an authority for domain .... ..0. .... .... = Truncated: Message is not truncated .... ...1 .... .... = Recursion desired: Do query recursively .... .... 1... .... = Recursion available: Server can do recursive queries .... .... .0.. .... = Z: reserved (0) .... .... ..0. .... = Answer authenticated: Answer/authority portion was not authenticated by the server .... .... .... 0000 = Reply code: No error (0) Questions: 1 Answer RRs: 14 Authority RRs: 5 Additional RRs: 5 Queries pool.ntp.org: type A, class IN Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Answers pool.ntp.org: type A, class IN, addr 195.234.188.26 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 24 minutes, 9 seconds Data length: 4 Addr: 195.234.188.26 pool.ntp.org: type A, class IN, addr 205.201.152.51 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 24 minutes, 9 seconds Data length: 4 Addr: 205.201.152.51 pool.ntp.org: type A, class IN, addr 62.112.194.60 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 24 minutes, 9 seconds Data length: 4 Addr: 62.112.194.60 pool.ntp.org: type A, class IN, addr 24.57.70.74 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 24 minutes, 9 seconds Data length: 4 Addr: 24.57.70.74 pool.ntp.org: type A, class IN, addr 129.215.160.240 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 24 minutes, 9 seconds Data length: 4 Addr: 129.215.160.240 pool.ntp.org: type A, class IN, addr 80.121.153.134 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 24 minutes, 9 seconds Data length: 4 Addr: 80.121.153.134 pool.ntp.org: type A, class IN, addr 84.16.227.218 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 24 minutes, 9 seconds Data length: 4 Addr: 84.16.227.218 pool.ntp.org: type A, class IN, addr 82.135.28.90 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 24 minutes, 9 seconds Data length: 4 Addr: 82.135.28.90 pool.ntp.org: type A, class IN, addr 24.34.79.42 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 24 minutes, 9 seconds Data length: 4 Addr: 24.34.79.42 pool.ntp.org: type A, class IN, addr 81.209.167.2 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 24 minutes, 9 seconds Data length: 4 Addr: 81.209.167.2 pool.ntp.org: type A, class IN, addr 124.10.47.8 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 24 minutes, 9 seconds Data length: 4 Addr: 124.10.47.8 pool.ntp.org: type A, class IN, addr 204.9.55.254 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 24 minutes, 9 seconds Data length: 4 Addr: 204.9.55.254 pool.ntp.org: type A, class IN, addr 72.249.38.88 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 24 minutes, 9 seconds Data length: 4 Addr: 72.249.38.88 pool.ntp.org: type A, class IN, addr 163.25.109.18 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 24 minutes, 9 seconds Data length: 4 Addr: 163.25.109.18 Authoritative nameservers pool.ntp.org: type NS, class IN, ns d.ntpns.org Name: pool.ntp.org Type: NS (Authoritative name server) Class: IN (0x0001) Time to live: 2 days, 1 hour, 51 minutes, 20 seconds Data length: 10 Name server: d.ntpns.org pool.ntp.org: type NS, class IN, ns a.ntpns.org Name: pool.ntp.org Type: NS (Authoritative name server) Class: IN (0x0001) Time to live: 2 days, 1 hour, 51 minutes, 20 seconds Data length: 4 Name server: a.ntpns.org pool.ntp.org: type NS, class IN, ns b.ntpns.org Name: pool.ntp.org Type: NS (Authoritative name server) Class: IN (0x0001) Time to live: 2 days, 1 hour, 51 minutes, 20 seconds Data length: 4 Name server: b.ntpns.org pool.ntp.org: type NS, class IN, ns e.ntpns.org Name: pool.ntp.org Type: NS (Authoritative name server) Class: IN (0x0001) Time to live: 2 days, 1 hour, 51 minutes, 20 seconds Data length: 4 Name server: e.ntpns.org pool.ntp.org: type NS, class IN, ns c.ntpns.org Name: pool.ntp.org Type: NS (Authoritative name server) Class: IN (0x0001) Time to live: 2 days, 1 hour, 51 minutes, 20 seconds Data length: 4 Name server: c.ntpns.org Additional records e.ntpns.org: type A, class IN, addr 70.63.21.246 Name: e.ntpns.org Type: A (Host address) Class: IN (0x0001) Time to live: 1 hour, 51 minutes, 20 seconds Data length: 4 Addr: 70.63.21.246 a.ntpns.org: type A, class IN, addr 216.52.237.236 Name: a.ntpns.org Type: A (Host address) Class: IN (0x0001) Time to live: 1 hour, 51 minutes, 20 seconds Data length: 4 Addr: 216.52.237.236 b.ntpns.org: type A, class IN, addr 67.19.103.171 Name: b.ntpns.org Type: A (Host address) Class: IN (0x0001) Time to live: 1 hour, 51 minutes, 20 seconds Data length: 4 Addr: 67.19.103.171 c.ntpns.org: type A, class IN, addr 193.138.215.60 Name: c.ntpns.org Type: A (Host address) Class: IN (0x0001) Time to live: 1 hour, 51 minutes, 20 seconds Data length: 4 Addr: 193.138.215.60 d.ntpns.org: type A, class IN, addr 217.114.97.98 Name: d.ntpns.org Type: A (Host address) Class: IN (0x0001) Time to live: 1 hour, 51 minutes, 20 seconds Data length: 4 Addr: 217.114.97.98 0000 00 11 95 bc e4 e3 00 18 f8 cb 8d 42 08 00 45 00 ...........B..E. 0010 01 c0 f1 c7 00 00 3f 11 05 ae c0 a8 00 01 c0 a8 ......?......... 0020 01 66 00 35 80 13 01 ac 98 a9 e4 0e 81 80 00 01 .f.5............ 0030 00 0e 00 05 00 05 04 70 6f 6f 6c 03 6e 74 70 03 .......pool.ntp. 0040 6f 72 67 00 00 01 00 01 c0 0c 00 01 00 01 00 00 org............. 0050 05 a9 00 04 c3 ea bc 1a c0 0c 00 01 00 01 00 00 ................ 0060 05 a9 00 04 cd c9 98 33 c0 0c 00 01 00 01 00 00 .......3........ 0070 05 a9 00 04 3e 70 c2 3c c0 0c 00 01 00 01 00 00 ....>p.<........ 0080 05 a9 00 04 18 39 46 4a c0 0c 00 01 00 01 00 00 .....9FJ........ 0090 05 a9 00 04 81 d7 a0 f0 c0 0c 00 01 00 01 00 00 ................ 00a0 05 a9 00 04 50 79 99 86 c0 0c 00 01 00 01 00 00 ....Py.......... 00b0 05 a9 00 04 54 10 e3 da c0 0c 00 01 00 01 00 00 ....T........... 00c0 05 a9 00 04 52 87 1c 5a c0 0c 00 01 00 01 00 00 ....R..Z........ 00d0 05 a9 00 04 18 22 4f 2a c0 0c 00 01 00 01 00 00 ....."O*........ 00e0 05 a9 00 04 51 d1 a7 02 c0 0c 00 01 00 01 00 00 ....Q........... 00f0 05 a9 00 04 7c 0a 2f 08 c0 0c 00 01 00 01 00 00 ....|./......... 0100 05 a9 00 04 cc 09 37 fe c0 0c 00 01 00 01 00 00 ......7......... 0110 05 a9 00 04 48 f9 26 58 c0 0c 00 01 00 01 00 00 ....H.&X........ 0120 05 a9 00 04 a3 19 6d 12 c0 0c 00 02 00 01 00 02 ......m......... 0130 bd 18 00 0a 01 64 05 6e 74 70 6e 73 c0 15 c0 0c .....d.ntpns.... 0140 00 02 00 01 00 02 bd 18 00 04 01 61 c1 0c c0 0c ...........a.... 0150 00 02 00 01 00 02 bd 18 00 04 01 62 c1 0c c0 0c ...........b.... 0160 00 02 00 01 00 02 bd 18 00 04 01 65 c1 0c c0 0c ...........e.... 0170 00 02 00 01 00 02 bd 18 00 04 01 63 c1 0c c1 40 ...........c...@ 0180 00 01 00 01 00 00 1a 18 00 04 46 3f 15 f6 c1 20 ..........F?... 0190 00 01 00 01 00 00 1a 18 00 04 d8 34 ed ec c1 30 ...........4...0 01a0 00 01 00 01 00 00 1a 18 00 04 43 13 67 ab c1 50 ..........C.g..P 01b0 00 01 00 01 00 00 1a 18 00 04 c1 8a d7 3c c1 0a .............<.. 01c0 00 01 00 01 00 00 1a 18 00 04 d9 72 61 62 ...........rab No. Time Source Destination Protocol Info 5 0.090750 192.168.1.102 192.168.0.1 DNS Standard query A pool.ntp.org Frame 5 (72 bytes on wire, 72 bytes captured) Arrival Time: Jun 23, 2007 00:53:40.516175000 [Time delta from previous packet: 0.000156000 seconds] [Time since reference or first frame: 0.090750000 seconds] Frame Number: 5 Packet Length: 72 bytes Capture Length: 72 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:dns] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Ethernet II, Src: D-Link_bc:e4:e3 (00:11:95:bc:e4:e3), Dst: Cisco-Li_cb:8d:42 (00:18:f8:cb:8d:42) Destination: Cisco-Li_cb:8d:42 (00:18:f8:cb:8d:42) Address: Cisco-Li_cb:8d:42 (00:18:f8:cb:8d:42) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: D-Link_bc:e4:e3 (00:11:95:bc:e4:e3) Address: D-Link_bc:e4:e3 (00:11:95:bc:e4:e3) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 192.168.0.1 (192.168.0.1) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 58 Identification: 0xf272 (62066) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xc588 [correct] [Good: True] [Bad : False] Source: 192.168.1.102 (192.168.1.102) Destination: 192.168.0.1 (192.168.0.1) User Datagram Protocol, Src Port: 32788 (32788), Dst Port: domain (53) Source port: 32788 (32788) Destination port: domain (53) Length: 38 Checksum: 0xfc04 [correct] Domain Name System (query) [Response In: 8] Transaction ID: 0x6acb Flags: 0x0100 (Standard query) 0... .... .... .... = Response: Message is a query .000 0... .... .... = Opcode: Standard query (0) .... ..0. .... .... = Truncated: Message is not truncated .... ...1 .... .... = Recursion desired: Do query recursively .... .... .0.. .... = Z: reserved (0) .... .... ...0 .... = Non-authenticated data OK: Non-authenticated data is unacceptable Questions: 1 Answer RRs: 0 Authority RRs: 0 Additional RRs: 0 Queries pool.ntp.org: type A, class IN Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) 0000 00 18 f8 cb 8d 42 00 11 95 bc e4 e3 08 00 45 00 .....B........E. 0010 00 3a f2 72 40 00 40 11 c5 88 c0 a8 01 66 c0 a8 .:.r@.@......f.. 0020 00 01 80 14 00 35 00 26 fc 04 6a cb 01 00 00 01 .....5.&..j..... 0030 00 00 00 00 00 00 04 70 6f 6f 6c 03 6e 74 70 03 .......pool.ntp. 0040 6f 72 67 00 00 01 00 01 org..... No. Time Source Destination Protocol Info 6 0.169900 192.168.0.1 192.168.1.102 DNS Standard query response A 195.234.188.26 A 163.25.109.18 A 24.57.70.74 A 80.121.153.134 A 205.201.152.51 A 124.10.47.8 A 82.135.28.90 A 129.215.160.240 A 84.16.227.218 A 62.112.194.60 A 81.209.167.2 A 24.34.79.42 A 204.9.55.254 A 72.249.38.88 Frame 6 (462 bytes on wire, 462 bytes captured) Arrival Time: Jun 23, 2007 00:53:40.595325000 [Time delta from previous packet: 0.079150000 seconds] [Time since reference or first frame: 0.169900000 seconds] Frame Number: 6 Packet Length: 462 bytes Capture Length: 462 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:dns] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Ethernet II, Src: Cisco-Li_cb:8d:42 (00:18:f8:cb:8d:42), Dst: D-Link_bc:e4:e3 (00:11:95:bc:e4:e3) Destination: D-Link_bc:e4:e3 (00:11:95:bc:e4:e3) Address: D-Link_bc:e4:e3 (00:11:95:bc:e4:e3) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Cisco-Li_cb:8d:42 (00:18:f8:cb:8d:42) Address: Cisco-Li_cb:8d:42 (00:18:f8:cb:8d:42) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 192.168.0.1 (192.168.0.1), Dst: 192.168.1.102 (192.168.1.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 448 Identification: 0xf1ca (61898) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 63 Protocol: UDP (0x11) Header checksum: 0x05ab [correct] [Good: True] [Bad : False] Source: 192.168.0.1 (192.168.0.1) Destination: 192.168.1.102 (192.168.1.102) User Datagram Protocol, Src Port: domain (53), Dst Port: 32788 (32788) Source port: domain (53) Destination port: 32788 (32788) Length: 428 Checksum: 0x5cf4 [correct] Domain Name System (response) [Request In: 5] [Time: 0.079150000 seconds] Transaction ID: 0x6acb Flags: 0x8180 (Standard query response, No error) 1... .... .... .... = Response: Message is a response .000 0... .... .... = Opcode: Standard query (0) .... .0.. .... .... = Authoritative: Server is not an authority for domain .... ..0. .... .... = Truncated: Message is not truncated .... ...1 .... .... = Recursion desired: Do query recursively .... .... 1... .... = Recursion available: Server can do recursive queries .... .... .0.. .... = Z: reserved (0) .... .... ..0. .... = Answer authenticated: Answer/authority portion was not authenticated by the server .... .... .... 0000 = Reply code: No error (0) Questions: 1 Answer RRs: 14 Authority RRs: 5 Additional RRs: 5 Queries pool.ntp.org: type A, class IN Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Answers pool.ntp.org: type A, class IN, addr 195.234.188.26 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 21 minutes, 27 seconds Data length: 4 Addr: 195.234.188.26 pool.ntp.org: type A, class IN, addr 163.25.109.18 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 21 minutes, 27 seconds Data length: 4 Addr: 163.25.109.18 pool.ntp.org: type A, class IN, addr 24.57.70.74 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 21 minutes, 27 seconds Data length: 4 Addr: 24.57.70.74 pool.ntp.org: type A, class IN, addr 80.121.153.134 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 21 minutes, 27 seconds Data length: 4 Addr: 80.121.153.134 pool.ntp.org: type A, class IN, addr 205.201.152.51 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 21 minutes, 27 seconds Data length: 4 Addr: 205.201.152.51 pool.ntp.org: type A, class IN, addr 124.10.47.8 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 21 minutes, 27 seconds Data length: 4 Addr: 124.10.47.8 pool.ntp.org: type A, class IN, addr 82.135.28.90 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 21 minutes, 27 seconds Data length: 4 Addr: 82.135.28.90 pool.ntp.org: type A, class IN, addr 129.215.160.240 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 21 minutes, 27 seconds Data length: 4 Addr: 129.215.160.240 pool.ntp.org: type A, class IN, addr 84.16.227.218 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 21 minutes, 27 seconds Data length: 4 Addr: 84.16.227.218 pool.ntp.org: type A, class IN, addr 62.112.194.60 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 21 minutes, 27 seconds Data length: 4 Addr: 62.112.194.60 pool.ntp.org: type A, class IN, addr 81.209.167.2 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 21 minutes, 27 seconds Data length: 4 Addr: 81.209.167.2 pool.ntp.org: type A, class IN, addr 24.34.79.42 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 21 minutes, 27 seconds Data length: 4 Addr: 24.34.79.42 pool.ntp.org: type A, class IN, addr 204.9.55.254 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 21 minutes, 27 seconds Data length: 4 Addr: 204.9.55.254 pool.ntp.org: type A, class IN, addr 72.249.38.88 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 21 minutes, 27 seconds Data length: 4 Addr: 72.249.38.88 Authoritative nameservers pool.ntp.org: type NS, class IN, ns e.ntpns.org Name: pool.ntp.org Type: NS (Authoritative name server) Class: IN (0x0001) Time to live: 2 days, 3 hours, 12 minutes, 20 seconds Data length: 10 Name server: e.ntpns.org pool.ntp.org: type NS, class IN, ns a.ntpns.org Name: pool.ntp.org Type: NS (Authoritative name server) Class: IN (0x0001) Time to live: 2 days, 3 hours, 12 minutes, 20 seconds Data length: 4 Name server: a.ntpns.org pool.ntp.org: type NS, class IN, ns c.ntpns.org Name: pool.ntp.org Type: NS (Authoritative name server) Class: IN (0x0001) Time to live: 2 days, 3 hours, 12 minutes, 20 seconds Data length: 4 Name server: c.ntpns.org pool.ntp.org: type NS, class IN, ns b.ntpns.org Name: pool.ntp.org Type: NS (Authoritative name server) Class: IN (0x0001) Time to live: 2 days, 3 hours, 12 minutes, 20 seconds Data length: 4 Name server: b.ntpns.org pool.ntp.org: type NS, class IN, ns d.ntpns.org Name: pool.ntp.org Type: NS (Authoritative name server) Class: IN (0x0001) Time to live: 2 days, 3 hours, 12 minutes, 20 seconds Data length: 4 Name server: d.ntpns.org Additional records e.ntpns.org: type A, class IN, addr 70.63.21.246 Name: e.ntpns.org Type: A (Host address) Class: IN (0x0001) Time to live: 3 hours, 12 minutes, 19 seconds Data length: 4 Addr: 70.63.21.246 a.ntpns.org: type A, class IN, addr 216.52.237.236 Name: a.ntpns.org Type: A (Host address) Class: IN (0x0001) Time to live: 3 hours, 12 minutes, 19 seconds Data length: 4 Addr: 216.52.237.236 b.ntpns.org: type A, class IN, addr 67.19.103.171 Name: b.ntpns.org Type: A (Host address) Class: IN (0x0001) Time to live: 3 hours, 12 minutes, 19 seconds Data length: 4 Addr: 67.19.103.171 c.ntpns.org: type A, class IN, addr 193.138.215.60 Name: c.ntpns.org Type: A (Host address) Class: IN (0x0001) Time to live: 3 hours, 12 minutes, 19 seconds Data length: 4 Addr: 193.138.215.60 d.ntpns.org: type A, class IN, addr 217.114.97.98 Name: d.ntpns.org Type: A (Host address) Class: IN (0x0001) Time to live: 3 hours, 12 minutes, 19 seconds Data length: 4 Addr: 217.114.97.98 0000 00 11 95 bc e4 e3 00 18 f8 cb 8d 42 08 00 45 00 ...........B..E. 0010 01 c0 f1 ca 00 00 3f 11 05 ab c0 a8 00 01 c0 a8 ......?......... 0020 01 66 00 35 80 14 01 ac 5c f4 6a cb 81 80 00 01 .f.5....\.j..... 0030 00 0e 00 05 00 05 04 70 6f 6f 6c 03 6e 74 70 03 .......pool.ntp. 0040 6f 72 67 00 00 01 00 01 c0 0c 00 01 00 01 00 00 org............. 0050 05 07 00 04 c3 ea bc 1a c0 0c 00 01 00 01 00 00 ................ 0060 05 07 00 04 a3 19 6d 12 c0 0c 00 01 00 01 00 00 ......m......... 0070 05 07 00 04 18 39 46 4a c0 0c 00 01 00 01 00 00 .....9FJ........ 0080 05 07 00 04 50 79 99 86 c0 0c 00 01 00 01 00 00 ....Py.......... 0090 05 07 00 04 cd c9 98 33 c0 0c 00 01 00 01 00 00 .......3........ 00a0 05 07 00 04 7c 0a 2f 08 c0 0c 00 01 00 01 00 00 ....|./......... 00b0 05 07 00 04 52 87 1c 5a c0 0c 00 01 00 01 00 00 ....R..Z........ 00c0 05 07 00 04 81 d7 a0 f0 c0 0c 00 01 00 01 00 00 ................ 00d0 05 07 00 04 54 10 e3 da c0 0c 00 01 00 01 00 00 ....T........... 00e0 05 07 00 04 3e 70 c2 3c c0 0c 00 01 00 01 00 00 ....>p.<........ 00f0 05 07 00 04 51 d1 a7 02 c0 0c 00 01 00 01 00 00 ....Q........... 0100 05 07 00 04 18 22 4f 2a c0 0c 00 01 00 01 00 00 ....."O*........ 0110 05 07 00 04 cc 09 37 fe c0 0c 00 01 00 01 00 00 ......7......... 0120 05 07 00 04 48 f9 26 58 c0 0c 00 02 00 01 00 02 ....H.&X........ 0130 d0 14 00 0a 01 65 05 6e 74 70 6e 73 c0 15 c0 0c .....e.ntpns.... 0140 00 02 00 01 00 02 d0 14 00 04 01 61 c1 0c c0 0c ...........a.... 0150 00 02 00 01 00 02 d0 14 00 04 01 63 c1 0c c0 0c ...........c.... 0160 00 02 00 01 00 02 d0 14 00 04 01 62 c1 0c c0 0c ...........b.... 0170 00 02 00 01 00 02 d0 14 00 04 01 64 c1 0c c1 0a ...........d.... 0180 00 01 00 01 00 00 2d 13 00 04 46 3f 15 f6 c1 20 ......-...F?... 0190 00 01 00 01 00 00 2d 13 00 04 d8 34 ed ec c1 40 ......-....4...@ 01a0 00 01 00 01 00 00 2d 13 00 04 43 13 67 ab c1 30 ......-...C.g..0 01b0 00 01 00 01 00 00 2d 13 00 04 c1 8a d7 3c c1 50 ......-......<.P 01c0 00 01 00 01 00 00 2d 13 00 04 d9 72 61 62 ......-....rab No. Time Source Destination Protocol Info 7 0.170421 192.168.1.102 195.234.188.26 NTP NTP Frame 7 (462 bytes on wire, 462 bytes captured) Arrival Time: Jun 23, 2007 00:53:40.595846000 [Time delta from previous packet: 0.000521000 seconds] [Time since reference or first frame: 0.170421000 seconds] Frame Number: 7 Packet Length: 462 bytes Capture Length: 462 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:ntp] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Ethernet II, Src: D-Link_bc:e4:e3 (00:11:95:bc:e4:e3), Dst: Cisco-Li_cb:8d:42 (00:18:f8:cb:8d:42) Destination: Cisco-Li_cb:8d:42 (00:18:f8:cb:8d:42) Address: Cisco-Li_cb:8d:42 (00:18:f8:cb:8d:42) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: D-Link_bc:e4:e3 (00:11:95:bc:e4:e3) Address: D-Link_bc:e4:e3 (00:11:95:bc:e4:e3) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 192.168.1.102 (192.168.1.102), Dst: 195.234.188.26 (195.234.188.26) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 448 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xf719 [correct] [Good: True] [Bad : False] Source: 192.168.1.102 (192.168.1.102) Destination: 195.234.188.26 (195.234.188.26) User Datagram Protocol, Src Port: 32787 (32787), Dst Port: ntp (123) Source port: 32787 (32787) Destination port: ntp (123) Length: 428 Checksum: 0xd907 [correct] Network Time Protocol Flags: 0xe4 11.. .... = Leap Indicator: alarm condition (clock not synchronized) (3) ..10 0... = Version number: NTP Version 4 (4) .... .100 = Mode: server (4) Peer Clock Stratum: secondary reference (14) Peer Polling Interval: invalid (129) Peer Clock Precision: 0.000000 sec Root Delay: 1.0002 sec Clock Dispersion: 5.0001 sec Reference Clock ID: 4.112.111.111 Reference Clock Update Time: Jun 5, 1957 02:56:52.4376 UTC Originate Time Stamp: Oct 5, 1954 14:47:29.0000 UTC Receive Time Stamp: Feb 8, 2036 00:40:33.0000 UTC Transmit Time Stamp: Feb 10, 2036 21:13:14.7348 UTC Extension length 1 < 8 0000 00 18 f8 cb 8d 42 00 11 95 bc e4 e3 08 00 45 00 .....B........E. 0010 01 c0 00 00 40 00 40 11 f7 19 c0 a8 01 66 c3 ea ....@.@......f.. 0020 bc 1a 80 13 00 7b 01 ac d9 07 e4 0e 81 80 00 01 .....{.......... 0030 00 0e 00 05 00 05 04 70 6f 6f 6c 03 6e 74 70 03 .......pool.ntp. 0040 6f 72 67 00 00 01 00 01 c0 0c 00 01 00 01 00 00 org............. 0050 05 a9 00 04 c3 ea bc 1a c0 0c 00 01 00 01 00 00 ................ 0060 05 a9 00 04 cd c9 98 33 c0 0c 00 01 00 01 00 00 .......3........ 0070 05 a9 00 04 3e 70 c2 3c c0 0c 00 01 00 01 00 00 ....>p.<........ 0080 05 a9 00 04 18 39 46 4a c0 0c 00 01 00 01 00 00 .....9FJ........ 0090 05 a9 00 04 81 d7 a0 f0 c0 0c 00 01 00 01 00 00 ................ 00a0 05 a9 00 04 50 79 99 86 c0 0c 00 01 00 01 00 00 ....Py.......... 00b0 05 a9 00 04 54 10 e3 da c0 0c 00 01 00 01 00 00 ....T........... 00c0 05 a9 00 04 52 87 1c 5a c0 0c 00 01 00 01 00 00 ....R..Z........ 00d0 05 a9 00 04 18 22 4f 2a c0 0c 00 01 00 01 00 00 ....."O*........ 00e0 05 a9 00 04 51 d1 a7 02 c0 0c 00 01 00 01 00 00 ....Q........... 00f0 05 a9 00 04 7c 0a 2f 08 c0 0c 00 01 00 01 00 00 ....|./......... 0100 05 a9 00 04 cc 09 37 fe c0 0c 00 01 00 01 00 00 ......7......... 0110 05 a9 00 04 48 f9 26 58 c0 0c 00 01 00 01 00 00 ....H.&X........ 0120 05 a9 00 04 a3 19 6d 12 c0 0c 00 02 00 01 00 02 ......m......... 0130 bd 18 00 0a 01 64 05 6e 74 70 6e 73 c0 15 c0 0c .....d.ntpns.... 0140 00 02 00 01 00 02 bd 18 00 04 01 61 c1 0c c0 0c ...........a.... 0150 00 02 00 01 00 02 bd 18 00 04 01 62 c1 0c c0 0c ...........b.... 0160 00 02 00 01 00 02 bd 18 00 04 01 65 c1 0c c0 0c ...........e.... 0170 00 02 00 01 00 02 bd 18 00 04 01 63 c1 0c c1 40 ...........c...@ 0180 00 01 00 01 00 00 1a 18 00 04 46 3f 15 f6 c1 20 ..........F?... 0190 00 01 00 01 00 00 1a 18 00 04 d8 34 ed ec c1 30 ...........4...0 01a0 00 01 00 01 00 00 1a 18 00 04 43 13 67 ab c1 50 ..........C.g..P 01b0 00 01 00 01 00 00 1a 18 00 04 c1 8a d7 3c c1 0a .............<.. 01c0 00 01 00 01 00 00 1a 18 00 04 d9 72 61 62 ...........rab No. Time Source Destination Protocol Info 8 0.180900 192.168.0.1 192.168.1.102 DNS Standard query response A 163.25.109.18 A 195.234.188.26 A 205.201.152.51 A 62.112.194.60 A 24.57.70.74 A 129.215.160.240 A 80.121.153.134 A 84.16.227.218 A 82.135.28.90 A 24.34.79.42 A 81.209.167.2 A 124.10.47.8 A 204.9.55.254 A 72.249.38.88 Frame 8 (462 bytes on wire, 462 bytes captured) Arrival Time: Jun 23, 2007 00:53:40.606325000 [Time delta from previous packet: 0.010479000 seconds] [Time since reference or first frame: 0.180900000 seconds] Frame Number: 8 Packet Length: 462 bytes Capture Length: 462 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:dns] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Ethernet II, Src: Cisco-Li_cb:8d:42 (00:18:f8:cb:8d:42), Dst: D-Link_bc:e4:e3 (00:11:95:bc:e4:e3) Destination: D-Link_bc:e4:e3 (00:11:95:bc:e4:e3) Address: D-Link_bc:e4:e3 (00:11:95:bc:e4:e3) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Cisco-Li_cb:8d:42 (00:18:f8:cb:8d:42) Address: Cisco-Li_cb:8d:42 (00:18:f8:cb:8d:42) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 192.168.0.1 (192.168.0.1), Dst: 192.168.1.102 (192.168.1.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 448 Identification: 0xf1cb (61899) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 63 Protocol: UDP (0x11) Header checksum: 0x05aa [correct] [Good: True] [Bad : False] Source: 192.168.0.1 (192.168.0.1) Destination: 192.168.1.102 (192.168.1.102) User Datagram Protocol, Src Port: domain (53), Dst Port: 32788 (32788) Source port: domain (53) Destination port: 32788 (32788) Length: 428 Checksum: 0x11ec [correct] Domain Name System (response) [Request In: 5] [Time: 0.090150000 seconds] Transaction ID: 0x6acb Flags: 0x8180 (Standard query response, No error) 1... .... .... .... = Response: Message is a response .000 0... .... .... = Opcode: Standard query (0) .... .0.. .... .... = Authoritative: Server is not an authority for domain .... ..0. .... .... = Truncated: Message is not truncated .... ...1 .... .... = Recursion desired: Do query recursively .... .... 1... .... = Recursion available: Server can do recursive queries .... .... .0.. .... = Z: reserved (0) .... .... ..0. .... = Answer authenticated: Answer/authority portion was not authenticated by the server .... .... .... 0000 = Reply code: No error (0) Questions: 1 Answer RRs: 14 Authority RRs: 5 Additional RRs: 5 Queries pool.ntp.org: type A, class IN Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Answers pool.ntp.org: type A, class IN, addr 163.25.109.18 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 24 minutes, 9 seconds Data length: 4 Addr: 163.25.109.18 pool.ntp.org: type A, class IN, addr 195.234.188.26 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 24 minutes, 9 seconds Data length: 4 Addr: 195.234.188.26 pool.ntp.org: type A, class IN, addr 205.201.152.51 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 24 minutes, 9 seconds Data length: 4 Addr: 205.201.152.51 pool.ntp.org: type A, class IN, addr 62.112.194.60 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 24 minutes, 9 seconds Data length: 4 Addr: 62.112.194.60 pool.ntp.org: type A, class IN, addr 24.57.70.74 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 24 minutes, 9 seconds Data length: 4 Addr: 24.57.70.74 pool.ntp.org: type A, class IN, addr 129.215.160.240 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 24 minutes, 9 seconds Data length: 4 Addr: 129.215.160.240 pool.ntp.org: type A, class IN, addr 80.121.153.134 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 24 minutes, 9 seconds Data length: 4 Addr: 80.121.153.134 pool.ntp.org: type A, class IN, addr 84.16.227.218 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 24 minutes, 9 seconds Data length: 4 Addr: 84.16.227.218 pool.ntp.org: type A, class IN, addr 82.135.28.90 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 24 minutes, 9 seconds Data length: 4 Addr: 82.135.28.90 pool.ntp.org: type A, class IN, addr 24.34.79.42 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 24 minutes, 9 seconds Data length: 4 Addr: 24.34.79.42 pool.ntp.org: type A, class IN, addr 81.209.167.2 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 24 minutes, 9 seconds Data length: 4 Addr: 81.209.167.2 pool.ntp.org: type A, class IN, addr 124.10.47.8 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 24 minutes, 9 seconds Data length: 4 Addr: 124.10.47.8 pool.ntp.org: type A, class IN, addr 204.9.55.254 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 24 minutes, 9 seconds Data length: 4 Addr: 204.9.55.254 pool.ntp.org: type A, class IN, addr 72.249.38.88 Name: pool.ntp.org Type: A (Host address) Class: IN (0x0001) Time to live: 24 minutes, 9 seconds Data length: 4 Addr: 72.249.38.88 Authoritative nameservers pool.ntp.org: type NS, class IN, ns b.ntpns.org Name: pool.ntp.org Type: NS (Authoritative name server) Class: IN (0x0001) Time to live: 2 days, 1 hour, 51 minutes, 20 seconds Data length: 10 Name server: b.ntpns.org pool.ntp.org: type NS, class IN, ns d.ntpns.org Name: pool.ntp.org Type: NS (Authoritative name server) Class: IN (0x0001) Time to live: 2 days, 1 hour, 51 minutes, 20 seconds Data length: 4 Name server: d.ntpns.org pool.ntp.org: type NS, class IN, ns c.ntpns.org Name: pool.ntp.org Type: NS (Authoritative name server) Class: IN (0x0001) Time to live: 2 days, 1 hour, 51 minutes, 20 seconds Data length: 4 Name server: c.ntpns.org pool.ntp.org: type NS, class IN, ns e.ntpns.org Name: pool.ntp.org Type: NS (Authoritative name server) Class: IN (0x0001) Time to live: 2 days, 1 hour, 51 minutes, 20 seconds Data length: 4 Name server: e.ntpns.org pool.ntp.org: type NS, class IN, ns a.ntpns.org Name: pool.ntp.org Type: NS (Authoritative name server) Class: IN (0x0001) Time to live: 2 days, 1 hour, 51 minutes, 20 seconds Data length: 4 Name server: a.ntpns.org Additional records e.ntpns.org: type A, class IN, addr 70.63.21.246 Name: e.ntpns.org Type: A (Host address) Class: IN (0x0001) Time to live: 1 hour, 51 minutes, 20 seconds Data length: 4 Addr: 70.63.21.246 a.ntpns.org: type A, class IN, addr 216.52.237.236 Name: a.ntpns.org Type: A (Host address) Class: IN (0x0001) Time to live: 1 hour, 51 minutes, 20 seconds Data length: 4 Addr: 216.52.237.236 b.ntpns.org: type A, class IN, addr 67.19.103.171 Name: b.ntpns.org Type: A (Host address) Class: IN (0x0001) Time to live: 1 hour, 51 minutes, 20 seconds Data length: 4 Addr: 67.19.103.171 c.ntpns.org: type A, class IN, addr 193.138.215.60 Name: c.ntpns.org Type: A (Host address) Class: IN (0x0001) Time to live: 1 hour, 51 minutes, 20 seconds Data length: 4 Addr: 193.138.215.60 d.ntpns.org: type A, class IN, addr 217.114.97.98 Name: d.ntpns.org Type: A (Host address) Class: IN (0x0001) Time to live: 1 hour, 51 minutes, 20 seconds Data length: 4 Addr: 217.114.97.98 0000 00 11 95 bc e4 e3 00 18 f8 cb 8d 42 08 00 45 00 ...........B..E. 0010 01 c0 f1 cb 00 00 3f 11 05 aa c0 a8 00 01 c0 a8 ......?......... 0020 01 66 00 35 80 14 01 ac 11 ec 6a cb 81 80 00 01 .f.5......j..... 0030 00 0e 00 05 00 05 04 70 6f 6f 6c 03 6e 74 70 03 .......pool.ntp. 0040 6f 72 67 00 00 01 00 01 c0 0c 00 01 00 01 00 00 org............. 0050 05 a9 00 04 a3 19 6d 12 c0 0c 00 01 00 01 00 00 ......m......... 0060 05 a9 00 04 c3 ea bc 1a c0 0c 00 01 00 01 00 00 ................ 0070 05 a9 00 04 cd c9 98 33 c0 0c 00 01 00 01 00 00 .......3........ 0080 05 a9 00 04 3e 70 c2 3c c0 0c 00 01 00 01 00 00 ....>p.<........ 0090 05 a9 00 04 18 39 46 4a c0 0c 00 01 00 01 00 00 .....9FJ........ 00a0 05 a9 00 04 81 d7 a0 f0 c0 0c 00 01 00 01 00 00 ................ 00b0 05 a9 00 04 50 79 99 86 c0 0c 00 01 00 01 00 00 ....Py.......... 00c0 05 a9 00 04 54 10 e3 da c0 0c 00 01 00 01 00 00 ....T........... 00d0 05 a9 00 04 52 87 1c 5a c0 0c 00 01 00 01 00 00 ....R..Z........ 00e0 05 a9 00 04 18 22 4f 2a c0 0c 00 01 00 01 00 00 ....."O*........ 00f0 05 a9 00 04 51 d1 a7 02 c0 0c 00 01 00 01 00 00 ....Q........... 0100 05 a9 00 04 7c 0a 2f 08 c0 0c 00 01 00 01 00 00 ....|./......... 0110 05 a9 00 04 cc 09 37 fe c0 0c 00 01 00 01 00 00 ......7......... 0120 05 a9 00 04 48 f9 26 58 c0 0c 00 02 00 01 00 02 ....H.&X........ 0130 bd 18 00 0a 01 62 05 6e 74 70 6e 73 c0 15 c0 0c .....b.ntpns.... 0140 00 02 00 01 00 02 bd 18 00 04 01 64 c1 0c c0 0c ...........d.... 0150 00 02 00 01 00 02 bd 18 00 04 01 63 c1 0c c0 0c ...........c.... 0160 00 02 00 01 00 02 bd 18 00 04 01 65 c1 0c c0 0c ...........e.... 0170 00 02 00 01 00 02 bd 18 00 04 01 61 c1 0c c1 40 ...........a...@ 0180 00 01 00 01 00 00 1a 18 00 04 46 3f 15 f6 c1 50 ..........F?...P 0190 00 01 00 01 00 00 1a 18 00 04 d8 34 ed ec c1 0a ...........4.... 01a0 00 01 00 01 00 00 1a 18 00 04 43 13 67 ab c1 30 ..........C.g..0 01b0 00 01 00 01 00 00 1a 18 00 04 c1 8a d7 3c c1 20 .............<. 01c0 00 01 00 01 00 00 1a 18 00 04 d9 72 61 62 ...........rab No. Time Source Destination Protocol Info 9 0.277024 195.234.188.26 192.168.1.102 NTP NTP Frame 9 (90 bytes on wire, 90 bytes captured) Arrival Time: Jun 23, 2007 00:53:40.702449000 [Time delta from previous packet: 0.096124000 seconds] [Time since reference or first frame: 0.277024000 seconds] Frame Number: 9 Packet Length: 90 bytes Capture Length: 90 bytes [Frame is marked: False] [Protocols in frame: eth:ip:udp:ntp] [Coloring Rule Name: UDP] [Coloring Rule String: udp] Ethernet II, Src: Cisco-Li_cb:8d:42 (00:18:f8:cb:8d:42), Dst: D-Link_bc:e4:e3 (00:11:95:bc:e4:e3) Destination: D-Link_bc:e4:e3 (00:11:95:bc:e4:e3) Address: D-Link_bc:e4:e3 (00:11:95:bc:e4:e3) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Source: Cisco-Li_cb:8d:42 (00:18:f8:cb:8d:42) Address: Cisco-Li_cb:8d:42 (00:18:f8:cb:8d:42) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) Type: IP (0x0800) Internet Protocol, Src: 195.234.188.26 (195.234.188.26), Dst: 192.168.1.102 (192.168.1.102) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 76 Identification: 0x0000 (0) Flags: 0x04 (Don't Fragment) 0... = Reserved bit: Not set .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 40 Protocol: UDP (0x11) Header checksum: 0x108e [correct] [Good: True] [Bad : False] Source: 195.234.188.26 (195.234.188.26) Destination: 192.168.1.102 (192.168.1.102) User Datagram Protocol, Src Port: ntp (123), Dst Port: 32787 (32787) Source port: ntp (123) Destination port: 32787 (32787) Length: 56 Checksum: 0x7221 [correct] Network Time Protocol Flags: 0x1c 00.. .... = Leap Indicator: no warning (0) ..01 1... = Version number: NTP Version 3 (3) .... .100 = Mode: server (4) Peer Clock Stratum: primary reference (1) Peer Polling Interval: invalid (0) Peer Clock Precision: 0.000001 sec Root Delay: 0.0000 sec Clock Dispersion: 0.0112 sec Reference Clock ID: Global Positioning Service Reference Clock Update Time: Jun 23, 2007 05:53:25.8454 UTC Originate Time Stamp: NULL Receive Time Stamp: Jun 23, 2007 05:53:45.9453 UTC Transmit Time Stamp: Jun 23, 2007 05:53:45.9453 UTC 0000 00 11 95 bc e4 e3 00 18 f8 cb 8d 42 08 00 45 00 ...........B..E. 0010 00 4c 00 00 40 00 28 11 10 8e c3 ea bc 1a c0 a8 .L..@.(......... 0020 01 66 00 7b 80 13 00 38 72 21 1c 01 00 ec 00 00 .f.{...8r!...... 0030 00 00 00 00 02 df 47 50 53 00 ca 27 33 d5 d8 6d ......GPS..'3..m 0040 6a 0c 00 00 00 00 00 00 00 00 ca 27 33 e9 f1 ff j..........'3... 0050 e2 6a ca 27 33 e9 f2 01 0d 98 .j.'3.....