16:54:51.747662 IP (tos 0x0, ttl  64, id 5298, offset 0, flags [DF], proto: UDP (17), length: 109) 10.0.1.110.32808 > sd1225.sivit.org.domain: [udp sum ok]  22930 \
notify [b2&3=0x2400] [1a] SOA? sepac.fr. sepac.fr. SOA dns.aec-ri.com. alex.aec-ri.com. 2006071922 10800 3600 604800 38400 (81)
16:54:51.764835 IP (tos 0x0, ttl  55, id 32122, offset 0, flags [DF], proto: UDP (17), length: 54) sd1225.sivit.org.domain > 10.0.1.110.32808: [udp sum ok]  22930 \
notify* q: SOA? sepac.fr. 0/0/0 (26)
16:54:51.765588 IP (tos 0x0, ttl  55, id 41337, offset 0, flags [DF], proto: UDP (17), length: 54) sd1225.sivit.org.32768 > 10.0.1.110.domain: [udp sum ok]  7572 S\
OA? sepac.fr. (26)
16:54:51.765771 IP (tos 0x0, ttl  64, id 3634, offset 0, flags [DF], proto: UDP (17), length: 176) 10.0.1.110.domain > sd1225.sivit.org.32768: [udp sum ok]  7572* \
q: SOA? sepac.fr. 1/2/2 sepac.fr. SOA dns.aec-ri.com. alex.aec-ri.com. 2006071922 10800 3600 604800 38400 ns: sepac.fr. NS mordor.aec-ri.com., sepac.fr. NS dns.aec-ri.com. ar: dns.aec-ri.com. A dns.aec-ri.com, mordor.aec-ri.com. A sd1225.sivit.org (148)
16:55:06.766014 IP (tos 0x0, ttl  55, id 41338, offset 0, flags [DF], proto: UDP (17), length: 54) sd1225.sivit.org.32768 > 10.0.1.110.domain: [udp sum ok]  34589 SOA? sepac.fr. (26)
16:55:06.766308 IP (tos 0x0, ttl  64, id 3637, offset 0, flags [DF], proto: UDP (17), length: 176) 10.0.1.110.domain > sd1225.sivit.org.32768: [udp sum ok]  34589* q: SOA? sepac.fr. 1/2/2 sepac.fr. SOA dns.aec-ri.com. alex.aec-ri.com. 2006071922 10800 3600 604800 38400 ns: sepac.fr. NS dns.aec-ri.com., sepac.fr. NS mordor.aec-ri.com. ar: dns.aec-ri.com. A dns.aec-ri.com, mordor.aec-ri.com. A sd1225.sivit.org (148)