11:03:51.101910 IP (tos 0x0, ttl 127, id 416, offset 0, flags [none], length: 56) 10.1.203.1.1026 > 204.130.132.3.53: [udp sum ok] 5306+ A? thames.VSI. (28) 0x0000: 4500 0038 01a0 0000 7f11 148d 0a01 cb01 E..8............ 0x0010: cc82 8403 0402 0035 0024 d197 14ba 0100 .......5.$...... 0x0020: 0001 0000 0000 0000 0674 6861 6d65 7303 .........thames. 0x0030: 5653 4900 0001 0001 VSI..... 11:03:51.135497 IP (tos 0x0, ttl 243, id 31765, offset 0, flags [DF], length: 131) 204.130.132.3.53 > 10.1.203.1.1026: [udp sum ok] 5306 NXDomain* q: A? thames.VSI. 0/1/0 ns: . SOA A.ROOT-SERVERS.NET. NSTLD.VERISIGN-GRS.COM. 2006100600 1800 900 604800 86400 (103) 0x0000: 4500 0083 7c15 4000 f311 e5cb cc82 8403 E...|.@......... 0x0010: 0a01 cb01 0035 0402 006f 2a1c 14ba 8583 .....5...o*..... 0x0020: 0001 0000 0001 0000 0674 6861 6d65 7303 .........thames. 0x0030: 5653 4900 0001 0001 0000 0600 0100 0014 VSI............. 0x0040: f700 4001 410c 524f 4f54 2d53 4552 5645 ..@.A.ROOT-SERVE 0x0050: 5253 034e 4554 0005 4e53 544c 440c 5645 RS.NET..NSTLD.VE 0x0060: 5249 5349 474e 2d47 5253 0343 4f4d 0077 RISIGN-GRS.COM.w 0x0070: 92aa 7800 0007 0800 0003 8400 093a 8000 ..x..........:.. 0x0080: 0151 80 .Q. 11:03:51.137910 IP (tos 0x0, ttl 127, id 417, offset 0, flags [none], length: 75) 10.1.203.1.1026 > 204.130.132.3.53: [udp sum ok] 11451+ A? thames.VSI.visionshareinc.com. (47) 0x0000: 4500 004b 01a1 0000 7f11 1479 0a01 cb01 E..K.......y.... 0x0010: cc82 8403 0402 0035 0037 42ab 2cbb 0100 .......5.7B.,... 0x0020: 0001 0000 0000 0000 0674 6861 6d65 7303 .........thames. 0x0030: 5653 490e 7669 7369 6f6e 7368 6172 6569 VSI.visionsharei 0x0040: 6e63 0363 6f6d 0000 0100 01 nc.com..... 11:03:51.171902 IP (tos 0x0, ttl 243, id 31766, offset 0, flags [DF], length: 122) 204.130.132.3.53 > 10.1.203.1.1026: [udp sum ok] 11451 NXDomain* q: A? thames.VSI.visionshareinc.com. 0/1/0 ns: visionshareinc.com. SOA viper.visionshareinc.com. root.viper.visionshareinc.com. 2006100200 10800 900 604800 3600 (94) 0x0000: 4500 007a 7c16 4000 f311 e5d3 cc82 8403 E..z|.@......... 0x0010: 0a01 cb01 0035 0402 0066 627f 2cbb 8583 .....5...fb.,... 0x0020: 0001 0000 0001 0000 0674 6861 6d65 7303 .........thames. 0x0030: 5653 490e 7669 7369 6f6e 7368 6172 6569 VSI.visionsharei 0x0040: 6e63 0363 6f6d 0000 0100 01c0 1700 0600 nc.com.......... 0x0050: 0100 0008 7000 2305 7669 7065 72c0 1704 ....p.#.viper... 0x0060: 726f 6f74 c03b 7792 a8e8 0000 2a30 0000 root.;w.....*0.. 0x0070: 0384 0009 3a80 0000 0e10 ....:..... 11:03:54.394805 IP (tos 0x0, ttl 127, id 420, offset 0, flags [none], length: 105) 10.1.203.1.1026 > 204.130.132.3.53: [udp sum ok] 38072+ SRV? _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.VSI. (77) 0x0000: 4500 0069 01a4 0000 7f11 1458 0a01 cb01 E..i.......X.... 0x0010: cc82 8403 0402 0035 0055 db3e 94b8 0100 .......5.U.>.... 0x0020: 0001 0000 0000 0000 095f 6b65 7262 6572 ........._kerber 0x0030: 6f73 045f 7463 7017 4465 6661 756c 742d os._tcp.Default- 0x0040: 4669 7273 742d 5369 7465 2d4e 616d 6506 First-Site-Name. 0x0050: 5f73 6974 6573 0264 6306 5f6d 7364 6373 _sites.dc._msdcs 0x0060: 0356 5349 0000 2100 01 .VSI..!.. 11:03:54.430628 IP (tos 0x0, ttl 243, id 31779, offset 0, flags [DF], length: 180) 204.130.132.3.53 > 10.1.203.1.1026: [udp sum ok] 38072 NXDomain* q: SRV? _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.VSI. 0/1/0 ns: . SOA A.ROOT-SERVERS.NET. NSTLD.VERISIGN-GRS.COM. 2006100600 1800 900 604800 86400 (152) 0x0000: 4500 00b4 7c23 4000 f311 e58c cc82 8403 E...|#@......... 0x0010: 0a01 cb01 0035 0402 00a0 e124 94b8 8583 .....5.....$.... 0x0020: 0001 0000 0001 0000 095f 6b65 7262 6572 ........._kerber 0x0030: 6f73 045f 7463 7017 4465 6661 756c 742d os._tcp.Default- 0x0040: 4669 7273 742d 5369 7465 2d4e 616d 6506 First-Site-Name. 0x0050: 5f73 6974 6573 0264 6306 5f6d 7364 6373 _sites.dc._msdcs 0x0060: 0356 5349 0000 2100 0100 0006 0001 0000 .VSI..!......... 0x0070: 28d4 0040 0141 0c52 4f4f 542d 5345 5256 (..@.A.ROOT-SERV 0x0080: 4552 5303 4e45 5400 054e 5354 4c44 0c56 ERS.NET..NSTLD.V 0x0090: 4552 4953 4947 4e2d 4752 5303 434f 4d00 ERISIGN-GRS.COM. 0x00a0: 7792 aa78 0000 0708 0000 0384 0009 3a80 w..x..........:. 0x00b0: 0001 5180 ..Q. 11:03:54.437790 IP (tos 0x0, ttl 127, id 421, offset 0, flags [none], length: 74) 10.1.203.1.1026 > 204.130.132.3.53: [udp sum ok] 13752+ SRV? _kerberos._tcp.dc._msdcs.VSI. (46) 0x0000: 4500 004a 01a5 0000 7f11 1476 0a01 cb01 E..J.......v.... 0x0010: cc82 8403 0402 0035 0036 ab25 35b8 0100 .......5.6.%5... 0x0020: 0001 0000 0000 0000 095f 6b65 7262 6572 ........._kerber 0x0030: 6f73 045f 7463 7002 6463 065f 6d73 6463 os._tcp.dc._msdc 0x0040: 7303 5653 4900 0021 0001 s.VSI..!.. 11:03:54.472823 IP (tos 0x0, ttl 243, id 31780, offset 0, flags [DF], length: 149) 204.130.132.3.53 > 10.1.203.1.1026: [udp sum ok] 13752 NXDomain* q: SRV? _kerberos._tcp.dc._msdcs.VSI. 0/1/0 ns: . SOA A.ROOT-SERVERS.NET. NSTLD.VERISIGN-GRS.COM. 2006100600 1800 900 604800 86400 (121) 0x0000: 4500 0095 7c24 4000 f311 e5aa cc82 8403 E...|$@......... 0x0010: 0a01 cb01 0035 0402 0081 2696 35b8 8583 .....5....&.5... 0x0020: 0001 0000 0001 0000 095f 6b65 7262 6572 ........._kerber 0x0030: 6f73 045f 7463 7002 6463 065f 6d73 6463 os._tcp.dc._msdc 0x0040: 7303 5653 4900 0021 0001 0000 0600 0100 s.VSI..!........ 0x0050: 0028 d400 4001 410c 524f 4f54 2d53 4552 .(..@.A.ROOT-SER 0x0060: 5645 5253 034e 4554 0005 4e53 544c 440c VERS.NET..NSTLD. 0x0070: 5645 5249 5349 474e 2d47 5253 0343 4f4d VERISIGN-GRS.COM 0x0080: 0077 92aa 7800 0007 0800 0003 8400 093a .w..x..........: 0x0090: 8000 0151 80 ...Q.