Frame 1: 90 bytes on wire (720 bits), 90 bytes captured (720 bits)
    Encapsulation type: Ethernet (1)
    Arrival Time: Jun 14, 2017 16:14:27.112945000 CEST
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1497449667.112945000 seconds
    [Time delta from previous captured frame: 0.000000000 seconds]
    [Time delta from previous displayed frame: 0.000000000 seconds]
    [Time since reference or first frame: 0.000000000 seconds]
    Frame Number: 1
    Frame Length: 90 bytes (720 bits)
    Capture Length: 90 bytes (720 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ethertype:ipv6:udp:dns]
Ethernet II, Src: Cisco_5b:82:c2 (84:78:ac:5b:82:c2), Dst: Xensourc_4b:8c:5b (00:16:3e:4b:8c:5b)
    Destination: Xensourc_4b:8c:5b (00:16:3e:4b:8c:5b)
        Address: Xensourc_4b:8c:5b (00:16:3e:4b:8c:5b)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: Cisco_5b:82:c2 (84:78:ac:5b:82:c2)
        Address: Cisco_5b:82:c2 (84:78:ac:5b:82:c2)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6, Src: 2001:67c:217c:4::2, Dst: 2001:4b98:dc2:45:216:3eff:fe4b:8c5b
    0110 .... = Version: 6
    .... 0000 0000 .... .... .... .... .... = Traffic class: 0x00 (DSCP: CS0, ECN: Not-ECT)
        .... 0000 00.. .... .... .... .... .... = Differentiated Services Codepoint: Default (0)
        .... .... ..00 .... .... .... .... .... = Explicit Congestion Notification: Not ECN-Capable Transport (0)
    .... .... .... 0000 0000 0000 0000 0000 = Flow label: 0x00000
    Payload length: 36
    Next header: UDP (17)
    Hop limit: 59
    Source: 2001:67c:217c:4::2
    Destination: 2001:4b98:dc2:45:216:3eff:fe4b:8c5b
    [Destination SA MAC: Xensourc_4b:8c:5b (00:16:3e:4b:8c:5b)]
    [Source GeoIP: France]
        [Source GeoIP Country: France]
    [Destination GeoIP: France]
        [Destination GeoIP Country: France]
User Datagram Protocol, Src Port: 60115 (60115), Dst Port: domain (53)
    Source Port: 60115 (60115)
    Destination Port: domain (53)
    Length: 36
    Checksum: 0xa7f7 [correct]
        [Calculated Checksum: 0xa7f7]
    [Checksum Status: Good]
    [Stream index: 0]
Domain Name System (query)
    Transaction ID: 0x4e1d
    Flags: 0x0100 Standard query
        0... .... .... .... = Response: Message is a query
        .000 0... .... .... = Opcode: Standard query (0)
        .... ..0. .... .... = Truncated: Message is not truncated
        .... ...1 .... .... = Recursion desired: Do query recursively
        .... .... .0.. .... = Z: reserved (0)
        .... .... ...0 .... = Non-authenticated data: Unacceptable
    Questions: 1
    Answer RRs: 0
    Authority RRs: 0
    Additional RRs: 1
    Queries
        <Root>: type ANY, class IN
            Name: <Root>
            [Name Length: 0]
            [Label Count: 0]
            Type: * (A request for all records the server/cache has available) (255)
            Class: IN (0x0001)
    Additional records
        <Root>: type OPT
            Name: <Root>
            Type: OPT (41)
            UDP payload size: 4096
            Higher bits in extended RCODE: 0x00
            EDNS0 version: 0
            Z: 0x8000
                1... .... .... .... = DO bit: Accepts DNSSEC security RRs
                .000 0000 0000 0000 = Reserved: 0x0000
            Data length: 0

Frame 2: 1294 bytes on wire (10352 bits), 1294 bytes captured (10352 bits)
    Encapsulation type: Ethernet (1)
    Arrival Time: Jun 14, 2017 16:14:27.113171000 CEST
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1497449667.113171000 seconds
    [Time delta from previous captured frame: 0.000226000 seconds]
    [Time delta from previous displayed frame: 0.000226000 seconds]
    [Time since reference or first frame: 0.000226000 seconds]
    Frame Number: 2
    Frame Length: 1294 bytes (10352 bits)
    Capture Length: 1294 bytes (10352 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ethertype:ipv6:ipv6.fraghdr:data]
Ethernet II, Src: Xensourc_4b:8c:5b (00:16:3e:4b:8c:5b), Dst: Cisco_a0:02:8b (00:05:73:a0:02:8b)
    Destination: Cisco_a0:02:8b (00:05:73:a0:02:8b)
        Address: Cisco_a0:02:8b (00:05:73:a0:02:8b)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: Xensourc_4b:8c:5b (00:16:3e:4b:8c:5b)
        Address: Xensourc_4b:8c:5b (00:16:3e:4b:8c:5b)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6, Src: 2001:4b98:dc2:45:216:3eff:fe4b:8c5b, Dst: 2001:67c:217c:4::2
    0110 .... = Version: 6
    .... 0000 0000 .... .... .... .... .... = Traffic class: 0x00 (DSCP: CS0, ECN: Not-ECT)
        .... 0000 00.. .... .... .... .... .... = Differentiated Services Codepoint: Default (0)
        .... .... ..00 .... .... .... .... .... = Explicit Congestion Notification: Not ECN-Capable Transport (0)
    .... .... .... 0000 0000 0000 0000 0000 = Flow label: 0x00000
    Payload length: 1240
    Next header: Fragment Header for IPv6 (44)
    Hop limit: 64
    Source: 2001:4b98:dc2:45:216:3eff:fe4b:8c5b
    [Source SA MAC: Xensourc_4b:8c:5b (00:16:3e:4b:8c:5b)]
    Destination: 2001:67c:217c:4::2
    [Source GeoIP: France]
        [Source GeoIP Country: France]
    [Destination GeoIP: France]
        [Destination GeoIP Country: France]
    Fragment Header for IPv6
        Next header: UDP (17)
        Reserved octet: 0x00
        0000 0000 0000 0... = Offset: 0 (0 bytes)
        .... .... .... .00. = Reserved bits: 0
        .... .... .... ...1 = More Fragments: Yes
        Identification: 0xcbf66a8a
Data (1232 bytes)

0000  00 35 ea d3 0c 1d f8 42 4e 1d 85 00 00 01 00 23   .5.....BN......#
0010  00 00 00 01 00 00 ff 00 01 00 00 02 00 01 00 01   ................
0020  51 80 00 11 03 62 69 69 07 64 6e 73 2d 6c 61 62   Q....bii.dns-lab
0030  03 6e 65 74 00 00 00 02 00 01 00 01 51 80 00 13   .net........Q...
0040  04 79 65 74 69 04 62 6f 66 68 04 70 72 69 76 02   .yeti.bofh.priv.
0050  61 74 00 00 00 02 00 01 00 01 51 80 00 14 04 79   at........Q....y
0060  65 74 69 04 69 70 76 36 05 65 72 6e 65 74 02 69   eti.ipv6.ernet.i
0070  6e 00 00 00 02 00 01 00 01 51 80 00 12 04 79 65   n........Q....ye
0080  74 69 07 61 71 75 61 72 61 79 03 63 6f 6d 00 00   ti.aquaray.com..
0090  00 02 00 01 00 01 51 80 00 12 04 79 65 74 69 08   ......Q....yeti.
00a0  6d 69 6e 64 2d 64 6e 73 02 6e 6c 00 00 00 02 00   mind-dns.nl.....
00b0  01 00 01 51 80 00 13 05 64 61 68 75 31 04 79 65   ...Q....dahu1.ye
00c0  74 69 02 65 75 03 6f 72 67 00 00 00 02 00 01 00   ti.eu.org.......
00d0  01 51 80 00 08 05 64 61 68 75 32 c0 b5 00 00 02   .Q....dahu2.....
00e0  00 01 00 01 51 80 00 08 05 79 65 74 69 31 c0 5b   ....Q....yeti1.[
00f0  00 00 02 00 01 00 01 51 80 00 11 07 6e 73 2d 79   .......Q....ns-y
0100  65 74 69 06 62 6f 6e 64 69 73 c0 bd 00 00 02 00   eti.bondis......
0110  01 00 01 51 80 00 0f 07 79 65 74 69 2d 6e 73 02   ...Q....yeti-ns.
0120  69 78 02 72 75 00 00 00 02 00 01 00 01 51 80 00   ix.ru........Q..
0130  14 07 79 65 74 69 2d 6e 73 03 6c 61 62 03 6e 69   ..yeti-ns.lab.ni
0140  63 02 63 6c 00 00 00 02 00 01 00 01 51 80 00 0f   c.cl........Q...
0150  07 79 65 74 69 2d 6e 73 04 74 69 73 66 c0 28 00   .yeti-ns.tisf.(.
0160  00 02 00 01 00 01 51 80 00 14 07 79 65 74 69 2d   ......Q....yeti-
0170  6e 73 04 77 69 64 65 02 61 64 02 6a 70 00 00 00   ns.wide.ad.jp...
0180  02 00 01 00 01 51 80 00 12 07 79 65 74 69 2d 6e   .....Q....yeti-n
0190  73 05 63 6f 6e 69 74 02 63 6f 00 00 00 02 00 01   s.conit.co......
01a0  00 01 51 80 00 10 07 79 65 74 69 2d 6e 73 05 64   ..Q....yeti-ns.d
01b0  61 74 65 76 c0 28 00 00 02 00 01 00 01 51 80 00   atev.(.......Q..
01c0  13 07 79 65 74 69 2d 6e 73 06 73 77 69 74 63 68   ..yeti-ns.switch
01d0  02 63 68 00 00 00 02 00 01 00 01 51 80 00 12 07   .ch........Q....
01e0  79 65 74 69 2d 6e 73 07 61 73 35 39 37 31 35 c0   yeti-ns.as59715.
01f0  28 00 00 02 00 01 00 01 51 80 00 0b 08 79 65 74   (.......Q....yet
0200  69 2d 6e 73 31 c0 20 00 00 02 00 01 00 01 51 80   i-ns1. .......Q.
0210  00 0b 08 79 65 74 69 2d 6e 73 32 c0 20 00 00 02   ...yeti-ns2. ...
0220  00 01 00 01 51 80 00 0b 08 79 65 74 69 2d 6e 73   ....Q....yeti-ns
0230  33 c0 20 00 00 02 00 01 00 01 51 80 00 25 0a 78   3. .......Q..%.x
0240  6e 2d 2d 72 32 62 69 31 63 0c 78 6e 2d 2d 68 32   n--r2bi1c.xn--h2
0250  62 76 36 63 30 61 0b 78 6e 2d 2d 68 32 62 72 6a   bv6c0a.xn--h2brj
0260  39 63 00 00 00 02 00 01 00 01 51 80 00 19 0a 79   9c........Q....y
0270  65 74 69 2d 64 6e 73 30 31 0b 64 6e 73 77 6f 72   eti-dns01.dnswor
0280  6b 73 68 6f 70 c0 bd 00 00 02 00 01 00 01 51 80   kshop.........Q.
0290  00 0d 0a 79 65 74 69 2d 64 6e 73 30 32 c2 71 00   ...yeti-dns02.q.
02a0  00 02 00 01 00 01 51 80 00 2a 1e 33 66 37 39 62   ......Q..*.3f79b
02b0  62 37 62 34 33 35 62 30 35 33 32 31 36 35 31 64   b7b435b05321651d
02c0  61 65 66 64 33 37 34 63 64 08 79 65 74 69 2d 64   aefd374cd.yeti-d
02d0  6e 73 c0 28 00 00 02 00 01 00 01 51 80 00 21 1e   ns.(.......Q..!.
02e0  63 61 39 37 38 31 31 32 63 61 31 62 62 64 63 61   ca978112ca1bbdca
02f0  66 61 63 32 33 31 62 33 39 61 32 33 64 63 c2 c1   fac231b39a23dc..
0300  00 00 2e 00 01 00 01 51 80 01 13 00 02 08 00 00   .......Q........
0310  01 51 80 59 49 f8 a5 59 40 be 25 c6 b4 00 13 cc   .Q.YI..Y@.%.....
0320  4e 28 bc a6 6d d5 88 1a 42 bb 35 e7 b9 58 fa d6   N(..m...B.5..X..
0330  10 f9 5c a0 0b 22 cf fd 71 f8 5e 61 1c e6 b0 fa   ..\.."..q.^a....
0340  a7 af 37 ea 71 01 14 17 e0 e6 9c a9 63 d0 90 9f   ..7.q.......c...
0350  71 b2 20 66 60 24 ad 50 2e 67 34 35 fa e6 c1 eb   q. f`$.P.g45....
0360  7d b7 9c 9b 5c 82 a6 e4 b6 c9 21 7a bf 21 2a b3   }...\.....!z.!*.
0370  ab 00 0a 51 d2 be d4 05 07 a3 25 62 21 a4 39 33   ...Q......%b!.93
0380  18 35 3b 62 23 df f2 79 1d c2 a2 61 f3 bd 5b 3f   .5;b#..y...a..[?
0390  ab 67 c6 cb 20 92 c4 3e 5a af e0 f1 ef 93 98 df   .g.. ..>Z.......
03a0  b9 f0 04 a9 d3 60 c9 55 7f 55 80 a5 2f 42 18 19   .....`.U.U../B..
03b0  3c e9 21 bf 28 58 63 d9 5c 69 26 a4 e0 7f 70 86   <.!.(Xc.\i&...p.
03c0  50 3d 2c 0e 81 ad 1d d3 b8 75 92 70 24 bc 04 21   P=,......u.p$..!
03d0  92 ff 59 90 f6 b6 8f bf 0e 01 22 99 fa 4d 9e 99   ..Y......."..M..
03e0  55 69 01 33 95 48 12 7e 5b 47 0e df fe fe 75 8b   Ui.3.H.~[G....u.
03f0  3b 43 8e 6d 80 4b bf 58 36 51 e8 04 cf 5f 91 cd   ;C.m.K.X6Q..._..
0400  7d a9 c1 14 3b c3 0a 5a 35 8a ac f2 97 1c 78 8e   }...;..Z5.....x.
0410  fe 8f ab e3 6e 16 4a ec 13 e1 f4 e1 fc 09 00 00   ....n.J.........
0420  2f 00 01 00 01 51 80 00 0e 03 61 61 61 00 00 07   /....Q....aaa...
0430  22 00 00 00 00 03 80 00 00 2e 00 01 00 01 51 80   ".............Q.
0440  01 13 00 2f 08 00 00 01 51 80 59 49 f8 a5 59 40   .../....Q.YI..Y@
0450  be 25 c6 b4 00 60 5c b0 31 7d 4d 3d f6 79 e8 13   .%...`\.1}M=.y..
0460  5e ad ad 0e 82 c4 90 0e 5a 49 30 f4 7b 04 d6 ad   ^.......ZI0.{...
0470  1d da a5 c7 d4 56 5d e7 f8 1e ce d1 aa 4b 70 2d   .....V]......Kp-
0480  04 5b 8e 0f d3 ac 42 6f 79 f3 e9 d4 ff 0f 33 bb   .[....Boy.....3.
0490  54 e6 4b 24 4e f0 76 a6 77 aa 35 dc 66 43 69 01   T.K$N.v.w.5.fCi.
04a0  3c df 47 90 72 02 90 cb b2 65 74 19 c7 d4 23 38   <.G.r....et...#8
04b0  54 0e 74 77 28 ae ab d8 9b cc 95 7e 23 d8 27 b6   T.tw(......~#.'.
04c0  30 12 57 f4 56 ad ad 48 78 6e 2c da b7 fc 6b 31   0.W.V..Hxn,...k1
    Data: 0035ead30c1df8424e1d850000010023000000010000ff00...
    [Length: 1232]

Frame 3: 1294 bytes on wire (10352 bits), 1294 bytes captured (10352 bits)
    Encapsulation type: Ethernet (1)
    Arrival Time: Jun 14, 2017 16:14:27.113187000 CEST
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1497449667.113187000 seconds
    [Time delta from previous captured frame: 0.000016000 seconds]
    [Time delta from previous displayed frame: 0.000016000 seconds]
    [Time since reference or first frame: 0.000242000 seconds]
    Frame Number: 3
    Frame Length: 1294 bytes (10352 bits)
    Capture Length: 1294 bytes (10352 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ethertype:ipv6:ipv6.fraghdr:data]
Ethernet II, Src: Xensourc_4b:8c:5b (00:16:3e:4b:8c:5b), Dst: Cisco_a0:02:8b (00:05:73:a0:02:8b)
    Destination: Cisco_a0:02:8b (00:05:73:a0:02:8b)
        Address: Cisco_a0:02:8b (00:05:73:a0:02:8b)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: Xensourc_4b:8c:5b (00:16:3e:4b:8c:5b)
        Address: Xensourc_4b:8c:5b (00:16:3e:4b:8c:5b)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6, Src: 2001:4b98:dc2:45:216:3eff:fe4b:8c5b, Dst: 2001:67c:217c:4::2
    0110 .... = Version: 6
    .... 0000 0000 .... .... .... .... .... = Traffic class: 0x00 (DSCP: CS0, ECN: Not-ECT)
        .... 0000 00.. .... .... .... .... .... = Differentiated Services Codepoint: Default (0)
        .... .... ..00 .... .... .... .... .... = Explicit Congestion Notification: Not ECN-Capable Transport (0)
    .... .... .... 0000 0000 0000 0000 0000 = Flow label: 0x00000
    Payload length: 1240
    Next header: Fragment Header for IPv6 (44)
    Hop limit: 64
    Source: 2001:4b98:dc2:45:216:3eff:fe4b:8c5b
    [Source SA MAC: Xensourc_4b:8c:5b (00:16:3e:4b:8c:5b)]
    Destination: 2001:67c:217c:4::2
    [Source GeoIP: France]
        [Source GeoIP Country: France]
    [Destination GeoIP: France]
        [Destination GeoIP Country: France]
    Fragment Header for IPv6
        Next header: UDP (17)
        Reserved octet: 0x00
        0000 0100 1101 0... = Offset: 154 (1232 bytes)
        .... .... .... .00. = Reserved bits: 0
        .... .... .... ...1 = More Fragments: Yes
        Identification: 0xcbf66a8a
Data (1232 bytes)

0000  78 4b 86 f0 58 4d de 94 44 c9 59 39 5f 00 4a 3c   xK..XM..D.Y9_.J<
0010  8e ef e0 cd 2b 64 37 bb b2 aa ec a7 80 d1 96 7a   ....+d7........z
0020  19 bc e6 e6 be f6 21 d1 e6 47 cf 92 be 78 c8 5f   ......!..G...x._
0030  e6 8f e1 37 27 ec fb 27 7b 10 0b 16 8e 8d 8a 2a   ...7'..'{......*
0040  7e 1a ed 74 d4 f4 68 b2 88 9e 3d df 99 17 a9 4d   ~..t..h...=....M
0050  7c 19 81 cb 94 83 96 f2 76 e5 ad 4a ee 47 5e 9e   |.......v..J.G^.
0060  8f 8b 8a 2e c3 bb 86 65 8b 00 dc 3d ec 57 ce 0c   .......e...=.W..
0070  ab 93 f4 9a 8c ad e6 fd 9e 1e 9f a4 d7 93 e9 ec   ................
0080  db f5 80 d5 95 00 00 30 00 01 00 01 51 80 01 08   .......0....Q...
0090  01 00 03 08 03 01 00 01 ac a6 46 df 7d 7d 4e 3c   ..........F.}}N<
00a0  99 61 1a 78 de 13 7a c5 3f 9b e9 91 90 02 a8 fc   .a.x..z.?.......
00b0  43 10 b1 78 75 1f e5 04 89 41 ed 3d 4c d4 9c e2   C..xu....A.=L...
00c0  2f 1e 74 f7 1c 23 f1 11 e1 c1 9d 83 d5 e0 3b 5b   /.t..#........;[
00d0  63 67 e4 33 84 16 7c f9 30 4b 63 36 bd bf d2 65   cg.3..|.0Kc6...e
00e0  af 3d 37 30 dc 3b a0 6c 75 de 32 92 de bc 43 ea   .=70.;.lu.2...C.
00f0  eb 17 dc d1 94 84 10 81 e1 1b 12 3a 68 ae aa 67   ...........:h..g
0100  03 c0 52 e6 77 f0 1d 79 7f 1c 46 4b 14 46 69 8a   ..R.w..y..FK.Fi.
0110  de c0 fb d3 37 62 cf a6 0d d9 90 b5 10 76 e3 f8   ....7b.......v..
0120  3f 76 b7 c4 61 33 2e be 60 05 40 f5 a5 b8 75 95   ?v..a3..`.@...u.
0130  d7 d6 f3 ad 4b e8 99 18 01 da 38 a6 f6 73 14 a7   ....K.....8..s..
0140  1b 67 40 7a c6 25 42 b6 e6 55 41 96 8e 81 d8 c4   .g@z.%B..UA.....
0150  d9 9f 7f 49 ae ab 14 39 b3 15 dc 6c 7a 1d 00 e9   ...I...9...lz...
0160  6e 8b 76 06 12 20 1d 4f 53 7d fb 35 de 52 ac e1   n.v.. .OS}.5.R..
0170  cf 53 f7 73 74 a4 6c 68 1a bb 9f 06 2d 05 6f 8e   .S.st.lh....-.o.
0180  13 ea 08 b3 49 00 2e fa f6 7e c8 06 9b 56 b1 af   ....I....~...V..
0190  05 74 9c 14 91 4f a7 97 00 00 30 00 01 00 01 51   .t...O....0....Q
01a0  80 01 08 01 00 03 08 03 01 00 01 be be 95 60 d0   ..............`.
01b0  7a 23 2e 16 0d 17 91 a1 58 f0 04 4e 96 49 3b e4   z#......X..N.I;.
01c0  48 01 87 dc 6d 32 12 a7 35 7a 21 22 ab ee b4 21   H...m2..5z!"...!
01d0  06 8e b4 76 9f 7f 65 14 91 22 0d d6 ee 6a 5a 51   ...v..e.."...jZQ
01e0  02 55 93 8d 50 f0 44 74 3b af d2 e2 d5 19 f8 b7   .U..P.Dt;.......
01f0  5f 98 74 da 9d 94 3a 01 98 8b 2d c0 29 37 18 16   _.t...:...-.)7..
0200  fa ae 90 7d 42 d8 ce 0a 10 9b 2b 29 15 8b 33 47   ...}B.....+)..3G
0210  93 b9 dc 72 e3 2b a3 00 92 07 6c e6 a4 d1 91 de   ...r.+....l.....
0220  4e 3e c0 c1 10 a5 eb 86 8a 4b c3 e8 42 b7 68 c0   N>.......K..B.h.
0230  db b9 e4 17 89 b5 f8 ba fc cd d9 b0 42 50 24 ca   ............BP$.
0240  02 9c 9a 2f d8 85 62 79 bf 60 c1 5b ae ae 6f 0b   .../..by.`.[..o.
0250  f6 d8 53 69 b1 9b 40 b2 22 99 64 58 8f 3b ef 24   ..Si..@.".dX.;.$
0260  30 40 46 8c 99 2c 2c de 12 c9 40 7e 42 6d 93 ed   0@F..,,...@~Bm..
0270  e0 e1 e3 63 c8 2a ac d8 65 6e da 00 6e f0 67 2f   ...c.*..en..n.g/
0280  7c 57 7b cf 6c c2 6e a6 9f 8c b3 62 26 fd 27 ee   |W{.l.n....b&.'.
0290  36 16 25 0b 42 db fe b4 41 ac db 47 67 6a 53 d4   6.%.B...A..GgjS.
02a0  25 f1 13 f1 98 ca 64 d5 c7 a6 83 00 00 30 00 01   %.....d......0..
02b0  00 01 51 80 01 08 01 00 03 08 03 01 00 01 e5 6e   ..Q............n
02c0  30 56 0e 07 f7 f9 04 c8 c5 e3 ed af 08 e6 9c 3a   0V.............:
02d0  cf 68 44 02 63 02 1c f3 a4 37 6c fb bc 6a 35 31   .hD.c....7l..j51
02e0  06 71 c8 27 99 2b 68 15 50 04 f2 ae 33 d0 06 38   .q.'.+h.P...3..8
02f0  e2 38 53 d0 77 96 d1 31 e9 c8 7b bb 4c f9 9d e2   .8S.w..1..{.L...
0300  a7 6e 08 f2 2e 68 a1 60 0a f2 b4 72 e1 ac 96 70   .n...h.`...r...p
0310  24 ca c2 84 24 65 40 ce 89 a3 6a a9 94 53 20 8a   $...$e@...j..S .
0320  fe e1 75 ad 09 2a 89 d0 66 1a a2 09 bd 0e 14 e8   ..u..*..f.......
0330  20 7d 08 f1 60 a5 49 de 17 69 79 a0 14 7b 72 04    }..`.I..iy..{r.
0340  2c 4e b9 53 c2 c9 eb b1 4e 73 b5 8e 9b b1 92 39   ,N.S....Ns.....9
0350  3d e3 88 df cd e7 79 7d 13 48 7f d1 76 e2 80 33   =.....y}.H..v..3
0360  b0 c6 2e b2 1a 42 9a f7 b1 f0 49 13 f7 30 48 49   .....B....I..0HI
0370  72 8e 7e f6 7c 89 db 75 60 b8 44 85 12 bb 94 6b   r.~.|..u`.D....k
0380  43 d7 4e 12 a5 3f b6 73 a1 21 db 23 72 f6 b2 c2   C.N..?.s.!.#r...
0390  d5 39 04 d7 f6 66 20 ee c4 77 5b d6 22 94 94 77   .9...f ..w[."..w
03a0  dd 4a 9b f5 0e c9 9b 2e 28 97 71 58 e1 2f c7 84   .J......(.qX./..
03b0  4e 13 97 d2 71 fd 47 6d 25 9c 52 e2 ae 81 00 00   N...q.Gm%.R.....
03c0  30 00 01 00 01 51 80 01 08 01 01 03 08 03 01 00   0....Q..........
03d0  01 d6 59 a8 be b9 4c 0f e4 1e 42 ea d7 e3 8d e5   ..Y...L...B.....
03e0  e4 18 9b d3 d4 06 05 79 51 06 cf 71 0b 51 01 76   .......yQ..q.Q.v
03f0  da 77 59 7a 9b a4 74 88 92 20 e3 a2 22 c8 5c 94   .wYz..t.. ..".\.
0400  90 48 7e 1f b6 7d fe 83 cd 9e 43 3d ce e6 f6 4e   .H~..}....C=...N
0410  31 62 35 56 54 4a 7a 72 5a d3 ea 54 3e 67 1e b8   1b5VTJzrZ..T>g..
0420  54 39 d4 b7 c9 6f c0 5e 96 6e 34 9d f3 5f d5 c3   T9...o.^.n4.._..
0430  5d 4a 62 12 77 d3 3c e3 2b 52 26 69 a4 fd 5f ab   ]Jb.w.<.+R&i.._.
0440  1f e3 9c 00 bd 60 32 ec e0 ad ba a1 ca 03 c9 0a   .....`2.........
0450  7e ba 6b be 78 ea cf fd 33 9a 71 16 a0 fb da fd   ~.k.x...3.q.....
0460  36 24 33 b1 5b 97 1d 09 c2 c2 93 d8 e0 dc 25 03   6$3.[.........%.
0470  b4 11 68 e3 a3 06 22 3d b4 d1 03 0f 69 21 54 4e   ..h..."=....i!TN
0480  d8 cb 97 3f b1 96 22 ae 54 ce 4c 40 5b 5e 47 7d   ...?..".T.L@[^G}
0490  97 d5 95 a9 18 04 3b e8 a4 6f c1 8c 83 b8 60 39   ......;..o....`9
04a0  d7 6f aa 3e c8 b4 16 6f 05 40 02 41 cd dc d0 ea   .o.>...o.@.A....
04b0  9a 2e 71 19 c7 a0 b0 21 0a 63 c6 93 cf 61 dc a2   ..q....!.c...a..
04c0  11 d2 92 c0 71 87 dd 5d d3 7d 2f 80 11 09 56 f2   ....q..].}/...V.
    Data: 784b86f0584dde9444c959395f004a3c8eefe0cd2b6437bb...
    [Length: 1232]

Frame 4: 699 bytes on wire (5592 bits), 699 bytes captured (5592 bits)
    Encapsulation type: Ethernet (1)
    Arrival Time: Jun 14, 2017 16:14:27.113189000 CEST
    [Time shift for this packet: 0.000000000 seconds]
    Epoch Time: 1497449667.113189000 seconds
    [Time delta from previous captured frame: 0.000002000 seconds]
    [Time delta from previous displayed frame: 0.000002000 seconds]
    [Time since reference or first frame: 0.000244000 seconds]
    Frame Number: 4
    Frame Length: 699 bytes (5592 bits)
    Capture Length: 699 bytes (5592 bits)
    [Frame is marked: False]
    [Frame is ignored: False]
    [Protocols in frame: eth:ethertype:ipv6:ipv6.fraghdr:udp:dns]
Ethernet II, Src: Xensourc_4b:8c:5b (00:16:3e:4b:8c:5b), Dst: Cisco_a0:02:8b (00:05:73:a0:02:8b)
    Destination: Cisco_a0:02:8b (00:05:73:a0:02:8b)
        Address: Cisco_a0:02:8b (00:05:73:a0:02:8b)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Source: Xensourc_4b:8c:5b (00:16:3e:4b:8c:5b)
        Address: Xensourc_4b:8c:5b (00:16:3e:4b:8c:5b)
        .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default)
        .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
    Type: IPv6 (0x86dd)
Internet Protocol Version 6, Src: 2001:4b98:dc2:45:216:3eff:fe4b:8c5b, Dst: 2001:67c:217c:4::2
    0110 .... = Version: 6
    .... 0000 0000 .... .... .... .... .... = Traffic class: 0x00 (DSCP: CS0, ECN: Not-ECT)
        .... 0000 00.. .... .... .... .... .... = Differentiated Services Codepoint: Default (0)
        .... .... ..00 .... .... .... .... .... = Explicit Congestion Notification: Not ECN-Capable Transport (0)
    .... .... .... 0000 0000 0000 0000 0000 = Flow label: 0x00000
    Payload length: 645
    Next header: Fragment Header for IPv6 (44)
    Hop limit: 64
    Source: 2001:4b98:dc2:45:216:3eff:fe4b:8c5b
    [Source SA MAC: Xensourc_4b:8c:5b (00:16:3e:4b:8c:5b)]
    Destination: 2001:67c:217c:4::2
    [Source GeoIP: France]
        [Source GeoIP Country: France]
    [Destination GeoIP: France]
        [Destination GeoIP Country: France]
    Fragment Header for IPv6
        Next header: UDP (17)
        Reserved octet: 0x00
        0000 1001 1010 0... = Offset: 308 (2464 bytes)
        .... .... .... .00. = Reserved bits: 0
        .... .... .... ...0 = More Fragments: No
        Identification: 0xcbf66a8a
    [3 IPv6 Fragments (3101 bytes): #2(1232), #3(1232), #4(637)]
        [Frame: 2, payload: 0-1231 (1232 bytes)]
        [Frame: 3, payload: 1232-2463 (1232 bytes)]
        [Frame: 4, payload: 2464-3100 (637 bytes)]
        [Fragment count: 3]
        [Reassembled IPv6 length: 3101]
        [Reassembled IPv6 data: 0035ead30c1df8424e1d850000010023000000010000ff00...]
User Datagram Protocol, Src Port: domain (53), Dst Port: 60115 (60115)
    Source Port: domain (53)
    Destination Port: 60115 (60115)
    Length: 3101
    Checksum: 0xf842 [correct]
        [Calculated Checksum: 0xf842]
    [Checksum Status: Good]
    [Stream index: 0]
Domain Name System (response)
    [Request In: 1]
    [Time: 0.000244000 seconds]
    Transaction ID: 0x4e1d
    Flags: 0x8500 Standard query response, No error
        1... .... .... .... = Response: Message is a response
        .000 0... .... .... = Opcode: Standard query (0)
        .... .1.. .... .... = Authoritative: Server is an authority for domain
        .... ..0. .... .... = Truncated: Message is not truncated
        .... ...1 .... .... = Recursion desired: Do query recursively
        .... .... 0... .... = Recursion available: Server can't do recursive queries
        .... .... .0.. .... = Z: reserved (0)
        .... .... ..0. .... = Answer authenticated: Answer/authority portion was not authenticated by the server
        .... .... ...0 .... = Non-authenticated data: Unacceptable
        .... .... .... 0000 = Reply code: No error (0)
    Questions: 1
    Answer RRs: 35
    Authority RRs: 0
    Additional RRs: 1
    Queries
        <Root>: type ANY, class IN
            Name: <Root>
            [Name Length: 0]
            [Label Count: 0]
            Type: * (A request for all records the server/cache has available) (255)
            Class: IN (0x0001)
    Answers
        <Root>: type NS, class IN, ns bii.dns-lab.net
            Name: <Root>
            Type: NS (authoritative Name Server) (2)
            Class: IN (0x0001)
            Time to live: 86400
            Data length: 17
            Name Server: bii.dns-lab.net
        <Root>: type NS, class IN, ns yeti.bofh.priv.at
            Name: <Root>
            Type: NS (authoritative Name Server) (2)
            Class: IN (0x0001)
            Time to live: 86400
            Data length: 19
            Name Server: yeti.bofh.priv.at
        <Root>: type NS, class IN, ns yeti.ipv6.ernet.in
            Name: <Root>
            Type: NS (authoritative Name Server) (2)
            Class: IN (0x0001)
            Time to live: 86400
            Data length: 20
            Name Server: yeti.ipv6.ernet.in
        <Root>: type NS, class IN, ns yeti.aquaray.com
            Name: <Root>
            Type: NS (authoritative Name Server) (2)
            Class: IN (0x0001)
            Time to live: 86400
            Data length: 18
            Name Server: yeti.aquaray.com
        <Root>: type NS, class IN, ns yeti.mind-dns.nl
            Name: <Root>
            Type: NS (authoritative Name Server) (2)
            Class: IN (0x0001)
            Time to live: 86400
            Data length: 18
            Name Server: yeti.mind-dns.nl
        <Root>: type NS, class IN, ns dahu1.yeti.eu.org
            Name: <Root>
            Type: NS (authoritative Name Server) (2)
            Class: IN (0x0001)
            Time to live: 86400
            Data length: 19
            Name Server: dahu1.yeti.eu.org
        <Root>: type NS, class IN, ns dahu2.yeti.eu.org
            Name: <Root>
            Type: NS (authoritative Name Server) (2)
            Class: IN (0x0001)
            Time to live: 86400
            Data length: 8
            Name Server: dahu2.yeti.eu.org
        <Root>: type NS, class IN, ns yeti1.ipv6.ernet.in
            Name: <Root>
            Type: NS (authoritative Name Server) (2)
            Class: IN (0x0001)
            Time to live: 86400
            Data length: 8
            Name Server: yeti1.ipv6.ernet.in
        <Root>: type NS, class IN, ns ns-yeti.bondis.org
            Name: <Root>
            Type: NS (authoritative Name Server) (2)
            Class: IN (0x0001)
            Time to live: 86400
            Data length: 17
            Name Server: ns-yeti.bondis.org
        <Root>: type NS, class IN, ns yeti-ns.ix.ru
            Name: <Root>
            Type: NS (authoritative Name Server) (2)
            Class: IN (0x0001)
            Time to live: 86400
            Data length: 15
            Name Server: yeti-ns.ix.ru
        <Root>: type NS, class IN, ns yeti-ns.lab.nic.cl
            Name: <Root>
            Type: NS (authoritative Name Server) (2)
            Class: IN (0x0001)
            Time to live: 86400
            Data length: 20
            Name Server: yeti-ns.lab.nic.cl
        <Root>: type NS, class IN, ns yeti-ns.tisf.net
            Name: <Root>
            Type: NS (authoritative Name Server) (2)
            Class: IN (0x0001)
            Time to live: 86400
            Data length: 15
            Name Server: yeti-ns.tisf.net
        <Root>: type NS, class IN, ns yeti-ns.wide.ad.jp
            Name: <Root>
            Type: NS (authoritative Name Server) (2)
            Class: IN (0x0001)
            Time to live: 86400
            Data length: 20
            Name Server: yeti-ns.wide.ad.jp
        <Root>: type NS, class IN, ns yeti-ns.conit.co
            Name: <Root>
            Type: NS (authoritative Name Server) (2)
            Class: IN (0x0001)
            Time to live: 86400
            Data length: 18
            Name Server: yeti-ns.conit.co
        <Root>: type NS, class IN, ns yeti-ns.datev.net
            Name: <Root>
            Type: NS (authoritative Name Server) (2)
            Class: IN (0x0001)
            Time to live: 86400
            Data length: 16
            Name Server: yeti-ns.datev.net
        <Root>: type NS, class IN, ns yeti-ns.switch.ch
            Name: <Root>
            Type: NS (authoritative Name Server) (2)
            Class: IN (0x0001)
            Time to live: 86400
            Data length: 19
            Name Server: yeti-ns.switch.ch
        <Root>: type NS, class IN, ns yeti-ns.as59715.net
            Name: <Root>
            Type: NS (authoritative Name Server) (2)
            Class: IN (0x0001)
            Time to live: 86400
            Data length: 18
            Name Server: yeti-ns.as59715.net
        <Root>: type NS, class IN, ns yeti-ns1.dns-lab.net
            Name: <Root>
            Type: NS (authoritative Name Server) (2)
            Class: IN (0x0001)
            Time to live: 86400
            Data length: 11
            Name Server: yeti-ns1.dns-lab.net
        <Root>: type NS, class IN, ns yeti-ns2.dns-lab.net
            Name: <Root>
            Type: NS (authoritative Name Server) (2)
            Class: IN (0x0001)
            Time to live: 86400
            Data length: 11
            Name Server: yeti-ns2.dns-lab.net
        <Root>: type NS, class IN, ns yeti-ns3.dns-lab.net
            Name: <Root>
            Type: NS (authoritative Name Server) (2)
            Class: IN (0x0001)
            Time to live: 86400
            Data length: 11
            Name Server: yeti-ns3.dns-lab.net
        <Root>: type NS, class IN, ns xn--r2bi1c.xn--h2bv6c0a.xn--h2brj9c
            Name: <Root>
            Type: NS (authoritative Name Server) (2)
            Class: IN (0x0001)
            Time to live: 86400
            Data length: 37
            Name Server: xn--r2bi1c.xn--h2bv6c0a.xn--h2brj9c
        <Root>: type NS, class IN, ns yeti-dns01.dnsworkshop.org
            Name: <Root>
            Type: NS (authoritative Name Server) (2)
            Class: IN (0x0001)
            Time to live: 86400
            Data length: 25
            Name Server: yeti-dns01.dnsworkshop.org
        <Root>: type NS, class IN, ns yeti-dns02.dnsworkshop.org
            Name: <Root>
            Type: NS (authoritative Name Server) (2)
            Class: IN (0x0001)
            Time to live: 86400
            Data length: 13
            Name Server: yeti-dns02.dnsworkshop.org
        <Root>: type NS, class IN, ns 3f79bb7b435b05321651daefd374cd.yeti-dns.net
            Name: <Root>
            Type: NS (authoritative Name Server) (2)
            Class: IN (0x0001)
            Time to live: 86400
            Data length: 42
            Name Server: 3f79bb7b435b05321651daefd374cd.yeti-dns.net
        <Root>: type NS, class IN, ns ca978112ca1bbdcafac231b39a23dc.yeti-dns.net
            Name: <Root>
            Type: NS (authoritative Name Server) (2)
            Class: IN (0x0001)
            Time to live: 86400
            Data length: 33
            Name Server: ca978112ca1bbdcafac231b39a23dc.yeti-dns.net
        <Root>: type RRSIG, class IN
            Name: <Root>
            Type: RRSIG (46)
            Class: IN (0x0001)
            Time to live: 86400
            Data length: 275
            Type Covered: NS (authoritative Name Server) (2)
            Algorithm: RSA/SHA-256 (8)
            Labels: 0
            Original TTL: 86400 (1 day)
            Signature Expiration: Jun 21, 2017 06:40:05.000000000 CEST
            Signature Inception: Jun 14, 2017 06:40:05.000000000 CEST
            Key Tag: 50868
            Signer's name: <Root>
            Signature: 13cc4e28bca66dd5881a42bb35e7b958fad610f95ca00b22...
        <Root>: type NSEC, class IN, next domain name aaa
            Name: <Root>
            Type: NSEC (47)
            Class: IN (0x0001)
            Time to live: 86400
            Data length: 14
            Next Domain Name: aaa
            RR type in bit map: NS (authoritative Name Server)
            RR type in bit map: SOA (Start Of a zone of Authority)
            RR type in bit map: RRSIG
            RR type in bit map: NSEC
            RR type in bit map: DNSKEY
        <Root>: type RRSIG, class IN
            Name: <Root>
            Type: RRSIG (46)
            Class: IN (0x0001)
            Time to live: 86400
            Data length: 275
            Type Covered: NSEC (47)
            Algorithm: RSA/SHA-256 (8)
            Labels: 0
            Original TTL: 86400 (1 day)
            Signature Expiration: Jun 21, 2017 06:40:05.000000000 CEST
            Signature Inception: Jun 14, 2017 06:40:05.000000000 CEST
            Key Tag: 50868
            Signer's name: <Root>
            Signature: 605cb0317d4d3df679e8135eadad0e82c4900e5a4930f47b...
        <Root>: type DNSKEY, class IN
            Name: <Root>
            Type: DNSKEY (48)
            Class: IN (0x0001)
            Time to live: 86400
            Data length: 264
            Flags: 0x0100
                .... ...1 .... .... = Zone Key: This is the zone key for specified zone
                .... .... 0... .... = Key Revoked: No
                .... .... .... ...0 = Key Signing Key: No
                0000 000. .000 000. = Key Signing Key: 0x0000
                Protocol: 3
                Algorithm: RSA/SHA-256 (8)
            [Key id: 37404]
            Public Key: 03010001aca646df7d7d4e3c99611a78de137ac53f9be991...
        <Root>: type DNSKEY, class IN
            Name: <Root>
            Type: DNSKEY (48)
            Class: IN (0x0001)
            Time to live: 86400
            Data length: 264
            Flags: 0x0100
                .... ...1 .... .... = Zone Key: This is the zone key for specified zone
                .... .... 0... .... = Key Revoked: No
                .... .... .... ...0 = Key Signing Key: No
                0000 000. .000 000. = Key Signing Key: 0x0000
                Protocol: 3
                Algorithm: RSA/SHA-256 (8)
            [Key id: 50868]
            Public Key: 03010001bebe9560d07a232e160d1791a158f0044e96493b...
        <Root>: type DNSKEY, class IN
            Name: <Root>
            Type: DNSKEY (48)
            Class: IN (0x0001)
            Time to live: 86400
            Data length: 264
            Flags: 0x0100
                .... ...1 .... .... = Zone Key: This is the zone key for specified zone
                .... .... 0... .... = Key Revoked: No
                .... .... .... ...0 = Key Signing Key: No
                0000 000. .000 000. = Key Signing Key: 0x0000
                Protocol: 3
                Algorithm: RSA/SHA-256 (8)
            [Key id: 62655]
            Public Key: 03010001e56e30560e07f7f904c8c5e3edaf08e69c3acf68...
        <Root>: type DNSKEY, class IN
            Name: <Root>
            Type: DNSKEY (48)
            Class: IN (0x0001)
            Time to live: 86400
            Data length: 264
            Flags: 0x0101
                .... ...1 .... .... = Zone Key: This is the zone key for specified zone
                .... .... 0... .... = Key Revoked: No
                .... .... .... ...1 = Key Signing Key: Yes
                0000 000. .000 000. = Key Signing Key: 0x0000
                Protocol: 3
                Algorithm: RSA/SHA-256 (8)
            [Key id: 59302]
            Public Key: 03010001d659a8beb94c0fe41e42ead7e38de5e4189bd3d4...
        <Root>: type RRSIG, class IN
            Name: <Root>
            Type: RRSIG (46)
            Class: IN (0x0001)
            Time to live: 86400
            Data length: 275
            Type Covered: DNSKEY (48)
            Algorithm: RSA/SHA-256 (8)
            Labels: 0
            Original TTL: 86400 (1 day)
            Signature Expiration: Jun 21, 2017 06:40:05.000000000 CEST
            Signature Inception: Jun 14, 2017 06:40:05.000000000 CEST
            Key Tag: 59302
            Signer's name: <Root>
            Signature: 92678fea2e45f95a8587240829232302d91aba1ffa6a07fb...
        <Root>: type SOA, class IN, mname www.yeti-dns.org
            Name: <Root>
            Type: SOA (Start Of a zone of Authority) (6)
            Class: IN (0x0001)
            Time to live: 86400
            Data length: 42
            Primary name server: www.yeti-dns.org
            Responsible authority's mailbox: tisf.yeti-dns.org
            Serial Number: 2017061400
            Refresh Interval: 1800 (30 minutes)
            Retry Interval: 900 (15 minutes)
            Expire limit: 604800 (7 days)
            Minimum TTL: 86400 (1 day)
        <Root>: type RRSIG, class IN
            Name: <Root>
            Type: RRSIG (46)
            Class: IN (0x0001)
            Time to live: 86400
            Data length: 275
            Type Covered: SOA (Start Of a zone of Authority) (6)
            Algorithm: RSA/SHA-256 (8)
            Labels: 0
            Original TTL: 86400 (1 day)
            Signature Expiration: Jun 21, 2017 06:40:05.000000000 CEST
            Signature Inception: Jun 14, 2017 06:40:05.000000000 CEST
            Key Tag: 50868
            Signer's name: <Root>
            Signature: 385476c7ad242adeea3076c1bd99f9f8294dbf7f23f7a2cc...
    Additional records
        <Root>: type OPT
            Name: <Root>
            Type: OPT (41)
            UDP payload size: 4096
            Higher bits in extended RCODE: 0x00
            EDNS0 version: 0
            Z: 0x8000
                1... .... .... .... = DO bit: Accepts DNSSEC security RRs
                .000 0000 0000 0000 = Reserved: 0x0000
            Data length: 0