We help IT Professionals succeed at work.

Windows 2000 Server DNS resolving issues

BenthamLtd
BenthamLtd asked
on
783 Views
Last Modified: 2013-12-05
Hi, we currently have a Win2k SP4 AD network with one DC running DNS, DHCP.
We have a firebox firewall.

I have enabled DNS Forwarders and added in my isp's dns.

Now every couple of hours we have diffcultly browsing the internet.
If I then quickly restart the DNS services it all starts working again.

So this points to an issue with the DNS service on the server.

The server also runs cyblock proxy. 5.70

Has anyone else experinced this before?
Comment
Watch Question

Andrew DavisManager

Commented:
no i havent experianced that before with DNS, but i have had a weird problem with a licencing service before, and to simply buy me time to correctly resolve the problem i wrote a small script that stopped the service and then restarted it. then useing schedular i ran the script every X often. This worked flawlessly for several months till i had time to investigate the problem further.
About how to script this see http://www.computerperformance.co.uk/vbscript/wmi_services.htm
Brian PiercePhotographer
CERTIFIED EXPERT
Awarded 2007
Top Expert 2008
Commented:
This one is on us!
(Get your first solution completely free - no credit card required)
UNLOCK SOLUTION
Is there a reason you are forwarding to another server?  Root Hints work 99% of the time.  I would suggest removing the forwarding dns servers and just attempt to use Root Hints.  Forwarding just adds an extra step to the process.  Only use Forwarders if your ISP requires you to do so, or if for some reason you cannot connect to any of the root servers such as firewall blocking and you need to direct dns traffic.

Commented:
Are there any DNS errors shown in the DNS Eventlog of the dc?
I had the same problem and removing forwarders solved my problem. Try removing forwarders and see if this issue is resolved for you too..
Yes, you do not needthe forwarders. Make sure your root hints are set up properly (this the default) and see what happens.
Brian PiercePhotographer
CERTIFIED EXPERT
Awarded 2007
Top Expert 2008
Commented:
This one is on us!
(Get your first solution completely free - no credit card required)
UNLOCK SOLUTION
This one is on us!
(Get your first solution completely free - no credit card required)
UNLOCK SOLUTION

Author

Commented:
I have run ipconfig /displaydns

Is this the dns cache.

This was the result.

Windows IP Configuration

    ns1.gconnect.net
    ----------------------------------------
    Record Name . . . . . : ns1.gconnect.net
    Record Type . . . . . : 1
    Time To Live  . . . . : 18333
    Data Length . . . . . : 4
    Section . . . . . . . : Answer
    A (Host) Record . . . : 193.119.21.220


    ns33.1and1.co.uk
    ----------------------------------------
    Record Name . . . . . : ns33.1and1.co.uk
    Record Type . . . . . : 1
    Time To Live  . . . . : 6109
    Data Length . . . . . : 4
    Section . . . . . . . : Answer
    A (Host) Record . . . : 195.20.224.152


    ns1.demon.co.uk
    ----------------------------------------
    Record Name . . . . . : ns1.demon.co.uk
    Record Type . . . . . : 1
    Time To Live  . . . . : 5708
    Data Length . . . . . : 4
    Section . . . . . . . : Answer
    A (Host) Record . . . : 158.152.1.193


    ns1.easypost.com
    ----------------------------------------
    Record Name . . . . . : ns1.easypost.com
    Record Type . . . . . : 1
    Time To Live  . . . . : 7922
    Data Length . . . . . : 4
    Section . . . . . . . : Answer
    A (Host) Record . . . : 84.22.162.11


    ns0-e.dns.pipex.net
    ----------------------------------------
    Record Name . . . . . : ns0-e.dns.pipex.net
    Record Type . . . . . : 1
    Time To Live  . . . . : 17551
    Data Length . . . . . : 4
    Section . . . . . . . : Answer
    A (Host) Record . . . : 158.43.129.69


    ns.mediaways.net
    ----------------------------------------
    Record Name . . . . . : ns.mediaways.net
    Record Type . . . . . : 1
    Time To Live  . . . . : 193
    Data Length . . . . . : 4
    Section . . . . . . . : Answer
    A (Host) Record . . . : 193.189.224.2


    s0b.bluestreak.com
    ----------------------------------------
    Record Name . . . . . : s0b.bluestreak.com
    Record Type . . . . . : 1
    Time To Live  . . . . : 9610
    Data Length . . . . . : 4
    Section . . . . . . . : Answer
    A (Host) Record . . . : 12.130.12.31


    Record Name . . . . . : pdns1.ultradns.net
    Record Type . . . . . : 1
    Time To Live  . . . . : 9610
    Data Length . . . . . : 4
    Section . . . . . . . : Additional
    A (Host) Record . . . : 204.74.108.1


    Record Name . . . . . : pdns2.ultradns.net
    Record Type . . . . . : 1
    Time To Live  . . . . : 9610
    Data Length . . . . . : 4
    Section . . . . . . . : Additional
    A (Host) Record . . . : 204.74.109.1


    Record Name . . . . . : pdns3.ultradns.org
    Record Type . . . . . : 1
    Time To Live  . . . . : 9610
    Data Length . . . . . : 4
    Section . . . . . . . : Additional
    A (Host) Record . . . : 199.7.68.1


    Record Name . . . . . : pdns4.ultradns.org
    Record Type . . . . . : 1
    Time To Live  . . . . : 9610
    Data Length . . . . . : 4
    Section . . . . . . . : Additional
    A (Host) Record . . . : 199.7.69.1


    Record Name . . . . . : pdns5.ultradns.info
    Record Type . . . . . : 1
    Time To Live  . . . . : 9610
    Data Length . . . . . : 4
    Section . . . . . . . : Additional
    A (Host) Record . . . : 204.74.114.1


    Record Name . . . . . : pdns6.ultradns.co.uk
    Record Type . . . . . : 1
    Time To Live  . . . . : 9610
    Data Length . . . . . : 4
    Section . . . . . . . : Additional
    A (Host) Record . . . : 204.74.115.1


    ns4.anu.net
    ----------------------------------------
    Record Name . . . . . : ns4.anu.net
    Record Type . . . . . : 1
    Time To Live  . . . . : 16970
    Data Length . . . . . : 4
    Section . . . . . . . : Answer
    A (Host) Record . . . : 193.189.141.56


    dns-gtld-1.ision.net
    ----------------------------------------
    Record Name . . . . . : dns-gtld-1.ision.net
    Record Type . . . . . : 1
    Time To Live  . . . . : 193
    Data Length . . . . . : 4
    Section . . . . . . . : Answer
    A (Host) Record . . . : 195.180.208.2


    dns1.connaught.net
    -------------

Not much in there.

I am still having the problem.

I'm going to run for a day with forwarders disabled to see if that helps.

Author

Commented:
I still have the problem.

I have configured dns debugging.

Here is the last couple of minutes before it stopped working.

Sorry its abit long.

20070620 16:57:56 12A8 PACKET  UDP Rcv 82.165.13.243   17de R Q [0384 A    NXDOMAIN] (2)52(3)186(3)218(2)24(6)zombie(5)dnsbl(5)sorbs(3)net(0)
UDP response info at 00A01470
  Socket = 512
  Remote addr 82.165.13.243, port 53
  Time Query=254074, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x006e (110)
  Message:
    XID       0x17de
    Flags     0x8403
      QR        1 (RESPONSE)
      OPCODE    0 (QUERY)
      AA        1
      TC        0
      RD        0
      RA        0
      Z         0
      RCODE     3 (NXDOMAIN)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   1
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(2)52(3)186(3)218(2)24(6)zombie(5)dnsbl(5)sorbs(3)net(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
    Offset = 0x0036, RR count = 0
    Name      "[C021](5)dnsbl(5)sorbs(3)net(0)"
      TYPE   SOA  (6)
      CLASS  1
      TTL    3600
      DLEN   44
      DATA  
            PrimaryServer: (7)rbldns0[C027](5)sorbs(3)net(0)
            Administrator: (3)dns(4)isux(3)com(0)
            SerialNo     = 1182354357
            Refresh      = 7200
            Retry        = 7200
            Expire       = 604800
            MinimumTTL   = 3600
    ADDITIONAL SECTION:
      empty

20070620 16:57:56 12A8 PACKET  UDP Snd 10.0.0.4        376e R Q [0384 A    NXDOMAIN] (2)52(3)186(3)218(2)24(6)zombie(5)dnsbl(5)sorbs(3)net(0)
UDP response info at 00A01470
  Socket = 496
  Remote addr 10.0.0.4, port 10587
  Time Query=254074, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x006e (110)
  Message:
    XID       0x376e
    Flags     0x8403
      QR        1 (RESPONSE)
      OPCODE    0 (QUERY)
      AA        1
      TC        0
      RD        0
      RA        0
      Z         0
      RCODE     3 (NXDOMAIN)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   1
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(2)52(3)186(3)218(2)24(6)zombie(5)dnsbl(5)sorbs(3)net(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
    Offset = 0x0036, RR count = 0
    Name      "[C021](5)dnsbl(5)sorbs(3)net(0)"
      TYPE   SOA  (6)
      CLASS  1
      TTL    3600
      DLEN   44
      DATA  
            PrimaryServer: (7)rbldns0[C027](5)sorbs(3)net(0)
            Administrator: (3)dns(4)isux(3)com(0)
            SerialNo     = 1182354357
            Refresh      = 7200
            Retry        = 7200
            Expire       = 604800
            MinimumTTL   = 3600
    ADDITIONAL SECTION:
      empty

20070620 16:58:03 468 PACKET  UDP Rcv 10.0.0.92       fc91   Q [0001   D   NOERROR] (9)win2k3svr(7)Bentham(5)local(0)
UDP question info at 009EC3A0
  Socket = 496
  Remote addr 10.0.0.92, port 2384
  Time Query=254081, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0029 (41)
  Message:
    XID       0xfc91
    Flags     0x0100
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(9)win2k3svr(7)Bentham(5)local(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 16:58:03 468 PACKET  UDP Snd 10.0.0.92       fc91 R Q [8085 A DR  NOERROR] (9)win2k3svr(7)Bentham(5)local(0)
UDP response info at 009EC3A0
  Socket = 496
  Remote addr 10.0.0.92, port 2384
  Time Query=254081, Queued=0, Expire=0
  Buf length = 0x0200 (512)
  Msg length = 0x0039 (57)
  Message:
    XID       0xfc91
    Flags     0x8580
      QR        1 (RESPONSE)
      OPCODE    0 (QUERY)
      AA        1
      TC        0
      RD        1
      RA        1
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    1
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(9)win2k3svr(7)Bentham(5)local(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
    Offset = 0x0029, RR count = 0
    Name      "[C00C](9)win2k3svr(7)Bentham(5)local(0)"
      TYPE   A  (1)
      CLASS  1
      TTL    3600
      DLEN   4
      DATA   10.0.0.1
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 16:58:13 468 PACKET  UDP Rcv 10.0.0.4        0b16   Q [0001   D   NOERROR] (4)smtp(3)ijt(3)biz(0)
UDP question info at 009FA810
  Socket = 496
  Remote addr 10.0.0.4, port 10596
  Time Query=254091, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x001e (30)
  Message:
    XID       0x0b16
    Flags     0x0100
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(4)smtp(3)ijt(3)biz(0)"
      QTYPE   MX (15)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 16:58:13 468 PACKET  UDP Snd 10.0.0.4        0b16 R Q [8081   DR  NOERROR] (4)smtp(3)ijt(3)biz(0)
UDP response info at 009FA810
  Socket = 496
  Remote addr 10.0.0.4, port 10596
  Time Query=254091, Queued=0, Expire=0
  Buf length = 0x0200 (512)
  Msg length = 0x0058 (88)
  Message:
    XID       0x0b16
    Flags     0x8180
      QR        1 (RESPONSE)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        1
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   1
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(4)smtp(3)ijt(3)biz(0)"
      QTYPE   MX (15)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
    Offset = 0x001e, RR count = 0
    Name      "[C011](3)ijt(3)biz(0)"
      TYPE   SOA  (6)
      CLASS  1
      TTL    85755
      DLEN   46
      DATA  
            PrimaryServer: (3)ns1(3)anu(3)net(0)
            Administrator: (10)hostmaster[C02E](3)anu(3)net(0)
            SerialNo     = 2005012901
            Refresh      = 28800
            Retry        = 7200
            Expire       = 604800
            MinimumTTL   = 86400
    ADDITIONAL SECTION:
      empty

20070620 16:58:16 468 PACKET  UDP Rcv 10.0.0.158      577b   Q [0001   D   NOERROR] (9)win2k3svr(7)Bentham(5)local(0)
UDP question info at 00A0BE90
  Socket = 496
  Remote addr 10.0.0.158, port 1025
  Time Query=254094, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0029 (41)
  Message:
    XID       0x577b
    Flags     0x0100
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(9)win2k3svr(7)Bentham(5)local(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 16:58:16 468 PACKET  UDP Snd 10.0.0.158      577b R Q [8085 A DR  NOERROR] (9)win2k3svr(7)Bentham(5)local(0)
UDP response info at 00A0BE90
  Socket = 496
  Remote addr 10.0.0.158, port 1025
  Time Query=254094, Queued=0, Expire=0
  Buf length = 0x0200 (512)
  Msg length = 0x0039 (57)
  Message:
    XID       0x577b
    Flags     0x8580
      QR        1 (RESPONSE)
      OPCODE    0 (QUERY)
      AA        1
      TC        0
      RD        1
      RA        1
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    1
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(9)win2k3svr(7)Bentham(5)local(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
    Offset = 0x0029, RR count = 0
    Name      "[C00C](9)win2k3svr(7)Bentham(5)local(0)"
      TYPE   A  (1)
      CLASS  1
      TTL    3600
      DLEN   4
      DATA   10.0.0.1
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 16:58:39 12A8 PACKET  UDP Rcv 10.0.0.86       a6aa   Q [0001   D   NOERROR] (9)win2k3svr(7)Bentham(5)local(0)
UDP question info at 00A01EF0
  Socket = 496
  Remote addr 10.0.0.86, port 1025
  Time Query=254118, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0029 (41)
  Message:
    XID       0xa6aa
    Flags     0x0100
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(9)win2k3svr(7)Bentham(5)local(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 16:58:39 12A8 PACKET  UDP Snd 10.0.0.86       a6aa R Q [8085 A DR  NOERROR] (9)win2k3svr(7)Bentham(5)local(0)
UDP response info at 00A01EF0
  Socket = 496
  Remote addr 10.0.0.86, port 1025
  Time Query=254118, Queued=0, Expire=0
  Buf length = 0x0200 (512)
  Msg length = 0x0039 (57)
  Message:
    XID       0xa6aa
    Flags     0x8580
      QR        1 (RESPONSE)
      OPCODE    0 (QUERY)
      AA        1
      TC        0
      RD        1
      RA        1
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    1
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(9)win2k3svr(7)Bentham(5)local(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
    Offset = 0x0029, RR count = 0
    Name      "[C00C](9)win2k3svr(7)Bentham(5)local(0)"
      TYPE   A  (1)
      CLASS  1
      TTL    3600
      DLEN   4
      DATA   10.0.0.1
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 16:58:41 468 PACKET  UDP Rcv 10.0.0.4        4d41   Q [0001   D   NOERROR] (5)trend(7)Bentham(5)local(0)
UDP question info at 00A01470
  Socket = 496
  Remote addr 10.0.0.4, port 1027
  Time Query=254120, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0025 (37)
  Message:
    XID       0x4d41
    Flags     0x0100
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(5)trend(7)Bentham(5)local(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 16:58:41 468 PACKET  UDP Snd 10.0.0.4        4d41 R Q [8085 A DR  NOERROR] (5)trend(7)Bentham(5)local(0)
UDP response info at 00A01470
  Socket = 496
  Remote addr 10.0.0.4, port 1027
  Time Query=254120, Queued=0, Expire=0
  Buf length = 0x0200 (512)
  Msg length = 0x0035 (53)
  Message:
    XID       0x4d41
    Flags     0x8580
      QR        1 (RESPONSE)
      OPCODE    0 (QUERY)
      AA        1
      TC        0
      RD        1
      RA        1
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    1
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(5)trend(7)Bentham(5)local(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
    Offset = 0x0025, RR count = 0
    Name      "[C00C](5)trend(7)Bentham(5)local(0)"
      TYPE   A  (1)
      CLASS  1
      TTL    3600
      DLEN   4
      DATA   10.0.0.9
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 16:58:41 1E70 PACKET  TCP Rcv 10.0.0.4        b841   Q [0001   D   NOERROR] (3)_gc(4)_tcp(7)Bentham(5)local(0)
TCP question info at 02408B40
  Socket = 552
  Remote addr 10.0.0.4, port 10606
  Time Query=254120, Queued=0, Expire=0
  Buf length = 0x10000 (65536)
  Msg length = 0x0028 (40)
  Message:
    XID       0xb841
    Flags     0x0100
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(3)_gc(4)_tcp(7)Bentham(5)local(0)"
      QTYPE   SRV (33)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 16:58:41 1E70 PACKET  TCP Snd 10.0.0.4        b841 R Q [8085 A DR  NOERROR] (3)_gc(4)_tcp(7)Bentham(5)local(0)
TCP response info at 02408B40
  Socket = 552
  Remote addr 10.0.0.4, port 10606
  Time Query=254120, Queued=0, Expire=0
  Buf length = 0x10000 (65536)
  Msg length = 0x009a (154)
  Message:
    XID       0xb841
    Flags     0x8580
      QR        1 (RESPONSE)
      OPCODE    0 (QUERY)
      AA        1
      TC        0
      RD        1
      RA        1
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    2
    NSCOUNT   0
    ARCOUNT   2
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(3)_gc(4)_tcp(7)Bentham(5)local(0)"
      QTYPE   SRV (33)
      QCLASS  1
    ANSWER SECTION:
    Offset = 0x0028, RR count = 0
    Name      "[C00C](3)_gc(4)_tcp(7)Bentham(5)local(0)"
      TYPE   SRV  (33)
      CLASS  1
      TTL    600
      DLEN   27
      DATA               Priority     = 0
            Weight       = 100
            Port         = 3268
            Target host (5)trend(7)bentham(5)local(0)
    Offset = 0x004f, RR count = 1
    Name      "[C00C](3)_gc(4)_tcp(7)Bentham(5)local(0)"
      TYPE   SRV  (33)
      CLASS  1
      TTL    600
      DLEN   31
      DATA               Priority     = 0
            Weight       = 100
            Port         = 3268
            Target host (9)win2k3svr(7)bentham(5)local(0)
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
    Offset = 0x007a, RR count = 0
    Name      "[C03A](5)trend(7)bentham(5)local(0)"
      TYPE   A  (1)
      CLASS  1
      TTL    3600
      DLEN   4
      DATA   10.0.0.9
    Offset = 0x008a, RR count = 1
    Name      "[C061](9)win2k3svr(7)bentham(5)local(0)"
      TYPE   A  (1)
      CLASS  1
      TTL    3600
      DLEN   4
      DATA   10.0.0.1

20070620 16:58:41 1E70 PACKET  TCP Rcv 10.0.0.4        a442   Q [0001   D   NOERROR] (5)_ldap(4)_tcp(7)Bentham(5)local(0)
TCP question info at 02408B40
  Socket = 552
  Remote addr 10.0.0.4, port 10607
  Time Query=254120, Queued=0, Expire=0
  Buf length = 0x10000 (65536)
  Msg length = 0x002a (42)
  Message:
    XID       0xa442
    Flags     0x0100
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(5)_ldap(4)_tcp(7)Bentham(5)local(0)"
      QTYPE   SRV (33)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 16:58:41 1E70 PACKET  TCP Snd 10.0.0.4        a442 R Q [8085 A DR  NOERROR] (5)_ldap(4)_tcp(7)Bentham(5)local(0)
TCP response info at 02408B40
  Socket = 552
  Remote addr 10.0.0.4, port 10607
  Time Query=254120, Queued=0, Expire=0
  Buf length = 0x10000 (65536)
  Msg length = 0x009c (156)
  Message:
    XID       0xa442
    Flags     0x8580
      QR        1 (RESPONSE)
      OPCODE    0 (QUERY)
      AA        1
      TC        0
      RD        1
      RA        1
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    2
    NSCOUNT   0
    ARCOUNT   2
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(5)_ldap(4)_tcp(7)Bentham(5)local(0)"
      QTYPE   SRV (33)
      QCLASS  1
    ANSWER SECTION:
    Offset = 0x002a, RR count = 0
    Name      "[C00C](5)_ldap(4)_tcp(7)Bentham(5)local(0)"
      TYPE   SRV  (33)
      CLASS  1
      TTL    600
      DLEN   31
      DATA               Priority     = 0
            Weight       = 100
            Port         = 389
            Target host (9)win2k3svr(7)bentham(5)local(0)
    Offset = 0x0055, RR count = 1
    Name      "[C00C](5)_ldap(4)_tcp(7)Bentham(5)local(0)"
      TYPE   SRV  (33)
      CLASS  1
      TTL    600
      DLEN   27
      DATA               Priority     = 0
            Weight       = 100
            Port         = 389
            Target host (5)trend(7)bentham(5)local(0)
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
    Offset = 0x007c, RR count = 0
    Name      "[C03C](9)win2k3svr(7)bentham(5)local(0)"
      TYPE   A  (1)
      CLASS  1
      TTL    3600
      DLEN   4
      DATA   10.0.0.1
    Offset = 0x008c, RR count = 1
    Name      "[C067](5)trend(7)bentham(5)local(0)"
      TYPE   A  (1)
      CLASS  1
      TTL    3600
      DLEN   4
      DATA   10.0.0.9

20070620 16:58:49 468 PACKET  UDP Rcv 10.0.0.4        0b17   Q [0001   D   NOERROR] (4)smtp(3)ijt(3)biz(0)
UDP question info at 009EC3A0
  Socket = 496
  Remote addr 10.0.0.4, port 10619
  Time Query=254127, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x001e (30)
  Message:
    XID       0x0b17
    Flags     0x0100
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(4)smtp(3)ijt(3)biz(0)"
      QTYPE   MX (15)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 16:58:49 468 PACKET  UDP Snd 10.0.0.4        0b17 R Q [8081   DR  NOERROR] (4)smtp(3)ijt(3)biz(0)
UDP response info at 009EC3A0
  Socket = 496
  Remote addr 10.0.0.4, port 10619
  Time Query=254127, Queued=0, Expire=0
  Buf length = 0x0200 (512)
  Msg length = 0x0058 (88)
  Message:
    XID       0x0b17
    Flags     0x8180
      QR        1 (RESPONSE)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        1
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   1
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(4)smtp(3)ijt(3)biz(0)"
      QTYPE   MX (15)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
    Offset = 0x001e, RR count = 0
    Name      "[C011](3)ijt(3)biz(0)"
      TYPE   SOA  (6)
      CLASS  1
      TTL    85719
      DLEN   46
      DATA  
            PrimaryServer: (3)ns1(3)anu(3)net(0)
            Administrator: (10)hostmaster[C02E](3)anu(3)net(0)
            SerialNo     = 2005012901
            Refresh      = 28800
            Retry        = 7200
            Expire       = 604800
            MinimumTTL   = 86400
    ADDITIONAL SECTION:
      empty

20070620 16:59:11 468 PACKET  UDP Rcv 10.0.0.156      e4d5   Q [0001   D   NOERROR] (5)trend(7)Bentham(5)local(0)
UDP question info at 009FA810
  Socket = 496
  Remote addr 10.0.0.156, port 1026
  Time Query=254149, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0025 (37)
  Message:
    XID       0xe4d5
    Flags     0x0100
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(5)trend(7)Bentham(5)local(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 16:59:11 468 PACKET  UDP Snd 10.0.0.156      e4d5 R Q [8085 A DR  NOERROR] (5)trend(7)Bentham(5)local(0)
UDP response info at 009FA810
  Socket = 496
  Remote addr 10.0.0.156, port 1026
  Time Query=254149, Queued=0, Expire=0
  Buf length = 0x0200 (512)
  Msg length = 0x0035 (53)
  Message:
    XID       0xe4d5
    Flags     0x8580
      QR        1 (RESPONSE)
      OPCODE    0 (QUERY)
      AA        1
      TC        0
      RD        1
      RA        1
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    1
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(5)trend(7)Bentham(5)local(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
    Offset = 0x0025, RR count = 0
    Name      "[C00C](5)trend(7)Bentham(5)local(0)"
      TYPE   A  (1)
      CLASS  1
      TTL    3600
      DLEN   4
      DATA   10.0.0.9
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 16:59:17 12A8 PACKET  UDP Rcv 10.0.0.3        dd97   Q [0001   D   NOERROR] (4)wpad(7)Bentham(5)local(0)
UDP question info at 00A0BE90
  Socket = 496
  Remote addr 10.0.0.3, port 3402
  Time Query=254156, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0024 (36)
  Message:
    XID       0xdd97
    Flags     0x0100
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(4)wpad(7)Bentham(5)local(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 16:59:17 12A8 PACKET  UDP Snd 10.0.0.3        dd97 R Q [8385 A DR NXDOMAIN] (4)wpad(7)Bentham(5)local(0)
UDP response info at 00A0BE90
  Socket = 496
  Remote addr 10.0.0.3, port 3402
  Time Query=254156, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x006a (106)
  Message:
    XID       0xdd97
    Flags     0x8583
      QR        1 (RESPONSE)
      OPCODE    0 (QUERY)
      AA        1
      TC        0
      RD        1
      RA        1
      Z         0
      RCODE     3 (NXDOMAIN)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   1
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(4)wpad(7)Bentham(5)local(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
    Offset = 0x0024, RR count = 0
    Name      "(7)bentham(5)local(0)"
      TYPE   SOA  (6)
      CLASS  1
      TTL    3600
      DLEN   45
      DATA  
            PrimaryServer: (9)win2k3svr[C024](7)bentham(5)local(0)
            Administrator: (10)hostmaster[C024](7)bentham(5)local(0)
            SerialNo     = 133
            Refresh      = 900
            Retry        = 600
            Expire       = 86400
            MinimumTTL   = 3600
    ADDITIONAL SECTION:
      empty

20070620 16:59:17 468 PACKET  UDP Rcv 10.0.0.3        1797   Q [0001   D   NOERROR] (8)download(13)windowsupdate(3)com(0)
UDP question info at 00A01EF0
  Socket = 496
  Remote addr 10.0.0.3, port 3403
  Time Query=254156, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x002c (44)
  Message:
    XID       0x1797
    Flags     0x0100
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(8)download(13)windowsupdate(3)com(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 16:59:17 468 PACKET  UDP Snd 208.185.132.166 1fe4   Q [0000       NOERROR] (4)main(2)dl(2)wu(6)akadns(3)net(0)
UDP question info at 009F9280
  Socket = 512
  Remote addr 208.185.132.166, port 53
  Time Query=0, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0027 (39)
  Message:
    XID       0x1fe4
    Flags     0x0000
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        0
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(4)main(2)dl(2)wu(6)akadns(3)net(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 16:59:18 12A8 PACKET  UDP Rcv 208.185.132.166 1fe4 R Q [0080       NOERROR] (4)main(2)dl(2)wu(6)akadns(3)net(0)
UDP response info at 009ED910
  Socket = 512
  Remote addr 208.185.132.166, port 53
  Time Query=254156, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0176 (374)
  Message:
    XID       0x1fe4
    Flags     0x8000
      QR        1 (RESPONSE)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        0
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    3
    NSCOUNT   8
    ARCOUNT   8
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(4)main(2)dl(2)wu(6)akadns(3)net(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
    Offset = 0x0027, RR count = 0
    Name      "[C00C](4)main(2)dl(2)wu(6)akadns(3)net(0)"
      TYPE   CNAME  (5)
      CLASS  1
      TTL    300
      DLEN   7
      DATA   (4)intl[C011](2)dl(2)wu(6)akadns(3)net(0)
    Offset = 0x003a, RR count = 1
    Name      "[C033](4)intl[C011](2)dl(2)wu(6)akadns(3)net(0)"
      TYPE   CNAME  (5)
      CLASS  1
      TTL    300
      DLEN   15
      DATA   (2)dl(2)wu(2)ms(3)geo[C017](6)akadns(3)net(0)
    Offset = 0x0055, RR count = 2
    Name      "[C046](2)dl(2)wu(2)ms(3)geo[C017](6)akadns(3)net(0)"
      TYPE   CNAME  (5)
      CLASS  1
      TTL    3600
      DLEN   16
      DATA   (3)a26(2)ms(6)akamai[C01E](3)net(0)
    AUTHORITY SECTION:
    Offset = 0x0071, RR count = 0
    Name      "(0)"
      TYPE   NS  (2)
      CLASS  1
      TTL    1000
      DLEN   17
      DATA   (1)H(12)ROOT-SERVERS[C01E](3)net(0)
    Offset = 0x008d, RR count = 1
    Name      "(0)"
      TYPE   NS  (2)
      CLASS  1
      TTL    1000
      DLEN   4
      DATA   (1)G[C07E](12)ROOT-SERVERS[C01E](3)net(0)
    Offset = 0x009c, RR count = 2
    Name      "(0)"
      TYPE   NS  (2)
      CLASS  1
      TTL    1000
      DLEN   4
      DATA   (1)E[C07E](12)ROOT-SERVERS[C01E](3)net(0)
    Offset = 0x00ab, RR count = 3
    Name      "(0)"
      TYPE   NS  (2)
      CLASS  1
      TTL    1000
      DLEN   4
      DATA   (1)M[C07E](12)ROOT-SERVERS[C01E](3)net(0)
    Offset = 0x00ba, RR count = 4
    Name      "(0)"
      TYPE   NS  (2)
      CLASS  1
      TTL    1000
      DLEN   4
      DATA   (1)K[C07E](12)ROOT-SERVERS[C01E](3)net(0)
    Offset = 0x00c9, RR count = 5
    Name      "(0)"
      TYPE   NS  (2)
      CLASS  1
      TTL    1000
      DLEN   4
      DATA   (1)C[C07E](12)ROOT-SERVERS[C01E](3)net(0)
    Offset = 0x00d8, RR count = 6
    Name      "(0)"
      TYPE   NS  (2)
      CLASS  1
      TTL    1000
      DLEN   4
      DATA   (1)F[C07E](12)ROOT-SERVERS[C01E](3)net(0)
    Offset = 0x00e7, RR count = 7
    Name      "(0)"
      TYPE   NS  (2)
      CLASS  1
      TTL    1000
      DLEN   4
      DATA   (1)L[C07E](12)ROOT-SERVERS[C01E](3)net(0)
    ADDITIONAL SECTION:
    Offset = 0x00f6, RR count = 0
    Name      "[C07C](1)H(12)ROOT-SERVERS[C01E](3)net(0)"
      TYPE   A  (1)
      CLASS  1
      TTL    1000
      DLEN   4
      DATA   128.63.2.53
    Offset = 0x0106, RR count = 1
    Name      "[C098](1)G[C07E](12)ROOT-SERVERS[C01E](3)net(0)"
      TYPE   A  (1)
      CLASS  1
      TTL    1000
      DLEN   4
      DATA   192.112.36.4
    Offset = 0x0116, RR count = 2
    Name      "[C0A7](1)E[C07E](12)ROOT-SERVERS[C01E](3)net(0)"
      TYPE   A  (1)
      CLASS  1
      TTL    1000
      DLEN   4
      DATA   192.203.230.10
    Offset = 0x0126, RR count = 3
    Name      "[C0B6](1)M[C07E](12)ROOT-SERVERS[C01E](3)net(0)"
      TYPE   A  (1)
      CLASS  1
      TTL    1000
      DLEN   4
      DATA   202.12.27.33
    Offset = 0x0136, RR count = 4
    Name      "[C0C5](1)K[C07E](12)ROOT-SERVERS[C01E](3)net(0)"
      TYPE   A  (1)
      CLASS  1
      TTL    1000
      DLEN   4
      DATA   193.0.14.129
    Offset = 0x0146, RR count = 5
    Name      "[C0D4](1)C[C07E](12)ROOT-SERVERS[C01E](3)net(0)"
      TYPE   A  (1)
      CLASS  1
      TTL    1000
      DLEN   4
      DATA   192.33.4.12
    Offset = 0x0156, RR count = 6
    Name      "[C0E3](1)F[C07E](12)ROOT-SERVERS[C01E](3)net(0)"
      TYPE   A  (1)
      CLASS  1
      TTL    1000
      DLEN   4
      DATA   192.5.5.241
    Offset = 0x0166, RR count = 7
    Name      "[C0F2](1)L[C07E](12)ROOT-SERVERS[C01E](3)net(0)"
      TYPE   A  (1)
      CLASS  1
      TTL    1000
      DLEN   4
      DATA   198.32.64.12

20070620 16:59:18 12A8 PACKET  UDP Snd 84.53.134.195   2fef   Q [0000       NOERROR] (3)a26(2)ms(6)akamai(3)net(0)
UDP question info at 009F9280
  Socket = 512
  Remote addr 84.53.134.195, port 53
  Time Query=0, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0023 (35)
  Message:
    XID       0x2fef
    Flags     0x0000
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        0
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(3)a26(2)ms(6)akamai(3)net(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 16:59:18 468 PACKET  UDP Rcv 84.53.134.195   2fef R Q [0084 A     NOERROR] (3)a26(2)ms(6)akamai(3)net(0)
UDP response info at 00A06EC0
  Socket = 512
  Remote addr 84.53.134.195, port 53
  Time Query=254156, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0043 (67)
  Message:
    XID       0x2fef
    Flags     0x8400
      QR        1 (RESPONSE)
      OPCODE    0 (QUERY)
      AA        1
      TC        0
      RD        0
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    2
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(3)a26(2)ms(6)akamai(3)net(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
    Offset = 0x0023, RR count = 0
    Name      "[C00C](3)a26(2)ms(6)akamai(3)net(0)"
      TYPE   A  (1)
      CLASS  1
      TTL    20
      DLEN   4
      DATA   84.53.137.40
    Offset = 0x0033, RR count = 1
    Name      "[C00C](3)a26(2)ms(6)akamai(3)net(0)"
      TYPE   A  (1)
      CLASS  1
      TTL    20
      DLEN   4
      DATA   84.53.137.41
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 16:59:18 468 PACKET  UDP Snd 10.0.0.3        1797 R Q [8081   DR  NOERROR] (8)download(13)windowsupdate(3)com(0)
UDP response info at 00A01EF0
  Socket = 496
  Remote addr 10.0.0.3, port 3403
  Time Query=254156, Queued=254156, Expire=254159
  Buf length = 0x0200 (512)
  Msg length = 0x00b9 (185)
  Message:
    XID       0x1797
    Flags     0x8180
      QR        1 (RESPONSE)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        1
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    6
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(8)download(13)windowsupdate(3)com(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
    Offset = 0x002c, RR count = 0
    Name      "[C00C](8)download(13)windowsupdate(3)com(0)"
      TYPE   CNAME  (5)
      CLASS  1
      TTL    2964
      DLEN   23
      DATA   (4)main(2)dl(2)wu(6)akadns(3)net(0)
    Offset = 0x004f, RR count = 1
    Name      "[C038](4)main(2)dl(2)wu(6)akadns(3)net(0)"
      TYPE   CNAME  (5)
      CLASS  1
      TTL    300
      DLEN   7
      DATA   (4)intl[C03D](2)dl(2)wu(6)akadns(3)net(0)
    Offset = 0x0062, RR count = 2
    Name      "[C05B](4)intl[C03D](2)dl(2)wu(6)akadns(3)net(0)"
      TYPE   CNAME  (5)
      CLASS  1
      TTL    300
      DLEN   15
      DATA   (2)dl(2)wu(2)ms(3)geo[C043](6)akadns(3)net(0)
    Offset = 0x007d, RR count = 3
    Name      "[C06E](2)dl(2)wu(2)ms(3)geo[C043](6)akadns(3)net(0)"
      TYPE   CNAME  (5)
      CLASS  1
      TTL    3600
      DLEN   16
      DATA   (3)a26(2)ms(6)akamai[C04A](3)net(0)
    Offset = 0x0099, RR count = 4
    Name      "[C089](3)a26(2)ms(6)akamai[C04A](3)net(0)"
      TYPE   A  (1)
      CLASS  1
      TTL    20
      DLEN   4
      DATA   84.53.137.40
    Offset = 0x00a9, RR count = 5
    Name      "[C089](3)a26(2)ms(6)akamai[C04A](3)net(0)"
      TYPE   A  (1)
      CLASS  1
      TTL    20
      DLEN   4
      DATA   84.53.137.41
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 16:59:18 468 PACKET  UDP Rcv 10.0.0.3        ef88   Q [0001   D   NOERROR] (3)www(6)update(9)microsoft(3)com(0)
UDP question info at 00A01470
  Socket = 496
  Remote addr 10.0.0.3, port 3405
  Time Query=254156, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x002a (42)
  Message:
    XID       0xef88
    Flags     0x0100
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(3)www(6)update(9)microsoft(3)com(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 16:59:18 468 PACKET  UDP Snd 65.54.240.126   0ff6   Q [0000       NOERROR] (3)www(6)update(9)microsoft(3)com(0)
UDP question info at 00A01EF0
  Socket = 512
  Remote addr 65.54.240.126, port 53
  Time Query=0, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x002a (42)
  Message:
    XID       0x0ff6
    Flags     0x0000
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        0
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(3)www(6)update(9)microsoft(3)com(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 16:59:18 468 PACKET  UDP Rcv 65.54.240.126   0ff6 R Q [0084 A     NOERROR] (3)www(6)update(9)microsoft(3)com(0)
UDP response info at 023A9D30
  Socket = 512
  Remote addr 65.54.240.126, port 53
  Time Query=254156, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x005a (90)
  Message:
    XID       0x0ff6
    Flags     0x8400
      QR        1 (RESPONSE)
      OPCODE    0 (QUERY)
      AA        1
      TC        0
      RD        0
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    1
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(3)www(6)update(9)microsoft(3)com(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
    Offset = 0x002a, RR count = 0
    Name      "[C00C](3)www(6)update(9)microsoft(3)com(0)"
      TYPE   CNAME  (5)
      CLASS  1
      TTL    3600
      DLEN   36
      DATA   (3)www(6)update(9)microsoft(3)com(5)nsatc(3)net(0)
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 16:59:18 468 PACKET  UDP Snd 212.187.162.134 27fc   Q [0000       NOERROR] (3)www(6)update(9)microsoft(3)com(5)nsatc(3)net(0)
UDP question info at 00A01EF0
  Socket = 512
  Remote addr 212.187.162.134, port 53
  Time Query=0, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0034 (52)
  Message:
    XID       0x27fc
    Flags     0x0000
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        0
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(3)www(6)update(9)microsoft(3)com(5)nsatc(3)net(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 16:59:18 12A8 PACKET  UDP Rcv 212.187.162.134 27fc R Q [0084 A     NOERROR] (3)www(6)update(9)microsoft(3)com(5)nsatc(3)net(0)
UDP response info at 009F9D90
  Socket = 512
  Remote addr 212.187.162.134, port 53
  Time Query=254156, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x00cd (205)
  Message:
    XID       0x27fc
    Flags     0x8400
      QR        1 (RESPONSE)
      OPCODE    0 (QUERY)
      AA        1
      TC        0
      RD        0
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    1
    NSCOUNT   4
    ARCOUNT   4
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(3)www(6)update(9)microsoft(3)com(5)nsatc(3)net(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
    Offset = 0x0034, RR count = 0
    Name      "[C00C](3)www(6)update(9)microsoft(3)com(5)nsatc(3)net(0)"
      TYPE   A  (1)
      CLASS  1
      TTL    300
      DLEN   4
      DATA   65.55.184.253
    AUTHORITY SECTION:
    Offset = 0x0044, RR count = 0
    Name      "[C025](5)nsatc(3)net(0)"
      TYPE   NS  (2)
      CLASS  1
      TTL    172800
      DLEN   7
      DATA   (1)e(2)ns[C025](5)nsatc(3)net(0)
    Offset = 0x0057, RR count = 1
    Name      "[C025](5)nsatc(3)net(0)"
      TYPE   NS  (2)
      CLASS  1
      TTL    172800
      DLEN   4
      DATA   (1)b[C052](2)ns[C025](5)nsatc(3)net(0)
    Offset = 0x0067, RR count = 2
    Name      "[C025](5)nsatc(3)net(0)"
      TYPE   NS  (2)
      CLASS  1
      TTL    172800
      DLEN   7
      DATA   (4)de-4[C052](2)ns[C025](5)nsatc(3)net(0)
    Offset = 0x007a, RR count = 3
    Name      "[C025](5)nsatc(3)net(0)"
      TYPE   NS  (2)
      CLASS  1
      TTL    172800
      DLEN   7
      DATA   (4)uk-6[C052](2)ns[C025](5)nsatc(3)net(0)
    ADDITIONAL SECTION:
    Offset = 0x008d, RR count = 0
    Name      "[C050](1)e(2)ns[C025](5)nsatc(3)net(0)"
      TYPE   A  (1)
      CLASS  1
      TTL    172800
      DLEN   4
      DATA   212.187.162.134
    Offset = 0x009d, RR count = 1
    Name      "[C063](1)b[C052](2)ns[C025](5)nsatc(3)net(0)"
      TYPE   A  (1)
      CLASS  1
      TTL    172800
      DLEN   4
      DATA   213.254.244.5
    Offset = 0x00ad, RR count = 2
    Name      "[C073](4)de-4[C052](2)ns[C025](5)nsatc(3)net(0)"
      TYPE   A  (1)
      CLASS  1
      TTL    172800
      DLEN   4
      DATA   212.162.1.102
    Offset = 0x00bd, RR count = 3
    Name      "[C086](4)uk-6[C052](2)ns[C025](5)nsatc(3)net(0)"
      TYPE   A  (1)
      CLASS  1
      TTL    172800
      DLEN   4
      DATA   206.24.172.39

20070620 16:59:18 12A8 PACKET  UDP Snd 10.0.0.3        ef88 R Q [8081   DR  NOERROR] (3)www(6)update(9)microsoft(3)com(0)
UDP response info at 00A01470
  Socket = 496
  Remote addr 10.0.0.3, port 3405
  Time Query=254156, Queued=254156, Expire=254159
  Buf length = 0x0200 (512)
  Msg length = 0x006a (106)
  Message:
    XID       0xef88
    Flags     0x8180
      QR        1 (RESPONSE)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        1
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    2
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(3)www(6)update(9)microsoft(3)com(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
    Offset = 0x002a, RR count = 0
    Name      "[C00C](3)www(6)update(9)microsoft(3)com(0)"
      TYPE   CNAME  (5)
      CLASS  1
      TTL    3600
      DLEN   36
      DATA   (3)www(6)update(9)microsoft(3)com(5)nsatc(3)net(0)
    Offset = 0x005a, RR count = 1
    Name      "[C036](3)www(6)update(9)microsoft(3)com(5)nsatc(3)net(0)"
      TYPE   A  (1)
      CLASS  1
      TTL    300
      DLEN   4
      DATA   65.55.184.253
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 16:59:25 468 PACKET  UDP Rcv 10.0.0.85       4b8a   Q [0001   D   NOERROR] (7)package(3)sky(3)com(0)
UDP question info at 009EC3A0
  Socket = 496
  Remote addr 10.0.0.85, port 1025
  Time Query=254163, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0021 (33)
  Message:
    XID       0x4b8a
    Flags     0x0100
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(7)package(3)sky(3)com(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 16:59:25 468 PACKET  UDP Snd 195.173.72.94   3800   Q [0000       NOERROR] (7)package(3)sky(3)com(0)
UDP question info at 00A01470
  Socket = 512
  Remote addr 195.173.72.94, port 53
  Time Query=0, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0021 (33)
  Message:
    XID       0x3800
    Flags     0x0000
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        0
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(7)package(3)sky(3)com(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 16:59:25 12A8 PACKET  UDP Rcv 195.173.72.94   3800 R Q [0084 A     NOERROR] (7)package(3)sky(3)com(0)
UDP response info at 009E5AA0
  Socket = 512
  Remote addr 195.173.72.94, port 53
  Time Query=254163, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0031 (49)
  Message:
    XID       0x3800
    Flags     0x8400
      QR        1 (RESPONSE)
      OPCODE    0 (QUERY)
      AA        1
      TC        0
      RD        0
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    1
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(7)package(3)sky(3)com(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
    Offset = 0x0021, RR count = 0
    Name      "[C00C](7)package(3)sky(3)com(0)"
      TYPE   A  (1)
      CLASS  1
      TTL    30
      DLEN   4
      DATA   195.173.72.124
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 16:59:25 12A8 PACKET  UDP Snd 10.0.0.85       4b8a R Q [0084 A     NOERROR] (7)package(3)sky(3)com(0)
UDP response info at 009E5AA0
  Socket = 496
  Remote addr 10.0.0.85, port 1025
  Time Query=254163, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0031 (49)
  Message:
    XID       0x4b8a
    Flags     0x8400
      QR        1 (RESPONSE)
      OPCODE    0 (QUERY)
      AA        1
      TC        0
      RD        0
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    1
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(7)package(3)sky(3)com(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
    Offset = 0x0021, RR count = 0
    Name      "[C00C](7)package(3)sky(3)com(0)"
      TYPE   A  (1)
      CLASS  1
      TTL    30
      DLEN   4
      DATA   195.173.72.124
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 16:59:28 12A8 PACKET  UDP Rcv 10.0.0.4        0b18   Q [0001   D   NOERROR] (4)smtp(3)ijt(3)biz(0)
UDP question info at 009FA810
  Socket = 496
  Remote addr 10.0.0.4, port 10634
  Time Query=254167, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x001e (30)
  Message:
    XID       0x0b18
    Flags     0x0100
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(4)smtp(3)ijt(3)biz(0)"
      QTYPE   MX (15)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 16:59:28 12A8 PACKET  UDP Snd 10.0.0.4        0b18 R Q [8081   DR  NOERROR] (4)smtp(3)ijt(3)biz(0)
UDP response info at 009FA810
  Socket = 496
  Remote addr 10.0.0.4, port 10634
  Time Query=254167, Queued=0, Expire=0
  Buf length = 0x0200 (512)
  Msg length = 0x0058 (88)
  Message:
    XID       0x0b18
    Flags     0x8180
      QR        1 (RESPONSE)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        1
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   1
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(4)smtp(3)ijt(3)biz(0)"
      QTYPE   MX (15)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
    Offset = 0x001e, RR count = 0
    Name      "[C011](3)ijt(3)biz(0)"
      TYPE   SOA  (6)
      CLASS  1
      TTL    85679
      DLEN   46
      DATA  
            PrimaryServer: (3)ns1(3)anu(3)net(0)
            Administrator: (10)hostmaster[C02E](3)anu(3)net(0)
            SerialNo     = 2005012901
            Refresh      = 28800
            Retry        = 7200
            Expire       = 604800
            MinimumTTL   = 86400
    ADDITIONAL SECTION:
      empty

20070620 16:59:32 468 PACKET  UDP Rcv 10.0.0.241      a81a   Q [0001   D   NOERROR] (7)QMASTER(7)Bentham(5)local(0)
UDP question info at 00A0BE90
  Socket = 496
  Remote addr 10.0.0.241, port 2351
  Time Query=254170, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0027 (39)
  Message:
    XID       0xa81a
    Flags     0x0100
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(7)QMASTER(7)Bentham(5)local(0)"
      QTYPE   SOA (6)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 16:59:32 468 PACKET  UDP Snd 10.0.0.241      a81a R Q [8085 A DR  NOERROR] (7)QMASTER(7)Bentham(5)local(0)
UDP response info at 00A0BE90
  Socket = 496
  Remote addr 10.0.0.241, port 2351
  Time Query=254170, Queued=0, Expire=0
  Buf length = 0x0200 (512)
  Msg length = 0x0070 (112)
  Message:
    XID       0xa81a
    Flags     0x8580
      QR        1 (RESPONSE)
      OPCODE    0 (QUERY)
      AA        1
      TC        0
      RD        1
      RA        1
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   1
    ARCOUNT   1
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(7)QMASTER(7)Bentham(5)local(0)"
      QTYPE   SOA (6)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
    Offset = 0x0027, RR count = 0
    Name      "[C014](7)Bentham(5)local(0)"
      TYPE   SOA  (6)
      CLASS  1
      TTL    3600
      DLEN   45
      DATA  
            PrimaryServer: (9)win2k3svr[C014](7)Bentham(5)local(0)
            Administrator: (10)hostmaster[C014](7)Bentham(5)local(0)
            SerialNo     = 133
            Refresh      = 900
            Retry        = 600
            Expire       = 86400
            MinimumTTL   = 3600
    ADDITIONAL SECTION:
    Offset = 0x0060, RR count = 0
    Name      "[C033](9)win2k3svr[C014](7)Bentham(5)local(0)"
      TYPE   A  (1)
      CLASS  1
      TTL    3600
      DLEN   4
      DATA   10.0.0.1

20070620 16:59:32 468 PACKET  UDP Rcv 10.0.0.241      d81a   U [0028       NOERROR] (7)Bentham(5)local(0)
UDP question info at 00A06EC0
  Socket = 496
  Remote addr 10.0.0.241, port 2352
  Time Query=254170, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0050 (80)
  Message:
    XID       0xd81a
    Flags     0x2800
      QR        0 (QUESTION)
      OPCODE    5 (UPDATE)
      AA        0
      TC        0
      RD        0
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    ZCOUNT    1
    PRECOUNT  2
    UPCOUNT   0
    ARCOUNT   0
    ZONE SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(7)Bentham(5)local(0)"
      ZTYPE   SOA (6)
      ZCLASS  1
    PREREQUISITE SECTION:
    Offset = 0x001f, RR count = 0
    Name      "(7)QMASTER(7)Bentham(5)local(0)"
      TYPE   CNAME  (5)
      CLASS  254
      TTL    0
      DLEN   0
      DATA   (none)
    Offset = 0x0040, RR count = 1
    Name      "[C01F](7)QMASTER(7)Bentham(5)local(0)"
      TYPE   A  (1)
      CLASS  1
      TTL    0
      DLEN   4
      DATA   10.0.0.241
    UPDATE SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 16:59:32 494 PACKET  UDP Snd 10.0.0.241      d81a R U [00a8       NOERROR] (7)Bentham(5)local(0)
UDP response info at 00A06EC0
  Socket = 496
  Remote addr 10.0.0.241, port 2352
  Time Query=254170, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0050 (80)
  Message:
    XID       0xd81a
    Flags     0xa800
      QR        1 (RESPONSE)
      OPCODE    5 (UPDATE)
      AA        0
      TC        0
      RD        0
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    ZCOUNT    1
    PRECOUNT  2
    UPCOUNT   0
    ARCOUNT   0
    ZONE SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(7)Bentham(5)local(0)"
      ZTYPE   SOA (6)
      ZCLASS  1
    PREREQUISITE SECTION:
    Offset = 0x001f, RR count = 0
    Name      "(7)QMASTER(7)Bentham(5)local(0)"
      TYPE   CNAME  (5)
      CLASS  254
      TTL    0
      DLEN   0
      DATA   (none)
    Offset = 0x0040, RR count = 1
    Name      "[C01F](7)QMASTER(7)Bentham(5)local(0)"
      TYPE   A  (1)
      CLASS  1
      TTL    0
      DLEN   4
      DATA   10.0.0.241
    UPDATE SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 16:59:32 468 PACKET  UDP Rcv 10.0.0.241      c619   Q [0001   D   NOERROR] (1)0(1)0(2)10(7)in-addr(4)arpa(0)
UDP question info at 009F9D90
  Socket = 496
  Remote addr 10.0.0.241, port 2353
  Time Query=254170, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0025 (37)
  Message:
    XID       0xc619
    Flags     0x0100
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(1)0(1)0(2)10(7)in-addr(4)arpa(0)"
      QTYPE   SOA (6)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 16:59:32 468 PACKET  UDP Snd 10.0.0.241      c619 R Q [8085 A DR  NOERROR] (1)0(1)0(2)10(7)in-addr(4)arpa(0)
UDP response info at 009F9D90
  Socket = 496
  Remote addr 10.0.0.241, port 2353
  Time Query=254170, Queued=0, Expire=0
  Buf length = 0x0200 (512)
  Msg length = 0x007b (123)
  Message:
    XID       0xc619
    Flags     0x8580
      QR        1 (RESPONSE)
      OPCODE    0 (QUERY)
      AA        1
      TC        0
      RD        1
      RA        1
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    1
    NSCOUNT   0
    ARCOUNT   1
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(1)0(1)0(2)10(7)in-addr(4)arpa(0)"
      QTYPE   SOA (6)
      QCLASS  1
    ANSWER SECTION:
    Offset = 0x0025, RR count = 0
    Name      "[C00C](1)0(1)0(2)10(7)in-addr(4)arpa(0)"
      TYPE   SOA  (6)
      CLASS  1
      TTL    3600
      DLEN   58
      DATA  
            PrimaryServer: (9)win2k3svr(7)bentham(5)local(0)
            Administrator: (10)hostmaster[C03B](7)bentham(5)local(0)
            SerialNo     = 81
            Refresh      = 900
            Retry        = 600
            Expire       = 86400
            MinimumTTL   = 3600
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
    Offset = 0x006b, RR count = 0
    Name      "[C031](9)win2k3svr(7)bentham(5)local(0)"
      TYPE   A  (1)
      CLASS  1
      TTL    3600
      DLEN   4
      DATA   10.0.0.1

20070620 16:59:32 12A8 PACKET  UDP Rcv 10.0.0.241      6818   U [0028       NOERROR] (1)0(1)0(2)10(7)in-addr(4)arpa(0)
UDP question info at 009E5AA0
  Socket = 496
  Remote addr 10.0.0.241, port 2354
  Time Query=254170, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0077 (119)
  Message:
    XID       0x6818
    Flags     0x2800
      QR        0 (QUESTION)
      OPCODE    5 (UPDATE)
      AA        0
      TC        0
      RD        0
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    ZCOUNT    1
    PRECOUNT  1
    UPCOUNT   2
    ARCOUNT   0
    ZONE SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(1)0(1)0(2)10(7)in-addr(4)arpa(0)"
      ZTYPE   SOA (6)
      ZCLASS  1
    PREREQUISITE SECTION:
    Offset = 0x0025, RR count = 0
    Name      "(3)241(1)0(1)0(2)10(7)in-addr(4)arpa(0)"
      TYPE   CNAME  (5)
      CLASS  254
      TTL    0
      DLEN   0
      DATA   (none)
    UPDATE SECTION:
    Offset = 0x0048, RR count = 0
    Name      "[C025](3)241(1)0(1)0(2)10(7)in-addr(4)arpa(0)"
      TYPE   PTR  (12)
      CLASS  255
      TTL    0
      DLEN   0
      DATA   (none)
    Offset = 0x0054, RR count = 1
    Name      "[C025](3)241(1)0(1)0(2)10(7)in-addr(4)arpa(0)"
      TYPE   PTR  (12)
      CLASS  1
      TTL    1200
      DLEN   23
      DATA   (7)QMASTER(7)Bentham(5)local(0)
    ADDITIONAL SECTION:
      empty

20070620 16:59:32 19E0 PACKET  UDP Snd 10.0.0.241      6818 R U [00a8       NOERROR] (1)0(1)0(2)10(7)in-addr(4)arpa(0)
UDP response info at 009E5AA0
  Socket = 496
  Remote addr 10.0.0.241, port 2354
  Time Query=254170, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0077 (119)
  Message:
    XID       0x6818
    Flags     0xa800
      QR        1 (RESPONSE)
      OPCODE    5 (UPDATE)
      AA        0
      TC        0
      RD        0
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    ZCOUNT    1
    PRECOUNT  1
    UPCOUNT   2
    ARCOUNT   0
    ZONE SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(1)0(1)0(2)10(7)in-addr(4)arpa(0)"
      ZTYPE   SOA (6)
      ZCLASS  1
    PREREQUISITE SECTION:
    Offset = 0x0025, RR count = 0
    Name      "(3)241(1)0(1)0(2)10(7)in-addr(4)arpa(0)"
      TYPE   CNAME  (5)
      CLASS  254
      TTL    0
      DLEN   0
      DATA   (none)
    UPDATE SECTION:
    Offset = 0x0048, RR count = 0
    Name      "[C025](3)241(1)0(1)0(2)10(7)in-addr(4)arpa(0)"
      TYPE   PTR  (12)
      CLASS  255
      TTL    0
      DLEN   0
      DATA   (none)
    Offset = 0x0054, RR count = 1
    Name      "[C025](3)241(1)0(1)0(2)10(7)in-addr(4)arpa(0)"
      TYPE   PTR  (12)
      CLASS  1
      TTL    1200
      DLEN   23
      DATA   (7)QMASTER(7)Bentham(5)local(0)
    ADDITIONAL SECTION:
      empty

20070620 16:59:36 468 PACKET  UDP Rcv 10.0.0.4        0b19   Q [0001   D   NOERROR] (4)smtp(3)ijt(3)biz(0)
UDP question info at 009FA810
  Socket = 496
  Remote addr 10.0.0.4, port 10641
  Time Query=254175, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x001e (30)
  Message:
    XID       0x0b19
    Flags     0x0100
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(4)smtp(3)ijt(3)biz(0)"
      QTYPE   MX (15)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 16:59:36 468 PACKET  UDP Snd 10.0.0.4        0b19 R Q [8081   DR  NOERROR] (4)smtp(3)ijt(3)biz(0)
UDP response info at 009FA810
  Socket = 496
  Remote addr 10.0.0.4, port 10641
  Time Query=254175, Queued=0, Expire=0
  Buf length = 0x0200 (512)
  Msg length = 0x0058 (88)
  Message:
    XID       0x0b19
    Flags     0x8180
      QR        1 (RESPONSE)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        1
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   1
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(4)smtp(3)ijt(3)biz(0)"
      QTYPE   MX (15)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
    Offset = 0x001e, RR count = 0
    Name      "[C011](3)ijt(3)biz(0)"
      TYPE   SOA  (6)
      CLASS  1
      TTL    85671
      DLEN   46
      DATA  
            PrimaryServer: (3)ns1(3)anu(3)net(0)
            Administrator: (10)hostmaster[C02E](3)anu(3)net(0)
            SerialNo     = 2005012901
            Refresh      = 28800
            Retry        = 7200
            Expire       = 604800
            MinimumTTL   = 86400
    ADDITIONAL SECTION:
      empty

20070620 16:59:37 468 PACKET  UDP Rcv 10.0.0.21       ed89   Q [0001   D   NOERROR] (5)trend(7)Bentham(5)local(0)
UDP question info at 00A0BE90
  Socket = 496
  Remote addr 10.0.0.21, port 1025
  Time Query=254175, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0025 (37)
  Message:
    XID       0xed89
    Flags     0x0100
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(5)trend(7)Bentham(5)local(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 16:59:37 468 PACKET  UDP Snd 10.0.0.21       ed89 R Q [8085 A DR  NOERROR] (5)trend(7)Bentham(5)local(0)
UDP response info at 00A0BE90
  Socket = 496
  Remote addr 10.0.0.21, port 1025
  Time Query=254175, Queued=0, Expire=0
  Buf length = 0x0200 (512)
  Msg length = 0x0035 (53)
  Message:
    XID       0xed89
    Flags     0x8580
      QR        1 (RESPONSE)
      OPCODE    0 (QUERY)
      AA        1
      TC        0
      RD        1
      RA        1
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    1
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(5)trend(7)Bentham(5)local(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
    Offset = 0x0025, RR count = 0
    Name      "[C00C](5)trend(7)Bentham(5)local(0)"
      TYPE   A  (1)
      CLASS  1
      TTL    3600
      DLEN   4
      DATA   10.0.0.9
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 16:59:37 468 PACKET  UDP Rcv 10.0.0.21       6f8b   Q [0001   D   NOERROR] (5)trend(7)Bentham(5)local(0)
UDP question info at 00A06EC0
  Socket = 496
  Remote addr 10.0.0.21, port 1026
  Time Query=254175, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0025 (37)
  Message:
    XID       0x6f8b
    Flags     0x0100
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(5)trend(7)Bentham(5)local(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 16:59:37 468 PACKET  UDP Snd 10.0.0.21       6f8b R Q [8085 A DR  NOERROR] (5)trend(7)Bentham(5)local(0)
UDP response info at 00A06EC0
  Socket = 496
  Remote addr 10.0.0.21, port 1026
  Time Query=254175, Queued=0, Expire=0
  Buf length = 0x0200 (512)
  Msg length = 0x0035 (53)
  Message:
    XID       0x6f8b
    Flags     0x8580
      QR        1 (RESPONSE)
      OPCODE    0 (QUERY)
      AA        1
      TC        0
      RD        1
      RA        1
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    1
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(5)trend(7)Bentham(5)local(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
    Offset = 0x0025, RR count = 0
    Name      "[C00C](5)trend(7)Bentham(5)local(0)"
      TYPE   A  (1)
      CLASS  1
      TTL    3600
      DLEN   4
      DATA   10.0.0.9
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 16:59:40 12A8 PACKET  UDP Rcv 10.0.0.4        376f   Q [0001   D   NOERROR] (2)22(3)141(3)189(3)193(6)nomail(5)rhsbl(5)sorbs(3)net(0)
UDP question info at 009F9D90
  Socket = 496
  Remote addr 10.0.0.4, port 10644
  Time Query=254178, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0037 (55)
  Message:
    XID       0x376f
    Flags     0x0100
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(2)22(3)141(3)189(3)193(6)nomail(5)rhsbl(5)sorbs(3)net(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 16:59:40 12A8 PACKET  UDP Snd 10.0.0.4        376f R Q [8381   DR NXDOMAIN] (2)22(3)141(3)189(3)193(6)nomail(5)rhsbl(5)sorbs(3)net(0)
UDP response info at 009F9D90
  Socket = 496
  Remote addr 10.0.0.4, port 10644
  Time Query=254178, Queued=0, Expire=0
  Buf length = 0x0200 (512)
  Msg length = 0x006f (111)
  Message:
    XID       0x376f
    Flags     0x8183
      QR        1 (RESPONSE)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        1
      Z         0
      RCODE     3 (NXDOMAIN)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   1
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(2)22(3)141(3)189(3)193(6)nomail(5)rhsbl(5)sorbs(3)net(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
    Offset = 0x0037, RR count = 0
    Name      "[C022](5)rhsbl(5)sorbs(3)net(0)"
      TYPE   SOA  (6)
      CLASS  1
      TTL    3496
      DLEN   44
      DATA  
            PrimaryServer: (7)rbldns0[C028](5)sorbs(3)net(0)
            Administrator: (3)dns(4)isux(3)com(0)
            SerialNo     = 1182354357
            Refresh      = 7200
            Retry        = 7200
            Expire       = 604800
            MinimumTTL   = 365
    ADDITIONAL SECTION:
      empty

20070620 16:59:40 468 PACKET  UDP Rcv 10.0.0.4        3770   Q [0001   D   NOERROR] (2)22(3)141(3)189(3)193(4)smtp(5)dnsbl(5)sorbs(3)net(0)
UDP question info at 009E5AA0
  Socket = 496
  Remote addr 10.0.0.4, port 10645
  Time Query=254178, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0035 (53)
  Message:
    XID       0x3770
    Flags     0x0100
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(2)22(3)141(3)189(3)193(4)smtp(5)dnsbl(5)sorbs(3)net(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 16:59:40 468 PACKET  UDP Snd 10.0.0.4        3770 R Q [8381   DR NXDOMAIN] (2)22(3)141(3)189(3)193(4)smtp(5)dnsbl(5)sorbs(3)net(0)
UDP response info at 009E5AA0
  Socket = 496
  Remote addr 10.0.0.4, port 10645
  Time Query=254178, Queued=0, Expire=0
  Buf length = 0x0200 (512)
  Msg length = 0x006d (109)
  Message:
    XID       0x3770
    Flags     0x8183
      QR        1 (RESPONSE)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        1
      Z         0
      RCODE     3 (NXDOMAIN)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   1
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(2)22(3)141(3)189(3)193(4)smtp(5)dnsbl(5)sorbs(3)net(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
    Offset = 0x0035, RR count = 0
    Name      "[C020](5)dnsbl(5)sorbs(3)net(0)"
      TYPE   SOA  (6)
      CLASS  1
      TTL    3496
      DLEN   44
      DATA  
            PrimaryServer: (7)rbldns0[C026](5)sorbs(3)net(0)
            Administrator: (3)dns(4)isux(3)com(0)
            SerialNo     = 1182354357
            Refresh      = 7200
            Retry        = 7200
            Expire       = 604800
            MinimumTTL   = 365
    ADDITIONAL SECTION:
      empty

20070620 16:59:40 468 PACKET  UDP Rcv 10.0.0.4        3771   Q [0001   D   NOERROR] (2)22(3)141(3)189(3)193(6)zombie(5)dnsbl(5)sorbs(3)net(0)
UDP question info at 009FA810
  Socket = 496
  Remote addr 10.0.0.4, port 10646
  Time Query=254178, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0037 (55)
  Message:
    XID       0x3771
    Flags     0x0100
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(2)22(3)141(3)189(3)193(6)zombie(5)dnsbl(5)sorbs(3)net(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 16:59:40 468 PACKET  UDP Snd 10.0.0.4        3771 R Q [8381   DR NXDOMAIN] (2)22(3)141(3)189(3)193(6)zombie(5)dnsbl(5)sorbs(3)net(0)
UDP response info at 009FA810
  Socket = 496
  Remote addr 10.0.0.4, port 10646
  Time Query=254178, Queued=0, Expire=0
  Buf length = 0x0200 (512)
  Msg length = 0x006f (111)
  Message:
    XID       0x3771
    Flags     0x8183
      QR        1 (RESPONSE)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        1
      Z         0
      RCODE     3 (NXDOMAIN)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   1
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(2)22(3)141(3)189(3)193(6)zombie(5)dnsbl(5)sorbs(3)net(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
    Offset = 0x0037, RR count = 0
    Name      "[C022](5)dnsbl(5)sorbs(3)net(0)"
      TYPE   SOA  (6)
      CLASS  1
      TTL    3496
      DLEN   44
      DATA  
            PrimaryServer: (7)rbldns0[C028](5)sorbs(3)net(0)
            Administrator: (3)dns(4)isux(3)com(0)
            SerialNo     = 1182354357
            Refresh      = 7200
            Retry        = 7200
            Expire       = 604800
            MinimumTTL   = 365
    ADDITIONAL SECTION:
      empty

20070620 17:00:03 468 PACKET  UDP Rcv 10.0.0.120      0053   Q [0001   D   NOERROR] (13)Tech-PrintSvr(7)Bentham(5)local(0)
UDP question info at 00A0BE90
  Socket = 496
  Remote addr 10.0.0.120, port 1025
  Time Query=254202, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x002d (45)
  Message:
    XID       0x0053
    Flags     0x0100
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(13)Tech-PrintSvr(7)Bentham(5)local(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:03 468 PACKET  UDP Snd 10.0.0.120      0053 R Q [8385 A DR NXDOMAIN] (13)Tech-PrintSvr(7)Bentham(5)local(0)
UDP response info at 00A0BE90
  Socket = 496
  Remote addr 10.0.0.120, port 1025
  Time Query=254202, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0073 (115)
  Message:
    XID       0x0053
    Flags     0x8583
      QR        1 (RESPONSE)
      OPCODE    0 (QUERY)
      AA        1
      TC        0
      RD        1
      RA        1
      Z         0
      RCODE     3 (NXDOMAIN)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   1
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(13)Tech-PrintSvr(7)Bentham(5)local(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
    Offset = 0x002d, RR count = 0
    Name      "(7)bentham(5)local(0)"
      TYPE   SOA  (6)
      CLASS  1
      TTL    3600
      DLEN   45
      DATA  
            PrimaryServer: (9)win2k3svr[C02D](7)bentham(5)local(0)
            Administrator: (10)hostmaster[C02D](7)bentham(5)local(0)
            SerialNo     = 133
            Refresh      = 900
            Retry        = 600
            Expire       = 86400
            MinimumTTL   = 3600
    ADDITIONAL SECTION:
      empty

20070620 17:00:04 12A8 PACKET  UDP Rcv 10.0.0.1        ba64   Q [0001   D   NOERROR] (8)MELANIEV(7)Bentham(5)local(0)
UDP question info at 00A06EC0
  Socket = 496
  Remote addr 10.0.0.1, port 1030
  Time Query=254203, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0028 (40)
  Message:
    XID       0xba64
    Flags     0x0100
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(8)MELANIEV(7)Bentham(5)local(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:04 12A8 PACKET  UDP Snd 10.0.0.1        ba64 R Q [8085 A DR  NOERROR] (8)MELANIEV(7)Bentham(5)local(0)
UDP response info at 00A06EC0
  Socket = 496
  Remote addr 10.0.0.1, port 1030
  Time Query=254203, Queued=0, Expire=0
  Buf length = 0x0200 (512)
  Msg length = 0x0038 (56)
  Message:
    XID       0xba64
    Flags     0x8580
      QR        1 (RESPONSE)
      OPCODE    0 (QUERY)
      AA        1
      TC        0
      RD        1
      RA        1
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    1
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(8)MELANIEV(7)Bentham(5)local(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
    Offset = 0x0028, RR count = 0
    Name      "[C00C](8)MELANIEV(7)Bentham(5)local(0)"
      TYPE   A  (1)
      CLASS  1
      TTL    900
      DLEN   4
      DATA   10.0.0.133
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:05 468 PACKET  UDP Rcv 10.0.0.85       c489   Q [0001   D   NOERROR] (3)www(6)google(2)co(2)uk(0)
UDP question info at 009F9D90
  Socket = 496
  Remote addr 10.0.0.85, port 1025
  Time Query=254203, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0022 (34)
  Message:
    XID       0xc489
    Flags     0x0100
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(3)www(6)google(2)co(2)uk(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:05 468 PACKET  UDP Snd 209.85.137.9    380b   Q [0000       NOERROR] (3)www(1)l(6)google(3)com(0)
UDP question info at 009EC3A0
  Socket = 512
  Remote addr 209.85.137.9, port 53
  Time Query=0, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0022 (34)
  Message:
    XID       0x380b
    Flags     0x0000
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        0
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(3)www(1)l(6)google(3)com(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:06 468 PACKET  UDP Rcv 10.0.0.85       c489   Q [0001   D   NOERROR] (3)www(6)google(2)co(2)uk(0)
UDP question info at 009E5AA0
  Socket = 496
  Remote addr 10.0.0.85, port 1025
  Time Query=254204, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0022 (34)
  Message:
    XID       0xc489
    Flags     0x0100
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(3)www(6)google(2)co(2)uk(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:06 468 PACKET  UDP Rcv 10.0.0.4        0b1a   Q [0001   D   NOERROR] (4)smtp(3)ijt(3)biz(0)
UDP question info at 009FA810
  Socket = 496
  Remote addr 10.0.0.4, port 10656
  Time Query=254204, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x001e (30)
  Message:
    XID       0x0b1a
    Flags     0x0100
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(4)smtp(3)ijt(3)biz(0)"
      QTYPE   MX (15)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:06 468 PACKET  UDP Snd 10.0.0.4        0b1a R Q [8081   DR  NOERROR] (4)smtp(3)ijt(3)biz(0)
UDP response info at 009FA810
  Socket = 496
  Remote addr 10.0.0.4, port 10656
  Time Query=254204, Queued=0, Expire=0
  Buf length = 0x0200 (512)
  Msg length = 0x0058 (88)
  Message:
    XID       0x0b1a
    Flags     0x8180
      QR        1 (RESPONSE)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        1
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   1
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(4)smtp(3)ijt(3)biz(0)"
      QTYPE   MX (15)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
    Offset = 0x001e, RR count = 0
    Name      "[C011](3)ijt(3)biz(0)"
      TYPE   SOA  (6)
      CLASS  1
      TTL    85642
      DLEN   46
      DATA  
            PrimaryServer: (3)ns1(3)anu(3)net(0)
            Administrator: (10)hostmaster[C02E](3)anu(3)net(0)
            SerialNo     = 2005012901
            Refresh      = 28800
            Retry        = 7200
            Expire       = 604800
            MinimumTTL   = 86400
    ADDITIONAL SECTION:
      empty

20070620 17:00:07 12A8 PACKET  UDP Rcv 10.0.0.85       c489   Q [0001   D   NOERROR] (3)www(6)google(2)co(2)uk(0)
UDP question info at 00A0BE90
  Socket = 496
  Remote addr 10.0.0.85, port 1025
  Time Query=254205, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0022 (34)
  Message:
    XID       0xc489
    Flags     0x0100
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(3)www(6)google(2)co(2)uk(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:08 1988 PACKET  UDP Snd 66.249.93.9     380b   Q [0000       NOERROR] (3)www(1)l(6)google(3)com(0)
UDP question info at 009EC3A0
  Socket = 512
  Remote addr 66.249.93.9, port 53
  Time Query=0, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0022 (34)
  Message:
    XID       0x380b
    Flags     0x0000
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        0
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(3)www(1)l(6)google(3)com(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:09 468 PACKET  UDP Rcv 10.0.0.85       c489   Q [0001   D   NOERROR] (3)www(6)google(2)co(2)uk(0)
UDP question info at 00A06EC0
  Socket = 496
  Remote addr 10.0.0.85, port 1025
  Time Query=254207, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0022 (34)
  Message:
    XID       0xc489
    Flags     0x0100
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(3)www(6)google(2)co(2)uk(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:11 468 PACKET  UDP Rcv 10.0.0.4        3772   Q [0001   D   NOERROR] (2)10(2)74(2)32(3)216(6)nomail(5)rhsbl(5)sorbs(3)net(0)
UDP question info at 00A01470
  Socket = 496
  Remote addr 10.0.0.4, port 10667
  Time Query=254209, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0035 (53)
  Message:
    XID       0x3772
    Flags     0x0100
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(2)10(2)74(2)32(3)216(6)nomail(5)rhsbl(5)sorbs(3)net(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:11 468 PACKET  UDP Snd 82.165.13.243   1812   Q [0000       NOERROR] (2)10(2)74(2)32(3)216(6)nomail(5)rhsbl(5)sorbs(3)net(0)
UDP question info at 009E6520
  Socket = 512
  Remote addr 82.165.13.243, port 53
  Time Query=0, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0035 (53)
  Message:
    XID       0x1812
    Flags     0x0000
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        0
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(2)10(2)74(2)32(3)216(6)nomail(5)rhsbl(5)sorbs(3)net(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:12 468 PACKET  UDP Rcv 10.0.0.4        3773   Q [0001   D   NOERROR] (2)22(3)141(3)189(3)193(6)nomail(5)rhsbl(5)sorbs(3)net(0)
UDP question info at 009E5AA0
  Socket = 496
  Remote addr 10.0.0.4, port 10671
  Time Query=254210, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0037 (55)
  Message:
    XID       0x3773
    Flags     0x0100
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(2)22(3)141(3)189(3)193(6)nomail(5)rhsbl(5)sorbs(3)net(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:12 468 PACKET  UDP Snd 10.0.0.4        3773 R Q [8381   DR NXDOMAIN] (2)22(3)141(3)189(3)193(6)nomail(5)rhsbl(5)sorbs(3)net(0)
UDP response info at 009E5AA0
  Socket = 496
  Remote addr 10.0.0.4, port 10671
  Time Query=254210, Queued=0, Expire=0
  Buf length = 0x0200 (512)
  Msg length = 0x006f (111)
  Message:
    XID       0x3773
    Flags     0x8183
      QR        1 (RESPONSE)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        1
      Z         0
      RCODE     3 (NXDOMAIN)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   1
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(2)22(3)141(3)189(3)193(6)nomail(5)rhsbl(5)sorbs(3)net(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
    Offset = 0x0037, RR count = 0
    Name      "[C022](5)rhsbl(5)sorbs(3)net(0)"
      TYPE   SOA  (6)
      CLASS  1
      TTL    3464
      DLEN   44
      DATA  
            PrimaryServer: (7)rbldns0[C028](5)sorbs(3)net(0)
            Administrator: (3)dns(4)isux(3)com(0)
            SerialNo     = 1182354357
            Refresh      = 7200
            Retry        = 7200
            Expire       = 604800
            MinimumTTL   = 333
    ADDITIONAL SECTION:
      empty

20070620 17:00:12 12A8 PACKET  UDP Rcv 10.0.0.4        3774   Q [0001   D   NOERROR] (2)22(3)141(3)189(3)193(4)smtp(5)dnsbl(5)sorbs(3)net(0)
UDP question info at 009FA810
  Socket = 496
  Remote addr 10.0.0.4, port 10672
  Time Query=254210, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0035 (53)
  Message:
    XID       0x3774
    Flags     0x0100
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(2)22(3)141(3)189(3)193(4)smtp(5)dnsbl(5)sorbs(3)net(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:12 12A8 PACKET  UDP Snd 10.0.0.4        3774 R Q [8381   DR NXDOMAIN] (2)22(3)141(3)189(3)193(4)smtp(5)dnsbl(5)sorbs(3)net(0)
UDP response info at 009FA810
  Socket = 496
  Remote addr 10.0.0.4, port 10672
  Time Query=254210, Queued=0, Expire=0
  Buf length = 0x0200 (512)
  Msg length = 0x006d (109)
  Message:
    XID       0x3774
    Flags     0x8183
      QR        1 (RESPONSE)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        1
      Z         0
      RCODE     3 (NXDOMAIN)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   1
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(2)22(3)141(3)189(3)193(4)smtp(5)dnsbl(5)sorbs(3)net(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
    Offset = 0x0035, RR count = 0
    Name      "[C020](5)dnsbl(5)sorbs(3)net(0)"
      TYPE   SOA  (6)
      CLASS  1
      TTL    3464
      DLEN   44
      DATA  
            PrimaryServer: (7)rbldns0[C026](5)sorbs(3)net(0)
            Administrator: (3)dns(4)isux(3)com(0)
            SerialNo     = 1182354357
            Refresh      = 7200
            Retry        = 7200
            Expire       = 604800
            MinimumTTL   = 333
    ADDITIONAL SECTION:
      empty

20070620 17:00:12 468 PACKET  UDP Rcv 10.0.0.4        3775   Q [0001   D   NOERROR] (2)22(3)141(3)189(3)193(6)zombie(5)dnsbl(5)sorbs(3)net(0)
UDP question info at 00A0BE90
  Socket = 496
  Remote addr 10.0.0.4, port 10673
  Time Query=254210, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0037 (55)
  Message:
    XID       0x3775
    Flags     0x0100
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(2)22(3)141(3)189(3)193(6)zombie(5)dnsbl(5)sorbs(3)net(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:12 468 PACKET  UDP Snd 10.0.0.4        3775 R Q [8381   DR NXDOMAIN] (2)22(3)141(3)189(3)193(6)zombie(5)dnsbl(5)sorbs(3)net(0)
UDP response info at 00A0BE90
  Socket = 496
  Remote addr 10.0.0.4, port 10673
  Time Query=254210, Queued=0, Expire=0
  Buf length = 0x0200 (512)
  Msg length = 0x006f (111)
  Message:
    XID       0x3775
    Flags     0x8183
      QR        1 (RESPONSE)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        1
      Z         0
      RCODE     3 (NXDOMAIN)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   1
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(2)22(3)141(3)189(3)193(6)zombie(5)dnsbl(5)sorbs(3)net(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
    Offset = 0x0037, RR count = 0
    Name      "[C022](5)dnsbl(5)sorbs(3)net(0)"
      TYPE   SOA  (6)
      CLASS  1
      TTL    3464
      DLEN   44
      DATA  
            PrimaryServer: (7)rbldns0[C028](5)sorbs(3)net(0)
            Administrator: (3)dns(4)isux(3)com(0)
            SerialNo     = 1182354357
            Refresh      = 7200
            Retry        = 7200
            Expire       = 604800
            MinimumTTL   = 333
    ADDITIONAL SECTION:
      empty

20070620 17:00:12 468 PACKET  UDP Rcv 10.0.0.4        0b1b   Q [0001   D   NOERROR] (4)smtp(3)ijt(3)biz(0)
UDP question info at 00A06EC0
  Socket = 496
  Remote addr 10.0.0.4, port 10675
  Time Query=254210, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x001e (30)
  Message:
    XID       0x0b1b
    Flags     0x0100
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(4)smtp(3)ijt(3)biz(0)"
      QTYPE   MX (15)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:12 468 PACKET  UDP Snd 10.0.0.4        0b1b R Q [8081   DR  NOERROR] (4)smtp(3)ijt(3)biz(0)
UDP response info at 00A06EC0
  Socket = 496
  Remote addr 10.0.0.4, port 10675
  Time Query=254210, Queued=0, Expire=0
  Buf length = 0x0200 (512)
  Msg length = 0x0058 (88)
  Message:
    XID       0x0b1b
    Flags     0x8180
      QR        1 (RESPONSE)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        1
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   1
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(4)smtp(3)ijt(3)biz(0)"
      QTYPE   MX (15)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
    Offset = 0x001e, RR count = 0
    Name      "[C011](3)ijt(3)biz(0)"
      TYPE   SOA  (6)
      CLASS  1
      TTL    85636
      DLEN   46
      DATA  
            PrimaryServer: (3)ns1(3)anu(3)net(0)
            Administrator: (10)hostmaster[C02E](3)anu(3)net(0)
            SerialNo     = 2005012901
            Refresh      = 28800
            Retry        = 7200
            Expire       = 604800
            MinimumTTL   = 86400
    ADDITIONAL SECTION:
      empty

20070620 17:00:12 1988 PACKET  UDP Snd 209.85.139.9    380b   Q [0000       NOERROR] (3)www(1)l(6)google(3)com(0)
UDP question info at 009EC3A0
  Socket = 512
  Remote addr 209.85.139.9, port 53
  Time Query=0, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0022 (34)
  Message:
    XID       0x380b
    Flags     0x0000
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        0
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(3)www(1)l(6)google(3)com(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:12 1988 PACKET  UDP Snd 64.233.179.9    380b   Q [0000       NOERROR] (3)www(1)l(6)google(3)com(0)
UDP question info at 009EC3A0
  Socket = 512
  Remote addr 64.233.179.9, port 53
  Time Query=0, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0022 (34)
  Message:
    XID       0x380b
    Flags     0x0000
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        0
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(3)www(1)l(6)google(3)com(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:12 468 PACKET  UDP Rcv 10.0.0.107      1f99   Q [0001   D   NOERROR] (5)trend(7)Bentham(5)local(0)
UDP question info at 009F4340
  Socket = 496
  Remote addr 10.0.0.107, port 1025
  Time Query=254211, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0025 (37)
  Message:
    XID       0x1f99
    Flags     0x0100
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(5)trend(7)Bentham(5)local(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:12 468 PACKET  UDP Snd 10.0.0.107      1f99 R Q [8085 A DR  NOERROR] (5)trend(7)Bentham(5)local(0)
UDP response info at 009F4340
  Socket = 496
  Remote addr 10.0.0.107, port 1025
  Time Query=254211, Queued=0, Expire=0
  Buf length = 0x0200 (512)
  Msg length = 0x0035 (53)
  Message:
    XID       0x1f99
    Flags     0x8580
      QR        1 (RESPONSE)
      OPCODE    0 (QUERY)
      AA        1
      TC        0
      RD        1
      RA        1
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    1
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(5)trend(7)Bentham(5)local(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
    Offset = 0x0025, RR count = 0
    Name      "[C00C](5)trend(7)Bentham(5)local(0)"
      TYPE   A  (1)
      CLASS  1
      TTL    3600
      DLEN   4
      DATA   10.0.0.9
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:13 12A8 PACKET  UDP Rcv 10.0.0.85       c489   Q [0001   D   NOERROR] (3)www(6)google(2)co(2)uk(0)
UDP question info at 009E5AA0
  Socket = 496
  Remote addr 10.0.0.85, port 1025
  Time Query=254211, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0022 (34)
  Message:
    XID       0xc489
    Flags     0x0100
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(3)www(6)google(2)co(2)uk(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:14 468 PACKET  UDP Rcv 10.0.0.85       a587   Q [0001   D   NOERROR] (3)www(6)google(2)co(2)uk(0)
UDP question info at 009FA810
  Socket = 496
  Remote addr 10.0.0.85, port 1750
  Time Query=254212, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0022 (34)
  Message:
    XID       0xa587
    Flags     0x0100
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(3)www(6)google(2)co(2)uk(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:14 468 PACKET  UDP Snd 64.233.179.9    201a   Q [0000       NOERROR] (3)www(1)l(6)google(3)com(0)
UDP question info at 009EB920
  Socket = 512
  Remote addr 64.233.179.9, port 53
  Time Query=0, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0022 (34)
  Message:
    XID       0x201a
    Flags     0x0000
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        0
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(3)www(1)l(6)google(3)com(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:14 1988 PACKET  UDP Snd 137.92.97.30    1812   Q [0000       NOERROR] (2)10(2)74(2)32(3)216(6)nomail(5)rhsbl(5)sorbs(3)net(0)
UDP question info at 009E6520
  Socket = 512
  Remote addr 137.92.97.30, port 53
  Time Query=0, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0035 (53)
  Message:
    XID       0x1812
    Flags     0x0000
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        0
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(2)10(2)74(2)32(3)216(6)nomail(5)rhsbl(5)sorbs(3)net(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:15 468 PACKET  UDP Rcv 10.0.0.85       a587   Q [0001   D   NOERROR] (3)www(6)google(2)co(2)uk(0)
UDP question info at 00A0BE90
  Socket = 496
  Remote addr 10.0.0.85, port 1750
  Time Query=254213, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0022 (34)
  Message:
    XID       0xa587
    Flags     0x0100
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(3)www(6)google(2)co(2)uk(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:15 468 PACKET  UDP Rcv 10.0.0.4        0b1c   Q [0001   D   NOERROR] (4)smtp(3)ijt(3)biz(0)
UDP question info at 00A06EC0
  Socket = 496
  Remote addr 10.0.0.4, port 10685
  Time Query=254214, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x001e (30)
  Message:
    XID       0x0b1c
    Flags     0x0100
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(4)smtp(3)ijt(3)biz(0)"
      QTYPE   MX (15)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:15 468 PACKET  UDP Snd 10.0.0.4        0b1c R Q [8081   DR  NOERROR] (4)smtp(3)ijt(3)biz(0)
UDP response info at 00A06EC0
  Socket = 496
  Remote addr 10.0.0.4, port 10685
  Time Query=254214, Queued=0, Expire=0
  Buf length = 0x0200 (512)
  Msg length = 0x0058 (88)
  Message:
    XID       0x0b1c
    Flags     0x8180
      QR        1 (RESPONSE)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        1
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   1
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(4)smtp(3)ijt(3)biz(0)"
      QTYPE   MX (15)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
    Offset = 0x001e, RR count = 0
    Name      "[C011](3)ijt(3)biz(0)"
      TYPE   SOA  (6)
      CLASS  1
      TTL    85632
      DLEN   46
      DATA  
            PrimaryServer: (3)ns1(3)anu(3)net(0)
            Administrator: (10)hostmaster[C02E](3)anu(3)net(0)
            SerialNo     = 2005012901
            Refresh      = 28800
            Retry        = 7200
            Expire       = 604800
            MinimumTTL   = 86400
    ADDITIONAL SECTION:
      empty

20070620 17:00:16 12A8 PACKET  UDP Rcv 10.0.0.85       a587   Q [0001   D   NOERROR] (3)www(6)google(2)co(2)uk(0)
UDP question info at 009F4340
  Socket = 496
  Remote addr 10.0.0.85, port 1750
  Time Query=254214, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0022 (34)
  Message:
    XID       0xa587
    Flags     0x0100
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(3)www(6)google(2)co(2)uk(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:16 1988 PACKET  UDP Snd 72.14.235.9     380b   Q [0000       NOERROR] (3)www(1)l(6)google(3)com(0)
UDP question info at 009EC3A0
  Socket = 512
  Remote addr 72.14.235.9, port 53
  Time Query=0, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0022 (34)
  Message:
    XID       0x380b
    Flags     0x0000
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        0
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(3)www(1)l(6)google(3)com(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:16 1988 PACKET  UDP Snd 64.233.167.9    380b   Q [0000       NOERROR] (3)www(1)l(6)google(3)com(0)
UDP question info at 009EC3A0
  Socket = 512
  Remote addr 64.233.167.9, port 53
  Time Query=0, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0022 (34)
  Message:
    XID       0x380b
    Flags     0x0000
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        0
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(3)www(1)l(6)google(3)com(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:17 468 PACKET  UDP Rcv 10.0.0.1        f466   Q [0001   D   NOERROR] (9)MACHINE40(7)Bentham(5)local(0)
UDP question info at 009E5AA0
  Socket = 496
  Remote addr 10.0.0.1, port 1030
  Time Query=254215, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0029 (41)
  Message:
    XID       0xf466
    Flags     0x0100
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(9)MACHINE40(7)Bentham(5)local(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:17 468 PACKET  UDP Snd 10.0.0.1        f466 R Q [8085 A DR  NOERROR] (9)MACHINE40(7)Bentham(5)local(0)
UDP response info at 009E5AA0
  Socket = 496
  Remote addr 10.0.0.1, port 1030
  Time Query=254215, Queued=0, Expire=0
  Buf length = 0x0200 (512)
  Msg length = 0x0039 (57)
  Message:
    XID       0xf466
    Flags     0x8580
      QR        1 (RESPONSE)
      OPCODE    0 (QUERY)
      AA        1
      TC        0
      RD        1
      RA        1
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    1
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(9)MACHINE40(7)Bentham(5)local(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
    Offset = 0x0029, RR count = 0
    Name      "[C00C](9)MACHINE40(7)Bentham(5)local(0)"
      TYPE   A  (1)
      CLASS  1
      TTL    900
      DLEN   4
      DATA   10.0.0.164
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:17 1988 PACKET  UDP Snd 209.85.139.9    201a   Q [0000       NOERROR] (3)www(1)l(6)google(3)com(0)
UDP question info at 009EB920
  Socket = 512
  Remote addr 209.85.139.9, port 53
  Time Query=0, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0022 (34)
  Message:
    XID       0x201a
    Flags     0x0000
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        0
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(3)www(1)l(6)google(3)com(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:18 468 PACKET  UDP Rcv 10.0.0.85       a587   Q [0001   D   NOERROR] (3)www(6)google(2)co(2)uk(0)
UDP question info at 009F4DC0
  Socket = 496
  Remote addr 10.0.0.85, port 1750
  Time Query=254216, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0022 (34)
  Message:
    XID       0xa587
    Flags     0x0100
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(3)www(6)google(2)co(2)uk(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:18 1988 PACKET  UDP Snd 203.15.51.140   1812   Q [0000       NOERROR] (2)10(2)74(2)32(3)216(6)nomail(5)rhsbl(5)sorbs(3)net(0)
UDP question info at 009E6520
  Socket = 512
  Remote addr 203.15.51.140, port 53
  Time Query=0, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0035 (53)
  Message:
    XID       0x1812
    Flags     0x0000
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        0
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(2)10(2)74(2)32(3)216(6)nomail(5)rhsbl(5)sorbs(3)net(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:18 1988 PACKET  UDP Snd 82.165.13.243   1812   Q [0000       NOERROR] (2)10(2)74(2)32(3)216(6)nomail(5)rhsbl(5)sorbs(3)net(0)
UDP question info at 009E6520
  Socket = 512
  Remote addr 82.165.13.243, port 53
  Time Query=0, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0035 (53)
  Message:
    XID       0x1812
    Flags     0x0000
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        0
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(2)10(2)74(2)32(3)216(6)nomail(5)rhsbl(5)sorbs(3)net(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:20 1988 PACKET  UDP Snd 10.0.0.85       c489 R Q [8081   DR  NOERROR] (3)www(6)google(2)co(2)uk(0)
UDP response info at 009F9D90
  Socket = 496
  Remote addr 10.0.0.85, port 1025
  Time Query=254203, Queued=254215, Expire=254218
  Buf length = 0x0200 (512)
  Msg length = 0x0052 (82)
  Message:
    XID       0xc489
    Flags     0x8180
      QR        1 (RESPONSE)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        1
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    2
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(3)www(6)google(2)co(2)uk(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
    Offset = 0x0022, RR count = 0
    Name      "[C00C](3)www(6)google(2)co(2)uk(0)"
      TYPE   CNAME  (5)
      CLASS  1
      TTL    79313
      DLEN   16
      DATA   (3)www(6)google(3)com(0)
    Offset = 0x003e, RR count = 1
    Name      "[C02E](3)www(6)google(3)com(0)"
      TYPE   CNAME  (5)
      CLASS  1
      TTL    79313
      DLEN   8
      DATA   (3)www(1)l[C032](6)google(3)com(0)
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:21 1988 PACKET  UDP Snd 72.14.235.9     201a   Q [0000       NOERROR] (3)www(1)l(6)google(3)com(0)
UDP question info at 009EB920
  Socket = 512
  Remote addr 72.14.235.9, port 53
  Time Query=0, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0022 (34)
  Message:
    XID       0x201a
    Flags     0x0000
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        0
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(3)www(1)l(6)google(3)com(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:21 1988 PACKET  UDP Snd 64.233.167.9    201a   Q [0000       NOERROR] (3)www(1)l(6)google(3)com(0)
UDP question info at 009EB920
  Socket = 512
  Remote addr 64.233.167.9, port 53
  Time Query=0, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0022 (34)
  Message:
    XID       0x201a
    Flags     0x0000
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        0
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(3)www(1)l(6)google(3)com(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:22 468 PACKET  UDP Rcv 10.0.0.85       a587   Q [0001   D   NOERROR] (3)www(6)google(2)co(2)uk(0)
UDP question info at 00A0BE90
  Socket = 496
  Remote addr 10.0.0.85, port 1750
  Time Query=254220, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0022 (34)
  Message:
    XID       0xa587
    Flags     0x0100
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(3)www(6)google(2)co(2)uk(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:22 1988 PACKET  UDP Snd 137.92.97.3     1812   Q [0000       NOERROR] (2)10(2)74(2)32(3)216(6)nomail(5)rhsbl(5)sorbs(3)net(0)
UDP question info at 009E6520
  Socket = 512
  Remote addr 137.92.97.3, port 53
  Time Query=0, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0035 (53)
  Message:
    XID       0x1812
    Flags     0x0000
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        0
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(2)10(2)74(2)32(3)216(6)nomail(5)rhsbl(5)sorbs(3)net(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:22 1988 PACKET  UDP Snd 82.165.13.243   1812   Q [0000       NOERROR] (2)10(2)74(2)32(3)216(6)nomail(5)rhsbl(5)sorbs(3)net(0)
UDP question info at 009E6520
  Socket = 512
  Remote addr 82.165.13.243, port 53
  Time Query=0, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0035 (53)
  Message:
    XID       0x1812
    Flags     0x0000
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        0
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(2)10(2)74(2)32(3)216(6)nomail(5)rhsbl(5)sorbs(3)net(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:25 1988 PACKET  UDP Snd 64.233.161.9    201a   Q [0000       NOERROR] (3)www(1)l(6)google(3)com(0)
UDP question info at 009EB920
  Socket = 512
  Remote addr 64.233.161.9, port 53
  Time Query=0, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0022 (34)
  Message:
    XID       0x201a
    Flags     0x0000
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        0
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(3)www(1)l(6)google(3)com(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:25 1988 PACKET  UDP Snd 64.233.179.9    201a   Q [0000       NOERROR] (3)www(1)l(6)google(3)com(0)
UDP question info at 009EB920
  Socket = 512
  Remote addr 64.233.179.9, port 53
  Time Query=0, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0022 (34)
  Message:
    XID       0x201a
    Flags     0x0000
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        0
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(3)www(1)l(6)google(3)com(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:26 1988 PACKET  UDP Snd 10.0.0.4        3772 R Q [8281   DR SERVFAIL] (2)10(2)74(2)32(3)216(6)nomail(5)rhsbl(5)sorbs(3)net(0)
UDP response info at 00A01470
  Socket = 496
  Remote addr 10.0.0.4, port 10667
  Time Query=254209, Queued=254221, Expire=254224
  Buf length = 0x0500 (1280)
  Msg length = 0x0035 (53)
  Message:
    XID       0x3772
    Flags     0x8182
      QR        1 (RESPONSE)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        1
      Z         0
      RCODE     2 (SERVFAIL)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(2)10(2)74(2)32(3)216(6)nomail(5)rhsbl(5)sorbs(3)net(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:26 12A8 PACKET  UDP Rcv 10.0.0.4        3776   Q [0001   D   NOERROR] (2)10(2)74(2)32(3)216(4)smtp(5)dnsbl(5)sorbs(3)net(0)
UDP question info at 00A06EC0
  Socket = 496
  Remote addr 10.0.0.4, port 10692
  Time Query=254225, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0033 (51)
  Message:
    XID       0x3776
    Flags     0x0100
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(2)10(2)74(2)32(3)216(4)smtp(5)dnsbl(5)sorbs(3)net(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:26 12A8 PACKET  UDP Snd 82.165.13.243   1024   Q [0000       NOERROR] (2)10(2)74(2)32(3)216(4)smtp(5)dnsbl(5)sorbs(3)net(0)
UDP question info at 009E6520
  Socket = 512
  Remote addr 82.165.13.243, port 53
  Time Query=0, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0033 (51)
  Message:
    XID       0x1024
    Flags     0x0000
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        0
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(2)10(2)74(2)32(3)216(4)smtp(5)dnsbl(5)sorbs(3)net(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:29 1988 PACKET  UDP Snd 10.0.0.85       a587 R Q [8081   DR  NOERROR] (3)www(6)google(2)co(2)uk(0)
UDP response info at 009FA810
  Socket = 496
  Remote addr 10.0.0.85, port 1750
  Time Query=254212, Queued=254224, Expire=254227
  Buf length = 0x0200 (512)
  Msg length = 0x0052 (82)
  Message:
    XID       0xa587
    Flags     0x8180
      QR        1 (RESPONSE)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        1
      RA        1
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    2
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(3)www(6)google(2)co(2)uk(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
    Offset = 0x0022, RR count = 0
    Name      "[C00C](3)www(6)google(2)co(2)uk(0)"
      TYPE   CNAME  (5)
      CLASS  1
      TTL    79304
      DLEN   16
      DATA   (3)www(6)google(3)com(0)
    Offset = 0x003e, RR count = 1
    Name      "[C02E](3)www(6)google(3)com(0)"
      TYPE   CNAME  (5)
      CLASS  1
      TTL    79304
      DLEN   8
      DATA   (3)www(1)l[C032](6)google(3)com(0)
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

20070620 17:00:30 1988 PACKET  UDP Snd 136.161.101.5   1024   Q [0000       NOERROR] (2)10(2)74(2)32(3)216(4)smtp(5)dnsbl(5)sorbs(3)net(0)
UDP question info at 009E6520
  Socket = 512
  Remote addr 136.161.101.5, port 53
  Time Query=0, Queued=0, Expire=0
  Buf length = 0x0500 (1280)
  Msg length = 0x0033 (51)
  Message:
    XID       0x1024
    Flags     0x0000
      QR        0 (QUESTION)
      OPCODE    0 (QUERY)
      AA        0
      TC        0
      RD        0
      RA        0
      Z         0
      RCODE     0 (NOERROR)
    QCOUNT    1
    ACOUNT    0
    NSCOUNT   0
    ARCOUNT   0
    QUESTION SECTION:
    Offset = 0x000c, RR count = 0
    Name      "(2)10(2)74(2)32(3)216(4)smtp(5)dnsbl(5)sorbs(3)net(0)"
      QTYPE   A (1)
      QCLASS  1
    ANSWER SECTION:
      empty
    AUTHORITY SECTION:
      empty
    ADDITIONAL SECTION:
      empty

I am sorry - I should have been more specific.  1) I agree with KTCS's second post about NOT using forwarders.  You should use forwarders - but you should also call your ISP at least twice to confirm that you have the correct forwarders.  Depending on the level of competence you may not get the same answer.  If you don't get the same numbers when you call two different times - call again.  2) I disagree with KTCS's first post because you have win 2000 sp4 DNS pollution should not be an issue unless you specifically turned it off with a registry change. 3) Next time your DNS fails, try the following:
click on Start, Run  type in dnsmgmt.msc.  This should bring you the the dns console for your server.  Expand the tree view for your server, then for cached lookups, then .(root).  If you see many and I mean many top level domain suffixes listed (200-300 or more)  then you may have an issue that needs to be controlled with your firewall.  If you don't so any business with anyone in russia or germany but your DNS server has many cached lookups for .ru and .de domains then something is wrong.  Probably you are getting spammed and need to either block these mail requests from russia & germany or turn of your non delivery receipts (I use russia and germany as an example - it could be just about any country top level domain (look them up on http://www.iana.org/root-whois/index.html).  Too much "trash" activity in your DNS can bring it to a hault. Hope Let us know what you find.

Author

Commented:
Thanks to all for your advice.
I managed to resolve the dns issue.

It was down to my proxy software.

After moving it to another server, the issues disappeared.
I am glad you solved your problem.  Also glad my information helped, even though is sounds like it was not directly related to your situation.

Gain unlimited access to on-demand training courses with an Experts Exchange subscription.

Get Access
Why Experts Exchange?

Experts Exchange always has the answer, or at the least points me in the correct direction! It is like having another employee that is extremely experienced.

Jim Murphy
Programmer at Smart IT Solutions

When asked, what has been your best career decision?

Deciding to stick with EE.

Mohamed Asif
Technical Department Head

Being involved with EE helped me to grow personally and professionally.

Carl Webster
CTP, Sr Infrastructure Consultant
Empower Your Career
Did You Know?

We've partnered with two important charities to provide clean water and computer science education to those who need it most. READ MORE

Ask ANY Question

Connect with Certified Experts to gain insight and support on specific technology challenges including:

  • Troubleshooting
  • Research
  • Professional Opinions
Unlock the solution to this question.
Join our community and discover your potential

Experts Exchange is the only place where you can interact directly with leading experts in the technology field. Become a member today and access the collective knowledge of thousands of technology experts.

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.