vagrant@precise32:~$ sudo tcpdump
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes
11:15:27.166148 IP 10.0.2.15.ntp > ns3.net4india.com.ntp: NTPv4, Client, length 48
11:15:27.166669 ARP, Request who-has 10.0.2.3 tell 10.0.2.15, length 28
11:15:27.166840 ARP, Reply 10.0.2.3 is-at 52:54:00:12:35:03 (oui Unknown), length 46
11:15:27.166848 IP 10.0.2.15.54180 > 10.0.2.3.domain: 9523+ PTR? 67.136.71.202.in-addr.arpa. (44)
11:15:27.216780 IP ns3.net4india.com.ntp > 10.0.2.15.ntp: NTPv4, Server, length 48
11:15:27.389159 IP 10.0.2.3.domain > 10.0.2.15.54180: 9523 1/0/0 PTR ns3.net4india.com. (75)
11:15:27.389402 IP 10.0.2.15.57709 > 10.0.2.3.domain: 57239+ PTR? 15.2.0.10.in-addr.arpa. (40)
11:15:27.455056 IP 10.0.2.3.domain > 10.0.2.15.57709: 57239 NXDomain 0/0/0 (40)
11:15:27.482948 IP 10.0.2.15.49980 > 10.0.2.3.domain: 22893+ PTR? 3.2.0.10.in-addr.arpa. (39)
11:15:27.547217 IP 10.0.2.3.domain > 10.0.2.15.49980: 22893 NXDomain 0/0/0 (39)
11:15:28.166115 IP 10.0.2.15.ntp > mana.skafari.com.ntp: NTPv4, Client, length 48
11:15:28.166397 IP 10.0.2.15.32885 > 10.0.2.3.domain: 56985+ PTR? 90.162.248.173.in-addr.arpa. (45)
11:15:28.289463 IP 10.0.2.3.domain > 10.0.2.15.32885: 56985 1/0/0 PTR mana.skafari.com. (75)
11:15:28.438891 IP mana.skafari.com.ntp > 10.0.2.15.ntp: NTPv4, Server, length 48
11:15:29.165998 IP 10.0.2.15.ntp > barricade.rack911.com.ntp: NTPv4, Client, length 48
11:15:29.166219 IP 10.0.2.15.42339 > 10.0.2.3.domain: 30102+ PTR? 29.40.65.69.in-addr.arpa. (42)
11:15:29.226887 IP 10.0.2.3.domain > 10.0.2.15.42339: 30102 1/0/0 PTR barricade.rack911.com. (77)
11:15:29.459574 IP barricade.rack911.com.ntp > 10.0.2.15.ntp: NTPv4, Server, length 48
11:15:30.166104 IP 10.0.2.15.ntp > europium.canonical.com.ntp: NTPv4, Client, length 48
11:15:30.166337 IP 10.0.2.15.41523 > 10.0.2.3.domain: 49066+ PTR? 4.94.189.91.in-addr.arpa. (42)
11:15:30.299033 IP 10.0.2.3.domain > 10.0.2.15.41523: 49066 1/0/0 PTR europium.canonical.com. (78)
11:15:30.442772 IP europium.canonical.com.ntp > 10.0.2.15.ntp: NTPv4, Server, length 48
11:15:31.166012 IP 10.0.2.15.ntp > ns02.hns.net.in.ntp: NTPv4, Client, length 48
11:15:31.166235 IP 10.0.2.15.46941 > 10.0.2.3.domain: 31146+ PTR? 6.225.108.123.in-addr.arpa. (44)
11:15:31.200474 IP ns02.hns.net.in.ntp > 10.0.2.15.ntp: NTPv4, Server, length 48
11:15:31.227319 IP 10.0.2.3.domain > 10.0.2.15.46941: 31146 1/0/0 PTR ns02.hns.net.in. (73)
11:15:32.167025 ARP, Request who-has 10.0.2.2 tell 10.0.2.15, length 28
11:15:32.167211 ARP, Reply 10.0.2.2 is-at 52:54:00:12:35:02 (oui Unknown), length 46
11:15:32.167424 IP 10.0.2.15.44779 > 10.0.2.3.domain: 49537+ PTR? 2.2.0.10.in-addr.arpa. (39)
11:15:32.231632 IP 10.0.2.3.domain > 10.0.2.15.44779: 49537 NXDomain 0/0/0 (39)
11:16:31.166030 IP 10.0.2.15.ntp > ns3.net4india.com.ntp: NTPv4, Client, length 48
11:16:31.201690 IP ns3.net4india.com.ntp > 10.0.2.15.ntp: NTPv4, Server, length 48
11:16:32.166033 IP 10.0.2.15.ntp > mana.skafari.com.ntp: NTPv4, Client, length 48
11:16:32.436423 IP mana.skafari.com.ntp > 10.0.2.15.ntp: NTPv4, Server, length 48
11:16:34.166037 IP 10.0.2.15.ntp > barricade.rack911.com.ntp: NTPv4, Client, length 48
11:16:34.462734 IP barricade.rack911.com.ntp > 10.0.2.15.ntp: NTPv4, Server, length 48
11:16:35.166112 IP 10.0.2.15.ntp > europium.canonical.com.ntp: NTPv4, Client, length 48
11:16:35.442407 IP europium.canonical.com.ntp > 10.0.2.15.ntp: NTPv4, Server, length 48
11:16:36.166111 IP 10.0.2.15.ntp > ns02.hns.net.in.ntp: NTPv4, Client, length 48
11:16:36.167053 ARP, Request who-has 10.0.2.2 tell 10.0.2.15, length 28
11:16:36.167597 ARP, Reply 10.0.2.2 is-at 52:54:00:12:35:02 (oui Unknown), length 46
11:16:36.202624 IP ns02.hns.net.in.ntp > 10.0.2.15.ntp: NTPv4, Server, length 48
11:17:35.166104 IP 10.0.2.15.ntp > ns3.net4india.com.ntp: NTPv4, Client, length 48
11:17:35.200358 IP ns3.net4india.com.ntp > 10.0.2.15.ntp: NTPv4, Server, length 48
11:17:38.166096 IP 10.0.2.15.ntp > mana.skafari.com.ntp: NTPv4, Client, length 48
11:17:38.439246 IP mana.skafari.com.ntp > 10.0.2.15.ntp: NTPv4, Server, length 48
11:17:40.168120 ARP, Request who-has 10.0.2.2 tell 10.0.2.15, length 28
11:17:40.168306 ARP, Reply 10.0.2.2 is-at 52:54:00:12:35:02 (oui Unknown), length 46
11:17:41.166102 IP 10.0.2.15.ntp > barricade.rack911.com.ntp: NTPv4, Client, length 48
11:17:41.463049 IP barricade.rack911.com.ntp > 10.0.2.15.ntp: NTPv4, Server, length 48
11:17:42.166114 IP 10.0.2.15.ntp > europium.canonical.com.ntp: NTPv4, Client, length 48
11:17:42.440812 IP europium.canonical.com.ntp > 10.0.2.15.ntp: NTPv4, Server, length 48
11:18:44.167068 IP 10.0.2.15.ntp > ns02.hns.net.in.ntp: NTPv4, Client, length 48
11:18:44.205284 IP ns02.hns.net.in.ntp > 10.0.2.15.ntp: NTPv4, Server, length 48
11:18:49.176298 ARP, Request who-has 10.0.2.2 tell 10.0.2.15, length 28
11:18:49.176486 ARP, Reply 10.0.2.2 is-at 52:54:00:12:35:02 (oui Unknown), length 46
11:19:48.166039 IP 10.0.2.15.ntp > ns3.net4india.com.ntp: NTPv4, Client, length 48
11:19:48.204198 IP ns3.net4india.com.ntp > 10.0.2.15.ntp: NTPv4, Server, length 48
11:19:51.166932 IP 10.0.2.15.ntp > barricade.rack911.com.ntp: NTPv4, Client, length 48
11:19:51.167074 IP 10.0.2.15.ntp > mana.skafari.com.ntp: NTPv4, Client, length 48
11:19:51.444844 IP mana.skafari.com.ntp > 10.0.2.15.ntp: NTPv4, Server, length 48
11:19:51.463152 IP barricade.rack911.com.ntp > 10.0.2.15.ntp: NTPv4, Server, length 48
11:19:52.166108 IP 10.0.2.15.ntp > europium.canonical.com.ntp: NTPv4, Client, length 48
11:19:52.442391 IP europium.canonical.com.ntp > 10.0.2.15.ntp: NTPv4, Server, length 48
11:19:53.175027 ARP, Request who-has 10.0.2.2 tell 10.0.2.15, length 28
11:19:53.175173 ARP, Reply 10.0.2.2 is-at 52:54:00:12:35:02 (oui Unknown), length 46
11:20:01.847252 IP 10.0.2.15.42198 > 10.0.2.3.domain: 54148+ AAAA? blah.com. (26)
11:20:06.852709 IP 10.0.2.15.42198 > 10.0.2.3.domain: 54148+ AAAA? blah.com. (26)
11:20:06.855100 ARP, Request who-has 10.0.2.3 tell 10.0.2.15, length 28
11:20:06.855300 ARP, Reply 10.0.2.3 is-at 52:54:00:12:35:03 (oui Unknown), length 46