zorg@rgw:~$ sudo tcpdump -tttt -i eth0 -A -s 0 -n udp port 53 | grep Fail -A 1
[sudo] password for zorg:
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes
2014-09-03 14:00:30.641373 IP 192.168.6.4.53 > 192.168.6.61.49949: 59285 ServFail 1/0/0 CNAME api.evip.icq.com. (59)
E..W..@.@..U.......=.5...C...............api.icq.net..................api.evip.icq.com.
--
2014-09-03 14:00:32.898770 IP 192.168.6.4.53 > 192.168.6.61.63185: 51152 ServFail 1/0/0 CNAME api.evip.icq.com. (59)
E..W..@.@..S.......=.5...C...............api.icq.net..................api.evip.icq.com.
--
2014-09-03 14:00:38.158294 IP 192.168.6.4.53 > 192.168.6.61.55305: 46524 ServFail 1/0/0 CNAME api.evip.icq.com. (59)
E..W..@.@..Q.......=.5. .C...............api.icq.net..................api.evip.icq.com.
--
2014-09-03 14:00:40.415695 IP 192.168.6.4.53 > 192.168.6.61.64349: 62191 ServFail 1/0/0 CNAME api.evip.icq.com. (59)
E..W..@.@..O.......=.5.].C...............api.icq.net..................api.evip.icq.com.
--
2014-09-03 14:00:45.675696 IP 192.168.6.4.53 > 192.168.6.61.58799: 59250 ServFail 1/0/0 CNAME api.evip.icq.com. (59)
E..W..@.@..M.......=.5...C...r...........api.icq.net..................api.evip.icq.com.
--
2014-09-03 14:00:46.408463 IP 192.168.3.4.53 > 192.168.3.17.50371: 37458 ServFail 0/0/0 (40)
E..D(g@.@............5...0...R...........peer.pickeklosarske.ru.....
--
2014-09-03 14:00:47.463255 IP 192.168.6.4.53 > 192.168.6.55.1026: 62615 ServFail 1/0/0 CNAME dnl20.geo2.kaspersky.com. (
67)
.dnl20.geo2........7.5...K...............dnl-19.geo     kaspersky.com..............<.
--
2014-09-03 14:00:47.934003 IP 192.168.6.4.53 > 192.168.6.61.63186: 25815 ServFail 1/0/0 CNAME api.evip.icq.com. (59)
E..W..@.@..K.......=.5...C..d............api.icq.net..................api.evip.icq.com.
--
2014-09-03 14:00:48.487379 IP 192.168.3.4.53 > 192.168.3.17.50371: 37458 ServFail 0/0/0 (40)
E..D(h@.@............5...0...R...........peer.pickeklosarske.ru.....
^C170 packets captured
170 packets received by filter
0 packets dropped by kernel