Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- # dejp - a site I don't regularly visit so it won't be cached
- (removed packets are unrelated traffic)
- ## laptop queries tailscale's 100.100.100.100 and desktop for ipv4/6
- 1 0.000000000 laptop TS_DNS DNS 57 Standard query 0x6f17 A dejapan.com
- 2 0.000208800 laptop TS_DNS DNS 57 Standard query 0xfd50 AAAA dejapan.com
- 3 0.000272300 laptop desktop DoH 293 Standard query 0x6f17 A dejapan.com
- 4 0.000336500 laptop desktop DoH 293 Standard query 0xfd50 AAAA dejapan.com
- **both return nothing for ipv6**
- 7 0.091967000 desktop laptop DoH 184 Standard query response 0xfd50 No such name AAAA dejapan.com
- 8 0.092172700 TS_DNS laptop DNS 57 Standard query response 0xfd50 No such name AAAA dejapan.com
- **both return ipv4**
- 10 0.145288100 desktop laptop DoH 248 Standard query response 0x6f17 A dejapan.com A 99.86.57.129 A 99.86.57.84 A 99.86.57.14 A 99.86.57.13
- 11 0.145461300 TS_DNS laptop DNS 121 Standard query response 0x6f17 A dejapan.com A 99.86.57.129 A 99.86.57.84 A 99.86.57.14 A 99.86.57.13
- ## laptop requeries: www prefixed
- 13 0.197057300 laptop TS_DNS DNS 61 Standard query 0x2572 A www.dejapan.com
- 14 0.197275100 laptop desktop DoH 297 Standard query 0x2572 A www.dejapan.com
- 15 0.197298200 laptop TS_DNS DNS 61 Standard query 0xc82b AAAA www.dejapan.com
- 16 0.197507400 laptop desktop DoH 297 Standard query 0xc82b AAAA www.dejapan.com
- **both return nothing for ipv6 www**
- 19 0.281359900 desktop laptop DoH 188 Standard query response 0xc82b No such name AAAA www.dejapan.com
- 20 0.281736600 TS_DNS laptop DNS 61 Standard query response 0xc82b No such name AAAA www.dejapan.com
- **both return ipv4 for www**
- 21 0.290960600 desktop laptop DoH 252 Standard query response 0x2572 A www.dejapan.com A 99.86.57.13 A 99.86.57.84 A 99.86.57.14 A 99.86.57.129
- 22 0.291396400 TS_DNS laptop DNS 125 Standard query response 0x2572 A www.dejapan.com A 99.86.57.13 A 99.86.57.84 A 99.86.57.14 A 99.86.57.129
- <page fails to load>
- ## F5 page, laptop requeries ipv4/6 for .com
- 33 4.600751600 laptop TS_DNS DNS 57 Standard query 0xd75e A dejapan.com
- 34 4.601000200 laptop desktop DoH 293 Standard query 0xd75e A dejapan.com
- 35 4.601015200 laptop TS_DNS DNS 57 Standard query 0x400c AAAA dejapan.com
- 36 4.601214000 laptop desktop DoH 293 Standard query 0x400c AAAA dejapan.com
- **desktop returns: ipv6 nothing, ipv4 addresses**
- 40 4.649753200 desktop laptop DoH 184 Standard query response 0x400c No such name AAAA dejapan.com
- 41 4.649773700 desktop laptop DoH 248 Standard query response 0xd75e A dejapan.com A 99.86.57.129 A 99.86.57.84 A 99.86.57.14 A 99.86.57.13
- **TS DNS returns: ipv6 nothing, ipv4 addresses**
- 42 4.649853800 TS_DNS laptop DNS 57 Standard query response 0x400c No such name AAAA dejapan.com
- 43 4.649879200 TS_DNS laptop DNS 121 Standard query response 0xd75e A dejapan.com A 99.86.57.129 A 99.86.57.84 A 99.86.57.14 A 99.86.57.13
- ## laptop starts TCP handshake to www
- 44 4.650672500 laptop www.dejapan.com TCP 52 37990 → 443 [SYN] Seq=0 Win=64480 Len=0 MSS=1240 WS=256 SACK_PERM
- ## laptop requeries ipv6 .com
- 45 4.655502100 laptop TS_DNS DNS 57 Standard query 0xa0f6 AAAA dejapan.com
- 46 4.655738000 laptop desktop DoH 293 Standard query 0xa0f6 AAAA dejapan.com
- **both return nothing for ipv6**
- 49 4.702878200 desktop laptop DoH 184 Standard query response 0xa0f6 No such name AAAA dejapan.com
- 50 4.702997400 TS_DNS laptop DNS 57 Standard query response 0xa0f6 No such name AAAA dejapan.com
- ## laptop requeries ipv4 .com
- 51 4.703676800 laptop TS_DNS DNS 57 Standard query 0x316a A dejapan.com
- 52 4.703915400 laptop desktop DoH 293 Standard query 0x316a A dejapan.com
- ## TCP traffic starts
- 53 4.713822500 www.dejapan.com laptop TCP 52 443 → 37990 [SYN, ACK] Seq=0 Ack=1 Win=24576 Len=0 MSS=1240 SACK_PERM WS=256
- 54 4.713869500 laptop www.dejapan.com TCP 40 37990 → 443 [ACK] Seq=1 Ack=1 Win=1573376 Len=0
- 55 4.714481100 laptop www.dejapan.com TCP 1280 37990 → 443 [ACK] Seq=1 Ack=1 Win=1573376 Len=1240 [TCP PDU reassembled in 56]
- 56 4.714481100 laptop www.dejapan.com TLSv1.3 689 Client Hello (SNI=dejapan.com)
- 57 4.750618300 desktop laptop TCP 40 33405 → 37960 [ACK] Seq=773 Ack=1270 Win=2047 Len=0
- **both return ipv4**
- 58 4.750639400 desktop laptop DoH 248 Standard query response 0x316a A dejapan.com A 99.86.57.129 A 99.86.57.84 A 99.86.57.14 A 99.86.57.13
- 59 4.750783800 TS_DNS laptop DNS 121 Standard query response 0x316a A dejapan.com A 99.86.57.129 A 99.86.57.84 A 99.86.57.14 A 99.86.57.13
- ## laptop requeries ipv6 .com
- 60 4.751440500 laptop TS_DNS DNS 57 Standard query 0xa30a AAAA dejapan.com
- 61 4.751636800 laptop desktop DoH 293 Standard query 0xa30a AAAA dejapan.com
- **TCP traffic continues**
- 62 4.761584300 www.dejapan.com laptop TCP 40 443 → 37990 [ACK] Seq=1 Ack=1241 Win=523008 Len=0
- 63 4.763744700 www.dejapan.com laptop TCP 40 443 → 37990 [ACK] Seq=1 Ack=1890 Win=523520 Len=0
- 64 4.782281100 www.dejapan.com laptop TCP 1244 443 → 37990 [ACK] Seq=1 Ack=1890 Win=524288 Len=1204 [TCP PDU reassembled in 65]
- 65 4.782330500 www.dejapan.com laptop TLSv1.3 1244 Server Hello, Change Cipher Spec, Application Data
- 66 4.782350800 laptop www.dejapan.com TCP 40 37990 → 443 [ACK] Seq=1890 Ack=2409 Win=1573376 Len=0
- 67 4.782361600 www.dejapan.com laptop TCP 1244 443 → 37990 [ACK] Seq=2409 Ack=1890 Win=524288 Len=1204 [TCP PDU reassembled in 70]
- 68 4.782373200 www.dejapan.com laptop TCP 748 443 → 37990 [PSH, ACK] Seq=3613 Ack=1890 Win=524288 Len=708 [TCP PDU reassembled in 70]
- 69 4.782381600 laptop www.dejapan.com TCP 40 37990 → 443 [ACK] Seq=1890 Ack=4321 Win=1573376 Len=0
- 70 4.783849900 www.dejapan.com laptop TLSv1.3 1151 Application Data, Application Data, Application Data
- 71 4.786494100 laptop www.dejapan.com TLSv1.3 104 Change Cipher Spec, Application Data
- 72 4.786775200 laptop www.dejapan.com TLSv1.3 132 Application Data
- 73 4.786809900 laptop www.dejapan.com TLSv1.3 365 Application Data
- **both return nothing for ipv6**
- 75 4.825749000 desktop laptop DoH 184 Standard query response 0xa30a No such name AAAA dejapan.com
- 76 4.826388500 TS_DNS laptop DNS 57 Standard query response 0xa30a No such name AAAA dejapan.com
- **TCP traffic continues**
- 77 4.833029600 www.dejapan.com laptop TCP 40 443 → 37990 [ACK] Seq=5432 Ack=1954 Win=524032 Len=0
- 78 4.836283200 www.dejapan.com laptop TCP 40 443 → 37990 [ACK] Seq=5432 Ack=2046 Win=524032 Len=0
- 79 4.836345900 www.dejapan.com laptop TCP 40 443 → 37990 [ACK] Seq=5432 Ack=2371 Win=523776 Len=0
- 80 4.848753700 www.dejapan.com laptop TLSv1.3 281 Application Data, Application Data
- 81 4.851128300 laptop www.dejapan.com TLSv1.3 71 Application Data
- 82 4.851612200 www.dejapan.com laptop TLSv1.3 71 Application Data
- 83 4.879705100 laptop desktop TCP 40 37960 → 33405 [ACK] Seq=1523 Ack=1125 Win=6142 Len=0
- 84 4.901255600 laptop www.dejapan.com TCP 40 37990 → 443 [ACK] Seq=2402 Ack=5704 Win=1573376 Len=0
- 85 4.929256300 www.dejapan.com laptop TCP 40 443 → 37990 [ACK] Seq=5704 Ack=2402 Win=524032 Len=0
- 86 5.212518300 www.dejapan.com laptop TLSv1.3 611 Application Data, Application Data
- 91 5.265151900 laptop www.dejapan.com TCP 40 37990 → 443 [ACK] Seq=2402 Ack=6275 Win=1572864 Len=0
- ## laptop requeries ipv4/6 for www ???
- 87 5.217874200 laptop TS_DNS DNS 61 Standard query 0x9f43 A www.dejapan.com
- 88 5.218150000 laptop TS_DNS DNS 61 Standard query 0x2b52 AAAA www.dejapan.com
- 89 5.218151800 laptop desktop DoH 297 Standard query 0x9f43 A www.dejapan.com
- 90 5.218338800 laptop desktop DoH 297 Standard query 0x2b52 AAAA www.dejapan.com
- **both return ipv4, nothing ipv6**
- 94 5.267709600 desktop laptop DoH 252 Standard query response 0x9f43 A www.dejapan.com A 99.86.57.13 A 99.86.57.84 A 99.86.57.14 A 99.86.57.129
- 95 5.267833000 TS_DNS laptop DNS 125 Standard query response 0x9f43 A www.dejapan.com A 99.86.57.13 A 99.86.57.84 A 99.86.57.14 A 99.86.57.129
- 96 5.292253400 desktop laptop DoH 188 Standard query response 0x2b52 No such name AAAA www.dejapan.com
- 97 5.292377200 TS_DNS laptop DNS 61 Standard query response 0x2b52 No such name AAAA www.dejapan.com
- ## laptop requeries ipv6 for www
- 98 5.293290200 laptop TS_DNS DNS 61 Standard query 0xa5ca AAAA www.dejapan.com
- 99 5.293519100 laptop desktop DoH 297 Standard query 0xa5ca AAAA www.dejapan.com
- **both return nothing ipv6**
- 102 5.371980600 desktop laptop DoH 188 Standard query response 0xa5ca No such name AAAA www.dejapan.com
- 103 5.372210500 TS_DNS laptop DNS 61 Standard query response 0xa5ca No such name AAAA www.dejapan.com
- ## laptop requeries TS DNS for ipv4/6 www
- 105 5.373117600 laptop TS_DNS DNS 61 Standard query 0x627e AAAA www.dejapan.com
- 106 5.373120900 laptop TS_DNS DNS 61 Standard query 0x582c A www.dejapan.com
- ## laptop inits another TCP connection to www
- * SYN: 107 5.373307300 laptop www.dejapan.com TCP 52 37991 → 443 [SYN] Seq=0 Win=64480 Len=0 MSS=1240 WS=256 SACK_PERM
- * ACK: 119 5.442743000 www.dejapan.com
- ## laptop requeries desktop for ipv4/6 www
- 108 5.373379800 laptop desktop DoH 297 Standard query 0x582c A www.dejapan.com
- 109 5.373382000 laptop desktop DoH 297 Standard query 0x627e AAAA www.dejapan.com
- **desktop returns ipv4, nothing ipv6 www**
- 113 5.422233100 desktop laptop DoH 188 Standard query response 0x627e No such name AAAA www.dejapan.com
- 114 5.422265900 desktop laptop DoH 252 Standard query response 0x582c A www.dejapan.com A 99.86.57.13 A 99.86.57.84 A 99.86.57.14 A 99.86.57.129
- **TS_DNS returns ipv4, nothing ipv6 www**
- 115 5.422428500 TS_DNS laptop DNS 125 Standard query response 0x582c A www.dejapan.com A 99.86.57.13 A 99.86.57.84 A 99.86.57.14 A 99.86.57.129
- 116 5.422451600 TS_DNS laptop DNS 61 Standard query response 0x627e No such name AAAA www.dejapan.com
- ## laptop requeries both for ipv6 www
- 117 5.423263800 laptop TS_DNS DNS 61 Standard query 0xebec AAAA www.dejapan.com
- 118 5.423625500 laptop desktop DoH 297 Standard query 0xebec AAAA www.dejapan.com
- ## TCP traffic restarts
- 119 5.442743000 www.dejapan.com laptop TCP 52 443 → 37991 [SYN, ACK] Seq=0 Ack=1 Win=24576 Len=0 MSS=1240 SACK_PERM WS=256
- 120 5.442839700 laptop www.dejapan.com TCP 40 37991 → 443 [ACK] Seq=1 Ack=1 Win=1573376 Len=0
- 121 5.443740200 laptop www.dejapan.com TCP 1280 37991 → 443 [ACK] Seq=1 Ack=1 Win=1573376 Len=1240 [TCP PDU reassembled in 122]
- 122 5.443740200 laptop www.dejapan.com TLSv1.3 693 Client Hello (SNI=www.dejapan.com)
- **both return nothing for ipv6**
- 125 5.470249700 desktop laptop DoH 188 Standard query response 0xebec No such name AAAA www.dejapan.com
- 126 5.470409000 TS_DNS laptop DNS 61 Standard query response 0xebec No such name AAAA www.dejapan.com
- **TCP traffic continues, site loads**
- * but laptop still queries DNS/DoH throughout
- * no ipv6 response whatsoever via desktop / ts dns
Advertisement
Add Comment
Please, Sign In to add comment