Guest User

Untitled

a guest
Oct 9th, 2026
5
0
364 days
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 10.87 KB | None | 0 0
  1. # dejp - a site I don't regularly visit so it won't be cached
  2. (removed packets are unrelated traffic)
  3. ## laptop queries tailscale's 100.100.100.100 and desktop for ipv4/6
  4. 1 0.000000000 laptop TS_DNS DNS 57 Standard query 0x6f17 A dejapan.com
  5. 2 0.000208800 laptop TS_DNS DNS 57 Standard query 0xfd50 AAAA dejapan.com
  6. 3 0.000272300 laptop desktop DoH 293 Standard query 0x6f17 A dejapan.com
  7. 4 0.000336500 laptop desktop DoH 293 Standard query 0xfd50 AAAA dejapan.com
  8.  
  9. **both return nothing for ipv6**
  10. 7 0.091967000 desktop laptop DoH 184 Standard query response 0xfd50 No such name AAAA dejapan.com
  11. 8 0.092172700 TS_DNS laptop DNS 57 Standard query response 0xfd50 No such name AAAA dejapan.com
  12.  
  13. **both return ipv4**
  14. 10 0.145288100 desktop laptop DoH 248 Standard query response 0x6f17 A dejapan.com A 99.86.57.129 A 99.86.57.84 A 99.86.57.14 A 99.86.57.13
  15. 11 0.145461300 TS_DNS laptop DNS 121 Standard query response 0x6f17 A dejapan.com A 99.86.57.129 A 99.86.57.84 A 99.86.57.14 A 99.86.57.13
  16.  
  17. ## laptop requeries: www prefixed
  18. 13 0.197057300 laptop TS_DNS DNS 61 Standard query 0x2572 A www.dejapan.com
  19. 14 0.197275100 laptop desktop DoH 297 Standard query 0x2572 A www.dejapan.com
  20. 15 0.197298200 laptop TS_DNS DNS 61 Standard query 0xc82b AAAA www.dejapan.com
  21. 16 0.197507400 laptop desktop DoH 297 Standard query 0xc82b AAAA www.dejapan.com
  22.  
  23. **both return nothing for ipv6 www**
  24. 19 0.281359900 desktop laptop DoH 188 Standard query response 0xc82b No such name AAAA www.dejapan.com
  25. 20 0.281736600 TS_DNS laptop DNS 61 Standard query response 0xc82b No such name AAAA www.dejapan.com
  26.  
  27. **both return ipv4 for www**
  28. 21 0.290960600 desktop laptop DoH 252 Standard query response 0x2572 A www.dejapan.com A 99.86.57.13 A 99.86.57.84 A 99.86.57.14 A 99.86.57.129
  29. 22 0.291396400 TS_DNS laptop DNS 125 Standard query response 0x2572 A www.dejapan.com A 99.86.57.13 A 99.86.57.84 A 99.86.57.14 A 99.86.57.129
  30.  
  31. <page fails to load>
  32.  
  33. ## F5 page, laptop requeries ipv4/6 for .com
  34. 33 4.600751600 laptop TS_DNS DNS 57 Standard query 0xd75e A dejapan.com
  35. 34 4.601000200 laptop desktop DoH 293 Standard query 0xd75e A dejapan.com
  36. 35 4.601015200 laptop TS_DNS DNS 57 Standard query 0x400c AAAA dejapan.com
  37. 36 4.601214000 laptop desktop DoH 293 Standard query 0x400c AAAA dejapan.com
  38.  
  39. **desktop returns: ipv6 nothing, ipv4 addresses**
  40. 40 4.649753200 desktop laptop DoH 184 Standard query response 0x400c No such name AAAA dejapan.com
  41. 41 4.649773700 desktop laptop DoH 248 Standard query response 0xd75e A dejapan.com A 99.86.57.129 A 99.86.57.84 A 99.86.57.14 A 99.86.57.13
  42.  
  43. **TS DNS returns: ipv6 nothing, ipv4 addresses**
  44. 42 4.649853800 TS_DNS laptop DNS 57 Standard query response 0x400c No such name AAAA dejapan.com
  45. 43 4.649879200 TS_DNS laptop DNS 121 Standard query response 0xd75e A dejapan.com A 99.86.57.129 A 99.86.57.84 A 99.86.57.14 A 99.86.57.13
  46.  
  47. ## laptop starts TCP handshake to www
  48. 44 4.650672500 laptop www.dejapan.com TCP 52 37990 → 443 [SYN] Seq=0 Win=64480 Len=0 MSS=1240 WS=256 SACK_PERM
  49.  
  50. ## laptop requeries ipv6 .com
  51. 45 4.655502100 laptop TS_DNS DNS 57 Standard query 0xa0f6 AAAA dejapan.com
  52. 46 4.655738000 laptop desktop DoH 293 Standard query 0xa0f6 AAAA dejapan.com
  53.  
  54. **both return nothing for ipv6**
  55. 49 4.702878200 desktop laptop DoH 184 Standard query response 0xa0f6 No such name AAAA dejapan.com
  56. 50 4.702997400 TS_DNS laptop DNS 57 Standard query response 0xa0f6 No such name AAAA dejapan.com
  57.  
  58. ## laptop requeries ipv4 .com
  59. 51 4.703676800 laptop TS_DNS DNS 57 Standard query 0x316a A dejapan.com
  60. 52 4.703915400 laptop desktop DoH 293 Standard query 0x316a A dejapan.com
  61.  
  62. ## TCP traffic starts
  63. 53 4.713822500 www.dejapan.com laptop TCP 52 443 → 37990 [SYN, ACK] Seq=0 Ack=1 Win=24576 Len=0 MSS=1240 SACK_PERM WS=256
  64. 54 4.713869500 laptop www.dejapan.com TCP 40 37990 → 443 [ACK] Seq=1 Ack=1 Win=1573376 Len=0
  65. 55 4.714481100 laptop www.dejapan.com TCP 1280 37990 → 443 [ACK] Seq=1 Ack=1 Win=1573376 Len=1240 [TCP PDU reassembled in 56]
  66. 56 4.714481100 laptop www.dejapan.com TLSv1.3 689 Client Hello (SNI=dejapan.com)
  67. 57 4.750618300 desktop laptop TCP 40 33405 → 37960 [ACK] Seq=773 Ack=1270 Win=2047 Len=0
  68.  
  69. **both return ipv4**
  70. 58 4.750639400 desktop laptop DoH 248 Standard query response 0x316a A dejapan.com A 99.86.57.129 A 99.86.57.84 A 99.86.57.14 A 99.86.57.13
  71. 59 4.750783800 TS_DNS laptop DNS 121 Standard query response 0x316a A dejapan.com A 99.86.57.129 A 99.86.57.84 A 99.86.57.14 A 99.86.57.13
  72.  
  73. ## laptop requeries ipv6 .com
  74. 60 4.751440500 laptop TS_DNS DNS 57 Standard query 0xa30a AAAA dejapan.com
  75. 61 4.751636800 laptop desktop DoH 293 Standard query 0xa30a AAAA dejapan.com
  76.  
  77. **TCP traffic continues**
  78. 62 4.761584300 www.dejapan.com laptop TCP 40 443 → 37990 [ACK] Seq=1 Ack=1241 Win=523008 Len=0
  79. 63 4.763744700 www.dejapan.com laptop TCP 40 443 → 37990 [ACK] Seq=1 Ack=1890 Win=523520 Len=0
  80. 64 4.782281100 www.dejapan.com laptop TCP 1244 443 → 37990 [ACK] Seq=1 Ack=1890 Win=524288 Len=1204 [TCP PDU reassembled in 65]
  81. 65 4.782330500 www.dejapan.com laptop TLSv1.3 1244 Server Hello, Change Cipher Spec, Application Data
  82. 66 4.782350800 laptop www.dejapan.com TCP 40 37990 → 443 [ACK] Seq=1890 Ack=2409 Win=1573376 Len=0
  83. 67 4.782361600 www.dejapan.com laptop TCP 1244 443 → 37990 [ACK] Seq=2409 Ack=1890 Win=524288 Len=1204 [TCP PDU reassembled in 70]
  84. 68 4.782373200 www.dejapan.com laptop TCP 748 443 → 37990 [PSH, ACK] Seq=3613 Ack=1890 Win=524288 Len=708 [TCP PDU reassembled in 70]
  85. 69 4.782381600 laptop www.dejapan.com TCP 40 37990 → 443 [ACK] Seq=1890 Ack=4321 Win=1573376 Len=0
  86. 70 4.783849900 www.dejapan.com laptop TLSv1.3 1151 Application Data, Application Data, Application Data
  87. 71 4.786494100 laptop www.dejapan.com TLSv1.3 104 Change Cipher Spec, Application Data
  88. 72 4.786775200 laptop www.dejapan.com TLSv1.3 132 Application Data
  89. 73 4.786809900 laptop www.dejapan.com TLSv1.3 365 Application Data
  90.  
  91. **both return nothing for ipv6**
  92. 75 4.825749000 desktop laptop DoH 184 Standard query response 0xa30a No such name AAAA dejapan.com
  93. 76 4.826388500 TS_DNS laptop DNS 57 Standard query response 0xa30a No such name AAAA dejapan.com
  94.  
  95. **TCP traffic continues**
  96. 77 4.833029600 www.dejapan.com laptop TCP 40 443 → 37990 [ACK] Seq=5432 Ack=1954 Win=524032 Len=0
  97. 78 4.836283200 www.dejapan.com laptop TCP 40 443 → 37990 [ACK] Seq=5432 Ack=2046 Win=524032 Len=0
  98. 79 4.836345900 www.dejapan.com laptop TCP 40 443 → 37990 [ACK] Seq=5432 Ack=2371 Win=523776 Len=0
  99. 80 4.848753700 www.dejapan.com laptop TLSv1.3 281 Application Data, Application Data
  100. 81 4.851128300 laptop www.dejapan.com TLSv1.3 71 Application Data
  101. 82 4.851612200 www.dejapan.com laptop TLSv1.3 71 Application Data
  102. 83 4.879705100 laptop desktop TCP 40 37960 → 33405 [ACK] Seq=1523 Ack=1125 Win=6142 Len=0
  103. 84 4.901255600 laptop www.dejapan.com TCP 40 37990 → 443 [ACK] Seq=2402 Ack=5704 Win=1573376 Len=0
  104. 85 4.929256300 www.dejapan.com laptop TCP 40 443 → 37990 [ACK] Seq=5704 Ack=2402 Win=524032 Len=0
  105. 86 5.212518300 www.dejapan.com laptop TLSv1.3 611 Application Data, Application Data
  106. 91 5.265151900 laptop www.dejapan.com TCP 40 37990 → 443 [ACK] Seq=2402 Ack=6275 Win=1572864 Len=0
  107.  
  108. ## laptop requeries ipv4/6 for www ???
  109. 87 5.217874200 laptop TS_DNS DNS 61 Standard query 0x9f43 A www.dejapan.com
  110. 88 5.218150000 laptop TS_DNS DNS 61 Standard query 0x2b52 AAAA www.dejapan.com
  111. 89 5.218151800 laptop desktop DoH 297 Standard query 0x9f43 A www.dejapan.com
  112. 90 5.218338800 laptop desktop DoH 297 Standard query 0x2b52 AAAA www.dejapan.com
  113.  
  114. **both return ipv4, nothing ipv6**
  115. 94 5.267709600 desktop laptop DoH 252 Standard query response 0x9f43 A www.dejapan.com A 99.86.57.13 A 99.86.57.84 A 99.86.57.14 A 99.86.57.129
  116. 95 5.267833000 TS_DNS laptop DNS 125 Standard query response 0x9f43 A www.dejapan.com A 99.86.57.13 A 99.86.57.84 A 99.86.57.14 A 99.86.57.129
  117. 96 5.292253400 desktop laptop DoH 188 Standard query response 0x2b52 No such name AAAA www.dejapan.com
  118. 97 5.292377200 TS_DNS laptop DNS 61 Standard query response 0x2b52 No such name AAAA www.dejapan.com
  119.  
  120. ## laptop requeries ipv6 for www
  121. 98 5.293290200 laptop TS_DNS DNS 61 Standard query 0xa5ca AAAA www.dejapan.com
  122. 99 5.293519100 laptop desktop DoH 297 Standard query 0xa5ca AAAA www.dejapan.com
  123.  
  124. **both return nothing ipv6**
  125. 102 5.371980600 desktop laptop DoH 188 Standard query response 0xa5ca No such name AAAA www.dejapan.com
  126. 103 5.372210500 TS_DNS laptop DNS 61 Standard query response 0xa5ca No such name AAAA www.dejapan.com
  127.  
  128. ## laptop requeries TS DNS for ipv4/6 www
  129. 105 5.373117600 laptop TS_DNS DNS 61 Standard query 0x627e AAAA www.dejapan.com
  130. 106 5.373120900 laptop TS_DNS DNS 61 Standard query 0x582c A www.dejapan.com
  131.  
  132. ## laptop inits another TCP connection to www
  133. * SYN: 107 5.373307300 laptop www.dejapan.com TCP 52 37991 → 443 [SYN] Seq=0 Win=64480 Len=0 MSS=1240 WS=256 SACK_PERM
  134. * ACK: 119 5.442743000 www.dejapan.com
  135.  
  136. ## laptop requeries desktop for ipv4/6 www
  137. 108 5.373379800 laptop desktop DoH 297 Standard query 0x582c A www.dejapan.com
  138. 109 5.373382000 laptop desktop DoH 297 Standard query 0x627e AAAA www.dejapan.com
  139.  
  140. **desktop returns ipv4, nothing ipv6 www**
  141. 113 5.422233100 desktop laptop DoH 188 Standard query response 0x627e No such name AAAA www.dejapan.com
  142. 114 5.422265900 desktop laptop DoH 252 Standard query response 0x582c A www.dejapan.com A 99.86.57.13 A 99.86.57.84 A 99.86.57.14 A 99.86.57.129
  143.  
  144. **TS_DNS returns ipv4, nothing ipv6 www**
  145. 115 5.422428500 TS_DNS laptop DNS 125 Standard query response 0x582c A www.dejapan.com A 99.86.57.13 A 99.86.57.84 A 99.86.57.14 A 99.86.57.129
  146. 116 5.422451600 TS_DNS laptop DNS 61 Standard query response 0x627e No such name AAAA www.dejapan.com
  147.  
  148. ## laptop requeries both for ipv6 www
  149. 117 5.423263800 laptop TS_DNS DNS 61 Standard query 0xebec AAAA www.dejapan.com
  150. 118 5.423625500 laptop desktop DoH 297 Standard query 0xebec AAAA www.dejapan.com
  151.  
  152. ## TCP traffic restarts
  153. 119 5.442743000 www.dejapan.com laptop TCP 52 443 → 37991 [SYN, ACK] Seq=0 Ack=1 Win=24576 Len=0 MSS=1240 SACK_PERM WS=256
  154. 120 5.442839700 laptop www.dejapan.com TCP 40 37991 → 443 [ACK] Seq=1 Ack=1 Win=1573376 Len=0
  155. 121 5.443740200 laptop www.dejapan.com TCP 1280 37991 → 443 [ACK] Seq=1 Ack=1 Win=1573376 Len=1240 [TCP PDU reassembled in 122]
  156. 122 5.443740200 laptop www.dejapan.com TLSv1.3 693 Client Hello (SNI=www.dejapan.com)
  157.  
  158. **both return nothing for ipv6**
  159. 125 5.470249700 desktop laptop DoH 188 Standard query response 0xebec No such name AAAA www.dejapan.com
  160. 126 5.470409000 TS_DNS laptop DNS 61 Standard query response 0xebec No such name AAAA www.dejapan.com
  161.  
  162. **TCP traffic continues, site loads**
  163. * but laptop still queries DNS/DoH throughout
  164. * no ipv6 response whatsoever via desktop / ts dns
  165.  
Advertisement
Add Comment
Please, Sign In to add comment