tcpdump: verbose output suppressed, use -v[v]... for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), snapshot length 262144 bytes
17:23:21.500470 ARP, Request who-has 192.168.0.111 tell 192.168.0.1, length 46
17:23:21.591992 IP 192.168.0.104.43894 > 192.168.0.1.domain: 21663+ PTR? 111.0.168.192.in-addr.arpa. (44)
17:23:21.600466 IP 192.168.0.1.domain > 192.168.0.104.43894: 21663 NXDomain* 0/1/0 (99)
17:23:21.600746 IP 192.168.0.104.33879 > 192.168.0.1.domain: 49135+ PTR? 1.0.168.192.in-addr.arpa. (42)
17:23:21.615078 IP 192.168.0.1.domain > 192.168.0.104.33879: 49135 NXDomain* 0/1/0 (97)
17:23:21.695884 IP 192.168.0.104.39135 > 192.168.0.1.domain: 413+ PTR? 104.0.168.192.in-addr.arpa. (44)
17:23:21.703672 IP 192.168.0.1.domain > 192.168.0.104.39135: 413 NXDomain* 0/1/0 (99)
17:23:22.500395 ARP, Request who-has 192.168.0.107 tell 192.168.0.1, length 46
17:23:22.527938 IP 192.168.0.104.38656 > 192.168.0.1.domain: 29391+ PTR? 107.0.168.192.in-addr.arpa. (44)
17:23:22.534652 IP 192.168.0.1.domain > 192.168.0.104.38656: 29391 NXDomain* 0/1/0 (99)
17:23:23.499957 ARP, Request who-has 192.168.0.105 tell 192.168.0.1, length 46
17:23:23.567931 IP 192.168.0.104.33680 > 192.168.0.1.domain: 60075+ PTR? 105.0.168.192.in-addr.arpa. (44)
17:23:23.575722 IP 192.168.0.1.domain > 192.168.0.104.33680: 60075 NXDomain* 0/1/0 (99)
17:23:24.499765 ARP, Request who-has 192.168.0.109 tell 192.168.0.1, length 46
17:23:24.499876 ARP, Request who-has 192.168.0.105 tell 192.168.0.1, length 46
17:23:24.504860 IP 192.168.0.104.59191 > 192.168.0.1.domain: 2617+ PTR? 109.0.168.192.in-addr.arpa. (44)
17:23:24.513718 IP 192.168.0.1.domain > 192.168.0.104.59191: 2617 NXDomain* 0/1/0 (99)
17:23:25.500388 ARP, Request who-has 192.168.0.109 tell 192.168.0.1, length 46
17:23:25.500391 ARP, Request who-has 192.168.0.105 tell 192.168.0.1, length 46
17:23:25.700299 IP 192.168.0.1 > 239.192.152.143: igmp query v3 [max resp time 1.0s] [gaddr 239.192.152.143]
17:23:25.751832 IP 192.168.0.104.36122 > 192.168.0.1.domain: 58995+ PTR? 143.152.192.239.in-addr.arpa. (46)
17:23:25.759647 IP 192.168.0.1.domain > 192.168.0.104.36122: 58995 NXDomain 0/1/0 (119)
17:23:25.886629 IP 192.168.0.102 > igmp.mcast.net: igmp v3 report, 1 group record(s)
17:23:25.959912 IP 192.168.0.104.54926 > 192.168.0.1.domain: 13205+ PTR? 22.0.0.224.in-addr.arpa. (41)
17:23:25.968167 IP 192.168.0.1.domain > 192.168.0.104.54926: 13205 1/0/0 PTR igmp.mcast.net. (69)
17:23:25.968366 IP 192.168.0.104.44489 > 192.168.0.1.domain: 12081+ PTR? 102.0.168.192.in-addr.arpa. (44)
17:23:25.975763 IP 192.168.0.1.domain > 192.168.0.104.44489: 12081 NXDomain* 0/1/0 (99)
17:23:26.499838 ARP, Request who-has 192.168.0.109 tell 192.168.0.1, length 46
17:23:26.499860 ARP, Request who-has 192.168.0.106 tell 192.168.0.1, length 46
17:23:26.584034 IP 192.168.0.104.59637 > 192.168.0.1.domain: 33280+ PTR? 106.0.168.192.in-addr.arpa. (44)
17:23:26.591844 IP 192.168.0.1.domain > 192.168.0.104.59637: 33280 NXDomain* 0/1/0 (99)
17:23:30.791704 ARP, Request who-has 192.168.0.1 tell 192.168.0.104, length 28
17:23:30.792888 ARP, Reply 192.168.0.1 is-at 40:ed:00:e5:b2:87 (oui Unknown), length 46
17:23:34.500515 ARP, Request who-has 192.168.0.107 tell 192.168.0.1, length 46
17:23:34.700041 IP 192.168.0.1 > 239.255.255.250: igmp query v3 [max resp time 1.0s] [gaddr 239.255.255.250]
17:23:34.799864 IP 192.168.0.104.40765 > 192.168.0.1.domain: 46965+ PTR? 250.255.255.239.in-addr.arpa. (46)
17:23:34.807725 IP 192.168.0.1.domain > 192.168.0.104.40765: 46965 NXDomain 0/1/0 (119)
17:23:35.610059 IP 192.168.0.102 > igmp.mcast.net: igmp v3 report, 1 group record(s)
17:23:37.499817 ARP, Request who-has 192.168.0.111 tell 192.168.0.1, length 46
^C
39 packets captured
39 packets received by filter
0 packets dropped by kernel