sudo tcpdump -i eth1 -v -X -s0 port 53
tcpdump: listening on eth1, link-type EN10MB (Ethernet), capture size 65535 bytes
21:35:44.344191 IP (tos 0x0, ttl 64, id 19176, offset 0, flags [none], proto UDP (17), length 56)
    tabr.43385 > spaceport.domain: 39216+ A? google.com. (28)
	0x0000:  4500 0038 4ae8 0000 4011 ac79 c0a8 0102  E..8J...@..y....
	0x0010:  c0a8 0101 a979 0035 0024 25ba 9930 0100  .....y.5.$%..0..
	0x0020:  0001 0000 0000 0000 0667 6f6f 676c 6503  .........google.
	0x0030:  636f 6d00 0001 0001                      com.....
21:35:44.344751 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 152)
    spaceport.domain > tabr.43385: 39216 6/0/0 google.com. A 209.85.149.99, google.com. A 209.85.149.104, google.com. A 209.85.149.103, google.com. A 209.85.149.147, google.com. A 209.85.149.106, google.com. A 209.85.149.105 (124)
	0x0000:  4500 0098 0000 4000 4011 b701 c0a8 0101  E.....@.@.......
	0x0010:  c0a8 0102 0035 a979 0084 b5a0 9930 8180  .....5.y.....0..
	0x0020:  0001 0006 0000 0000 0667 6f6f 676c 6503  .........google.
	0x0030:  636f 6d00 0001 0001 c00c 0001 0001 0000  com.............
	0x0040:  00f6 0004 d155 9563 c00c 0001 0001 0000  .....U.c........
	0x0050:  00f6 0004 d155 9568 c00c 0001 0001 0000  .....U.h........
	0x0060:  00f6 0004 d155 9567 c00c 0001 0001 0000  .....U.g........
	0x0070:  00f6 0004 d155 9593 c00c 0001 0001 0000  .....U..........
	0x0080:  00f6 0004 d155 956a c00c 0001 0001 0000  .....U.j........
	0x0090:  00f6 0004 d155 9569                      .....U.i
21:35:44.345311 IP (tos 0x0, ttl 64, id 36310, offset 0, flags [DF], proto UDP (17), length 70)
    tabr.45739 > spaceport.domain: 389+ PTR? 1.1.168.192.in-addr.arpa. (42)
	0x0000:  4500 0046 8dd6 4000 4011 297d c0a8 0102  E..F..@.@.)}....
	0x0010:  c0a8 0101 b2ab 0035 0032 3b55 0185 0100  .......5.2;U....
	0x0020:  0001 0000 0000 0000 0131 0131 0331 3638  .........1.1.168
	0x0030:  0331 3932 0769 6e2d 6164 6472 0461 7270  .192.in-addr.arp
	0x0040:  6100 000c 0001                           a.....
21:35:44.345725 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 93)
    spaceport.domain > tabr.45739: 389* 1/0/0 1.1.168.192.in-addr.arpa. PTR spaceport. (65)
	0x0000:  4500 005d 0000 4000 4011 b73c c0a8 0101  E..]..@.@..<....
	0x0010:  c0a8 0102 0035 b2ab 0049 3663 0185 8580  .....5...I6c....
	0x0020:  0001 0001 0000 0000 0131 0131 0331 3638  .........1.1.168
	0x0030:  0331 3932 0769 6e2d 6164 6472 0461 7270  .192.in-addr.arp
	0x0040:  6100 000c 0001 c00c 000c 0001 0000 0000  a...............
	0x0050:  000b 0973 7061 6365 706f 7274 00         ...spaceport.
^C
4 packets captured
4 packets received by filter
0 packets dropped by kernel