H Hex Packet Decoder

11,769,693 packets decoded

192.168.56.11 → 194.190.124.17 DNS Standard query 0xe4a3 A ns2.highsecure.ru OPT

0	1	2	3	4	5	6	7	8	9	10	11	12	13	14	15
52	54	00	7E	42	A5	52	54	00	A6	11	53	08	00	45	00
00	4A	4A	48	00	00	3F	11	F9	D7	C0	A8	38	0B	C2	BE
7C	11	E7	3E	00	35	00	36	37	CB	E4	A3	00	10	00	01
00	00	00	00	00	01	03	6E	73	32	0A	68	69	67	68	73
65	63	75	72	65	02	72	75	00	00	01	00	01	00	00	29
10	00	00	00	80	00	00	00

4 protocols in packet (88 bytes):

Ethernet

IPv4

UDP

DNS

Frame 1: 88 bytes on wire (704 bits)
- Section number: 1
- Interface id: 0 (Interface, hpd0)
  - Interface name: Interface, hpd0
- Encapsulation type: Ethernet (1)
- Arrival Time: Mar 10, 2026 15:35:38.000001000 CET
- UTC Arrival Time: Mar 10, 2026 14:35:38.000001000 UTC
- Epoch Arrival Time: 1773153338.000001000
- Time shift for this packet: 0.000000000 seconds
- Time delta from previous captured frame: 0.000000000 seconds
- Time delta from previous displayed frame: 0.000000000 seconds
- Time since reference or first frame: 0.000000000 seconds
- Frame Number: 1
- Frame Length: 88 bytes (704 bits)
- Capture Length: 88 bytes (704 bits)
- Frame is marked: False
- Frame is ignored: False
- Protocols in frame: eth:ethertype:ip:udp:dns
Ethernet II
- Destination: 52:54:00:7e:42:a5 (52:54:00:7e:42:a5)
  - .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default)
  - .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
- Source: 52:54:00:a6:11:53 (52:54:00:a6:11:53)
  - .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default)
  - .... ...0 .... .... .... .... = IG bit: Individual address (unicast)
- Type: IPv4 (0x0800)
- Stream index: 0
Internet Protocol Version 4
- 0100 .... = Version: 4
- .... 0101 = Header Length: 20 bytes (5)
- Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT)
  - 0000 00.. = Differentiated Services Codepoint: Default (0)
  - .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0)
- Total Length: 74
- Identification: 0x4a48 (19016)
- 000. .... = Flags: 0x0
  - 0... .... = Reserved bit: Not set
  - .0.. .... = Don't fragment: Not set
  - ..0. .... = More fragments: Not set
- ...0 0000 0000 0000 = Fragment Offset: 0
- Time to Live: 63
- Protocol: UDP (17)
- Header Checksum: 0xf9d7 [correct]
- Header checksum status: Good
- Calculated Checksum: 0xf9d7
- Source Address: 192.168.56.11
- Destination Address: 194.190.124.17
- Stream index: 0
User Datagram Protocol
- Source Port: 59198
- Destination Port: 53
- Length: 54
- Checksum: 0x37cb [correct] (matches partial checksum, not 0x647a, likely caused by "UDP checksum offload")
  - Expert Info (Note/Checksum): Partial (pseudo header) checksum (likely caused by "UDP checksum offload")
    - Partial (pseudo header) checksum (likely caused by "UDP checksum offload")
    - Severity level: Note
    - Group: Checksum
  - Calculated Checksum: 0x647a
- Checksum Status: Good
- Stream index: 0
- Stream Packet Number: 1
- Timestamps
  - Time since first frame: 0.000000000 seconds
  - Time since previous frame: 0.000000000 seconds
- UDP payload (46 bytes)
Domain Name System (query)
- Transaction ID: 0xe4a3
- Flags: 0x0010 Standard query
  - 0... .... .... .... = Response: Message is a query
  - .000 0... .... .... = Opcode: Standard query (0)
  - .... ..0. .... .... = Truncated: Message is not truncated
  - .... ...0 .... .... = Recursion desired: Don't do query recursively
  - .... .... .0.. .... = Z: reserved (0)
  - .... .... ...1 .... = Non-authenticated data: Acceptable
- Questions: 1
- Answer RRs: 0
- Authority RRs: 0
- Additional RRs: 1
- Queries
  - ns2.highsecure.ru: type A, class IN
    - Name: ns2.highsecure.ru
    - Name Length: 17
    - Label Count: 3
    - Type: A (1) (Host Address)
    - Class: IN (0x0001)
- Additional records
  - <Root>: type OPT
    - Name: <Root>
    - Type: OPT (41)
    - UDP payload size: 4096
    - Higher bits in extended RCODE: 0x00
    - EDNS0 version: 0
    - Z: 0x8000
      - 1... .... .... .... = DO bit: Accepts DNSSEC security RRs
      - .000 0000 0000 0000 = Reserved: 0x0000
    - Data length: 0

0	1	2	3	4	5	6	7	8	9	10	11	12	13	14	15
52	54	00	7E	42	A5	52	54	00	A6	11	53	08	00	45	00
00	4A	4A	48	00	00	3F	11	F9	D7	C0	A8	38	0B	C2	BE
7C	11	E7	3E	00	35	00	36	37	CB	E4	A3	00	10	00	01
00	00	00	00	00	01	03	6E	73	32	0A	68	69	67	68	73
65	63	75	72	65	02	72	75	00	00	01	00	01	00	00	29
10	00	00	00	80	00	00	00

0	1	2	3	4	5	6	7	8	9	10	11	12	13	14	15
52	54	00	7E	42	A5	52	54	00	A6	11	53	08	00	45	00
00	4A	4A	48	00	00	3F	11	F9	D7	C0	A8	38	0B	C2	BE
7C	11	E7	3E	00	35	00	36	37	CB	E4	A3	00	10	00	01
00	00	00	00	00	01	03	6E	73	32	0A	68	69	67	68	73
65	63	75	72	65	02	72	75	00	00	01	00	01	00	00	29
10	00	00	00	80	00	00	00

0	1	2	3	4	5	6	7	8	9	10	11	12	13	14	15
52	54	00	7E	42	A5	52	54	00	A6	11	53	08	00	45	00
00	4A	4A	48	00	00	3F	11	F9	D7	C0	A8	38	0B	C2	BE
7C	11	E7	3E	00	35	00	36	37	CB	E4	A3	00	10	00	01
00	00	00	00	00	01	03	6E	73	32	0A	68	69	67	68	73
65	63	75	72	65	02	72	75	00	00	01	00	01	00	00	29
10	00	00	00	80	00	00	00