81-89-101-114:~# tcpdump -ttt -n port 53 or net 88.80.221.60
tcpdump: WARNING: arptype 65535 not supported by libpcap - falling back to cooked socket
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on venet0, link-type LINUX_SLL (Linux cooked), capture size 96 bytes
000000 IP 81.89.101.114.59977 > 85.31.185.124.53: 43327+ AAAA? www.neiin.de. (30)
023821 IP 85.31.185.124.53 > 81.89.101.114.59977: 43327 1/1/0 CNAME neiin.de. (100)
000344 IP 81.89.101.114.58525 > 85.31.185.124.53: 14279+ A? www.neiin.de. (30)
018017 IP 85.31.185.124.53 > 81.89.101.114.58525: 14279 2/0/0 CNAME neiin.de., (60)
000277 IP 81.89.101.114.40921 > 88.80.221.60.80: S 3886316506:3886316506(0) win 5840 <mss 1460,sackOK,timestamp 3084028546 0,nop,wscale 4>
012984 IP 88.80.221.60.80 > 81.89.101.114.40921: S 289811285:289811285(0) ack 3886316507 win 5792 <mss 1460,sackOK,timestamp 1536212471 3084028546,nop,wscale 2>
000039 IP 81.89.101.114.40921 > 88.80.221.60.80: . ack 1 win 365 <nop,nop,timestamp 3084028559 1536212471>
000266 IP 81.89.101.114.40921 > 88.80.221.60.80: P 1:101(100) ack 1 win 365 <nop,nop,timestamp 3084028559 1536212471>
013643 IP 88.80.221.60.80 > 81.89.101.114.40921: . ack 101 win 1448 <nop,nop,timestamp 1536212485 3084028559>
[B]5. 690031 IP 88.80.221.60.80 > 81.89.101.114.40921: . 1:1449(1448) ack 101 win 1448 <nop,nop,timestamp 1536218174 3084028559>[/B]
000046 IP 81.89.101.114.40921 > 88.80.221.60.80: . ack 1449 win 546 <nop,nop,timestamp 3084034263 1536218174>
-1. 999966 IP 88.80.221.60.80 > 81.89.101.114.40921: . 1449:2897(1448) ack 101 win 1448 <nop,nop,timestamp 1536218174 3084028559>
000046 IP 81.89.101.114.40921 > 88.80.221.60.80: . ack 2897 win 727 <nop,nop,timestamp 3084034263 1536218174>
013371 IP 88.80.221.60.80 > 81.89.101.114.40921: P 2897:4345(1448) ack 101 win 1448 <nop,nop,timestamp 1536218188 3084034263>
000030 IP 81.89.101.114.40921 > 88.80.221.60.80: . ack 4345 win 908 <nop,nop,timestamp 3084034276 1536218188>
000172 IP 88.80.221.60.80 > 81.89.101.114.40921: P 4345:5721(1376) ack 101 win 1448 <nop,nop,timestamp 1536218188 3084034263>
000012 IP 81.89.101.114.40921 > 88.80.221.60.80: . ack 5721 win 1089 <nop,nop,timestamp 3084034277 1536218188>
000935 IP 81.89.101.114.40921 > 88.80.221.60.80: F 101:101(0) ack 5721 win 1089 <nop,nop,timestamp 3084034277 1536218188>
012909 IP 88.80.221.60.80 > 81.89.101.114.40921: F 5721:5721(0) ack 102 win 1448 <nop,nop,timestamp 1536218202 3084034277>
000032 IP 81.89.101.114.40921 > 88.80.221.60.80: . ack 5722 win 1089 <nop,nop,timestamp 3084034290 1536218202>