0
votes
2answers
49 views

Wireshark, Find Protocol Layers

I'm using Wireshark to analyze network traffic. I'm a bit confused by what's displayed under the "Protocol" column. If I'm not mistaken, DNS and HTTP are Application layer protocols while TCP is ...
0
votes
1answer
294 views

dig OK but dig @192.168.1.1 NOT

why dig works OK, but dig my NetGear router directly doesn't (while first goes to it too, because it is my DNS, NetGear itself has 8.8.8.8 set as prim dns). My NetGear has IP 192.168.1.1 on LAN. Here ...
0
votes
0answers
208 views

DNS leak: Looking up own hostname with DNS queries

I was checking a proxied program for DNS leaks with tshark when I noticed this: 13.170066 10.0.2.15 -> 192.168.1.1 DNS 66 Standard query 0xd473 A [hostname] 13.753496 10.0.2.15 -> ...
0
votes
1answer
393 views

DNS Queries Returning No Answer Section

I spent hours today trying to figure out why my own socket-level implementation of DIG in a browser is not working consistently. I would successfully send a DNS packet over UDP but would receive a ...
0
votes
1answer
160 views

Why do DNS queries use loopback interface?

Sniffing (using Wireshark), for didactical purpose, my loopback interface on Ubuntu 12.04, I noticed that a lot of DNS queries (maybe ALL of them) have 127.0.0.1 as source and destination address. ...
3
votes
1answer
3k views

why still dns lookup when using proxy?

I've configured my browser(firefox) to use proxy ,but I find that it's still looking up the dns when I visit http://domain.name, why is that still necessary?