Answer 1: For Japan
Answer 2: For Oxford University
Answer 3:
Answer 4:
The captured packets indicate that the DNS queries are being sent over UDP.
Answer 5:
Source port = 62060
Destination Port = 53
Answer 6:
IP Add at which DNS request is sent = 172.31.1.203
Yes, both the addresses are the same
Answer 7:
The query type is A
The query itself does not contain answers; it is only a request for the IP address of a domain (e.g.,
www.bing.com, www.ietf.org).
Answer 8:
The response packets contain multiple answers.
Each answer includes:
IP addresses (e.g., 104.16.45.99 and 104.16.44.99 for www.ietf.org).
CNAME (Canonical Name) records that map a domain to another name.
Answer 9:
No, the destination IP address of the SYN packet does not correspond to any of the IP addresses
provided in the DNS response message.
Answer 10:
No, new DNS queries were not issued to load the images.
The images were likely loaded from already resolved domains (cached or preloaded).
Answer 11:
Source Port: 64103 Dst Port: 53
Answer 12:
The query was sent to 172.31.1.203. Yes, this is the IP address of local DNS Server.
Answer 13:
The Type of DNS query is A.
The query does NOT contain any answers it is only requesting an IP for www.mit.edu.
Answer 14:
The response for www.mit.edu includes multiple records:
The DNS query was for an AAAA (IPv6) record of www.mit.edu.
The response shows that www.mit.edu is a CNAME pointing to www.mit.edu.edgekey.net,
which further resolves to e9566.dscb.akamaiedge.net.
The IPv6 addresses returned are:
o 2600:1417:7:1bd::255e
o 2600:1417:7:1b8::255e
This means that www.mit.edu does not have a direct IPv6 address but instead resolves through
Akamai’s CDN.
Answer 15:
Answer 16:
The DNS query is sent to 172.31.1.203. Yes, this is the IP address of local DNS Server.
Answer 17:
The captured query shows "NS" (Name Server) request for mit.edu.
Since it is a query, it does not contain answers.
Answer 18:
The DNS server returned 8 NS records for mit.edu, meaning these are the name servers responsible
for handling DNS queries for mit.edu.
Yes, this response provides the Name Servers for mit.edu, but they are Akamai’s DNS servers, not
MIT’s own.
Answer 19:
Answer 20:
The DNS query is sent to 172.31.1.203 as seen in the Destination column of the captured packets.
Yes, this is the IP address of local DNS Server.
Answer 21:
The query is of Type A (IPv4 address lookup) for bitsy.mit.edu.
The initial query does not contain any answers, as seen in the packet details (Answer RRs: 0).
Answer 22:
The response contains 1 answer (Answer RRs: 1).
This means the domain bitsy.mit.edu resolves to the IP 18.0.72.3.
Answer 23: