From owner-freebsd-questions  Mon May 19 16:37:58 1997
Return-Path: <owner-questions>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.5/8.8.5) id QAA26176
          for questions-outgoing; Mon, 19 May 1997 16:37:58 -0700 (PDT)
Received: from sunsrv5.lrz-muenchen.de (sunsrv5.lrz-muenchen.de [129.187.10.15])
          by hub.freebsd.org (8.8.5/8.8.5) with SMTP id QAA26170
          for <questions@FreeBSD.ORG>; Mon, 19 May 1997 16:37:54 -0700 (PDT)
Received: from sun1.lrz-muenchen.de by sunsrv5.lrz-muenchen.de; Tue, 20 May 97 01:37:51 +0200
Received: by sun1.lrz-muenchen.de (5.x/SMI-SVR4)
	id AA16389; Tue, 20 May 1997 01:37:49 +0200
From: Joachim.Wunder@lrz.tu-muenchen.de (Joachim Wunder)
Message-Id: <9705192337.AA16389@sun1.lrz-muenchen.de>
Subject: tcpdump output - what means this?
To: questions@FreeBSD.ORG
Date: Tue, 20 May 1997 01:37:49 +0200 (MET DST)
X-Mailer: ELM [version 2.4 PL25]
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Sender: owner-questions@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

Hi!

What does the following tcpdump output from tun0 mean?

01:33:00.660779 molonita.netbios-ns > hp10.lrz-muenchen.de.domain: 73+ (53)
01:33:00.720209 hp10.lrz-muenchen.de.domain > molonita.netbios-ns: 73 NXDomain* 0/0/0 (43)
01:33:02.171538 molonita.netbios-ns > hp10.lrz-muenchen.de.domain: 73+ (53)
01:33:02.230218 hp10.lrz-muenchen.de.domain > molonita.netbios-ns: 73 NXDomain* 0/0/0 (43)
01:33:03.682044 molonita.netbios-ns > dfvgate.lrz-muenchen.de.domain: 73+ (53)
01:33:03.740223 dfvgate.lrz-muenchen.de.domain > molonita.netbios-ns: 73 NXDomain* 0/0/0 (43)
01:33:05.192801 molonita.netbios-ns > dfvgate.lrz-muenchen.de.domain: 73+ (53)
01:33:05.250216 dfvgate.lrz-muenchen.de.domain > molonita.netbios-ns: 73 NXDomain* 0/0/0 (43)
01:33:06.703384 molonita.netbios-ns > dfvgate.lrz-muenchen.de.domain: 73+ (53)
01:33:06.760233 dfvgate.lrz-muenchen.de.domain > molonita.netbios-ns: 73 NXDomain* 0/0/0 (43)
01:33:08.213943 molonita.netbios-ns > hp10.lrz-muenchen.de.domain: 73+ (53)
01:33:08.270222 hp10.lrz-muenchen.de.domain > molonita.netbios-ns: 73 NXDomain* 0/0/0 (43)
01:33:09.724594 molonita.netbios-ns > hp10.lrz-muenchen.de.domain: 73+ (53)
01:33:09.780306 hp10.lrz-muenchen.de.domain > molonita.netbios-ns: 73 NXDomain* 0/0/0 (43)

[...]

Molonita is a machine which is connected via IP masquerading to my FreeBSD-
machine named Marauder (which doesn't appear on the output..).

hp10 and dfvgate are the nameservers of my ISP. So what are these nameservers
trying to do with molonita??

TIA,
Achim