From owner-freebsd-questions  Mon May 19 19:49:43 1997
Return-Path: <owner-questions>
Received: (from root@localhost)
          by hub.freebsd.org (8.8.5/8.8.5) id TAA05283
          for questions-outgoing; Mon, 19 May 1997 19:49:43 -0700 (PDT)
Received: from alpha.xerox.com (alpha.Xerox.COM [13.1.64.93])
          by hub.freebsd.org (8.8.5/8.8.5) with SMTP id TAA05278
          for <questions@freebsd.org>; Mon, 19 May 1997 19:49:41 -0700 (PDT)
Received: from crevenia.parc.xerox.com ([13.2.116.11]) by alpha.xerox.com with SMTP id <14416(5)>; Mon, 19 May 1997 19:49:08 PDT
Received: from localhost by crevenia.parc.xerox.com with SMTP id <177489>; Mon, 19 May 1997 19:48:46 -0700
To: Joachim.Wunder@lrz.tu-muenchen.de (Joachim Wunder)
cc: questions@freebsd.org
Subject: Re: tcpdump output - what means this? 
In-reply-to: Your message of "Mon, 19 May 97 16:37:49 PDT."
             <9705192337.AA16389@sun1.lrz-muenchen.de> 
Date: Mon, 19 May 1997 19:48:37 PDT
From: Bill Fenner <fenner@parc.xerox.com>
Message-Id: <97May19.194846pdt.177489@crevenia.parc.xerox.com>
Sender: owner-questions@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

Joachim.Wunder@lrz.tu-muenchen.de (Joachim Wunder) wrote:
>hp10 and dfvgate are the nameservers of my ISP. So what are these nameservers
>trying to do with molonita??

molonita is sending them DNS queries, and they are replying.  If you
use "tcpdump -s 1500", tcpdump will print out the domain names that are
being requested.

  Bill