[root@muscid-oel6vm ~]# tcpdump -i eth0
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes
12:32:25.556056 IP 10.0.2.4.ntp > 96.44.142.5.ntp: NTPv4, Client, length 48
12:32:25.556599 IP 10.0.2.4.34262 > atvauthdom1.atdom.ad.agilex.com.domain: 44240+ PTR? 5.142.44.96.in-addr.arpa. (42)
12:32:25.624584 IP 96.44.142.5.ntp > 10.0.2.4.ntp: NTPv4, Server, length 48
12:32:25.649029 IP atvauthdom1.atdom.ad.agilex.com.domain > 10.0.2.4.34262: 44240 NXDomain 0/1/0 (103)
12:32:25.649254 IP 10.0.2.4.37321 > atvauthdom1.atdom.ad.agilex.com.domain: 37462+ PTR? 4.2.0.10.in-addr.arpa. (39)
12:32:25.734407 IP atvauthdom1.atdom.ad.agilex.com.domain > 10.0.2.4.37321: 37462 NXDomain 0/1/0 (116)
12:32:25.734657 IP 10.0.2.4.50481 > atvauthdom1.atdom.ad.agilex.com.domain: 5645+ PTR? 127.101.1.10.in-addr.arpa. (43)
12:32:25.750675 IP atvauthdom1.atdom.ad.agilex.com.domain > 10.0.2.4.50481: 5645* 1/0/0 PTR atvauthdom1.atdom.ad.agilex.com. (88)
12:32:26.640542 IP 10.0.2.4.53821 > atvauthdom1.atdom.ad.agilex.com.domain: 3851+ A? bizvpnmn.usps.gov. (35)
12:32:26.686135 IP atvauthdom1.atdom.ad.agilex.com.domain > 10.0.2.4.53821: 3851 2/0/0 CNAME bizvpnmn.ras.usps.com., A 56.105.128.196 (86)
12:32:26.706654 IP 10.0.2.4.isakmp > 56.105.128.196.isakmp: isakmp: phase 1 I agg
12:32:26.707256 IP 10.0.2.4.52296 > atvauthdom1.atdom.ad.agilex.com.domain: 62591+ PTR? 196.128.105.56.in-addr.arpa. (45)
12:32:26.791117 IP atvauthdom1.atdom.ad.agilex.com.domain > 10.0.2.4.52296: 62591 NXDomain 0/1/0 (122)
12:32:27.708511 IP 10.0.2.4.isakmp > 56.105.128.196.isakmp: isakmp: phase 1 I agg
12:32:29.710802 IP 10.0.2.4.isakmp > 56.105.128.196.isakmp: isakmp: phase 1 I agg
12:32:30.545835 IP 10.0.2.4.ntp > ntp2.playalliance.net.ntp: NTPv4, Client, length 48
12:32:30.546105 IP 10.0.2.4.48154 > atvauthdom1.atdom.ad.agilex.com.domain: 1920+ PTR? 44.113.35.70.in-addr.arpa. (43)
12:32:30.565817 ARP, Request who-has 10.0.2.1 tell 10.0.2.4, length 28
12:32:30.566088 ARP, Reply 10.0.2.1 is-at 52:54:00:12:35:00 (oui Unknown), length 46
12:32:30.610861 IP ntp2.playalliance.net.ntp > 10.0.2.4.ntp: NTPv4, Server, length 48
12:32:30.917489 IP atvauthdom1.atdom.ad.agilex.com.domain > 10.0.2.4.48154: 1920 1/0/0 PTR ntp2.playalliance.net. (78)
12:32:30.917732 IP 10.0.2.4.53608 > atvauthdom1.atdom.ad.agilex.com.domain: 21052+ PTR? 1.2.0.10.in-addr.arpa. (39)
12:32:30.997469 IP atvauthdom1.atdom.ad.agilex.com.domain > 10.0.2.4.53608: 21052 NXDomain 0/1/0 (116)
12:32:33.715112 IP 10.0.2.4.isakmp > 56.105.128.196.isakmp: isakmp: phase 1 I agg
12:32:35.545813 IP 10.0.2.4.ntp > 3dgo.net.ntp: NTPv4, Client, length 48
12:32:35.546045 IP 10.0.2.4.40631 > atvauthdom1.atdom.ad.agilex.com.domain: 52026+ PTR? 52.188.14.72.in-addr.arpa. (43)
12:32:35.582658 IP 3dgo.net.ntp > 10.0.2.4.ntp: NTPv4, Server, length 48
12:32:35.625321 IP atvauthdom1.atdom.ad.agilex.com.domain > 10.0.2.4.40631: 52026 1/0/0 PTR 3dgo.net. (65)
^C
28 packets captured
28 packets received by filter
0 packets dropped by kernel
[root@muscid-oel6vm ~]#