Timeline for What does the output of this tcpdump mean?
Current License: CC BY-SA 4.0
4 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jun 17, 2020 at 8:51 | history | edited | CommunityBot | Commonmark migration | |
| Sep 11, 2018 at 6:34 | comment | added | Marc 'netztier' Luethi | That's the service names 192.168.2.22 is looking for in the internal network, hence the question mark. It is nothing but tcpdump's interpretation of the corresponding "query" flag in the packet. 192.168.2.22 is performing Service Discovery using mDNS, as per RFC6763 (tools.ietf.org/html/rfc6763) - absolutely nothing to worry about. You might want to consider exporting from tcpdump to a file, and to open that file in Wireshark for dissection/analysis - Wireshark's graphical way of presenting a packet is a lot more detailed than TCPdump can do on a single line. | |
| Sep 11, 2018 at 5:49 | comment | added | jennifer ruurs | That part I did understand but what does "airplay._tcp.local. PTR (QM)? _raop._tcp.local. PTR (QM)? _sleep-proxy._udp.local. PTR (QM)?" mean what are the question marks here meaning? | |
| Sep 11, 2018 at 5:46 | history | answered | Martin Rosenau | CC BY-SA 4.0 |