<table cellspacing="0" cellpadding="0" border="0"><tr><td valign="top"><div id='yahoo__compose_area' style="background-color:white; display:block; font-family:HelveticaNeue-Regular,Helvetica;">Thanks Duane!<br><br><br><a href="https://yho.com/footer0">Sent from Yahoo Mail for iPhone</a></div><div id='yahoo__original_message' class='yQTDBase'><br><blockquote style="margin:0 0 0 .8ex; border-left:1px #ccc solid; padding-left:1ex; ">At Apr 16, 2015, 2:01:37 PM, Wessels, Duane<dwessels@verisign.com> wrote:<div id="msgSandbox_AOtUimIAABQmVTAjMQGWQJ2Ztwc" class="msgSandbox" style="padding: 1.5em 0.5em 0.5em 1.2em; word-wrap: break-word;">Shawn,<br clear="none"><br clear="none">Those numbers represent the size of the DNS message in bytes.  In your example<br clear="none">the query is 64 bytes and the response is 232 bytes.<br clear="none"><br clear="none">DW<br clear="none"><br clear="none"><div class="yQTDBase yqt2883882984" id="yqtfd99714"><br clear="none">>
 On Apr 15, 2015, at 3:43 PM, Shawn Zhou <<a shape="rect" ymailto="mailto:shawnzhou00@yahoo.com" href="javascript:return">shawnzhou00@yahoo.com</a>> wrote:<br clear="none">> <br clear="none">> Hello,<br clear="none">> <br clear="none">> What are the numbers in the first column mean? For example, [64], [232] in the below output?<br clear="none">> <br clear="none">>  [64] 2015-04-15 22:24:11.927847 [#26 "some interface" 0] \<br clear="none">>     [10.89.12.151].47560 [10.139.252.17].53  \<br clear="none">>     dns QUERY,NOERROR,31354,rd|ad \<br clear="none">>     1 abc.com,IN,A 0 0 \<br clear="none">>     1 .,4096,4096,0,edns0[len=0,UDP=4096,ver=0,rcode=0,DO=0,z=0] \<br clear="none">>     ,[0]<br clear="none">> [232] 2015-04-15 22:24:11.977636 [#27 "some interface" 0] \<br clear="none">>     [10.139.252.17].53 [10.89.12.151].47560  \<br clear="none">>     dns QUERY,NOERROR,31354,qr|rd|ra \<br clear="none">>     1 abc.com,IN,A \<br clear="none">>     1
 abc.com,IN,A,300,199.181.132.250 \<br clear="none">>     4 abc.com,IN,NS,300,orns02.dig.com \<br clear="none">>     abc.com,IN,NS,300,orns01.dig.com \<br clear="none">>     abc.com,IN,NS,300,sens02.dig.com \<br clear="none">>     abc.com,IN,NS,300,sens01.dig.com \<br clear="none">>     5 orns01.dig.com,IN,A,106691,68.71.223.14 \<br clear="none">>     orns02.dig.com,IN,A,106691,68.71.223.15 \<br clear="none">>     sens01.dig.com,IN,A,106691,139.104.186.13 \<br clear="none">>     sens02.dig.com,IN,A,106691,139.104.186.14 \<br clear="none">>     .,1272,1272,0,edns0[len=0,UDP=1272,ver=0,rcode=0,DO=0,z=0] \<br clear="none">>     ,[0]</div><br clear="none">> _______________________________________________<br clear="none">> dnscap-users mailing list<br clear="none">> <a shape="rect" ymailto="mailto:dnscap-users@lists.dns-oarc.net" href="javascript:return">dnscap-users@lists.dns-oarc.net</a><br clear="none">> <a shape="rect"
 href="https://lists.dns-oarc.net/mailman/listinfo/dnscap-users" target="_blank">https://lists.dns-oarc.net/mailman/listinfo/dnscap-users</a><div class="yQTDBase yqt2883882984" id="yqtfd28429"><br clear="none"></div></div><div></div></blockquote></div></html></td></tr></table>