1st ssh
root@Pi-hole:~# tcpdump -i any -c500 -nn port 53 or port 5335
tcpdump: data link type LINUX_SLL2
tcpdump: verbose output suppressed, use -v[v]... for full protocol decode
listening on any, link-type LINUX_SLL2 (Linux cooked v2), snapshot length 262144 bytes
02:00:51.123142 lo In IP 127.0.0.1.59895 > 127.0.0.1.5335: UDP, length 51
02:00:51.123274 lo In IP 127.0.0.1.5335 > 127.0.0.1.59895: UDP, length 39
02:00:51.124421 eth0 Out IP 192.168.1.2.57577 > 1.0.0.1.53: 17808+% [1au] A? GoogLE.cOM. (39)
02:00:51.137813 eth0 In IP 1.0.0.1.53 > 192.168.1.2.57577: 17808 1/0/1 A 142.250.217.110 (55)
02:00:51.140839 eth0 Out IP 192.168.1.2.5664 > 9.9.9.9.53: 23956+% [1au] DNSKEY? . (28)
02:00:51.141715 eth0 Out IP 192.168.1.2.20023 > 1.1.1.1.53: 30630+% [1au] NULL? _tA-4F66. (37)
02:00:51.154891 eth0 In IP 9.9.9.9.53 > 192.168.1.2.5664: 23956 3/0/1 DNSKEY, DNSKEY, DNSKEY (853)
02:00:51.159327 eth0 In IP 1.1.1.1.53 > 192.168.1.2.20023: 30630 NXDomain 0/1/1 (112)
02:00:51.159477 eth0 Out IP 192.168.1.2.4766 > 1.1.1.1.53: 21107+% [1au] DNSKEY? . (28)
02:00:51.173460 eth0 In IP 1.1.1.1.53 > 192.168.1.2.4766: 21107 3/0/1 DNSKEY, DNSKEY, DNSKEY (853)
02:00:51.176887 eth0 Out IP 192.168.1.2.34533 > 149.112.112.112.53: 33977+% [1au] DNSKEY? . (28)
02:00:51.178361 eth0 Out IP 192.168.1.2.54988 > 149.112.112.112.53: 44003+% [1au] NULL? _tA-4f66. (37)
02:00:51.191184 eth0 In IP 149.112.112.112.53 > 192.168.1.2.34533: 33977 3/0/1 DNSKEY, DNSKEY, DNSKEY (853)
02:00:51.197614 eth0 In IP 149.112.112.112.53 > 192.168.1.2.54988: 44003 NXDomain 0/1/1 (112)
02:00:51.223820 eth0 Out IP 192.168.1.2.30895 > 1.0.0.1.53: 43807+% [1au] DNSKEY? . (28)
02:00:51.238017 eth0 In IP 1.0.0.1.53 > 192.168.1.2.30895: 43807 3/0/1 DNSKEY, DNSKEY, DNSKEY (853)
02:00:51.240068 eth0 Out IP 192.168.1.2.57859 > 149.112.112.112.53: 18714+% [1au] DNSKEY? . (28)
02:00:51.240852 eth0 Out IP 192.168.1.2.32522 > 9.9.9.9.53: 24640+% [1au] NULL? _tA-4f66. (37)
02:00:51.253256 eth0 In IP 149.112.112.112.53 > 192.168.1.2.57859: 18714 3/0/1 DNSKEY, DNSKEY, DNSKEY (853)
02:00:51.257926 eth0 In IP 9.9.9.9.53 > 192.168.1.2.32522: 24640 NXDomain 0/1/1 (112)
^C
20 packets captured
24 packets received by filter
0 packets dropped by kernel
2nd ssh
root@Pi-hole:~# dig @127.0.0.1 -p 5335 google.com
; <<>> DiG 9.16.33-Debian <<>> @127.0.0.1 -p 5335 google.com
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 60547
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;google.com. IN A
;; Query time: 0 msec
;; SERVER: 127.0.0.1#5335(127.0.0.1)
;; WHEN: Tue Sep 27 02:00:51 PDT 2022
;; MSG SIZE rcvd: 39