# Pastebin we7KYTJP ajames@trille:~$ sudo tcpdump -ni docker0 host 172.17.0.8 and port 53 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on docker0, link-type EN10MB (Ethernet), capture size 262144 bytes 10:22:13.017805 IP 172.17.0.8.58152 > 10.2.2.39.53: 57508+ A? oauth.platform.intuit.com. (43) 10:22:13.018142 IP 10.2.2.39.53 > 172.17.0.8.58152: 57508| 13/0/0 CNAME oauth2-aws-swb.prd.api.a.intuit.com., CNAME oauth2-aws-swb-us-west-2.prd.api.a.intuit.com., CNAME sw6_us-west-2_web.prd.api.a.intuit.com., CNAME dial_sw6_us-west-2_web.prd.api.a.intuit.com., CNAME sw6prdwebbluealb-1985872400.us-west-2.elb.amazonaws.com., A 52.32.86.28, A 54.191.11.49, A 52.37.7.223, A 52.11.84.227, A 52.13.196.142, A 44.239.192.27, A 35.163.177.61, A 35.81.99.0 (384) 10:22:13.018231 IP 172.17.0.8.34634 > 10.2.2.39.53: Flags [S], seq 2626093752, win 64240, options [mss 1460,sackOK,TS val 2875627524 ecr 0,nop,wscale 7], length 0 10:22:13.018253 IP 10.2.2.39.53 > 172.17.0.8.34634: Flags [S.], seq 3419407270, ack 2626093753, win 65160, options [mss 1460,sackOK,TS val 641912358 ecr 2875627524,nop,wscale 7], length 0 10:22:13.018264 IP 172.17.0.8.34634 > 10.2.2.39.53: Flags [.], ack 1, win 502, options [nop,nop,TS val 2875627524 ecr 641912358], length 0 10:22:13.018375 IP 172.17.0.8.34634 > 10.2.2.39.53: Flags [P.], seq 1:46, ack 1, win 502, options [nop,nop,TS val 2875627524 ecr 641912358], length 45 57508+ A? oauth.platform.intuit.com. (43) 10:22:13.018386 IP 10.2.2.39.53 > 172.17.0.8.34634: Flags [.], ack 46, win 509, options [nop,nop,TS val 641912358 ecr 2875627524], length 0 10:22:13.018481 IP 10.2.2.39.53 > 172.17.0.8.34634: Flags [F.], seq 1, ack 46, win 509, options [nop,nop,TS val 641912358 ecr 2875627524], length 0 10:22:13.018494 IP 10.2.2.39.53 > 172.17.0.8.34634: Flags [R.], seq 2, ack 46, win 509, options [nop,nop,TS val 641912359 ecr 2875627524], length 0 10:22:13.018499 IP 172.17.0.8.34634 > 10.2.2.39.53: Flags [F.], seq 46, ack 2, win 502, options [nop,nop,TS val 2875627525 ecr 641912358], length 0 10:22:13.018511 IP 10.2.2.39.53 > 172.17.0.8.34634: Flags [R], seq 3419407272, win 0, length 0 10:22:13.018594 IP 172.17.0.8.48793 > 10.2.2.39.53: 3711+ A? oauth.platform.intuit.com.metabrainz.org. (58) 10:22:13.018627 IP 10.2.2.39.53 > 172.17.0.8.48793: 3711 NXDomain 0/0/0 (58) 10:22:13.579087 IP 172.17.0.8.58660 > 10.2.2.39.53: 56701+ A? oauth.platform.intuit.com. (43) 10:22:13.579597 IP 10.2.2.39.53 > 172.17.0.8.58660: 56701| 13/0/0 CNAME oauth2-aws-swb.prd.api.a.intuit.com., CNAME oauth2-aws-swb-us-west-2.prd.api.a.intuit.com., CNAME sw6_us-west-2_web.prd.api.a.intuit.com., CNAME dial_sw6_us-west-2_web.prd.api.a.intuit.com., CNAME sw6prdwebbluealb-1985872400.us-west-2.elb.amazonaws.com., A 52.13.196.142, A 44.239.192.27, A 35.163.177.61, A 35.81.99.0, A 52.32.86.28, A 54.191.11.49, A 52.37.7.223, A 52.11.84.227 (384) 10:22:13.579692 IP 172.17.0.8.34646 > 10.2.2.39.53: Flags [S], seq 886976774, win 64240, options [mss 1460,sackOK,TS val 2875628086 ecr 0,nop,wscale 7], length 0 10:22:13.579725 IP 10.2.2.39.53 > 172.17.0.8.34646: Flags [S.], seq 1192435857, ack 886976775, win 65160, options [mss 1460,sackOK,TS val 641912920 ecr 2875628086,nop,wscale 7], length 0 10:22:13.579744 IP 172.17.0.8.34646 > 10.2.2.39.53: Flags [.], ack 1, win 502, options [nop,nop,TS val 2875628086 ecr 641912920], length 0 10:22:13.579779 IP 172.17.0.8.34646 > 10.2.2.39.53: Flags [P.], seq 1:46, ack 1, win 502, options [nop,nop,TS val 2875628086 ecr 641912920], length 45 56701+ A? oauth.platform.intuit.com. (43) 10:22:13.579792 IP 10.2.2.39.53 > 172.17.0.8.34646: Flags [.], ack 46, win 509, options [nop,nop,TS val 641912920 ecr 2875628086], length 0 10:22:13.580174 IP 10.2.2.39.53 > 172.17.0.8.34646: Flags [F.], seq 1, ack 46, win 509, options [nop,nop,TS val 641912920 ecr 2875628086], length 0 10:22:13.580208 IP 10.2.2.39.53 > 172.17.0.8.34646: Flags [R.], seq 2, ack 46, win 509, options [nop,nop,TS val 641912920 ecr 2875628086], length 0 10:22:13.580290 IP 172.17.0.8.36288 > 10.2.2.39.53: 26989+ A? oauth.platform.intuit.com.metabrainz.org. (58) 10:22:13.580385 IP 10.2.2.39.53 > 172.17.0.8.36288: 26989 NXDomain 0/0/0 (58)