What does this number mean in the output of a dig command?

See also questions close to this topic

• Software connected to LAN on XP, but not on Windows 10

  I recently upgraded my operating system from windows XP SP3 to windows 10pro.

  The problem is that I have a software that worked perfectly under XP, but which, once installed on Windows 10, cannot exchange data with other devices on the LAN network.

  With the same network configurations as under XP, the software does not even connect to the LAN network.

  However, the ping towards all the IP addresses of the network shows that everything is fine. But still, the software is not connected.

  On other forums I have been told about certain security updates under windows 10 which could be the cause of this communication failure.

  Is that the case ? If so, what would be the best solution to my problem please?
• Why my Windows10 host can't connect the virtual machine(Centos 7) running on another ubuntu host(20.04)?

  Basic information :The virtual machine running on the ubuntu host had set the static IP and the Internet connection is available. The sshd.servicre is also running,the firewalld is disable. Moreover,the virtual machine can ping the ubuntu host and the ubuntu host can ping the virtual machine. Further,my windows10 host can also ping the ubuntu host. However, my windows10 host can't ping the virtual machine and can't connect the virtual machine.

  My question is how to solve this confusing question?
• Why Python dns.resolver Doesn't Stop with Scapy's Sniff?

  Please Note, the provided answer doesn't solve the problem for me.

  In python I have:

  resolver_ip = 127.0.0.2
  resolver = dns.resolver.Resolver()
  resolver.nameservers = [127.0.0.2] # IP of My DNS Server
  # Query the DNS resolver for our hostname's IP
  result = resolver.query("LetumiBank.com")
  print('Bye')
  

  I'm using python's scapy sniff function to detect whenever there is a DNS query to 127.0.0.2 to fake a response such that WEBSITE_NAME will get an ip equal to: 127.0.0.3. My code was:

  def sniff_and_spoof(source_ip):
      # TODO: Open a socket and bind it to the attacker's IP and WEB_PORT.
      # This socket will be used to accept connections from victimized clients.
      packet_filter = " and ".join([
          "udp dst port 53",  # Filter UDP port 53
          "udp[10] & 0x80 = 0",  # DNS queries only
          "dst host 127.0.0.2"
      ])
      with socket.socket(socket.AF_INET, socket.SOCK_STREAM) as client_socket:
          client_socket.bind((source_ip, WEB_PORT))
          client_socket.listen()
          cb = lambda org_arg: dns_callback(org_arg, (client_socket, source_ip))
          sniff(filter=packet_filter, prn=cb, store=0, iface=net_interface, count=1)
  

  and:

  def dns_callback(packet, extra_args):
      # TODO: Write callback function for handling DNS packets.
      # Sends a spoofed DNS response for a query to HOSTNAME and calls handle_tcp_forwarding() after successful spoof.
      eth = Ether(
          src=packet[Ether].dst, dst=packet[Ether].src
      )
  
      ip = IP(
          src=packet[IP].dst, dst=packet[IP].src
      )
  
      udp = UDP(
          dport=packet[UDP].sport, sport=packet[UDP].dport
      )
  
      dns = DNS(
          id=packet[DNS].id, qd=packet[DNS].qd,
          aa=1, rd=0, qr=1, qdcount=1, ancount=1, nscount=0, arcount=0,
          ar=DNSRR(
              rrname=packet[DNS].qd.qname,
              type='A',
              ttl=600,
              rdata='127.0.0.3')
      )
  
      response_packet = eth / ip / udp / dns
      sendp(response_packet, iface=net_interface)
  

  Even though I can see a good response in wireshark the query is being send over and over again and Bye doesn't seem to get ever printed. Why is that?

  Wireshark output: (request in line 4 and its response in line 5)

  enter image description here

  ---

  Keeping the code running gives the following error:

  result = resolver.query("LetumiBank.com")
    File "/usr/lib/python3/dist-packages/dns/resolver.py", line 992, in query
      timeout = self._compute_timeout(start, lifetime)
    File "/usr/lib/python3/dist-packages/dns/resolver.py", line 799, in _compute_timeout
      raise Timeout(timeout=duration)
  dns.exception.Timeout: The DNS operation timed out after 30.00104331970215 seconds
  

  UPDATE:

  Tried this too, same problem:

  eth = Ether(src=packet[Ether].dst, dst=packet[Ether].src)
  
  ip = IP(src=packet[IP].dst, dst=packet[IP].src)
  
  udp = UDP(dport=packet[UDP].sport, sport=packet[UDP].dport)
  
  dns = DNS(
      id=packet[DNS].id,
      aa=1, rd=0, qr=1, qdcount=1, ancount=1, nscount=0, arcount=0,
      qd=DNSQR(  # Query
          qname=packet[DNSQR].qname
      ),
      an=DNSRR(  # Answer
          rrname=packet[DNS].qd.qname,
          type='A',
          rclass=1,
          ttl=600,
          rdata='127.0.0.3'
      )
  )
  
• Point custom Domain to the google cloud function through global https loadbalancer with serverless NEG as backend

  I had a running myfunctionname cloud function with HTTP trigger URL:

  For Ex- https://us-central1-my-project.cloudfunctions.net/myfunctionname

  Now I want to map this cloud function URL to public domain URL

  For Ex- https://my-domain.com/path

  Public domain URL is setup in DNS to point to loadbalancer. Global external https loadbalancer is created with host, path rules & backend service

  Host: my-domain.com , Path Rule: /path , Backend Service: Serverless NEG pointing to myfunctionname cloud function

  Now if I hit the API endpoint with the Cloud Function Http trigger URL, API response is 200 OK, it's working

  GET Request on endpoint https://us-central1-my-project.cloudfunctions.net/myfunctionname/show/jobs

  But when I hit the API endpoint with the custom domain URL:

  GET Request on endpoint https://my-domain.com/path/show/jobs

  API error response is 404 Not Found. Cannot GET /myfunctionnameshow/jobs

  Can someone please point out the issue why my custom domain URL is not redirected to cloud function URL? Actually my expectation is hitting https://my-domain.com/path/show/jobs API endpoint should be equivalent to hitting https://us-central1-my-project.cloudfunctions.net/myfunctionname/show/jobs API endpoint.
• What is the authoritative name server and IP address for that requested authoritative name server?

  I'm trying to parse a DIG request and I'm not quite sure what all the sections mean. My guess is that 151.101.53.164 is the authoritative name server's IP.

   User-Desktop:Desktop user$ dig www.nytimes.com
  ; <<>> DiG 9.8.3-P1 <<>> www.nytimes.com
  ;; global options: +cmd
  ;; Got answer:
  ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 1148
  ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 4, ADDITIONAL: 4
  ;; QUESTION SECTION:
  ;www.nytimes.com. IN A
  ;; ANSWER SECTION:
  www.nytimes.com. 63 IN CNAME nytimes.map.fastly.net.
  nytimes.map.fastly.net. 24 IN A 151.101.53.164
  ;; AUTHORITY SECTION:
  fastly.net. 2204 IN NS ns3.fastly.net.
  fastly.net. 2204 IN NS ns1.fastly.net.
  fastly.net. 2204 IN NS ns2.fastly.net.
  fastly.net. 2204 IN NS ns4.fastly.net.
  ;; ADDITIONAL SECTION:
  ns1.fastly.net. 2344 IN A 23.235.32.32
  ns2.fastly.net. 2344 IN A 104.156.80.32
  ns3.fastly.net. 171545 IN A 23.235.36.32
  ns4.fastly.net. 2345 IN A 104.156.84.32
  ;; Query time: 48 msec
  ;; SERVER: 131.252.120.128#53(131.252.120.128)
  ;; WHEN: Tue May 9 12:41:15 2017
  ;; MSG SIZE rcvd: 221
  
• Why do IP addresses given by dig not work?

  I'm trying to learn more about networks and came across the following:

  When I use dig to get the IP address of stack overflow, I get the following result:

  dig stackoverflow.com +short
  151.101.1.69
  151.101.193.69
  151.101.129.69
  151.101.65.69
  

  However, copying any of these IP addresses in my browser returns: Fastly error: unknown domain: 151.101.65.69. Please check that this domain has been added to a service.

  What am I getting wrong here? Why can't I access these IP addresses through my browser?