1  01:16:43.306396 IP 127.0.0.1.54954 > 127.0.0.1.53: 63147+ [1au] SOA? . (40)
    2  01:16:43.306644 IP 127.0.0.1.53 > 127.0.0.1.54954: 63147 BadCookie 0/0/1 (56)
    3  01:16:43.306944 IP 127.0.0.1.49830 > 127.0.0.1.53: 46131+ [1au] SOA? . (56)
    4  01:16:43.307171 IP 127.0.0.1.53 > 127.0.0.1.49830: 46131$ 1/0/1 SOA (131)