Sam Watkins wrote:
you can watch the TTL dropping by typing repeatedly: dig www.apple.com
Thank you Sam. Very interesting. But I keep on being a little confused. tcpdump -n -i eth0 port 53shows activity for "dig www.apple.com" every time, while for all other names I can try, the activity on port 53 eth0 occurs only on the first try (I am talking about repeated tries at short intervals weel under the 50 seconds) while the rest is obviously cached.
BTW Where can I see the TTL in the dig output ? Take care, Bob