title: Understanding DNS in wireshark output
body: <p>I used wireshark to collect data from some sites, and then used tcpdump to get it as a text file.  For the project I'm working on, I want to count how many DNS resolutions are involved in accessing a particular website, and what the nature of the DNS responses was.  The problem is I don't really understand the output from wireshark or how to interpret it to find what I'm looking for.  For instance, here is a line:</p>
  
  <blockquote>
    <p>21:08:05.454852 IP 10.0.0.2.57512 > ord08s09-in-f21.1e100.net.https:
    Flags [.], seq 1:1419, ack 55, win 65535, options [nop,nop,TS val
    1348891674 ecr 2473250009], length 1418</p>
  </blockquote>
  
  <p>What do the different parts of this mean, and what will the data I'm looking for look like?  I'm worried I might be using Wireshark incorrectly without knowing it.</p>