(1) From the analysis of the packet capture, the client sent DNSRequest for the first time. If the DNS server does not respond within 5 seconds, it will not be used and will send DNSRequest again. From the customer's packet capture, the first DNSResponse Time returned data in more than 5 seconds, and the second response was within 5 seconds, so the time from the beginning to the second return of data was recorded. There is a response within 5 seconds, but the time is not recorded because the DNS response packet exceeds the limit. The limit size is 512 bytes. The server sent 579, which exceeded the limit, so the data was not recorded.