On 06.05.2017 00:38, FONNEMANN Mark wrote: >> Could you run tcpdump inside the guest so we are sure what the nslookup call >> emits? > > Is there another way to determine this info? My guest OS is an embedded > system with BusyBox 1.25 and not much else.
FWIW, QEMU also has a built-in packet-dump functionality. You can use it like this: qemu-system-xxx ... -netdev user,id=netuser \ -object filter-dump,id=dump,netdev=netuser,file=/tmp/dump.dat \ -device e1000,netdev=netuser,mac=00:11:22:33:44:55 Then run "wireshark -r /tmp/dump.dat" afterwards to have a look at the packets. Thomas