dual-1-25:~ $ sudo tcpdump -evvv
tcpdump: listening on en0, link-type EN10MB (Ethernet), capture size 96 bytes
19:18:21.323270 00:03:93:ab:f2:44 (oui Unknown) > Broadcast, ethertype IPv4 (0x0800), length 342: (tos 0x0, ttl 64, id 11213, offset 0, flags [none], proto UDP (17), length 328) 192.168.1.2.bootps > broadcasthost.bootps: BOOTP/DHCP, Request from 00:00:00:00:00:00 (oui Ethernet), length 300, xid 0x12345678, Flags [Broadcast] (0x8000)
19:18:21.335493 00:24:01:47:07:41 (oui Unknown) > Broadcast, ethertype IPv4 (0x0800), length 314: (tos 0x0, ttl 64, id 0, offset 0, flags [none], proto UDP (17), length 296) 192.168.1.1.bootps > broadcasthost.bootpc: BOOTP/DHCP, Reply, length 268, xid 0x12345678, Flags [Broadcast] (0x8000)
19:18:22.154360 00:03:93:ab:f2:44 (oui Unknown) > 00:24:01:47:07:41 (oui Unknown), ethertype IPv4 (0x0800), length 84: (tos 0x0, ttl 64, id 5403, offset 0, flags [none], proto UDP (17), length 70) 192.168.1.2.52733 > 192.168.1.1.domain: [udp sum ok] 8378+ PTR? 2.1.168.192.in-addr.arpa. (42)
19:18:22.194739 00:24:01:47:07:41 (oui Unknown) > 00:03:93:ab:f2:44 (oui Unknown), ethertype IPv4 (0x0800), length 88: (tos 0x0, ttl 248, id 47363, offset 0, flags [DF], proto UDP (17), length 70) 192.168.1.1.domain > 192.168.1.2.52733: [udp sum ok] 8378 NXDomain q: PTR? 2.1.168.192.in-addr.arpa. 0/0/0 (42)
19:18:22.201699 00:03:93:ab:f2:44 (oui Unknown) > 00:24:01:47:07:41 (oui Unknown), ethertype IPv4 (0x0800), length 84: (tos 0x0, ttl 64, id 7025, offset 0, flags [none], proto UDP (17), length 70) 192.168.1.2.52029 > 192.168.1.1.domain: [udp sum ok] 21785+ PTR? 1.1.168.192.in-addr.arpa. (42)
19:18:22.242546 00:24:01:47:07:41 (oui Unknown) > 00:03:93:ab:f2:44 (oui Unknown), ethertype IPv4 (0x0800), length 88: (tos 0x0, ttl 248, id 23813, offset 0, flags [DF], proto UDP (17), length 70) 192.168.1.1.domain > 192.168.1.2.52029: [udp sum ok] 21785 NXDomain q: PTR? 1.1.168.192.in-addr.arpa. 0/0/0 (42)
19:18:27.190310 00:24:01:47:07:41 (oui Unknown) > 00:03:93:ab:f2:44