Jasper Yu says to YSITD
tcpdump -i 你外網interface udp port 53