> sudo tcpdump -i en0 -s 5000 -n port 53 It may be better to do it like this: sudo tcpdump -i any -s 0 -n port 53 That way you'll get to see every single

> sudo tcpdump -i en0 -s 5000 -n port 53 It may be better to do it like this: sudo tcpdump -i any -s 0 -n port 53 That way you'll get to see every single DNS query made, and capture everything about it.