DNS raw packet structure question
 

My question is about the raw MX reply package structure. I've read the RFC and all relevant pages I could find, but I couldn't figure this one out.

Say we do a google.com MX query.

The first answer (just the rdata part) will be:
google.com.s9b2.psmtb.com
But in the raw package, instead of the .com, you have c0 13.

Then for the second answer, google.com.s9b1.psmtb.com, the raw package has, instead of psmtb.com, just c0 3a.

So is the part after c0 a pointer towards another part of the message? Or what does it stand for exactly?

I am puzzled by it, and don't know exactly where to ask... some of the networking people here might have a good idea.

Thanks for reading. Any help and suggestions are welcomed.

Hi,

Maybe this could be of help

Regards

Thanks, but I've already read that, and there's no mention of what those values represent.

There is, in section 4.1.4.