Run Wireshark. Click on the Pseudo-device that captures on all interfaces --- it will start capturing traffic, and show the count of the number of Ethernet frames captured of varying types. Stop after you've captured a few hundred and look at the kinds of traffic. If you aren't seeing any traffic, open a browser and start accessing some Web sites. Use Wireshark to capture just DNS packets (which are UDP packets on port 53).
To do that, put "port 53" into the capture filter box (not display filter) that is visible from Capture->Options.
Why use UDP packets for DNS as opposed to TCP packets?
Why do we filter on port 53?
Now visit a new site, such as http://www. eecs. ku. edu and capture a few dozen DNS requests and responses. You'll likely see a number of queries.
What are the queries?