i captured a trace with wireshark and some results like,
let's say for DNS, it shows "standard query response A 220.127.116.11" or "standard query A ponjmp.com".
or for NBNS "Name query NB EDO<00>" or for NBSS "session request, to 192(20) from EDWIN<00>"
Are those clear text?? I mean, how to i tell if the information pass protocol is encrypted or not??