in reply to AnyEvent and strange DNS queries
From looking and the tcpdump output you posted it looks like the host 10.105.0.201 is making query that is equivalent to this dig command ...
... which results in a NXDOMAIN meaning the DNS server at xxx.yyy.177.34 doesn't have an answer for the query.$ dig _http._tcp.www.google.com. SRV @xxx.yyy.177.34
In Section
Seekers of Perl Wisdom