I am analysing a Wireshark capture as part of understanding UDP/TCP, DNS and HTTP concepts and how packets are sent.
I found an interesting sequence of messages in the Wireshark file, but I am not sure how to interpret them. The first message is a DNS query packet of type A. Two lines after that is the type AAAA query. After each of those are UDP messages that are encrypted. After checking the IP address of the host I got that it's a VPN server somewhere in Hungary. I found this video that explains how packets appear when one is connected to a VPN, but unlike my capture all the packets are encrypted in the second capture.
Why are the packets mixed in this case. Are they irrelevant to each other or is the VPN being used in connection to the DNS requests for that website's IPv4&IPv6? If yes, does that mean that a VPN is being used for another reason and what could that be?