User Tools

Site Tools


networking:wireshark

This is an old revision of the document!


Wireshark

DNS Response

Search Wireshark for packets that contain an IP address that are results of a DNS query.

dns.a == 1.2.3.4
ip.addr == 1.2.3.4<
ip.src == 1.2.3.4<
ip.dst == 1.2.3.4<
tcp.port eq 25 or icmp
udp.port eq 53
ip.src==192.168.0.0/16 and ip.dst==192.168.0.0/16
networking/wireshark.1669288970.txt.gz · Last modified: by bstafford