Wireshark mailing list archives

Re: Display filter help need. how to do these filters? DNS /L2 overhead

From: Jim Aragon <Jim () agdatasystems com>
Date: Thu, 20 Feb 2014 14:28:29 -0800

On 2/20/2014 2:10 PM, false wrote:

Can someone provide an example please on how to do these filters
(display and/or capture)?

1) DNS filter to see how all UNANSWERED queries. ??


Display filter: (dns.flags.response == 0) && !(dns.response_in)

Capture filter: I don't think you can do this with a capture filter.




___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe

Current thread:

Display filter help need. how to do these filters? DNS /L2 overhead false (Feb 20)
- Re: Display filter help need. how to do these filters? DNS /L2 overhead Jim Aragon (Feb 20)
  - Re: Display filter help need. how to do these filters? DNS /L2 overhead Guy Harris (Feb 20)
- Re: Display filter help need. how to do these filters? DNS /L2 overhead Guy Harris (Feb 20)
  - Re: [Wireshark-users] Display filter help need. how to do these filters? DNS /L2 overhead Christopher Maynard (Feb 20)
    - Re: Display filter help need. how to do these filters? DNS /L2 overhead Guy Harris (Feb 20)