Wireshark mailing list archives

Re: are there any ways to filter specific DNS queries


From: nangergong <nangergong () gmail com>
Date: Fri, 15 Jun 2012 14:21:24 +0200

thanks, this is OK,
but how to get the query name from a dns request packet with tshark?
for example, the DNS request frame number is 29
how to get the query name from this packet?

On Tue, Jun 12, 2012 at 4:31 PM, <Tim.Poth () bentley com> wrote:

 Something like this****

!dns.qry.name eq www.example.com****

** **

*From:* wireshark-users-bounces () wireshark org [mailto:
wireshark-users-bounces () wireshark org] *On Behalf Of *nangergong
*Sent:* Tuesday, June 12, 2012 10:22 AM

*To:* wireshark-users () wireshark org
*Subject:* [Wireshark-users] are there any ways to filter specific DNS
queries****

** **

Hi, all:


    I want to filter out some specific DNS queries. These DNS queries are
for some specific domain name or websites, for example www.example.com
    are there any ways for this filtering? Thanks!****


___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
            mailto:wireshark-users-request () wireshark org
?subject=unsubscribe

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe

Current thread: