Wireshark
the world's foremost network protocol analyzer
Display Filter Reference: Domain Name Service
Protocol field name: dns
Versions: 1.0.0 to 1.6.5
Back to Display Filter Reference
| Field name | Type | Description | Versions |
|---|---|---|---|
| dns.apl.afdlength | Unsigned integer, 1 byte | Address Length, in octets | 1.4.0 to 1.6.5 |
| dns.apl.coded.prefix | Unsigned integer, 1 byte | Prefix Length | 1.6.0 to 1.6.5 |
| dns.apl.negation | Boolean | Negation Flag | 1.4.0 to 1.6.5 |
| dns.count.add_rr | Unsigned integer, 2 bytes | Additional RRs | 1.0.0 to 1.6.5 |
| dns.count.answers | Unsigned integer, 2 bytes | Answer RRs | 1.0.0 to 1.6.5 |
| dns.count.auth_rr | Unsigned integer, 2 bytes | Authority RRs | 1.0.0 to 1.6.5 |
| dns.count.prerequisites | Unsigned integer, 2 bytes | Prerequisites | 1.0.0 to 1.6.5 |
| dns.count.queries | Unsigned integer, 2 bytes | Questions | 1.0.0 to 1.6.5 |
| dns.count.updates | Unsigned integer, 2 bytes | Updates | 1.0.0 to 1.6.5 |
| dns.count.zones | Unsigned integer, 2 bytes | Zones | 1.0.0 to 1.6.5 |
| dns.dhcid.rdata | Sequence of bytes | DHCID Data | 1.4.0 to 1.6.5 |
| dns.flags | Unsigned integer, 2 bytes | Flags | 1.0.0 to 1.6.5 |
| dns.flags.authenticated | Boolean | Answer authenticated | 1.0.0 to 1.6.5 |
| dns.flags.authoritative | Boolean | Authoritative | 1.0.0 to 1.6.5 |
| dns.flags.checkdisable | Boolean | Non-authenticated data | 1.0.0 to 1.6.5 |
| dns.flags.conflict | Boolean | Conflict | 1.2.0 to 1.6.5 |
| dns.flags.opcode | Unsigned integer, 2 bytes | Opcode | 1.0.0 to 1.6.5 |
| dns.flags.rcode | Unsigned integer, 2 bytes | Reply code | 1.0.0 to 1.6.5 |
| dns.flags.recavail | Boolean | Recursion available | 1.0.0 to 1.6.5 |
| dns.flags.recdesired | Boolean | Recursion desired | 1.0.0 to 1.6.5 |
| dns.flags.response | Boolean | Response | 1.0.0 to 1.6.5 |
| dns.flags.tentative | Boolean | Tentative | 1.2.0 to 1.6.5 |
| dns.flags.truncated | Boolean | Truncated | 1.0.0 to 1.6.5 |
| dns.flags.z | Boolean | Z | 1.0.0 to 1.6.5 |
| dns.hip.hit | Sequence of bytes | Host Identity Tag | 1.4.0 to 1.6.5 |
| dns.hip.pk | Sequence of bytes | HIP Public Key | 1.4.0 to 1.6.5 |
| dns.id | Unsigned integer, 2 bytes | Transaction ID | 1.0.0 to 1.6.5 |
| dns.length | Unsigned integer, 2 bytes | Length | 1.0.0 to 1.6.5 |
| dns.nsap.rdata | Sequence of bytes | NSAP Data | 1.4.0 to 1.6.5 |
| dns.nsec3.algo | Unsigned integer, 1 byte | Hash algorithm | 1.2.0 to 1.6.5 |
| dns.nsec3.flags | Unsigned integer, 1 byte | NSEC3 flags | 1.2.0 to 1.6.5 |
| dns.nsec3.flags.opt_out | Boolean | NSEC3 Opt-out flag | 1.2.0 to 1.6.5 |
| dns.nsec3.hash_length | Unsigned integer, 1 byte | Hash length | 1.2.0 to 1.6.5 |
| dns.nsec3.hash_value | Sequence of bytes | Next hashed owner | 1.2.0 to 1.6.5 |
| dns.nsec3.iterations | Unsigned integer, 2 bytes | NSEC3 iterations | 1.2.0 to 1.6.5 |
| dns.nsec3.salt_length | Unsigned integer, 1 byte | Salt length | 1.2.0 to 1.6.5 |
| dns.nsec3.salt_value | Sequence of bytes | Salt value | 1.2.0 to 1.6.5 |
| dns.qry.class | Unsigned integer, 2 bytes | Class | 1.0.0 to 1.6.5 |
| dns.qry.name | Character string | Name | 1.0.0 to 1.6.5 |
| dns.qry.qu | Boolean | "QU" question | 1.0.0 to 1.6.5 |
| dns.qry.type | Unsigned integer, 2 bytes | Type | 1.0.0 to 1.6.5 |
| dns.resp.addr | IPv4 address | Addr | 1.4.0 to 1.6.5 |
| dns.resp.cache_flush | Boolean | Cache flush | 1.0.0 to 1.6.5 |
| dns.resp.class | Unsigned integer, 2 bytes | Class | 1.0.0 to 1.6.5 |
| dns.resp.len | Unsigned integer, 4 bytes | Data length | 1.0.0 to 1.6.5 |
| dns.resp.name | Character string | Name | 1.0.0 to 1.6.5 |
| dns.resp.ns | Character string | Name Server | 1.6.0 to 1.6.5 |
| dns.resp.primaryname | Character string | Primaryname | 1.6.0 to 1.6.5 |
| dns.resp.ttl | Unsigned integer, 4 bytes | Time to live | 1.0.0 to 1.6.5 |
| dns.resp.type | Unsigned integer, 2 bytes | Type | 1.0.0 to 1.6.5 |
| dns.response_in | Frame number | Response In | 1.0.0 to 1.6.5 |
| dns.response_to | Frame number | Request In | 1.0.0 to 1.6.5 |
| dns.srv.name | Character string | Name | 1.6.0 to 1.6.5 |
| dns.srv.proto | Character string | Protocol | 1.6.0 to 1.6.5 |
| dns.srv.service | Character string | Service | 1.6.0 to 1.6.5 |
| dns.sshfp.fingerprint | Sequence of bytes | Fingerprint | 1.4.0 to 1.6.5 |
| dns.time | Time offset | Time | 1.0.0 to 1.6.5 |
| dns.tsig.algorithm_name | Character string | Algorithm Name | 1.0.0 to 1.6.5 |
| dns.tsig.error | Unsigned integer, 2 bytes | Error | 1.0.0 to 1.6.5 |
| dns.tsig.fudge | Unsigned integer, 2 bytes | Fudge | 1.0.0 to 1.6.5 |
| dns.tsig.mac | Label | MAC | 1.0.0 to 1.6.5 |
| dns.tsig.mac_size | Unsigned integer, 2 bytes | MAC Size | 1.0.0 to 1.6.5 |
| dns.tsig.original_id | Unsigned integer, 2 bytes | Original Id | 1.0.0 to 1.6.5 |
| dns.tsig.other_data | Sequence of bytes | Other Data | 1.0.0 to 1.6.5 |
| dns.tsig.other_len | Unsigned integer, 2 bytes | Other Len | 1.0.0 to 1.6.5 |
| hf.dns.apl.coded.prefix | Unsigned integer, 1 byte | Prefix Length | 1.4.0 to 1.4.11 |