Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Display Filter Reference: Light Weight DNS RESolver (BIND9)

Protocol field name: lwres
Versions: 1.0.0 to 1.6.5

Back to Display Filter Reference

Field name Type Description Versions
lwres.adn.addr.addr Character string IP Address 1.0.0 to 1.6.5
lwres.adn.addr.family Unsigned integer, 4 bytes Address family 1.0.0 to 1.6.5
lwres.adn.addr.length Unsigned integer, 2 bytes Address length 1.0.0 to 1.6.5
lwres.adn.addrtype Unsigned integer, 4 bytes Address type 1.0.0 to 1.6.5
lwres.adn.aliasname Character string Alias name 1.0.0 to 1.6.5
lwres.adn.flags Unsigned integer, 4 bytes Flags 1.0.0 to 1.6.5
lwres.adn.naddrs Unsigned integer, 2 bytes Number of addresses 1.0.0 to 1.6.5
lwres.adn.naliases Unsigned integer, 2 bytes Number of aliases 1.0.0 to 1.6.5
lwres.adn.name Character string Name 1.0.0 to 1.6.5
lwres.adn.namelen Unsigned integer, 2 bytes Name length 1.0.0 to 1.6.5
lwres.adn.realname Character string Real name 1.0.0 to 1.6.5
lwres.areclen Unsigned integer, 2 bytes Length 1.0.0 to 1.6.5
lwres.arecord Unsigned integer, 4 bytes IPv4 Address 1.0.0 to 1.6.5
lwres.authlen Unsigned integer, 2 bytes Auth. length 1.0.0 to 1.6.5
lwres.authtype Unsigned integer, 2 bytes Auth. type 1.0.0 to 1.6.5
lwres.class Unsigned integer, 2 bytes Class 1.0.0 to 1.6.5
lwres.flags Unsigned integer, 2 bytes Packet Flags 1.0.0 to 1.6.5
lwres.length Unsigned integer, 4 bytes Length 1.0.0 to 1.6.5
lwres.namelen Unsigned integer, 2 bytes Name length 1.0.0 to 1.6.5
lwres.nrdatas Unsigned integer, 2 bytes Number of rdata records 1.0.0 to 1.6.5
lwres.nsigs Unsigned integer, 2 bytes Number of signature records 1.0.0 to 1.6.5
lwres.opcode Unsigned integer, 4 bytes Operation code 1.0.0 to 1.6.5
lwres.realname Character string Real doname name 1.0.0 to 1.6.5
lwres.realnamelen Unsigned integer, 2 bytes Real name length 1.0.0 to 1.6.5
lwres.recvlen Unsigned integer, 4 bytes Received length 1.0.0 to 1.6.5
lwres.reqdname Character string Domain name 1.0.0 to 1.6.5
lwres.result Unsigned integer, 4 bytes Result 1.0.0 to 1.6.5
lwres.rflags Unsigned integer, 4 bytes Flags 1.0.0 to 1.6.5
lwres.serial Unsigned integer, 4 bytes Serial 1.0.0 to 1.6.5
lwres.srv.port Unsigned integer, 2 bytes Port 1.0.0 to 1.6.5
lwres.srv.priority Unsigned integer, 2 bytes Priority 1.0.0 to 1.6.5
lwres.srv.weight Unsigned integer, 2 bytes Weight 1.0.0 to 1.6.5
lwres.ttl Unsigned integer, 4 bytes Time To Live 1.0.0 to 1.6.5
lwres.type Unsigned integer, 2 bytes Type 1.0.0 to 1.6.5
lwres.version Unsigned integer, 2 bytes Version 1.0.0 to 1.6.5

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation