Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-users: Re: [Wireshark-users] Wireshark-users Digest, Vol 29, Issue 8

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: Atevewr <atevewr@xxxxxxxxx>
Date: Sat, 4 Oct 2008 00:48:02 +0530

Hi,
I have been capturing DNS traffic at my organisation for some time now, but when i was analyzing the data, i saw that one of the packet had no flag set, Wireshark showed it as a valid query & it was because i could see the udp.dstport as 53 and my dns server as a source, because it was asking the query from some other server (a rdns gave me dns1cp.msft.net)

0.175775 xxx.xx.xx.xx 65.55.238.126 DNS Standard query A advertising.microsoft.com

Can somebody plz tell me how is it possible that a DNS packet can travel on internet without any flag, & just on the basis that its a dns packet and destination port 53, so its a query??

thanks in advance.
  • Prev by Date: Re: [Wireshark-users] Wireshark on 64 bit Vista?
  • Next by Date: [Wireshark-users] Understanding Packet Contents
  • Previous by thread: Re: [Wireshark-users] Wireshark on 64 bit Vista?
  • Next by thread: [Wireshark-users] Understanding Packet Contents
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation