Riverbed Cascade Pilot Personal Edition: Take Wireshark to the Next Level - Advanced Triggers and Alerts; Web and VoIP Analytics; Long-Term Trending and Forensics; Deep Packet Analysis with Wireshark

Wireshark-users: [Wireshark-users] Filter for DNS tcp flags?

Date Index Thread Index Other Months All Mailing Lists

Date Prev Date Next Thread Prev Thread Next

From: Scott Baker <scott.baker@xxxxxxxxx>
Date: Thu, 9 Apr 2009 11:02:49 -0700

I want to filter out all DNS queries that fail with a "no such name"
response. As far as I can tell that's tcp flag 0x8583, but I don't
know how to filter for that. The docs say tcp.flags is an 8 bit field,
so it can't be 0x8583. How do I filter DNS for specific flags?

- Scott

Follow-Ups:
- Re: [Wireshark-users] Filter for DNS tcp flags?
  - From: Jaap Keuter

Prev by Date: Re: [Wireshark-users] Convert .rf5 into .pcap
Next by Date: Re: [Wireshark-users] Filter for DNS tcp flags?
Previous by thread: [Wireshark-users] Detect Packet Loss, Jitter and Delay with Tshark UDP, RTP
Next by thread: Re: [Wireshark-users] Filter for DNS tcp flags?
Index(es):
- Date
- Thread