Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 12807] DNS "contains" filters containing a dot do not work as other protocols

[bugzilla-daemon@xxxxxxxxxxxxx]

Pascal Quantin changed bug 12807

What	Removed	Added
CC		pascal.quantin@gmail.com

Comment # 1 on bug 12807 from Pascal Quantin

Given that the dot is not part of the packet but instead is implied by the
encoding format as specified in RFC 1035, and that the contains operator is
searching for the content of the DNS packet, that seems logical to me.

You probably want to use "dns.qry.name contains .com" instead (which will give
a match as dsn.qry.name is the decoded DNS name, including the implicit dot).

---

      You are receiving this mail because:

• You are watching all bug changes.