Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: [Wireshark-dev] Getting destination IP

From: "sara vanan" <saravananbeitjj@xxxxxxxxx>
Date: Mon, 19 Mar 2007 15:11:30 +0900

Wireshark development team,

Kindly reply me for my query regarding Wireshark network analyzer.

I am doing a DNS proxy for IPV6. For this I have to get the destination IP(DNS Sever IP stored  in the client PC.
I have idea to implement the Wireshark source code for getting the desdtination IP.

for example

client IP -> 192.168.16.67        DNS ( destination IP)  -> 192.168.16.106

By using the Wireshark GUI  I use DNS filter  and it displays

source IP                   destination IP
192.168.16.67            192.168.16.106
then
192.168.16.106           192.168.16.67



And in LINUX  when I am executing  with the  command

/home/saravanan/ethereal- 0.99.0/tethereal -c 10 port 53


[root@hestia ethereal-0.99.0 ]# /home/saravanan/ethereal-0.99.0/tethereal -c 10 port 53
Capturing on eth0
  0.000000 192.168.16.67 -> 192.168.16.106 DNS Standard query A www.samedi.org
  0.004528 192.168.16.106 -> 206.51.233.130 DNS Standard query A www.samedi.org
  0.177348 206.51.233.130 -> 192.168.16.106 DNS Standard query response A 206.51.233.130
  0.178324 192.168.16.106 -> 192.168.16.67 DNS Standard query response A 206.51.233.130
  6.968992 192.168.16.67 -> 192.168.16.106 DNS Standard query A statse.webtrendslive.com
  6.970539 192.168.16.106 -> 220.73.220.4 DNS Standard query A statse.webtrends.akadns.net
  7.028039 220.73.220.4 -> 192.168.16.106 DNS Standard query response A 63.236.111.50
  7.029246 192.168.16.106 -> 192.168.16.67 DNS Standard query response CNAME statse.webtrends.akadns.net A 63.236.111.50
 94.006077 192.168.16.67 -> 192.168.16.106 DNS Standard query A mail.google.com
 94.007689 192.168.16.106 -> 72.14.235.9  DNS Standard query A googlemail.l.google.com
10 packets captured


it displays (www.google.co.in) URL link IP.  Instead of this I want to filter only   DNS. 192.168.16.67   and  192.168.16.106.
                              
                                                                 ( client IP)                (DNS server IP)
I had attached the sample excel file for your reference.

for this what kind of filters should I use in my command.

kindly reply me.

Thanks
Saravanan

Attachment: ethereal-Gtk.xls
Description: MS-Excel spreadsheet