Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] are there any ways to filter specific DNS queries

From: "Stegman, Bill" <Bill.Stegman@xxxxxxxxx>
Date: Tue, 12 Jun 2012 11:44:08 -0400

Then our interpretations of the request differ.  Perhaps nangergong could clarify.

 

From: wireshark-users-bounces@xxxxxxxxxxxxx [mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of Sake Blok
Sent: Tuesday, June 12, 2012 11:35 AM
To: Community support list for Wireshark
Subject: Re: [Wireshark-users] are there any ways to filter specific DNS queries

 

That will do something completely different from what the OP intends. It will show you all DNS requests and responses that are not to/from the server with hostname www.example.com.

 

Cheers,

Sake

 

 

On 12 jun 2012, at 16:40, Stegman, Bill wrote:



If you’re looking for a capture filter, this should work.

 

not host www.example.com and port 53

 

 

From: wireshark-users-bounces@xxxxxxxxxxxxx [mailto:wireshark-users-bounces@xxxxxxxxxxxxx] On Behalf Of nangergong
Sent: Tuesday, June 12, 2012 10:22 AM
To: wireshark-users@xxxxxxxxxxxxx
Subject: [Wireshark-users] are there any ways to filter specific DNS queries

 

Hi, all:

    I want to filter out some specific DNS queries. These DNS queries are for some specific domain name or websites, for example www.example.com
    are there any ways for this filtering? Thanks!

 

 

CONFIDENTIALITY NOTICE: This message is intended to be viewed only by the listed recipient(s). It may contain information that is privileged, confidential and/or exempt from disclosure under applicable law. Any dissemination, distribution or copying of this message is strictly prohibited without our prior written permission. If you are not an intended recipient, or if you have received this communication in error, please notify us immediately by return e-mail and permanently remove the original message and any copies from your computer and all back-up systems.

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
            mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe

 

 

 

CONFIDENTIALITY NOTICE: This message is intended to be viewed only by the listed recipient(s). It may contain information that is privileged, confidential and/or exempt from disclosure under applicable law. Any dissemination, distribution or copying of this message is strictly prohibited without our prior written permission. If you are not an intended recipient, or if you have received this communication in error, please notify us immediately by return e-mail and permanently remove the original message and any copies from your computer and all back-up systems.