Wireshark-users: Re: [Wireshark-users] are there any ways to filter specific DNS queries
From: nangergong <[email protected]>
Date: Fri, 15 Jun 2012 14:21:24 +0200
thanks, this is OK,
but how to get the query name from a dns request packet with tshark?
for example, the DNS request frame number is 29
how to get the query name from this packet?

On Tue, Jun 12, 2012 at 4:31 PM, <[email protected]> wrote:

Something like this

!dns.qry.name eq www.example.com

 

From: [email protected] [mailto:[email protected]] On Behalf Of nangergong
Sent: Tuesday, June 12, 2012 10:22 AM


To: [email protected]
Subject: [Wireshark-users] are there any ways to filter specific DNS queries

 

Hi, all:



    I want to filter out some specific DNS queries. These DNS queries are for some specific domain name or websites, for example www.example.com
    are there any ways for this filtering? Thanks!


___________________________________________________________________________
Sent via:    Wireshark-users mailing list <[email protected]>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
            mailto:[email protected]?subject=unsubscribe