Wireshark · Wireshark-users: Re: [Wireshark-users] Display filter help need. how to do these filters? DNS /L2 overhead

Wireshark-users: Re: [Wireshark-users] Display filter help need. how to do these filters? DNS /L2

From: Jim Aragon <Jim@xxxxxxxxxxxxxxxxx>

Date: Thu, 20 Feb 2014 14:28:29 -0800

On 2/20/2014 2:10 PM, false wrote:

> Can someone provide an example please on how to do these filters
> (display and/or capture)?
> 
> 1) DNS filter to see how all UNANSWERED queries. ??

Display filter: (dns.flags.response == 0) && !(dns.response_in)

Capture filter: I don't think you can do this with a capture filter.

Follow-Ups:
- Re: [Wireshark-users] Display filter help need. how to do these filters? DNS /L2 overhead
  - From: Guy Harris

References:
- [Wireshark-users] Display filter help need. how to do these filters? DNS /L2 overhead
  - From: false

Prev by Date: [Wireshark-users] Display filter help need. how to do these filters? DNS /L2 overhead
Next by Date: Re: [Wireshark-users] Display filter help need. how to do these filters? DNS /L2 overhead
Previous by thread: [Wireshark-users] Display filter help need. how to do these filters? DNS /L2 overhead
Next by thread: Re: [Wireshark-users] Display filter help need. how to do these filters? DNS /L2 overhead
Index(es):
- Date
- Thread