Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: [Wireshark-users] Any wireshark filter to differentiate between NXDOMAIN and NXR

From: Abdul Khader <akhader@xxxxxxxxxxxxxxx>
Date: Wed, 29 Mar 2017 12:23:17 +0400
Dear All,

Any wireshark filter which would give me NXRRSET and does not include NXDOMAIN

To get NXDOMAIN, we can use dns.flags.rcode == 3

But how do we get NXRRSET ?


dns.flags.rcode == 8 or dns.flags.rcode == 0x8  does not work.




Regards

Abdul Khader


--