Display Filter Reference: Light Weight DNS RESolver (BIND9)

Protocol field name: lwres

Versions: 1.0.0 to 2.4.4

Back to Display Filter Reference

Field name Description Type Versions
lwres.adn.addr.addr IP Address Character string 1.0.0 to 2.4.4
lwres.adn.addr.family Address family Unsigned integer, 4 bytes 1.0.0 to 2.4.4
lwres.adn.addr.length Address length Unsigned integer, 2 bytes 1.0.0 to 2.4.4
lwres.adn.addrtype Address type Unsigned integer, 4 bytes 1.0.0 to 2.4.4
lwres.adn.aliasname Alias name Character string 1.0.0 to 2.4.4
lwres.adn.flags Flags Unsigned integer, 4 bytes 1.0.0 to 2.4.4
lwres.adn.naddrs Number of addresses Unsigned integer, 2 bytes 1.0.0 to 2.4.4
lwres.adn.naliases Number of aliases Unsigned integer, 2 bytes 1.0.0 to 2.4.4
lwres.adn.name Name Character string 1.0.0 to 2.4.4
lwres.adn.namelen Name length Unsigned integer, 2 bytes 1.0.0 to 2.4.4
lwres.adn.realname Real name Character string 1.0.0 to 2.4.4
lwres.areclen Length Unsigned integer, 2 bytes 1.0.0 to 2.4.4
lwres.arecord IPv4 Address Unsigned integer, 4 bytes 1.0.0 to 1.8.15, 2.0.0 to 2.4.4
lwres.authlen Auth. length Unsigned integer, 2 bytes 1.0.0 to 2.4.4
lwres.authtype Auth. type Unsigned integer, 2 bytes 1.0.0 to 2.4.4
lwres.class Class Unsigned integer, 2 bytes 1.0.0 to 2.4.4
lwres.flags Packet Flags Unsigned integer, 2 bytes 1.0.0 to 2.4.4
lwres.length Length Unsigned integer, 4 bytes 1.0.0 to 2.4.4
lwres.namelen Name length Unsigned integer, 2 bytes 1.0.0 to 2.4.4
lwres.nrdatas Number of rdata records Unsigned integer, 2 bytes 1.0.0 to 2.4.4
lwres.ns.dname Name Character string 2.0.0 to 2.4.4
lwres.nsigs Number of signature records Unsigned integer, 2 bytes 1.0.0 to 2.4.4
lwres.opcode Operation code Unsigned integer, 4 bytes 1.0.0 to 2.4.4
lwres.realname Real doname name Character string 1.0.0 to 2.4.4
lwres.realnamelen Real name length Unsigned integer, 2 bytes 1.0.0 to 2.4.4
lwres.recvlen Received length Unsigned integer, 4 bytes 1.0.0 to 2.4.4
lwres.reqdname Domain name Character string 1.0.0 to 2.4.4
lwres.result Result Unsigned integer, 4 bytes 1.0.0 to 2.4.4
lwres.rflags Flags Unsigned integer, 4 bytes 1.0.0 to 2.4.4
lwres.serial Serial Unsigned integer, 4 bytes 1.0.0 to 2.4.4
lwres.srv.dname DNAME Character string 2.0.0 to 2.4.4
lwres.srv.port Port Unsigned integer, 2 bytes 1.0.0 to 2.4.4
lwres.srv.priority Priority Unsigned integer, 2 bytes 1.0.0 to 2.4.4
lwres.srv.weight Weight Unsigned integer, 2 bytes 1.0.0 to 2.4.4
lwres.ttl Time To Live Unsigned integer, 4 bytes 1.0.0 to 2.4.4
lwres.type Type Unsigned integer, 2 bytes 1.0.0 to 2.4.4
lwres.version Version Unsigned integer, 2 bytes 1.0.0 to 2.4.4
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products that fully integrate with Wireshark.

I have a lot of traffic...

ANSWER: SteelCentral™ Packet Analyzer PE
  • • Visually rich, powerful LAN analyzer
  • • Quickly access very large pcap files
  • • Professional, customizable reports
  • • Advanced triggers and alerts
  • • Fully integrated with Wireshark and AirPcap™
Learn More

Buy Now

No, really, I have a LOT of traffic…

ANSWER: SteelCentral™ NetShark appliance
  • • Troubleshoot problems faster
  • • Quickly identify the applications running on your network
  • • Monitor your virtual machine traffic
Learn More