Wireshark-users: Re: [Wireshark-users] Display filter help need. how to do these filters? DNS /L2
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Jim Aragon <Jim@xxxxxxxxxxxxxxxxx>
Date: Thu, 20 Feb 2014 14:28:29 -0800
On 2/20/2014 2:10 PM, false wrote:

> Can someone provide an example please on how to do these filters
> (display and/or capture)?
> 
> 1) DNS filter to see how all UNANSWERED queries. ??

Display filter: (dns.flags.response == 0) && !(dns.response_in)

Capture filter: I don't think you can do this with a capture filter.