Ethereal-users: RE: [Ethereal-users] Capture filter syntax

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Gerald Combs <gerald@xxxxxxxxxxxx>
Date: Fri, 21 Mar 2003 11:32:23 -0600 (CST)
On Fri, 21 Mar 2003, Pascal Chauffour wrote:

> This is true that some DNS traffic can flow thru TCP port 53 but this is
> dedicated to downloads between DNS servers, the DNS traffic I try to
> capture (queries) is going thru the UDP port 53.
> 
> In fact the filter "port 53" shall work for both cases TCP or UDP...

Some applications use TCP port 53 for DNS queries.  I've seen the SMTP
service that comes with IIS do this, and the utilities that come with the
GNU ADNS package can use TCP.