Ethereal-users: Re: [Ethereal-users] how to capture only DNS packets by applying filter in ether

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Guy Harris <gharris@xxxxxxxxx>
Date: Wed, 18 Feb 2004 01:49:23 -0800
On Mon, Feb 16, 2004 at 11:28:20PM -0800, vadiraj kulkarni wrote:
> Since i am interested only in the DNS packet, i tried
> to apply a filter udp port 53
> By applying the filter, i am getting only DNS query
> pakcets. Not able to see DNS response.

Are the responses being sent to, or from, port 53?  If not, then you'll
have to use some filter that also handles whatever port they're using.

I have no problem seeing DNS queries and responses from/to "nslookup" on
my machine, using the filter "udp port 53".