Wireshark-bugs: [Wireshark-bugs] [Bug 12807] DNS "contains" filters containing a dot do not work

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Thu, 01 Sep 2016 05:56:43 +0000

changed bug 12807


What Removed Added
CC   [email protected]

Comment # 1 on bug 12807 from 
Given that the dot is not part of the packet but instead is implied by the
encoding format as specified in RFC 1035, and that the contains operator is
searching for the content of the DNS packet, that seems logical to me.

You probably want to use "dns.qry.name contains .com" instead (which will give
a match as dsn.qry.name is the decoded DNS name, including the implicit dot).

You are receiving this mail because:
  • You are watching all bug changes.