December 11, 201312 yr If you are getting complaints about DNS timeouts on your network and you want to identify them using wireshark, here is a great display filter dns && (dns.flags.response == 0) && ! dns.response_in If you are a tshark user you can use tshark -2 -R "dns && (dns.flags.response == 0) && ! dns.response_in"
Create an account or sign in to comment