Jump to content

Use Wireshark to find DNS timeout


Recommended Posts

If you are getting complaints about DNS timeouts on your network and you want to identify them using wireshark, here is a great display filter

dns && (dns.flags.response == 0) && ! dns.response_in

If you are a tshark user you can use

tshark -2 -R "dns && (dns.flags.response == 0) && ! dns.response_in"

Link to comment
Share on other sites


  • Create New...