Jump to content

Use Wireshark to find DNS timeout


rev.dennis
 Share

Recommended Posts

If you are getting complaints about DNS timeouts on your network and you want to identify them using wireshark, here is a great display filter



dns && (dns.flags.response == 0) && ! dns.response_in

If you are a tshark user you can use



tshark -2 -R "dns && (dns.flags.response == 0) && ! dns.response_in"

Link to comment
Share on other sites

 Share

×
×
  • Create New...