Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

Does this filter do want you want it to do?

udp.port == 5355 && dns.flags.response == True && ( upper(ip.src_host) ne upper(dns.resp.name) and upper(ipv6.src_host) ne upper(dns.resp.name) )

Please enable Network name resolution and make sure only "Use captured DNS packets" is enabled.