1 | initial version |
Does this filter do want you want it to do?
udp.port == 5355 && dns.flags.response == True && ( upper(ip.src_host) ne upper(dns.resp.name) and upper(ipv6.src_host) ne upper(dns.resp.name) )
Please enable Network name resolution and make sure only "Use captured DNS packets" is enabled.