 | 1 | initial version |
Some fields, and particularly the answer_in field here requires a 2nd pass over the capture as the "answer" packet hasn't been dissected when the request is being dissected.
Try adding the -2 flag to tshark.
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
