Ask Your Question
0

capture is not showing all dns traffic

asked 2024-06-21 09:57:49 +0000

Recently new to wireshark, so I clear my host cache and perform a capture on my wifi interface then I go to explore.org on a web browser and thenn I go back to wireshark to stop the capture, I filter my search to dns but it does not show the dns with information for explore.org webpage. Why is this not showing is there something I'm not catching, my capture is showing a bunch of doh-01.spectrum.com responses.

edit retag flag offensive close merge delete

Comments

The DNS requests may be encrypted: DNS over TLS vs. DNS over HTTPS | Secure DNS

Chuckc gravatar imageChuckc ( 2024-06-21 11:46:39 +0000 )edit

is there anything that can be done to allow the requests to be shown in the capture?

siles018@yahoo.com gravatar image[email protected] ( 2024-06-21 14:47:47 +0000 )edit

Try using neverssl.com instead

Jaap gravatar imageJaap ( 2024-06-21 17:14:17 +0000 )edit

Please update the question with output of wireshark -v or Help->About Wireshark:Wireshark.
Also include the same type of information (which program, version, ...?) for the browser you're testing with.

Chuckc gravatar imageChuckc ( 2024-06-22 17:00:08 +0000 )edit

1 Answer

Sort by ยป oldest newest most voted
0

answered 2024-06-23 10:16:44 +0000

SYN-bit gravatar image

I clear my host cache

Did you clear your browser cache or your DNS cache? You might want to clear both

I filter my search to dns but it does not show the dns with information for explore.org webpage

Does it show other DNS requests and responses? Please try a site you never visited before. If there is no DNS request visible for that site, then your browser is most likely using DoT or DoH as @Chuckc suggested (the doh in doh-01.spectrum.com kind of hints into that direction too).

You might want to look at the (DNS) configuration of your OS and Browser to see if it is doing DoH. Change it to normal DNS if you want to capture and see the DNS requests and responses.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

Stats

Asked: 2024-06-21 09:57:49 +0000

Seen: 300 times

Last updated: Jun 23