Wireshark-users: Re: [Wireshark-users] decode DNS draft-vandergaast-edns-client-ip-01
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Bill Meier <wmeier@xxxxxxxxxxx>
Date: Wed, 08 Oct 2014 12:27:09 -0400
On 10/8/2014 3:01 AM, Mathias Koerber wrote:

Is there any way Wireshark (or tshark) can decode the additional EDNS0
OPT records added by

http://tools.ietf.org/html/draft-vandergaast-edns-client-ip-01

Currently all it shows is

   data length 11
   data

and I can only see the info in the hex part.

I am running Version 1.8.6 (SVN Rev 48142 from /trunk-1.8)


Yes: update to a current Wireshark 1.12 version.
A quick look at the dissector code suggests that EDNS0 dissection is now part of the DNS dissector. 

(Wireshark 1.8 is pretty old).