Wireshark-users: [Wireshark-users] Any wireshark filter to differentiate between NXDOMAIN and NXR
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Abdul Khader <akhader@xxxxxxxxxxxxxxx>
Date: Wed, 29 Mar 2017 12:23:17 +0400
Dear All,
Any wireshark filter which would give me NXRRSET and does not include NXDOMAIN 

To get NXDOMAIN, we can use dns.flags.rcode == 3

But how do we get NXRRSET ?


dns.flags.rcode == 8 or dns.flags.rcode == 0x8  does not work.




Regards

Abdul Khader


--